This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft File: dLQqbeTgH8MSUNG74yIoEEbuYao.mft (raw, json) Hash identifier: dg/060KqjkppFAHlNKOUDwKrlvqHJpTXREjFPvYaiVU= Subject key identifier: 28:C0:D3:49:92:85:FB:5E:CD:0C:30:D6:5D:14:86:1A:F5:9E:70:2C Authority key identifier: 74:B4:2A:6D:E4:E0:1F:C3:12:50:D1:BB:E3:22:28:10:46:EE:61:AA Certificate issuer: /CN=74b42a6de4e01fc31250d1bbe322281046ee61aa Certificate serial: 019B1BA93070D0B5679ADCA32DC3933AC5C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft Manifest number: 121A Signing time: Sun 14 Dec 2025 07:00:31 +0000 Manifest this update: Sun 14 Dec 2025 07:00:31 +0000 Manifest next update: Mon 15 Dec 2025 07:00:31 +0000 Files and hashes: 1: Lgun1kUgKuu9jlLCkgKdcwux9To.roa (hash: lGBfmzCEfkvZzXJZAi/9+uOmPeLs0qMduHpdLInrHEE=) 2: dLQqbeTgH8MSUNG74yIoEEbuYao.crl (hash: Tk0zdED4eOBYD4F03ulqobwxj9eaNmDKJlofuUWzCdE=) 3: jSoECDBgi6VXYwcb2Ry0gxkfevA.roa (hash: IB9PwzbzFSot/avb9nPz1wMhdqqmWhuiYKAtdM5DSM0=) 4: qi0gnQ2A8mtm5nYWriDtU7TmQuc.roa (hash: uJnkHGGJ2XDTIlw0+Vcce7p4k0hUULEaSnw534z2SoM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.crl rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:a9:30:70:d0:b5:67:9a:dc:a3:2d:c3:93:3a:c5:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74b42a6de4e01fc31250d1bbe322281046ee61aa Validity Not Before: Dec 14 07:00:31 2025 GMT Not After : Dec 15 07:00:31 2025 GMT Subject: CN=28c0d3499285fb5ecd0c30d65d14861af59e702c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7a:97:59:26:a7:4c:81:b8:fd:9e:8e:70:80: 16:d1:e3:18:a1:3d:a6:f1:2d:58:a6:12:c7:0d:c4: 29:a3:c7:d8:7d:c0:c3:f6:b5:7e:a1:70:20:6e:94: 6f:7b:ea:74:c0:3f:d0:36:bd:73:0b:38:00:20:a5: 4f:e1:0f:d0:8a:88:4c:2c:34:42:b1:58:45:0a:80: 49:ac:33:5d:62:a0:fe:6a:3a:bc:99:85:a4:84:05: 32:c5:5b:e6:66:17:99:64:f8:3f:2e:ff:ea:b4:35: 17:cf:ad:15:a4:2e:de:90:b9:56:b2:78:d9:4d:da: 92:03:76:68:6a:70:2d:86:73:d9:58:c3:e4:a2:0f: 34:02:e4:29:7c:7a:04:50:15:7a:f2:8b:1f:ea:21: bf:ad:da:38:d8:e1:c7:da:52:f8:3c:cb:b0:fa:b8: 12:44:78:f3:7e:0c:05:be:f5:ff:f5:31:f6:97:72: 01:9b:61:db:51:0f:59:58:a9:aa:a2:17:a4:62:12: 6b:2d:cd:0a:a5:64:83:82:e4:9a:2b:cf:87:23:fc: ac:fb:da:d0:6e:99:f3:03:3f:ef:59:24:8c:6a:64: 22:51:8b:3f:12:26:06:f4:f8:6e:32:35:08:9e:43: 88:57:91:20:b4:6c:ba:8d:fe:2b:a7:ba:55:0d:af: fc:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:C0:D3:49:92:85:FB:5E:CD:0C:30:D6:5D:14:86:1A:F5:9E:70:2C X509v3 Authority Key Identifier: