This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft File: 29OCJ0tFdmK6ctGIZXOix9zDVIY.mft (raw, json) Hash identifier: 0ll6aPsaJFluAYUbAqneGHfKbkfl27b10XrrdAV3ePA= Subject key identifier: 93:DE:E6:E9:71:1B:34:62:05:E0:BF:14:17:4A:EC:B3:B3:E7:EF:C4 Authority key identifier: DB:D3:82:27:4B:45:76:62:BA:72:D1:88:65:73:A2:C7:DC:C3:54:86 Certificate issuer: /CN=dbd382274b457662ba72d1886573a2c7dcc35486 Certificate serial: 019B38A0F345E30E4DF91F41D138414A7155 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft Manifest number: 14C2 Signing time: Fri 19 Dec 2025 22:00:30 +0000 Manifest this update: Fri 19 Dec 2025 22:00:30 +0000 Manifest next update: Sat 20 Dec 2025 22:00:30 +0000 Files and hashes: 1: 29OCJ0tFdmK6ctGIZXOix9zDVIY.crl (hash: Bz6FU8upSxLJqZqjViwI2ho8imFP1l1kUEXnQx5qyTU=) 2: iUMe2JOAJNlxZXEaHwJwVAIN3WA.roa (hash: ZvIlGSaMCDAbt70045McSuBEc2GtkECp8D75xEWNHU8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.crl rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a0:f3:45:e3:0e:4d:f9:1f:41:d1:38:41:4a:71:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbd382274b457662ba72d1886573a2c7dcc35486 Validity Not Before: Dec 19 22:00:30 2025 GMT Not After : Dec 20 22:00:30 2025 GMT Subject: CN=93dee6e9711b346205e0bf14174aecb3b3e7efc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:39:84:69:71:43:a8:a8:05:4f:c2:5b:4a:02: d9:0d:18:a7:ca:9d:d0:f7:56:55:76:8f:c6:c8:92: fc:63:39:24:b3:82:6e:d8:77:60:60:d9:e3:b6:51: 35:05:e3:4e:9f:d0:83:11:ca:9e:a8:69:01:b2:3f: df:52:2f:94:9d:8a:bf:31:75:80:f0:71:fd:f5:f1: 5b:89:fb:a6:a2:37:3e:34:e6:7f:1f:be:a0:67:b0: 7d:4b:5b:25:db:de:71:53:0f:8e:ad:a9:ce:ae:68: 74:ed:ba:49:09:f8:83:89:15:47:f8:8b:71:a6:e7: 1e:0e:94:7c:1d:e9:33:10:b4:72:cf:f9:a5:52:14: b7:86:ca:77:db:40:31:ae:5b:71:61:c5:f8:78:91: d3:a6:12:5e:00:08:dd:66:df:88:49:c1:3d:64:33: 09:6a:e3:a4:04:6c:67:04:b2:af:95:86:e9:cd:49: 88:83:c9:d7:31:29:55:82:09:96:87:a7:cd:92:45: 51:fd:c8:fd:f3:98:18:d4:88:b0:e8:f4:74:c2:c7: 4e:77:ed:89:02:83:f9:30:e1:0d:50:51:5d:f8:9d: 2f:2e:6e:58:b7:c7:86:da:08:75:4c:c9:53:ce:f2: 7e:30:01:28:dd:9e:20:20:8f:cd:fd:bd:e9:c5:05: 29:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:DE:E6:E9:71:1B:34:62:05:E0:BF:14:17:4A:EC:B3:B3:E7:EF:C4 X509v3 Authority Key Identifier: keyid:DB:D3:82:27:4B:45:76:62:BA:72:D1:88:65:73:A2:C7:DC:C3:54:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:f4:41:f9:c3:17:68:5f:e0:38:58:43:c2:83:f6:da:9b:23: 