This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft File: dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft (raw, json) Hash identifier: g+0f/BlsRxiPSQJNV9MoKMRYpj1w2rTie9lMzJIYGu8= Subject key identifier: 08:02:31:E1:EF:8F:66:56:64:4D:40:BD:F8:F0:08:75:3A:C1:61:80 Authority key identifier: 74:82:B0:17:71:7C:A8:3A:05:E4:CB:C3:F2:66:F1:2A:53:59:D5:E5 Certificate issuer: /CN=7482b017717ca83a05e4cbc3f266f12a5359d5e5 Certificate serial: 019B4A713F4736A123DBF409CC5F8C8B0343 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft Manifest number: 1721 Signing time: Tue 23 Dec 2025 09:01:34 +0000 Manifest this update: Tue 23 Dec 2025 09:01:34 +0000 Manifest next update: Wed 24 Dec 2025 09:01:34 +0000 Files and hashes: 1: 5GQUPOVGommpVDGycPNjbxgsAD0.roa (hash: FIE52nDWdmLHUw5eNYHFQW5KOb1fH0QVln67hfDRIhI=) 2: As_2g2yroeYldeSEBOBcptHFZjw.roa (hash: 2A+ZAisZSqDWuxJUH2YsftgFU0YaUFKEL3In2EBPDcU=) 3: dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl (hash: uULwpZGEQOJhb7AgQ1S9jFQG2x8ZJYPrfe6s54oPAnU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:71:3f:47:36:a1:23:db:f4:09:cc:5f:8c:8b:03:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7482b017717ca83a05e4cbc3f266f12a5359d5e5 Validity Not Before: Dec 23 09:01:34 2025 GMT Not After : Dec 24 09:01:34 2025 GMT Subject: CN=080231e1ef8f6656644d40bdf8f008753ac16180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:9f:0b:62:a6:6c:a0:9a:d9:64:2f:98:40:4d: 19:83:a6:6c:99:a2:ac:c2:3f:18:7d:92:6e:42:1d: eb:52:16:be:e3:4d:d4:e9:9f:7a:25:69:f9:75:9f: 23:66:fc:5d:13:79:fb:48:a0:dd:d3:86:60:f0:6d: 86:42:d9:44:3e:00:18:e7:5a:50:62:55:df:e3:19: 24:d5:30:3a:b9:06:a3:66:23:a8:0f:da:d0:ca:41: 68:4b:71:72:e0:22:0a:36:5c:ba:34:4b:b2:3e:6e: 8c:fe:5f:e6:02:56:38:5a:45:ff:29:42:cf:62:97: 98:43:08:03:d6:da:7f:26:63:66:e3:85:b6:83:b1: 29:a1:37:e5:23:27:0c:0b:9b:95:58:41:1d:a4:09: 9f:e2:4d:fd:dc:d6:04:c8:70:6a:4f:f4:f7:2b:09: 42:17:fc:35:43:66:8b:12:c8:55:34:4a:15:77:8c: 89:a4:2b:5d:60:ac:c0:c4:d3:f2:17:27:f0:27:f1: 35:61:d2:c1:1d:aa:48:d5:28:55:7f:a2:a5:22:f7: 9b:7a:29:a6:03:4c:62:a1:d3:49:ea:69:e0:db:0d: b8:b9:51:d9:6f:88:da:48:e2:e6:0c:29:08:dc:82: 58:51:c4:ee:91:10:d3:ad:0a:b3:9a:ca:b7:54:95: 49:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:02:31:E1:EF:8F:66:56:64:4D:40:BD:F8:F0:08:75:3A:C1:61:80 X509v3 Authority Key Identifier: