This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft File: dfUobuOFWb3Zicdk9aZHQ0ewO28.mft (raw, json) Hash identifier: lTvYMUGO3wuzk/Ng8qBSvZoIH+9phd7wG4ge9kpGrqo= Subject key identifier: 85:63:05:A0:EB:2A:3D:92:60:C4:D1:7C:2D:AF:CB:B3:9E:78:60:A0 Authority key identifier: 75:F5:28:6E:E3:85:59:BD:D9:89:C7:64:F5:A6:47:43:47:B0:3B:6F Certificate issuer: /CN=75f5286ee38559bdd989c764f5a6474347b03b6f Certificate serial: 019B59E40898A1D7AB0633646ADE248D660D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft Manifest number: D4 Signing time: Fri 26 Dec 2025 09:01:15 +0000 Manifest this update: Fri 26 Dec 2025 09:01:15 +0000 Manifest next update: Sat 27 Dec 2025 09:01:15 +0000 Files and hashes: 1: KcL9v8r1ilJRcQB0ccfbEYTCJtg.roa (hash: rlzaxnEOZCErQdw9cvJ2yLX/BKeb6IB9wJmrnWDfV8E=) 2: dfUobuOFWb3Zicdk9aZHQ0ewO28.crl (hash: xmx0T1uvKckxScy6CIb7HT8V/hEyWtWMjUzvb6fmxMk=) 3: oLz2eFbmpRFR5A5oj9_IzGOfqTg.roa (hash: K42AQKk/5JQbpER6nQEE4PNnPHJ5tbcZAd8Cz+zivrw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:08:98:a1:d7:ab:06:33:64:6a:de:24:8d:66:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75f5286ee38559bdd989c764f5a6474347b03b6f Validity Not Before: Dec 26 09:01:15 2025 GMT Not After : Dec 27 09:01:15 2025 GMT Subject: CN=856305a0eb2a3d9260c4d17c2dafcbb39e7860a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:29:2b:47:0a:bf:f3:f2:fb:a8:bf:98:51:3d: c2:8e:fe:d4:0b:c4:79:ec:36:2f:0f:04:61:fb:dc: f1:e8:b8:11:8c:a1:93:48:34:4a:fe:87:3b:72:fb: 15:f7:2c:40:6d:3a:31:83:d7:cf:ee:a1:8f:06:4c: cd:78:ba:d5:57:e0:ae:ac:99:1b:b2:56:d7:14:10: 7e:c9:8e:d0:5b:5c:ed:94:10:09:2e:cc:32:6a:90: b1:21:f9:3e:a1:f0:cb:56:9c:23:7d:56:3e:43:d7: 2b:00:e4:94:39:4a:3c:dd:78:26:e6:cc:ab:f3:30: 4c:17:04:ef:aa:3c:25:e9:3e:23:50:0b:72:60:8e: 9a:86:1c:17:e4:b5:ff:85:51:9f:72:1c:c1:07:f0: 9b:aa:cb:28:8d:ae:f8:0b:23:ab:29:09:c3:8c:32: f5:71:46:a0:e1:21:0e:75:c3:5b:7a:af:13:cc:3d: f6:b1:55:52:69:2b:c5:3f:84:fd:1c:ba:f7:e1:9c: b4:22:66:62:47:e8:8f:3b:5b:b1:ce:c0:7a:b9:22: 0f:49:de:dd:2c:7a:0a:8a:c5:d7:01:46:9c:47:c8: 9b:40:67:74:e1:06:0f:3b:0d:63:a2:e8:0b:52:54: bf:23:c8:be:5a:2a:4e:65:8f:42:84:60:51:35:46: f5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:63:05:A0:EB:2A:3D:92:60:C4:D1:7C:2D:AF:CB:B3:9E:78:60:A0 X509v3 Authority Key Identifier: keyid:75:F5:28:6E:E3:85:59:BD:D9:89:C7:64:F5:A6:47:43:47:B0:3B:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfUobuOFWb3Zicdk9aZHQ0ewO28.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/29bf61-fdc8-49e6-84d9-0385349ff1e8/1/dfUobuOFWb3Zicdk9aZHQ0ewO28.