This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft File: dNYxjajSNXnE9zi26OVcxf8n5bE.mft (raw, json) Hash identifier: e/duwqx1QjQ37BFMn9gHdvNndrk0rV8Ed/JxII6DQHs= Subject key identifier: 7B:00:EB:73:52:5B:E0:AA:4C:16:3E:38:18:D5:31:27:38:73:E9:24 Authority key identifier: 74:D6:31:8D:A8:D2:35:79:C4:F7:38:B6:E8:E5:5C:C5:FF:27:E5:B1 Certificate issuer: /CN=74d6318da8d23579c4f738b6e8e55cc5ff27e5b1 Certificate serial: 019B3BD9146E034B58FAFA6C6C4AADFB7E28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft Manifest number: 0D88 Signing time: Sat 20 Dec 2025 13:00:40 +0000 Manifest this update: Sat 20 Dec 2025 13:00:40 +0000 Manifest next update: Sun 21 Dec 2025 13:00:40 +0000 Files and hashes: 1: J3P2ScDRq3f4KKlGP_mAY51M1_c.roa (hash: W5jPrF0qqkPJpHpX3woDY2gshtve5dFyc1+G6+uag6o=) 2: dNYxjajSNXnE9zi26OVcxf8n5bE.crl (hash: 4nEOSnhZeR0znluUsZnJAr36uX1014z0ksIrgdQxzP0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:14:6e:03:4b:58:fa:fa:6c:6c:4a:ad:fb:7e:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74d6318da8d23579c4f738b6e8e55cc5ff27e5b1 Validity Not Before: Dec 20 13:00:40 2025 GMT Not After : Dec 21 13:00:40 2025 GMT Subject: CN=7b00eb73525be0aa4c163e3818d531273873e924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6f:1f:10:2a:5a:1b:92:96:f9:ec:6a:54:76: 39:96:4b:da:aa:5b:e0:a4:7c:d3:71:c1:0d:52:64: 91:c1:cc:37:e7:a5:46:d0:25:4e:0c:0c:a5:8c:9b: 33:c8:d5:a8:32:31:0b:db:4d:4d:3b:e8:7b:de:86: b9:43:a3:94:dc:c1:ed:a3:17:29:5b:b9:84:f8:27: 17:57:8e:7d:f9:fe:9d:d6:36:79:15:cf:84:5a:38: 86:90:1d:c4:63:70:22:18:9c:af:c1:a4:8c:66:8f: 24:10:0b:f0:c8:91:98:56:35:a2:e7:3f:6c:75:0b: 71:01:7e:4c:c5:19:88:40:53:63:59:8f:54:f4:a1: 72:92:8c:51:90:60:9c:1a:4e:01:db:cb:d7:e4:3b: 69:d5:1f:1f:6d:6d:0c:c9:cf:32:cb:10:1f:0a:95: 97:94:b5:86:cb:eb:d9:29:a4:92:b3:11:e8:37:ef: 4c:76:ac:dc:98:4e:a9:94:cb:dc:94:1a:83:ba:e1: 8a:ac:4a:c2:09:43:85:25:63:06:f3:1c:d5:b2:6e: 19:6b:0e:32:71:20:ed:e9:6a:09:57:dc:29:22:96: f8:1e:fe:a8:59:65:0a:c8:02:8f:60:3e:3e:11:4a: 88:f5:60:c2:49:4c:71:3b:a6:1f:c2:f1:c0:b1:0a: 3b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:00:EB:73:52:5B:E0:AA:4C:16:3E:38:18:D5:31:27:38:73:E9:24 X509v3 Authority Key Identifier: keyid:74:D6:31:8D:A8:D2:35:79:C4:F7:38:B6:E8:E5:5C:C5:FF:27:E5:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:3e:c5:c5:19:d4:0e:10:38:3d:18:21:ff:c5:be:d5:d4:27: 