This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft File: dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft (raw, json) Hash identifier: rPY60Yk5do6bC4euAb++YakK/QzKPnytvce45WLE2Fg= Subject key identifier: 80:5B:40:5D:3F:B4:28:74:99:BE:D9:90:4E:A1:83:73:08:D7:04:5F Authority key identifier: 74:AE:94:1A:68:1C:15:86:37:9E:07:24:7D:CC:19:F3:F4:10:35:D8 Certificate issuer: /CN=74ae941a681c1586379e07247dcc19f3f41035d8 Certificate serial: 019B38A27A07852517A4D02564198CAF6CA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft Manifest number: 0F24 Signing time: Fri 19 Dec 2025 22:02:10 +0000 Manifest this update: Fri 19 Dec 2025 22:02:10 +0000 Manifest next update: Sat 20 Dec 2025 22:02:10 +0000 Files and hashes: 1: DvoMmaNQLR-F0c_ZQLqJj27XJNw.asa (hash: mEX2A8L8N6B6jxBchbjmo4MApYmBl5md4ZvzoDkGIHk=) 2: aRphps94ueev9_cb0Fbr1t6EWos.roa (hash: qY/6yr4D72wfd0je0UgbA5pXBnLSwy4IbEDXkYKHi6c=) 3: dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl (hash: 7MI6jvtgPo3S0ZmrpnFUZTwAu4HIo7AVZsPSkRpbpO0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:7a:07:85:25:17:a4:d0:25:64:19:8c:af:6c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74ae941a681c1586379e07247dcc19f3f41035d8 Validity Not Before: Dec 19 22:02:10 2025 GMT Not After : Dec 20 22:02:10 2025 GMT Subject: CN=805b405d3fb4287499bed9904ea1837308d7045f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:97:7f:df:01:ba:a4:00:7b:9a:b2:0e:a5:23: 89:d6:fd:44:72:4a:bf:7b:3e:f9:d4:90:73:6b:ed: 01:39:2c:43:48:75:0c:7a:e0:11:a4:05:71:2a:1f: 07:76:38:27:f6:0d:e6:30:27:38:32:34:77:8e:74: 89:e3:f6:b4:29:ff:33:c6:bc:89:6f:da:24:45:4c: e7:ad:6a:b3:0e:87:18:ac:80:10:c4:a6:98:c1:ff: ba:7d:3f:de:53:6e:09:65:f2:55:a6:7a:c0:2b:2f: d2:e9:7f:88:bb:cd:cf:27:13:18:c7:bb:12:18:bb: a0:53:37:f1:86:fe:a3:0f:d2:ec:44:95:7d:90:c5: 9b:6f:7e:04:4d:f7:30:06:2a:a4:53:62:c8:a2:28: 4a:99:54:12:03:b8:7f:38:32:88:d0:41:80:4e:e3: 4b:d4:69:a7:dd:dc:75:2d:76:84:b7:95:a8:57:d4: 4e:14:f0:92:27:d4:a4:b8:06:73:d5:b5:90:ac:2f: 4a:74:c8:b0:3c:fe:38:be:32:e0:a9:a6:a4:cf:6e: 4a:d9:84:71:5a:90:22:b4:4c:84:1e:fc:0d:f9:b0: 6c:63:15:34:e6:63:df:37:50:f9:69:2a:cd:c9:2a: e2:5d:96:50:3a:97:ef:a4:2f:3d:4c:c6:7c:1a:e1: 3a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:5B:40:5D:3F:B4:28:74:99:BE:D9:90:4E:A1:83:73:08:D7:04:5F X509v3 Authority Key Identifier: keyid:74:AE:94:1A:68:1C:15:86:37:9E:07:24:7D:CC:19:F3:F4:10:35:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:d1:ef:07:18:97:01:cd:33:76:c1:3a:bb:1a:1f:67:1e:7f: 