This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft File: 29weM6UtreAbUtkXC8KbjCjZi2w.mft (raw, json) Hash identifier: mhdV9k3YTRRv5nB+YwK1b5At7QfqoC9oXcOXJH88444= Subject key identifier: 2B:45:01:D8:BE:0A:8C:9E:1D:1A:9F:46:18:49:45:61:F3:0D:EA:84 Authority key identifier: DB:DC:1E:33:A5:2D:AD:E0:1B:52:D9:17:0B:C2:9B:8C:28:D9:8B:6C Certificate issuer: /CN=dbdc1e33a52dade01b52d9170bc29b8c28d98b6c Certificate serial: 019B5A1AD546389FC3E599B256F8F3E9825D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft Manifest number: 0212 Signing time: Fri 26 Dec 2025 10:01:06 +0000 Manifest this update: Fri 26 Dec 2025 10:01:06 +0000 Manifest next update: Sat 27 Dec 2025 10:01:06 +0000 Files and hashes: 1: 29weM6UtreAbUtkXC8KbjCjZi2w.crl (hash: h4eW5aGgRh6LIrDV/zdvJh0YNy+boVp1JgyGjuPYACo=) 2: B1LqaZUhsUfUDpN-9vYGCP2m0g8.roa (hash: QrKbpCe6SJ2ZphzaQI2EN0WS9Q27CgrmTnBcyr8V/oE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.crl rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:d5:46:38:9f:c3:e5:99:b2:56:f8:f3:e9:82:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbdc1e33a52dade01b52d9170bc29b8c28d98b6c Validity Not Before: Dec 26 10:01:06 2025 GMT Not After : Dec 27 10:01:06 2025 GMT Subject: CN=2b4501d8be0a8c9e1d1a9f4618494561f30dea84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:07:55:e4:73:02:de:b5:49:ef:6b:a8:48:51: 66:ee:26:e5:03:54:78:01:91:7e:8b:14:ff:9c:4b: 5d:e7:19:ce:a8:8d:23:f7:4a:f8:d2:14:7a:3d:87: 34:9f:33:22:5c:00:3d:dc:6b:64:37:53:c0:cd:fe: 7c:94:67:51:ce:89:dc:89:72:f9:bc:d5:bb:fa:3e: 79:04:36:84:56:0d:cc:2d:0a:a5:df:92:c3:01:73: e6:21:8d:e9:b3:4c:2d:e8:96:dd:fb:b8:d7:b2:ac: 45:2d:35:dc:f5:1b:ed:16:ea:d8:00:b7:e8:af:79: a8:66:d1:e4:a2:f7:a0:f5:16:6d:0e:97:9f:c1:62: ba:75:99:a9:c0:3b:83:8b:b6:a0:2e:5d:e0:e0:5a: fc:f2:67:18:59:ce:6f:fa:fe:da:36:17:91:c9:30: 7b:7a:a9:99:3b:89:5e:5d:8b:67:88:17:48:75:0a: cc:fa:14:be:98:d0:55:c5:d5:ee:84:b1:88:b1:0c: 9d:c6:7c:55:51:16:84:a8:2b:67:13:58:ef:aa:58: f9:7b:22:a4:4a:1b:47:9e:3e:f8:72:b7:3d:0c:22: 5d:9f:11:27:92:90:bd:97:79:2b:90:d9:1f:e4:3c: 08:a8:d2:38:6f:c5:10:13:f1:4b:32:e3:86:bc:62: 8a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:45:01:D8:BE:0A:8C:9E:1D:1A:9F:46:18:49:45:61:F3:0D:EA:84 X509v3 Authority Key Identifier: keyid:DB:DC:1E:33:A5:2D:AD:E0:1B:52:D9:17:0B:C2:9B:8C:28:D9:8B:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:51:cc:b4:28:c3:e8:e0:4f:b5:d1:1e:e1:77:9b:68:c3:ca: f3:08:2d:ed:7c:60:a9:16:52:09:38:7f:83:7a:19:87:22:0c: a3:f4:38:31:6c:b9:b6:f9:a2:b3:e8:d2:65:fb:13:25:9b:5c: 87:fa:b1:a5:cf:39:9d:fd:44:29:a1:e2:da:87:c4:de:8e:02: b7:08:0d:9a:79:e2:0c:40:20:aa:81:d7:ec:00:c5:32:06:cb: e8:3c:4d:30:3d:ec:14:1a:02:a0:7e:6d:f3:c0:07:9c:28:b3: bf:52:1a:a6:fd:d6:61:cd:f8:8e:7e:fa:21:61:a7:92:6f:97: 1c:d0:dc:86:d4:0e:5b:27:ef:27:c0:9a:e6:f0:1e:69:f1:d7: d6:86:96:90:57:19:be:db:61:e1:59:a2:81:f9:8c:26:ba:77: be:3a:fd:41:a5:e6:40:48:aa:a9:50:0b:fd:cd:3b:1c:f0:5b: d7:e6:c6:08:25:a2:89:7f:52:bd:b4:3a:02:e6:6c:92:34:dd: 42:fa:b1:b8:e4:0a:98:e0:c2:c1:1b:be:8f:4a:47:b6:09:6f: 0a:78:a9:41:72:89:ec:c3:55:2f:d3:65:e3:33:77:ce:0a:94: db:a7:12:88:57:db:3a:8a:f6:3f:71:39:d0:69:5a:7f:8d:b8: da:72:07:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGtVGOJ/D5ZmyVvjz6YJdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZGMxZTMzYTUyZGFkZTAxYjUyZDkxNzBiYzI5YjhjMjhk OThiNmMwHhcNMjUxMjI2MTAwMTA2WhcNMjUxMjI3MTAwMTA2WjAzMTEwLwYDVQQD EygyYjQ1MDFkOGJlMGE4YzllMWQxYTlmNDYxODQ5NDU2MWYzMGRlYTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AdV5HMC3rVJ72uoSFFm7iblA1R4 AZF+ixT/nEtd5xnOqI0j90r40hR6PYc0nzMiXAA93GtkN1PAzf58lGdRzonciXL5 vNW7+j55BDaEVg3MLQql35LDAXPmIY3ps0wt6Jbd+7jXsqxFLTXc9RvtFurYALfo r3moZtHkoveg9RZtDpefwWK6dZmpwDuDi7agLl3g4Fr88mcYWc5v+v7aNheRyTB7 eqmZO4leXYtniBdIdQrM+hS+mNBVxdXuhLGIsQydxnxVURaEqCtnE1jvqlj5eyKk ShtHnj74crc9DCJdnxEnkpC9l3krkNkf5DwIqNI4b8UQE/FLMuOGvGKKgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCtFAdi+CoyeHRqfRhhJRWHzDeqEMB8GA1UdIwQY MBaAFNvcHjOlLa3gG1LZFwvCm4wo2YtsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjl3ZU02VXRyZUFiVXRrWEM4S2JqQ2paaTJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kNDlmMWMtYzk0NS00N2M0LWJkZGMt ZWVjY2MyMGE4ZDIxLzEvMjl3ZU02VXRyZUFiVXRrWEM4S2JqQ2paaTJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9kNDlmMWMtYzk0NS00N2M0LWJkZGMtZWVjY2MyMGE4ZDIx LzEvMjl3ZU02VXRyZUFiVXRrWEM4S2JqQ2paaTJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV1HMtCjD 6OBPtdEe4XebaMPK8wgt7XxgqRZSCTh/g3oZhyIMo/Q4MWy5tvmis+jSZfsTJZtc h/qxpc85nf1EKaHi2ofE3o4CtwgNmnniDEAgqoHX7ADFMgbL6DxNMD3sFBoCoH5t 88AHnCizv1Iapv3WYc34jn76IWGnkm+XHNDchtQOWyfvJ8Ca5vAeafHX1oaWkFcZ vtth4VmigfmMJrp3vjr9QaXmQEiqqVAL/c07HPBb1+bGCCWiiX9SvbQ6AuZskjTd QvqxuOQKmODCwRu+j0pHtglvCnipQXKJ7MNVL9Nl4zN3zgqU26cSiFfbOor2P3E5 0Glaf4242nIHRA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:05:52 2025 by rpki-client