20:e9:29:f6:0b:f2:dd:3c:85:d4:ee:2c:90:93:6e:f1:ed:6e: e8:08:be:76:4c:7e:72:fb:59:6a:04:99:cb:aa:73:ab:0a:1b: e1:a0:b7:8e:3d:1f:b3:c5:89:e2:30:2d:aa:4e:ff:e1:25:69: 1e:ce:47:49:e5:80:89:16:6f:02:2a:b5:10:9d:85:e5:1c:7e: 75:94:33:64:20:96:90:97:f2:74:45:d6:4c:ac:be:77:cd:df: 0c:65:a0:d4:2b:c9:43:4c:b0:d0:1a:ad:99:08:8c:01:f9:7d: 47:a6:2a:6c:b8:52:f1:2f:70:3c:ee:85:2e:08:d8:aa:ea:41: 26:32:89:28:2e:53:44:0a:2d:f1:c5:b8:41:0d:7a:46:ca:97: cf:6b:63:35:cb:4c:e5:f5:80:08:8e:54:eb:c4:00:04:23:ce: 6e:f7:f8:2b:71:2f:c2:ff:11:85:ec:8f:0d:9a:5b:b4:51:82: e9:aa:83:63:2b:47:10:4b:7b:a0:09:17:fd:8d:41:df:e7:73: 42:9f:aa:68:e3:9d:11:a6:34:90:90:cb:27:6a:4f:0d:01:77: ba:ff:3b:41:c9:61:8d:c4:b9:47:76:e2:e2:81:94:26:c1:6b: 48:dd:e3:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oPNF4w5N+R9B0ThBSnFVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZDM4MjI3NGI0NTc2NjJiYTcyZDE4ODY1NzNhMmM3ZGNj MzU0ODYwHhcNMjUxMjE5MjIwMDMwWhcNMjUxMjIwMjIwMDMwWjAzMTEwLwYDVQQD Eyg5M2RlZTZlOTcxMWIzNDYyMDVlMGJmMTQxNzRhZWNiM2IzZTdlZmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTmEaXFDqKgFT8JbSgLZDRinyp3Q 91ZVdo/GyJL8Yzkks4Ju2HdgYNnjtlE1BeNOn9CDEcqeqGkBsj/fUi+UnYq/MXWA 8HH99fFbifumojc+NOZ/H76gZ7B9S1sl295xUw+OranOrmh07bpJCfiDiRVH+Itx puceDpR8HekzELRyz/mlUhS3hsp320AxrltxYcX4eJHTphJeAAjdZt+IScE9ZDMJ auOkBGxnBLKvlYbpzUmIg8nXMSlVggmWh6fNkkVR/cj985gY1Iiw6PR0wsdOd+2J AoP5MOENUFFd+J0vLm5Yt8eG2gh1TMlTzvJ+MAEo3Z4gII/N/b3pxQUpKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJPe5ulxGzRiBeC/FBdK7LOz5+/EMB8GA1UdIwQY MBaAFNvTgidLRXZiunLRiGVzosfcw1SGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjlPQ0owdEZkbUs2Y3RHSVpYT2l4OXpEVklZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9mMTIwMjktNjc1OC00MjMzLTlkZmMt YzY1NDM1NmIwN2M0LzEvMjlPQ0owdEZkbUs2Y3RHSVpYT2l4OXpEVklZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9mMTIwMjktNjc1OC00MjMzLTlkZmMtYzY1NDM1NmIwN2M0 LzEvMjlPQ0owdEZkbUs2Y3RHSVpYT2l4OXpEVklZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYPRB+cMX aF/gOFhDwoP22psjIOkp9gvy3TyF1O4skJNu8e1u6Ai+dkx+cvtZagSZy6pzqwob 4aC3jj0fs8WJ4jAtqk7/4SVpHs5HSeWAiRZvAiq1EJ2F5Rx+dZQzZCCWkJfydEXW TKy+d83fDGWg1CvJQ0yw0BqtmQiMAfl9R6YqbLhS8S9wPO6FLgjYqupBJjKJKC5T RAot8cW4QQ16RsqXz2tjNctM5fWACI5U68QABCPObvf4K3Evwv8RheyPDZpbtFGC 6aqDYytHEEt7oAkX/Y1B3+dzQp+qaOOdEaY0kJDLJ2pPDQF3uv87QclhjcS5R3bi 4oGUJsFrSN3jtg== -----END CERTIFICATE-----Generated at Sat Dec 20 07:18:20 2025 by rpki-client