This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft File: dRk72fhLSp7UegO9-JLZ55i3Jyc.mft (raw, json) Hash identifier: AavuTZJOuWx5f+iO+2GQdblR2oW6HRghlIbCpWGtLlY= Subject key identifier: B7:14:20:12:60:5F:73:D1:EE:1C:FB:1D:E8:BC:57:8A:4B:6B:C5:F3 Authority key identifier: 75:19:3B:D9:F8:4B:4A:9E:D4:7A:03:BD:F8:92:D9:E7:98:B7:27:27 Certificate issuer: /CN=75193bd9f84b4a9ed47a03bdf892d9e798b72727 Certificate serial: 019B5977136ECB053CF80218D0AFC78A8749 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft Manifest number: 179A Signing time: Fri 26 Dec 2025 07:02:14 +0000 Manifest this update: Fri 26 Dec 2025 07:02:14 +0000 Manifest next update: Sat 27 Dec 2025 07:02:14 +0000 Files and hashes: 1: dRk72fhLSp7UegO9-JLZ55i3Jyc.crl (hash: hTsUFKuTtiyvSxKlXXN5OHA/zOvdALdkPqOYYxf2s4M=) 2: kX-VdRHtzW1CfMS8g0O9lVNrN34.roa (hash: 1YTwpLO8F8/c72ElMFw6a0YxOTA0MMlnVtuXBy93WMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.crl rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:13:6e:cb:05:3c:f8:02:18:d0:af:c7:8a:87:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75193bd9f84b4a9ed47a03bdf892d9e798b72727 Validity Not Before: Dec 26 07:02:14 2025 GMT Not After : Dec 27 07:02:14 2025 GMT Subject: CN=b7142012605f73d1ee1cfb1de8bc578a4b6bc5f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6a:48:73:0d:ed:2a:34:78:13:59:40:b0:08: ca:a1:62:46:52:b9:c9:db:ba:9f:43:5e:85:7e:12: a8:27:bb:7d:fa:e1:b8:5f:39:5e:f8:10:61:a9:3e: 66:a3:e0:9e:d2:5b:ff:ff:8d:dc:2c:7c:33:8d:eb: d4:e5:70:3a:86:e2:29:dc:35:db:58:f1:fd:f2:c0: 7a:4d:3e:64:d7:f4:8c:80:c7:8f:67:e6:01:a9:d6: 9b:6f:11:9f:8b:1d:0b:60:4a:6f:7d:ec:8f:15:6a: 7f:3b:1e:2c:f8:f6:45:4f:40:2d:95:93:19:c9:d6: dc:3a:92:6b:ed:6f:d8:89:ce:d1:9d:b1:7b:30:eb: a6:e8:0c:c3:79:57:d0:0b:5f:bd:4a:4d:03:a8:fd: 10:63:ae:ff:69:7c:be:76:70:94:81:31:79:48:43: 38:ef:4b:38:9b:ab:7c:f0:03:3d:c4:5b:20:11:4c: 42:8c:a9:b4:7a:3b:e5:65:08:fb:38:d9:48:e1:59: 9f:92:5b:1a:37:41:e5:ae:6c:99:cb:58:24:44:ff: 24:76:66:6b:30:50:81:47:a7:e0:6f:28:82:5a:96: 06:19:da:64:6d:e5:ac:8e:1a:a7:3d:6f:1f:b9:fc: 84:2d:a4:7d:09:40:96:bd:50:d7:55:5e:2e:8d:a2: 0f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:14:20:12:60:5F:73:D1:EE:1C:FB:1D:E8:BC:57:8A:4B:6B:C5:F3 X509v3 Authority Key Identifier: keyid:75:19:3B:D9:F8:4B:4A:9E:D4:7A:03:BD:F8:92:D9:E7:98:B7:27:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:a7:92:9e:b9:89:5d:4e:43:c1:8b:e6:ee:d2:6c:1a:b2:6a: 