This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/dpnBiQJ-JezFP5i1LqZa5yXSpzA.mft File: dpnBiQJ-JezFP5i1LqZa5yXSpzA.mft (raw, json) Hash identifier: 9bYvWTfZ7r2KMfJ3is6BX9K208NAQmxr18jlnsVnG/s= Subject key identifier: BB:25:C8:35:4E:60:8B:51:1D:3C:F5:38:F1:F1:B6:61:D8:4C:79:98 Authority key identifier: 76:99:C1:89:02:7E:25:EC:C5:3F:98:B5:2E:A6:5A:E7:25:D2:A7:30 Certificate issuer: /CN=7699c189027e25ecc53f98b52ea65ae725d2a730 Certificate serial: 019B356989611BB33BA525C8C68BF2931AF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dpnBiQJ-JezFP5i1LqZa5yXSpzA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/dpnBiQJ-JezFP5i1LqZa5yXSpzA.mft Manifest number: 1354 Signing time: Fri 19 Dec 2025 07:01:07 +0000 Manifest this update: Fri 19 Dec 2025 07:01:07 +0000 Manifest next update: Sat 20 Dec 2025 07:01:07 +0000 Files and hashes: 1: AySpplYr1k8EYDvYyZDjEzqH9K4.roa (hash: s1mdUNkG6Ay0RgrGD/89z3j82IecWcvVNMM/xUHeklQ=) 2: K2WHuCG9UOH7aVx9C_lS8WDCTm4.roa (hash: 1HhQUXTsNrF+XYLIkzcFw9sh41szsi9HXt4NDudQ02s=) 3: dpnBiQJ-JezFP5i1LqZa5yXSpzA.crl (hash: I1W+iPK+wcOMPFHXRP7xDbEefZm7oAWLTgQy+zV5G5I=) 4: ihgaKZRhXXqYYZxiR5z5DfKMcAo.roa (hash: F3cv1Y7tYXZNMkOk4CynP5ia6K663k4g2QoOaTbO8mA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/dpnBiQJ-JezFP5i1LqZa5yXSpzA.crl rsync://rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/dpnBiQJ-JezFP5i1LqZa5yXSpzA.mft rsync://rpki.ripe.net/repository/DEFAULT/dpnBiQJ-JezFP5i1LqZa5yXSpzA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:89:61:1b:b3:3b:a5:25:c8:c6:8b:f2:93:1a:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7699c189027e25ecc53f98b52ea65ae725d2a730 Validity Not Before: Dec 19 07:01:07 2025 GMT Not After : Dec 20 07:01:07 2025 GMT Subject: CN=bb25c8354e608b511d3cf538f1f1b661d84c7998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ca:51:6f:30:f8:0a:47:7d:39:b5:6a:09:60: d1:ad:37:15:12:ad:e4:6c:0a:1a:5e:ef:5a:e6:a5: 37:89:6a:d3:77:5f:6d:fd:87:68:8e:58:ab:76:d8: 82:d9:32:f9:30:31:6d:2e:ec:c6:68:35:fb:c5:48: da:07:f4:de:78:a2:fe:c1:58:05:35:85:1a:5c:80: 87:fb:30:e9:a9:c1:a4:f4:28:56:cb:58:26:e4:c4: b2:60:49:27:56:3d:e2:f3:7b:b4:d8:45:32:2b:6e: a0:c1:9f:16:d5:bc:56:66:cc:9f:0b:b7:81:af:b4: 37:76:93:42:f6:96:bc:26:85:ae:46:f7:ed:98:2d: e3:78:6b:56:be:8d:ff:4e:41:04:62:fd:85:a0:cc: 48:f2:40:9d:a1:6d:1a:ce:6d:35:6d:67:02:60:dc: 54:3d:93:e0:e0:f3:3d:8f:8b:bb:8f:7a:02:aa:7f: 87:d6:d3:ee:6f:3c:93:4c:25:99:63:5d:ae:2b:c1: c1:18:c1:26:9e:52:47:cd:41:24:18:8f:e6:75:88: 11:06:43:bd:9d:64:3a:56:e4:55:81:87:5e:8d:48: 77:fd:fc:e8:4d:73:56:cb:ab:3f:74:aa:14:b9:7c: af:18:3b:65:d6:a9:d9:d8:4b:af:11:89:cb:94:27: 18:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:25:C8:35:4E:60:8B:51:1D:3C:F5:38:F1:F1:B6:61:D8:4C:79:98 X509v3 Authority Key Identifier: