This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.mft File: dHyzZv9uI99sCX9grcf6gHVZgZE.mft (raw, json) Hash identifier: YDUtcnRt8980xW2j14UiyhsFfNxet3Ml3KLataOwLRI= Subject key identifier: 72:27:68:3A:5D:E4:11:F6:C5:57:31:74:EA:84:B9:D8:FF:9B:0B:D1 Authority key identifier: 74:7C:B3:66:FF:6E:23:DF:6C:09:7F:60:AD:C7:FA:80:75:59:81:91 Certificate issuer: /CN=747cb366ff6e23df6c097f60adc7fa8075598191 Certificate serial: 019B41371DAD4820FF7C36C7C78C4158B9F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHyzZv9uI99sCX9grcf6gHVZgZE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.mft Manifest number: 0B52 Signing time: Sun 21 Dec 2025 14:01:29 +0000 Manifest this update: Sun 21 Dec 2025 14:01:29 +0000 Manifest next update: Mon 22 Dec 2025 14:01:29 +0000 Files and hashes: 1: _yLmchLwIYVTnPdJc9fw9h7BqNI.roa (hash: jQg4aqJLhfqC2o9cWdzjV4aGpmH8JtaZPWEi/oExAo8=) 2: dHyzZv9uI99sCX9grcf6gHVZgZE.crl (hash: 3UForXSg/Wk/nQdJ9IHKLwU4xjjgvlROJDp+IhjUUcQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.crl rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.mft rsync://rpki.ripe.net/repository/DEFAULT/dHyzZv9uI99sCX9grcf6gHVZgZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:37:1d:ad:48:20:ff:7c:36:c7:c7:8c:41:58:b9:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=747cb366ff6e23df6c097f60adc7fa8075598191 Validity Not Before: Dec 21 14:01:29 2025 GMT Not After : Dec 22 14:01:29 2025 GMT Subject: CN=7227683a5de411f6c5573174ea84b9d8ff9b0bd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:71:24:e5:7f:be:11:a2:dc:16:19:da:a3:36: 7a:fa:1e:d8:6e:66:c2:8b:e0:79:59:a1:69:a9:b6: 81:75:ce:80:d0:cb:05:59:e8:b4:3f:41:34:ea:f4: 7a:f3:3c:01:dd:85:93:33:04:7f:d1:5a:56:b9:2e: 89:21:08:67:cb:e2:85:1b:fc:60:ee:f8:ad:40:0e: 9e:4b:a5:1e:20:9f:78:4f:7c:c2:dd:35:b4:c9:3d: 6f:4b:fa:e7:1c:b4:42:61:a7:61:fd:3f:7c:d5:f8: c6:48:bb:45:92:07:0a:72:52:71:6f:b2:29:df:e2: e1:0a:72:dd:33:2c:e2:63:45:24:71:b8:7e:48:98: 15:b8:c5:70:81:aa:52:89:e1:33:6d:07:c7:6f:a1: d7:7d:59:b3:6e:39:2e:83:29:9e:21:d9:40:7b:a7: 1a:ad:4c:5f:11:24:d5:8e:74:bd:44:95:59:0f:b5: c9:80:b9:d1:55:52:eb:81:c0:09:bc:cb:fb:c8:d5: 16:19:e8:ab:b6:20:2d:ef:37:5f:01:88:16:83:b1: 2a:0a:97:59:63:d8:cf:a8:21:40:7a:d9:1d:68:15: a3:64:de:29:a0:3a:86:a6:3a:b0:58:9e:3b:38:bc: 9d:1d:af:28:ca:d2:68:cb:1f:4c:48:6a:aa:0b:57: 5c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:27:68:3A:5D:E4:11:F6:C5:57:31:74:EA:84:B9:D8:FF:9B:0B:D1 X509v3 Authority Key Identifier: keyid:74:7C:B3:66:FF:6E:23:DF:6C:09:7F:60:AD:C7:FA:80:75:59:81:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHyzZv9uI99sCX9grcf6gHVZgZE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3ab55d-852f-495b-b2b3-e02d730fe84e/1/dHyzZv9uI99sCX9grcf6gHVZgZE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:4b:b5:77:0a:53:c2:ef:69:a8:b4:2b:24:68:0f:12:84:37: 16:26:c7:38:40:99:99:0f:11:e4:16:7f:3e:b2:72:62:f3:ae: 4e:79:c4:ec:03:94:c5:11:df:b6:46:c6:09:01:f3:87:18:a2: 7e:a5:8a:59:0e:3c:26:b4:b0:36:3e:02:c4:58:40:37:49:d3: ba:44:92:4d:f3:39:35:e5:a0:46:87:2b:9f:ac:95:d9:8b:2a: b1:f3:09:bd:13:ea:76:c9:f7:01:b8:0b:03:e7:e9:5b:c9:82: 09:e3:59:8a:e4:0c:52:2c:ba:e5:40:0d:d0:2c:ff:0c:3b:7a: 71:40:54:56:4e:75:41:82:c3:63:b9:d4:54:5e:60:8e:6c:bb: ce:21:57:85:5b:0d:76:cb:0f:65:90:a3:b7:84:33:ca:97:fc: 31:b7:5e:a5:5f:35:8d:45:9a:8a:64:8a:0c:98:ae:1a:28:29: 75:b6:91:80:18:1e:1f:86:02:b0:17:9e:da:40:5c:63:c5:da: aa:5e:45:55:2d:da:48:02:6d:c5:a7:b4:44:8a:3b:58:d2:0b: 83:b3:a2:c2:8e:07:34:3c:47:90:01:e0:eb:f0:30:d9:a3:04: 08:30:de:d5:60:74:74:96:6e:fa:e6:78:a5:97:0f:98:e1:c4: 3d:98:82:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNx2tSCD/fDbHx4xBWLnwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0N2NiMzY2ZmY2ZTIzZGY2YzA5N2Y2MGFkYzdmYTgwNzU1 OTgxOTEwHhcNMjUxMjIxMTQwMTI5WhcNMjUxMjIyMTQwMTI5WjAzMTEwLwYDVQQD Eyg3MjI3NjgzYTVkZTQxMWY2YzU1NzMxNzRlYTg0YjlkOGZmOWIwYmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7nEk5X++EaLcFhnaozZ6+h7YbmbC i+B5WaFpqbaBdc6A0MsFWei0P0E06vR68zwB3YWTMwR/0VpWuS6JIQhny+KFG/xg 7vitQA6eS6UeIJ94T3zC3TW0yT1vS/rnHLRCYadh/T981fjGSLtFkgcKclJxb7Ip 3+LhCnLdMyziY0Ukcbh+SJgVuMVwgapSieEzbQfHb6HXfVmzbjkugymeIdlAe6ca rUxfESTVjnS9RJVZD7XJgLnRVVLrgcAJvMv7yNUWGeirtiAt7zdfAYgWg7EqCpdZ Y9jPqCFAetkdaBWjZN4poDqGpjqwWJ47OLydHa8oytJoyx9MSGqqC1dciQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHInaDpd5BH2xVcxdOqEudj/mwvRMB8GA1UdIwQY MBaAFHR8s2b/biPfbAl/YK3H+oB1WYGRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEh5elp2OXVJOTlzQ1g5Z3JjZjZnSFZaZ1pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8zYWI1NWQtODUyZi00OTViLWIyYjMt ZTAyZDczMGZlODRlLzEvZEh5elp2OXVJOTlzQ1g5Z3JjZjZnSFZaZ1pFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8zYWI1NWQtODUyZi00OTViLWIyYjMtZTAyZDczMGZlODRl LzEvZEh5elp2OXVJOTlzQ1g5Z3JjZjZnSFZaZ1pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtku1dwpT wu9pqLQrJGgPEoQ3FibHOECZmQ8R5BZ/PrJyYvOuTnnE7AOUxRHftkbGCQHzhxii fqWKWQ48JrSwNj4CxFhAN0nTukSSTfM5NeWgRocrn6yV2YsqsfMJvRPqdsn3AbgL A+fpW8mCCeNZiuQMUiy65UAN0Cz/DDt6cUBUVk51QYLDY7nUVF5gjmy7ziFXhVsN dssPZZCjt4Qzypf8MbdepV81jUWaimSKDJiuGigpdbaRgBgeH4YCsBee2kBcY8Xa ql5FVS3aSAJtxae0RIo7WNILg7Oiwo4HNDxHkAHg6/Aw2aMECDDe1WB0dJZu+uZ4 pZcPmOHEPZiCTA== -----END CERTIFICATE-----Generated at Sun Dec 21 19:27:23 2025 by rpki-client