43:d1:26:d2:a5:14:4c:24:9b:cc:80:bb:95:ed:2b:f9:3c:ce: f8:d2:bf:32:7f:bd:a6:53:b8:1e:94:b1:1c:63:41:a4:70:d3: 39:36:04:d1:50:e6:53:0e:a8:a0:33:22:5f:43:f6:4c:f3:85: fc:ee:72:ef:ad:f5:e2:22:9c:fa:45:a2:3a:29:45:36:8d:c3: ad:5f:ae:48:44:a0:07:48:a3:af:fc:a2:66:ad:9f:74:4a:c2: c4:67:1d:6b:37:c0:ea:a1:e9:5e:c2:f9:8b:00:76:bf:33:88: b0:05:1e:d7:3a:7d:f9:f0:81:77:83:8a:e8:e9:f5:57:2a:7a: 88:7f:0f:38:09:58:46:43:57:9d:b2:94:f7:24:01:7c:c8:37: 55:7b:3c:6b:db:69:e4:21:57:9c:58:3c:57:58:a8:99:44:6e: ec:1b:6d:f2:a8:c1:46:fc:dc:62:24:14:26:6e:86:1e:4e:8f: d4:5f:7b:fe:8a:cf:c8:d9:71:3c:35:a8:02:39:93:8b:a0:fa: e5:71:90:90:a5:dc:78:83:9d:50:78:5b:ba:47:82:c8:a7:37: 8e:5f:68:07:19:fc:ba:f7:47:f6:20:0a:de:10:21:65:07:eb: 44:2b:05:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdxNuywU8+AIY0K/HiodJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MTkzYmQ5Zjg0YjRhOWVkNDdhMDNiZGY4OTJkOWU3OThi NzI3MjcwHhcNMjUxMjI2MDcwMjE0WhcNMjUxMjI3MDcwMjE0WjAzMTEwLwYDVQQD EyhiNzE0MjAxMjYwNWY3M2QxZWUxY2ZiMWRlOGJjNTc4YTRiNmJjNWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2pIcw3tKjR4E1lAsAjKoWJGUrnJ 27qfQ16FfhKoJ7t9+uG4Xzle+BBhqT5mo+Ce0lv//43cLHwzjevU5XA6huIp3DXb WPH98sB6TT5k1/SMgMePZ+YBqdabbxGfix0LYEpvfeyPFWp/Ox4s+PZFT0AtlZMZ ydbcOpJr7W/Yic7RnbF7MOum6AzDeVfQC1+9Sk0DqP0QY67/aXy+dnCUgTF5SEM4 70s4m6t88AM9xFsgEUxCjKm0ejvlZQj7ONlI4VmfklsaN0HlrmyZy1gkRP8kdmZr MFCBR6fgbyiCWpYGGdpkbeWsjhqnPW8fufyELaR9CUCWvVDXVV4ujaIPUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLcUIBJgX3PR7hz7Hei8V4pLa8XzMB8GA1UdIwQY MBaAFHUZO9n4S0qe1HoDvfiS2eeYtycnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFJrNzJmaExTcDdVZWdPOS1KTFo1NWkzSnljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9jNGU2YTQtNjFjMi00Mzg4LWI4NDQt M2I3MTU2OTFkMmU5LzEvZFJrNzJmaExTcDdVZWdPOS1KTFo1NWkzSnljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9jNGU2YTQtNjFjMi00Mzg4LWI4NDQtM2I3MTU2OTFkMmU5 LzEvZFJrNzJmaExTcDdVZWdPOS1KTFo1NWkzSnljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeaeSnrmJ XU5DwYvm7tJsGrJqQ9Em0qUUTCSbzIC7le0r+TzO+NK/Mn+9plO4HpSxHGNBpHDT OTYE0VDmUw6ooDMiX0P2TPOF/O5y76314iKc+kWiOilFNo3DrV+uSESgB0ijr/yi Zq2fdErCxGcdazfA6qHpXsL5iwB2vzOIsAUe1zp9+fCBd4OK6On1Vyp6iH8POAlY RkNXnbKU9yQBfMg3VXs8a9tp5CFXnFg8V1iomURu7Btt8qjBRvzcYiQUJm6GHk6P 1F97/orPyNlxPDWoAjmTi6D65XGQkKXceIOdUHhbukeCyKc3jl9oBxn8uvdH9iAK 3hAhZQfrRCsFEg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:22 2025 by rpki-client