9a:bd:14:fd:8a:11:d8:2b:69:24:b0:b4:90:36:a9:28:19:e4: f3:fd:e4:04:42:e6:2e:8b:bf:3c:59:d7:54:11:fc:2a:34:5b: 6a:13:f9:3f:9a:0a:e4:5e:94:09:b9:a7:47:d4:fc:32:c4:e3: 2e:1a:ad:75:1b:47:41:17:64:12:96:ca:89:17:8a:59:7f:11: 71:bd:f0:07:e0:c9:7a:28:13:c3:2b:57:0f:3f:e4:42:b2:1b: 7b:a8:f4:d1:a5:1a:64:8b:fd:b4:74:ac:fd:48:b5:f6:80:f1: 10:60:bd:89:5b:c6:95:84:05:39:77:85:93:c6:1f:43:a7:90: 29:96:a7:99:d6:e9:22:c5:cc:7c:05:bc:cb:9f:7b:7d:45:40: 33:e8:8a:cb:91:9c:d8:66:32:64:61:4c:4f:53:c5:25:43:a9: c1:3c:99:9e:42:df:c3:f8:90:a3:8c:c8:6e:cc:d7:46:67:4c: 15:57:33:0e:db:3f:0e:8d:79:b7:41:9f:e1:5c:7d:03:ee:2e: 4b:e1:28:21:1e:b2:96:f1:31:b2:32:fd:89:04:04:5c:aa:36: cb:0f:e6:eb:52:f8:93:0c:d0:87:10:75:2d:7b:41:0f:51:0f: d2:d3:48:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72RRuA0tY+vpsbEqt+34oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZDYzMThkYThkMjM1NzljNGY3MzhiNmU4ZTU1Y2M1ZmYy N2U1YjEwHhcNMjUxMjIwMTMwMDQwWhcNMjUxMjIxMTMwMDQwWjAzMTEwLwYDVQQD Eyg3YjAwZWI3MzUyNWJlMGFhNGMxNjNlMzgxOGQ1MzEyNzM4NzNlOTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw28fECpaG5KW+exqVHY5lkvaqlvg pHzTccENUmSRwcw356VG0CVODAyljJszyNWoMjEL201NO+h73oa5Q6OU3MHtoxcp W7mE+CcXV459+f6d1jZ5Fc+EWjiGkB3EY3AiGJyvwaSMZo8kEAvwyJGYVjWi5z9s dQtxAX5MxRmIQFNjWY9U9KFykoxRkGCcGk4B28vX5Dtp1R8fbW0Myc8yyxAfCpWX lLWGy+vZKaSSsxHoN+9MdqzcmE6plMvclBqDuuGKrErCCUOFJWMG8xzVsm4Zaw4y cSDt6WoJV9wpIpb4Hv6oWWUKyAKPYD4+EUqI9WDCSUxxO6YfwvHAsQo7EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHsA63NSW+CqTBY+OBjVMSc4c+kkMB8GA1UdIwQY MBaAFHTWMY2o0jV5xPc4tujlXMX/J+WxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE5ZeGphalNOWG5FOXppMjZPVmN4ZjhuNWJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9lZjU0ZGItYTU2NS00MzU0LTg5OWEt MDgzYWExOGE3NjI5LzEvZE5ZeGphalNOWG5FOXppMjZPVmN4ZjhuNWJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9lZjU0ZGItYTU2NS00MzU0LTg5OWEtMDgzYWExOGE3NjI5 LzEvZE5ZeGphalNOWG5FOXppMjZPVmN4ZjhuNWJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARz7FxRnU DhA4PRgh/8W+1dQnmr0U/YoR2CtpJLC0kDapKBnk8/3kBELmLou/PFnXVBH8KjRb ahP5P5oK5F6UCbmnR9T8MsTjLhqtdRtHQRdkEpbKiReKWX8Rcb3wB+DJeigTwytX Dz/kQrIbe6j00aUaZIv9tHSs/Ui19oDxEGC9iVvGlYQFOXeFk8YfQ6eQKZanmdbp IsXMfAW8y597fUVAM+iKy5Gc2GYyZGFMT1PFJUOpwTyZnkLfw/iQo4zIbszXRmdM FVczDts/Do15t0Gf4Vx9A+4uS+EoIR6ylvExsjL9iQQEXKo2yw/m61L4kwzQhxB1 LXtBD1EP0tNIGQ== -----END CERTIFICATE-----Generated at Sat Dec 20 16:06:36 2025 by rpki-client