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:3b:19:96:bb:d2:50:c4:3c:0b:07:8b:a6:f2:23:1d:14:ea: 6e:c1:e6:81:c2:4f:b5:0a:17:97:15:9d:f3:97:24:24:0f:88: 22:7a:42:01:45:e1:83:10:c9:25:54:b6:06:a6:20:73:6e:ec: 32:20:30:64:1e:60:d1:12:ae:4a:b2:30:24:af:91:65:c7:55: e3:ac:32:7a:93:b9:e5:77:e8:59:04:ff:69:a1:70:23:02:a5: f0:04:65:f4:16:ce:9b:b2:82:0f:64:e5:dc:86:03:42:93:94: 9b:47:21:56:cc:cd:41:72:2e:31:04:d6:58:7e:10:60:cd:9c: 9b:a5:79:2b:85:9c:ca:51:a8:7b:40:af:23:41:94:d4:88:cb: f7:cb:84:8e:62:db:44:5c:53:40:81:ad:9d:3a:0f:a3:87:a4: f3:20:d7:c2:60:8a:0d:c6:ed:c2:d6:43:7a:95:f5:be:b8:20: ab:a9:00:17:50:4d:84:2a:f5:8f:72:00:cc:80:b5:78:cd:8e: f5:d4:24:ed:59:e7:cf:d5:66:c5:a5:0e:08:0c:1f:3a:62:4a: 81:9a:17:b1:ef:6a:cc:c3:01:c1:d7:23:8b:84:da:0e:1e:e7: f6:19:bd:41:ee:e9:af:27:ca:35:de:c1:f4:22:7d:f2:fa:56: 89:34:38:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5AiYoderBjNkat4kjWYNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1ZjUyODZlZTM4NTU5YmRkOTg5Yzc2NGY1YTY0NzQzNDdi MDNiNmYwHhcNMjUxMjI2MDkwMTE1WhcNMjUxMjI3MDkwMTE1WjAzMTEwLwYDVQQD Eyg4NTYzMDVhMGViMmEzZDkyNjBjNGQxN2MyZGFmY2JiMzllNzg2MGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCkrRwq/8/L7qL+YUT3Cjv7UC8R5 7DYvDwRh+9zx6LgRjKGTSDRK/oc7cvsV9yxAbToxg9fP7qGPBkzNeLrVV+CurJkb slbXFBB+yY7QW1ztlBAJLswyapCxIfk+ofDLVpwjfVY+Q9crAOSUOUo83Xgm5syr 8zBMFwTvqjwl6T4jUAtyYI6ahhwX5LX/hVGfchzBB/Cbqssoja74CyOrKQnDjDL1 cUag4SEOdcNbeq8TzD32sVVSaSvFP4T9HLr34Zy0ImZiR+iPO1uxzsB6uSIPSd7d LHoKisXXAUacR8ibQGd04QYPOw1jougLUlS/I8i+WipOZY9ChGBRNUb1+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIVjBaDrKj2SYMTRfC2vy7OeeGCgMB8GA1UdIwQY MBaAFHX1KG7jhVm92YnHZPWmR0NHsDtvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGZVb2J1T0ZXYjNaaWNkazlhWkhRMGV3TzI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8yOWJmNjEtZmRjOC00OWU2LTg0ZDkt MDM4NTM0OWZmMWU4LzEvZGZVb2J1T0ZXYjNaaWNkazlhWkhRMGV3TzI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC8yOWJmNjEtZmRjOC00OWU2LTg0ZDktMDM4NTM0OWZmMWU4 LzEvZGZVb2J1T0ZXYjNaaWNkazlhWkhRMGV3TzI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKDsZlrvS UMQ8CweLpvIjHRTqbsHmgcJPtQoXlxWd85ckJA+IInpCAUXhgxDJJVS2BqYgc27s MiAwZB5g0RKuSrIwJK+RZcdV46wyepO55XfoWQT/aaFwIwKl8ARl9BbOm7KCD2Tl 3IYDQpOUm0chVszNQXIuMQTWWH4QYM2cm6V5K4WcylGoe0CvI0GU1IjL98uEjmLb RFxTQIGtnToPo4ek8yDXwmCKDcbtwtZDepX1vrggq6kAF1BNhCr1j3IAzIC1eM2O 9dQk7Vnnz9VmxaUOCAwfOmJKgZoXse9qzMMBwdcji4TaDh7n9hm9Qe7pryfKNd7B 9CJ98vpWiTQ4Bg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:06:10 2025 by rpki-client