keyid:76:99:C1:89:02:7E:25:EC:C5:3F:98:B5:2E:A6:5A:E7:25:D2:A7:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpnBiQJ-JezFP5i1LqZa5yXSpzA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/dpnBiQJ-JezFP5i1LqZa5yXSpzA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/dpnBiQJ-JezFP5i1LqZa5yXSpzA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:98:7c:fa:6a:f3:f8:73:7f:a9:7c:77:e9:b3:8c:29:f4:0e: 82:1c:2c:29:f7:c8:3c:e4:4f:9c:02:a3:d9:c4:f3:63:00:c8: 84:60:55:f5:35:b7:e2:3a:b3:2e:2b:e4:2b:9f:a0:36:fe:b5: 28:11:2d:91:ba:f0:7a:53:89:b2:7d:ff:40:e8:d5:38:8f:0c: 45:7a:29:67:a8:69:1c:dc:ac:ee:77:4e:d0:9e:04:fe:94:7a: 71:f5:96:e5:f2:e8:bf:b2:91:d5:34:3b:fc:e3:c8:2e:f7:0c: 23:ce:3a:e5:07:53:08:83:98:b2:5b:53:a9:f7:cc:b4:25:ec: b9:21:19:3c:5d:63:c6:b5:f7:f2:22:d5:33:39:0b:72:08:24: 4c:9c:e3:3d:58:ac:47:29:b6:26:eb:32:f5:05:8a:ba:19:9a: 1a:ca:e8:68:c1:5b:bf:40:60:a2:83:6e:3f:25:72:8b:9e:c1: c9:fc:63:ce:ba:d2:b3:f6:9a:89:2f:9b:d3:55:81:ff:e6:79: 56:c5:36:1d:8c:6f:24:bc:5b:96:d6:01:53:7e:34:7a:72:36: 96:e7:34:ef:0a:ac:48:2b:19:33:79:6e:d2:1f:c7:3c:da:13: 64:08:4a:1a:24:39:f8:3f:e8:de:e4:8c:78:01:5a:82:50:f4: 2d:52:34:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1aYlhG7M7pSXIxovykxr0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2OTljMTg5MDI3ZTI1ZWNjNTNmOThiNTJlYTY1YWU3MjVk MmE3MzAwHhcNMjUxMjE5MDcwMTA3WhcNMjUxMjIwMDcwMTA3WjAzMTEwLwYDVQQD EyhiYjI1YzgzNTRlNjA4YjUxMWQzY2Y1MzhmMWYxYjY2MWQ4NGM3OTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5MpRbzD4Ckd9ObVqCWDRrTcVEq3k bAoaXu9a5qU3iWrTd19t/YdojlirdtiC2TL5MDFtLuzGaDX7xUjaB/TeeKL+wVgF NYUaXICH+zDpqcGk9ChWy1gm5MSyYEknVj3i83u02EUyK26gwZ8W1bxWZsyfC7eB r7Q3dpNC9pa8JoWuRvftmC3jeGtWvo3/TkEEYv2FoMxI8kCdoW0azm01bWcCYNxU PZPg4PM9j4u7j3oCqn+H1tPubzyTTCWZY12uK8HBGMEmnlJHzUEkGI/mdYgRBkO9 nWQ6VuRVgYdejUh3/fzoTXNWy6s/dKoUuXyvGDtl1qnZ2EuvEYnLlCcYtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLslyDVOYItRHTz1OPHxtmHYTHmYMB8GA1UdIwQY MBaAFHaZwYkCfiXsxT+YtS6mWucl0qcwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHBuQmlRSi1KZXpGUDVpMUxxWmE1eVhTcHpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS83MTc1NTUtMzU0Zi00YjM3LThhNmEt MDk0MDQzNjY5MWJkLzEvZHBuQmlRSi1KZXpGUDVpMUxxWmE1eVhTcHpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS83MTc1NTUtMzU0Zi00YjM3LThhNmEtMDk0MDQzNjY5MWJk LzEvZHBuQmlRSi1KZXpGUDVpMUxxWmE1eVhTcHpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcph8+mrz +HN/qXx36bOMKfQOghwsKffIPORPnAKj2cTzYwDIhGBV9TW34jqzLivkK5+gNv61 KBEtkbrwelOJsn3/QOjVOI8MRXopZ6hpHNys7ndO0J4E/pR6cfWW5fLov7KR1TQ7 /OPILvcMI8465QdTCIOYsltTqffMtCXsuSEZPF1jxrX38iLVMzkLcggkTJzjPVis Rym2Jusy9QWKuhmaGsroaMFbv0BgooNuPyVyi57ByfxjzrrSs/aaiS+b01WB/+Z5 VsU2HYxvJLxbltYBU340enI2luc07wqsSCsZM3lu0h/HPNoTZAhKGiQ5+D/o3uSM eAFaglD0LVI0sw== -----END CERTIFICATE-----Generated at Fri Dec 19 12:24:15 2025 by rpki-client