This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.mft File: dLTNPt9SHfjsChURESctP7kbmcM.mft (raw, json) Hash identifier: iRKYsYTuyR/gdaNfqYVadgTWFJuNbRV57bee9HGgvjw= Subject key identifier: 31:6D:59:BD:2F:52:95:73:B0:C8:4A:4C:EB:42:BC:B2:CE:57:5E:0C Authority key identifier: 74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3 Certificate issuer: /CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3 Certificate serial: 019B262D3E4A208E4C1B90C190F90074F6BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.mft Manifest number: 173F Signing time: Tue 16 Dec 2025 08:00:57 +0000 Manifest this update: Tue 16 Dec 2025 08:00:57 +0000 Manifest next update: Wed 17 Dec 2025 08:00:57 +0000 Files and hashes: 1: LSuon8oWpWCEq3s6Y32PD-sfbyI.roa (hash: tWReXrO3x7vvyGIzFOX4xPuvbMatyQpy9wyqNoMzptY=) 2: dLTNPt9SHfjsChURESctP7kbmcM.crl (hash: HOxkW/yMcx7eOTIwG22moeMs2Fg495Dn0hW7PGLkYNE=) 3: hyarknq8b7RuIBM-YBqseStGpbs.roa (hash: Q8UycgtcBXykUE11/kKCtnDO8tk0NFq+ACIXZD0W+5A=) 4: qFCMzr1aTyDncgEMfMKtHZlAIvA.roa (hash: bllSYNros8BQdNxuVkEMmquNQHhaai0eIqAVCUsUK7M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.mft rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:2d:3e:4a:20:8e:4c:1b:90:c1:90:f9:00:74:f6:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3 Validity Not Before: Dec 16 08:00:57 2025 GMT Not After : Dec 17 08:00:57 2025 GMT Subject: CN=316d59bd2f529573b0c84a4ceb42bcb2ce575e0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:39:33:a5:0b:17:21:b1:d8:bb:a8:60:f6:33: 8c:9b:72:63:cb:32:7a:9e:e4:d7:9d:0b:ab:bf:a6: 17:6b:44:46:90:15:6a:f9:d6:ed:6d:64:97:f1:73: 66:a8:f7:9a:1d:64:29:19:f4:9e:20:27:3f:80:dd: 73:06:df:e0:77:09:30:ac:a5:81:2c:67:a6:b8:93: 57:be:bd:a9:6f:25:60:3a:96:89:55:51:17:90:93: 00:c6:32:a9:9a:6f:05:4f:34:d8:4a:a8:32:9d:c4: ff:65:dc:a7:3d:ee:88:36:79:6e:03:f1:6e:ae:78: f8:37:34:33:8f:32:fd:34:61:cc:ca:34:78:3d:e5: c9:2e:40:09:93:08:09:12:70:4d:61:a0:fd:d7:5c: 2d:9c:e2:1a:81:08:d1:da:77:3a:9c:27:bd:39:d0: 20:a5:f0:4f:de:80:8b:74:ba:8f:11:de:14:7b:ab: aa:03:4e:b6:92:06:87:96:d4:98:a0:98:d6:f0:5b: 9a:0e:2b:92:2e:78:72:97:c9:a3:6c:63:a9:f6:81: a7:8f:a3:97:e8:9e:44:d3:3a:18:c0:73:6e:24:73: ed:22:41:80:7f:e5:7c:e3:07:e5:68:46:c7:76:47: 44:da:31:66:96:19:43:8a:6d:d4:eb:c0:4b:e5:df: 90:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:6D:59:BD:2F:52:95:73:B0:C8:4A:4C:EB:42:BC:B2:CE:57:5E:0C X509v3 Authority Key Identifier: keyid:74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:a2:34:43:f7:84:71:84:b3:42:28:2c:14:6d:52:2a:0f:4b: ae:f5:d5:0d:65:78:0a:9a:dd:2d:87:38:3d:05:c3:ab:43:a1: 9b:67:5f:fe:6a:14:e9:b9:3e:56:2d:87:a3:d0:38:0d:a6:0b: 30:25:dc:87:f8:05:c3:cc:95:de:a7:64:5d:e5:60:53:03:db: 77:2d:3a:20:27:d0:6c:33:1e:e8:7e:a0:c8:a0:83:92:bc:db: a9:33:ee:53:e4:92:d4:b3:03:21:86:b8:d4:ff:ba:da:30:0e: 39:a2:09:9c:66:43:2e:e5:06:01:95:03:c5:65:3e:41:fe:92: e5:34:5b:d6:e9:9b:c8:05:f0:aa:84:86:a5:71:a5:a8:21:a2: 77:c1:3c:87:f4:ed:57:46:18:36:28:3d:6e:66:41:0d:6a:67: cd:14:54:19:04:f7:5c:16:fb:94:f4:71:49:cf:d8:62:f1:f7: 09:c9:9a:79:0a:38:62:f0:de:0d:da:6d:2e:07:0a:8b:c6:3d: 11:f2:0e:be:d7:64:60:e2:2d:9a:17:7a:49:5a:21:8a:89:99: 5a:ec:bf:22:d7:97:35:0a:ee:4d:cf:8c:3d:b3:d8:ec:a8:e0: 5e:5c:1b:da:17:7b:a6:af:f7:32:d9:71:7c:c4:61:1f:0a:d0: 06:00:bc:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmLT5KII5MG5DBkPkAdPa+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0YjRjZDNlZGY1MjFkZjhlYzBhMTUxMTExMjcyZDNmYjkx Yjk5YzMwHhcNMjUxMjE2MDgwMDU3WhcNMjUxMjE3MDgwMDU3WjAzMTEwLwYDVQQD EygzMTZkNTliZDJmNTI5NTczYjBjODRhNGNlYjQyYmNiMmNlNTc1ZTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTkzpQsXIbHYu6hg9jOMm3JjyzJ6 nuTXnQurv6YXa0RGkBVq+dbtbWSX8XNmqPeaHWQpGfSeICc/gN1zBt/gdwkwrKWB LGemuJNXvr2pbyVgOpaJVVEXkJMAxjKpmm8FTzTYSqgyncT/ZdynPe6INnluA/Fu rnj4NzQzjzL9NGHMyjR4PeXJLkAJkwgJEnBNYaD911wtnOIagQjR2nc6nCe9OdAg pfBP3oCLdLqPEd4Ue6uqA062kgaHltSYoJjW8FuaDiuSLnhyl8mjbGOp9oGnj6OX 6J5E0zoYwHNuJHPtIkGAf+V84wflaEbHdkdE2jFmlhlDim3U68BL5d+QuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDFtWb0vUpVzsMhKTOtCvLLOV14MMB8GA1UdIwQY MBaAFHS0zT7fUh347AoVEREnLT+5G5nDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZExUTlB0OVNIZmpzQ2hVUkVTY3RQN2tibWNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS85ZTQ3ZTktMzI4MS00ZDE3LWE2YmMt ZTJhN2ZiODQ4MzE4LzEvZExUTlB0OVNIZmpzQ2hVUkVTY3RQN2tibWNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS85ZTQ3ZTktMzI4MS00ZDE3LWE2YmMtZTJhN2ZiODQ4MzE4 LzEvZExUTlB0OVNIZmpzQ2hVUkVTY3RQN2tibWNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVKI0Q/eE cYSzQigsFG1SKg9LrvXVDWV4CprdLYc4PQXDq0Ohm2df/moU6bk+Vi2Ho9A4DaYL MCXch/gFw8yV3qdkXeVgUwPbdy06ICfQbDMe6H6gyKCDkrzbqTPuU+SS1LMDIYa4 1P+62jAOOaIJnGZDLuUGAZUDxWU+Qf6S5TRb1umbyAXwqoSGpXGlqCGid8E8h/Tt V0YYNig9bmZBDWpnzRRUGQT3XBb7lPRxSc/YYvH3CcmaeQo4YvDeDdptLgcKi8Y9 EfIOvtdkYOItmhd6SVohiomZWuy/IteXNQruTc+MPbPY7KjgXlwb2hd7pq/3Mtlx fMRhHwrQBgC8Aw== -----END CERTIFICATE-----Generated at Tue Dec 16 11:00:28 2025 by rpki-client