38:d4:23:51:e8:e8:79:7c:0d:c4:d9:66:64:de:4d:2c:c0:f9: 80:09:b6:a6:ec:99:5f:6b:9c:a5:1e:96:8f:3e:2c:e6:b7:4a: 7b:64:b6:96:af:36:59:c8:a6:43:0b:58:cf:6f:77:d6:28:fe: 14:f3:37:0b:b9:3f:1f:91:48:d4:d2:0a:e6:11:3e:67:62:a2: c0:af:5d:3a:55:7c:cf:1b:6d:cd:7b:bc:98:66:24:f8:5a:79: a8:c5:22:e3:6b:41:a3:98:68:aa:8b:c0:88:97:64:af:5c:db: c6:f3:2c:0a:ca:9d:2d:c2:61:66:da:3b:ea:20:3c:0f:44:69: 1b:28:fc:f6:b7:80:ac:1a:7c:5c:ee:6f:d2:fb:55:9d:98:a1: fd:34:c4:48:ba:cc:98:f6:2c:a3:ad:11:59:54:49:81:ee:d0: 15:6b:4c:83:ca:2d:a5:14:20:3e:f3:13:33:d9:e8:08:46:cc: a6:9c:8c:c0:0e:2a:3f:85:4a:0e:d5:da:75:43:fd:ef:1b:90: 14:07:3b:c1:54:a8:b3:eb:88:fe:45:7a:48:37:a8:a8:11:57: 2b:59:e2:b6:44:86:7e:97:19:dc:a3:38:a4:1d:51:d9:c3:c9: 2c:89:c9:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4onoHhSUXpNAlZBmMr2ygMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0YWU5NDFhNjgxYzE1ODYzNzllMDcyNDdkY2MxOWYzZjQx MDM1ZDgwHhcNMjUxMjE5MjIwMjEwWhcNMjUxMjIwMjIwMjEwWjAzMTEwLwYDVQQD Eyg4MDViNDA1ZDNmYjQyODc0OTliZWQ5OTA0ZWExODM3MzA4ZDcwNDVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJd/3wG6pAB7mrIOpSOJ1v1Eckq/ ez751JBza+0BOSxDSHUMeuARpAVxKh8Hdjgn9g3mMCc4MjR3jnSJ4/a0Kf8zxryJ b9okRUznrWqzDocYrIAQxKaYwf+6fT/eU24JZfJVpnrAKy/S6X+Iu83PJxMYx7sS GLugUzfxhv6jD9LsRJV9kMWbb34ETfcwBiqkU2LIoihKmVQSA7h/ODKI0EGATuNL 1Gmn3dx1LXaEt5WoV9ROFPCSJ9SkuAZz1bWQrC9KdMiwPP44vjLgqaakz25K2YRx WpAitEyEHvwN+bBsYxU05mPfN1D5aSrNySriXZZQOpfvpC89TMZ8GuE64QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIBbQF0/tCh0mb7ZkE6hg3MI1wRfMB8GA1UdIwQY MBaAFHSulBpoHBWGN54HJH3MGfP0EDXYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEs2VUdtZ2NGWVkzbmdja2Zjd1o4X1FRTmRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8xNGU0YzItOGE5OC00NTZlLTk2MTIt OTQyOWRhODdiZDUwLzEvZEs2VUdtZ2NGWVkzbmdja2Zjd1o4X1FRTmRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi8xNGU0YzItOGE5OC00NTZlLTk2MTItOTQyOWRhODdiZDUw LzEvZEs2VUdtZ2NGWVkzbmdja2Zjd1o4X1FRTmRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAENHvBxiX Ac0zdsE6uxofZx5/ONQjUejoeXwNxNlmZN5NLMD5gAm2puyZX2ucpR6Wjz4s5rdK e2S2lq82WcimQwtYz2931ij+FPM3C7k/H5FI1NIK5hE+Z2KiwK9dOlV8zxttzXu8 mGYk+Fp5qMUi42tBo5hoqovAiJdkr1zbxvMsCsqdLcJhZto76iA8D0RpGyj89reA rBp8XO5v0vtVnZih/TTESLrMmPYso60RWVRJge7QFWtMg8otpRQgPvMTM9noCEbM ppyMwA4qP4VKDtXadUP97xuQFAc7wVSos+uI/kV6SDeoqBFXK1nitkSGfpcZ3KM4 pB1R2cPJLInJ4w== -----END CERTIFICATE-----Generated at Fri Dec 19 23:48:49 2025 by rpki-client