This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft File: dFtsPJq97bluse8_f3-nAFdSLH8.mft (raw, json) Hash identifier: nv7oYNjDU2yM+Gi0btbuUO6s5zuyX4Hy9oJj+AcYsSw= Subject key identifier: B9:F2:49:E0:0A:7F:35:BB:43:51:7C:B3:18:CC:18:8C:04:8F:2B:DC Authority key identifier: 74:5B:6C:3C:9A:BD:ED:B9:6E:B1:EF:3F:7F:7F:A7:00:57:52:2C:7F Certificate issuer: /CN=745b6c3c9abdedb96eb1ef3f7f7fa70057522c7f Certificate serial: 019B19BC95412F654F987FA096771B9ABADC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft Manifest number: 0D76 Signing time: Sat 13 Dec 2025 22:02:27 +0000 Manifest this update: Sat 13 Dec 2025 22:02:27 +0000 Manifest next update: Sun 14 Dec 2025 22:02:27 +0000 Files and hashes: 1: XVHW13An0H4R0lwafXi_5n-GjRQ.roa (hash: avC9Et5bzaaQctHEh7eFVRP1BlhGCdMVJW4eggq0SuY=) 2: dFtsPJq97bluse8_f3-nAFdSLH8.crl (hash: 6Hn9RWTVFkJtQatQe0s8+sENkIp36Epmzf/yiL4w2pQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.crl rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bc:95:41:2f:65:4f:98:7f:a0:96:77:1b:9a:ba:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=745b6c3c9abdedb96eb1ef3f7f7fa70057522c7f Validity Not Before: Dec 13 22:02:27 2025 GMT Not After : Dec 14 22:02:27 2025 GMT Subject: CN=b9f249e00a7f35bb43517cb318cc188c048f2bdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:46:24:19:c7:b2:89:ab:86:a0:6f:3c:96:50: 14:44:96:e0:95:7d:b0:1c:73:14:02:d8:ae:28:68: 71:17:bd:ac:17:3b:d7:9b:77:7c:2e:14:a4:22:b0: c3:ad:fa:6f:20:8b:03:4a:15:88:2c:9a:22:bf:86: 90:2b:11:60:32:99:0f:53:b5:1e:33:fd:f0:32:88: 37:2d:bb:c4:dd:fe:3d:5e:cd:c5:2c:52:7e:37:2d: 83:f0:9f:57:b9:a7:03:e6:71:d5:4c:c5:9d:cb:36: 2e:dc:25:de:36:47:e5:6c:7f:49:be:a6:d8:20:2f: 43:3f:00:45:b5:6c:31:73:ae:41:f3:49:f0:ee:e2: ad:d4:3d:a3:40:d4:c4:cb:0a:8b:83:b5:d6:01:21: a4:de:27:9c:42:28:04:77:8c:4c:46:04:86:99:a9: 01:c4:7e:f0:2d:8b:d5:ad:e4:ef:59:c0:19:a7:2d: 21:c9:c1:c5:86:fc:7c:c3:f1:8b:57:3c:6f:fb:dc: 6c:2b:74:a0:9d:0f:f7:9b:04:b6:f9:2c:8d:eb:40: 8d:08:f5:12:4a:ca:ee:bc:99:e9:f9:1b:a1:93:a4: 0f:59:d6:3f:78:dd:1f:2a:6d:5c:86:98:02:ce:ef: 84:c5:82:7d:5a:02:d3:fd:73:39:b7:2f:83:38:5b: ff:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F2:49:E0:0A:7F:35:BB:43:51:7C:B3:18:CC:18:8C:04:8F:2B:DC X509v3 Authority Key Identifier: keyid:74:5B:6C:3C:9A:BD:ED:B9:6E:B1:EF:3F:7F:7F:A7:00:57:52:2C:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFtsPJq97bluse8_f3-nAFdSLH8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/71d52f-7e07-49d1-b99b-f70d5ef875c3/1/dFtsPJq97bluse8_f3-nAFdSLH8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:f4:39:63:1d:18:4e:8c:b5:88:25:6d:43:11:f7:a6:10:9e: ba:28:38:54:f6:4e:36:f5:60:3f:20:54:f7:82:06:bd:b5:10: 91:92:0d:71:69:46:aa:2f:e2:5f:cf:91:da:f6:e8:59:a8:ba: 3c:1f:ec:4e:65:f2:78:20:a9:a5:b2:be:fe:f0:fe:ea:69:6a: 73:d5:b7:59:76:c8:66:05:0d:0c:bd:32:be:a2:05:af:96:32: 93:5b:0f:c4:fe:bd:5b:50:7d:6c:d2:bc:d1:37:c9:5b:13:56: de:42:4a:7c:c6:e6:53:f3:b7:33:12:18:20:72:17:98:98:53: 0a:b7:c0:bf:46:ee:e8:a1:f3:e2:e2:7a:b8:26:9b:a5:7d:09: cd:20:04:97:ea:6b:13:a8:f3:9f:50:e2:13:5e:4a:c3:0d:0f: a9:8c:ab:77:37:b6:4a:b7:7f:bc:bd:42:fe:a9:23:6d:f1:4f: c8:63:6b:04:84:18:ab:df:a5:0d:e2:c2:d1:de:de:76:ea:81: 9c:32:9d:f3:a6:3c:42:e9:58:15:3b:e5:d6:93:cd:bf:4c:9a: ef:73:8f:f8:4d:d0:15:ec:32:01:d9:fc:32:11:2e:6a:aa:3f: 8e:c0:bb:0c:d6:9a:89:16:92:13:64:b7:89:11:19:be:9b:ef: 10:d2:f7:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZvJVBL2VPmH+glncbmrrcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NWI2YzNjOWFiZGVkYjk2ZWIxZWYzZjdmN2ZhNzAwNTc1 MjJjN2YwHhcNMjUxMjEzMjIwMjI3WhcNMjUxMjE0MjIwMjI3WjAzMTEwLwYDVQQD EyhiOWYyNDllMDBhN2YzNWJiNDM1MTdjYjMxOGNjMTg4YzA0OGYyYmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEYkGceyiauGoG88llAURJbglX2w HHMUAtiuKGhxF72sFzvXm3d8LhSkIrDDrfpvIIsDShWILJoiv4aQKxFgMpkPU7Ue M/3wMog3LbvE3f49Xs3FLFJ+Ny2D8J9XuacD5nHVTMWdyzYu3CXeNkflbH9JvqbY IC9DPwBFtWwxc65B80nw7uKt1D2jQNTEywqLg7XWASGk3iecQigEd4xMRgSGmakB xH7wLYvVreTvWcAZpy0hycHFhvx8w/GLVzxv+9xsK3SgnQ/3mwS2+SyN60CNCPUS SsruvJnp+Ruhk6QPWdY/eN0fKm1chpgCzu+ExYJ9WgLT/XM5ty+DOFv/ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLnySeAKfzW7Q1F8sxjMGIwEjyvcMB8GA1UdIwQY MBaAFHRbbDyave25brHvP39/pwBXUix/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEZ0c1BKcTk3Ymx1c2U4X2YzLW5BRmRTTEg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC83MWQ1MmYtN2UwNy00OWQxLWI5OWIt ZjcwZDVlZjg3NWMzLzEvZEZ0c1BKcTk3Ymx1c2U4X2YzLW5BRmRTTEg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC83MWQ1MmYtN2UwNy00OWQxLWI5OWItZjcwZDVlZjg3NWMz LzEvZEZ0c1BKcTk3Ymx1c2U4X2YzLW5BRmRTTEg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUfQ5Yx0Y Toy1iCVtQxH3phCeuig4VPZONvVgPyBU94IGvbUQkZINcWlGqi/iX8+R2vboWai6 PB/sTmXyeCCppbK+/vD+6mlqc9W3WXbIZgUNDL0yvqIFr5Yyk1sPxP69W1B9bNK8 0TfJWxNW3kJKfMbmU/O3MxIYIHIXmJhTCrfAv0bu6KHz4uJ6uCabpX0JzSAEl+pr E6jzn1DiE15Kww0PqYyrdze2Srd/vL1C/qkjbfFPyGNrBIQYq9+lDeLC0d7eduqB nDKd86Y8QulYFTvl1pPNv0ya73OP+E3QFewyAdn8MhEuaqo/jsC7DNaaiRaSE2S3 iREZvpvvENL3pQ== -----END CERTIFICATE-----Generated at Sun Dec 14 03:26:05 2025 by rpki-client