keyid:74:B4:2A:6D:E4:E0:1F:C3:12:50:D1:BB:E3:22:28:10:46:EE:61:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:1e:35:13:fb:fa:cc:7f:de:55:f1:92:65:db:96:2b:2d:fd: 31:d1:0b:8d:04:06:15:cd:00:39:5f:b4:96:02:a4:89:9d:6a: 7a:81:b3:28:69:61:1f:a4:bc:24:43:9d:f9:12:9a:55:0b:58: fb:0e:00:f2:80:90:50:d4:39:97:d7:b0:70:ca:fe:0c:5f:a9: 11:bf:27:35:2d:e9:69:f3:56:cf:96:8a:ef:ee:95:72:ee:1e: f3:a7:84:4b:73:20:04:46:ac:88:b2:3a:c5:3f:20:62:5f:ee: 1d:30:24:05:23:02:b3:57:84:a8:37:26:40:27:2d:79:ed:a6: 3f:56:fc:76:f1:21:07:1c:b7:e6:be:e3:43:b0:d0:16:de:d7: 9a:67:46:79:1f:f7:d3:50:52:87:69:ca:65:32:b8:3b:cd:ac: 3b:ed:3a:0a:9e:8d:12:d2:c0:65:b7:29:b1:2e:e5:fb:fc:e1: fa:9e:8e:41:57:21:a5:73:ea:1d:df:67:90:03:10:fb:b4:3b: 60:61:f1:e2:93:e9:4a:58:fc:74:4e:5e:2d:49:02:89:0f:e2: 71:64:29:b6:32:b5:93:02:ba:4c:03:32:b0:40:ce:13:bd:5a: 91:ce:84:6f:f3:99:77:ee:15:37:ae:ff:21:de:10:e3:9a:2d: 14:02:e0:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbqTBw0LVnmtyjLcOTOsXEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0YjQyYTZkZTRlMDFmYzMxMjUwZDFiYmUzMjIyODEwNDZl ZTYxYWEwHhcNMjUxMjE0MDcwMDMxWhcNMjUxMjE1MDcwMDMxWjAzMTEwLwYDVQQD EygyOGMwZDM0OTkyODVmYjVlY2QwYzMwZDY1ZDE0ODYxYWY1OWU3MDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3qXWSanTIG4/Z6OcIAW0eMYoT2m 8S1YphLHDcQpo8fYfcDD9rV+oXAgbpRve+p0wD/QNr1zCzgAIKVP4Q/QiohMLDRC sVhFCoBJrDNdYqD+ajq8mYWkhAUyxVvmZheZZPg/Lv/qtDUXz60VpC7ekLlWsnjZ TdqSA3ZoanAthnPZWMPkog80AuQpfHoEUBV68osf6iG/rdo42OHH2lL4PMuw+rgS RHjzfgwFvvX/9TH2l3IBm2HbUQ9ZWKmqohekYhJrLc0KpWSDguSaK8+HI/ys+9rQ bpnzAz/vWSSMamQiUYs/EiYG9PhuMjUInkOIV5EgtGy6jf4rp7pVDa/8jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCjA00mShftezQww1l0Uhhr1nnAsMB8GA1UdIwQY MBaAFHS0Km3k4B/DElDRu+MiKBBG7mGqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZExRcWJlVGdIOE1TVU5HNzR5SW9FRWJ1WWFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9lNTU1NmMtY2ZlYS00OTcyLWFhZjgt MTdhMWRjZGNjNmUwLzEvZExRcWJlVGdIOE1TVU5HNzR5SW9FRWJ1WWFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9lNTU1NmMtY2ZlYS00OTcyLWFhZjgtMTdhMWRjZGNjNmUw LzEvZExRcWJlVGdIOE1TVU5HNzR5SW9FRWJ1WWFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnh41E/v6 zH/eVfGSZduWKy39MdELjQQGFc0AOV+0lgKkiZ1qeoGzKGlhH6S8JEOd+RKaVQtY +w4A8oCQUNQ5l9ewcMr+DF+pEb8nNS3pafNWz5aK7+6Vcu4e86eES3MgBEasiLI6 xT8gYl/uHTAkBSMCs1eEqDcmQCctee2mP1b8dvEhBxy35r7jQ7DQFt7XmmdGeR/3 01BSh2nKZTK4O82sO+06Cp6NEtLAZbcpsS7l+/zh+p6OQVchpXPqHd9nkAMQ+7Q7 YGHx4pPpSlj8dE5eLUkCiQ/icWQptjK1kwK6TAMysEDOE71akc6Eb/OZd+4VN67/ Id4Q45otFALgMA== -----END CERTIFICATE-----Generated at Sun Dec 14 08:38:47 2025 by rpki-client