keyid:74:82:B0:17:71:7C:A8:3A:05:E4:CB:C3:F2:66:F1:2A:53:59:D5:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:50:be:59:50:38:ae:69:cd:40:f7:ce:6f:a1:89:2e:15:ef: 58:b2:aa:cf:15:70:ef:a6:6e:20:69:e6:2a:2e:d7:57:ce:7c: de:f7:60:db:18:5f:d3:4a:f8:58:90:a8:3c:de:a5:af:cc:5e: 2c:a5:88:90:6d:91:d1:e7:53:5b:53:f5:8a:52:55:98:f6:5c: ee:91:dc:10:dc:4f:e7:82:12:8d:e6:58:53:8a:40:7c:26:c3: 6d:30:3b:bb:06:3e:86:ab:a9:0e:c3:d7:3f:7a:a1:96:d0:97: c7:36:b3:49:26:b6:0a:29:36:03:dd:89:eb:df:49:30:df:6c: f0:81:6d:3d:b4:de:19:42:a5:69:9d:ae:f7:b4:39:7a:87:21: b3:9c:7d:4e:95:0a:97:80:13:d3:47:f4:f3:a6:f5:ab:a8:da: 68:78:94:0b:7c:dc:6d:bd:48:20:b7:d8:ef:c5:28:2a:ed:a6: 15:0d:88:d2:69:e2:f6:0d:30:2d:f8:c9:03:19:9f:3d:82:f8: d6:e3:6a:b7:67:dd:65:ee:34:e8:53:2d:74:31:ca:3b:53:fe: ca:80:0d:23:76:82:2e:9a:70:78:dd:42:da:76:41:79:2d:02: 3f:68:ee:8d:a7:68:7a:89:b5:b0:f4:40:a4:4c:3a:5c:ee:69: 36:10:40:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKcT9HNqEj2/QJzF+MiwNDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ODJiMDE3NzE3Y2E4M2EwNWU0Y2JjM2YyNjZmMTJhNTM1 OWQ1ZTUwHhcNMjUxMjIzMDkwMTM0WhcNMjUxMjI0MDkwMTM0WjAzMTEwLwYDVQQD EygwODAyMzFlMWVmOGY2NjU2NjQ0ZDQwYmRmOGYwMDg3NTNhYzE2MTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2J8LYqZsoJrZZC+YQE0Zg6ZsmaKs wj8YfZJuQh3rUha+403U6Z96JWn5dZ8jZvxdE3n7SKDd04Zg8G2GQtlEPgAY51pQ YlXf4xkk1TA6uQajZiOoD9rQykFoS3Fy4CIKNly6NEuyPm6M/l/mAlY4WkX/KULP YpeYQwgD1tp/JmNm44W2g7EpoTflIycMC5uVWEEdpAmf4k393NYEyHBqT/T3KwlC F/w1Q2aLEshVNEoVd4yJpCtdYKzAxNPyFyfwJ/E1YdLBHapI1ShVf6KlIvebeimm A0xiodNJ6mng2w24uVHZb4jaSOLmDCkI3IJYUcTukRDTrQqzmsq3VJVJywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAgCMeHvj2ZWZE1AvfjwCHU6wWGAMB8GA1UdIwQY MBaAFHSCsBdxfKg6BeTLw/Jm8SpTWdXlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZElLd0YzRjhxRG9GNU12RDhtYnhLbE5aMWVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9kNDgzNWItNzMyMy00NjcxLWFkNTkt N2ZiMDU5MjBlMjI4LzEvZElLd0YzRjhxRG9GNU12RDhtYnhLbE5aMWVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni9kNDgzNWItNzMyMy00NjcxLWFkNTktN2ZiMDU5MjBlMjI4 LzEvZElLd0YzRjhxRG9GNU12RDhtYnhLbE5aMWVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbFC+WVA4 rmnNQPfOb6GJLhXvWLKqzxVw76ZuIGnmKi7XV8583vdg2xhf00r4WJCoPN6lr8xe LKWIkG2R0edTW1P1ilJVmPZc7pHcENxP54ISjeZYU4pAfCbDbTA7uwY+hqupDsPX P3qhltCXxzazSSa2Cik2A92J699JMN9s8IFtPbTeGUKlaZ2u97Q5eochs5x9TpUK l4AT00f086b1q6jaaHiUC3zcbb1IILfY78UoKu2mFQ2I0mni9g0wLfjJAxmfPYL4 1uNqt2fdZe406FMtdDHKO1P+yoANI3aCLppweN1C2nZBeS0CP2jujadoeom1sPRA pEw6XO5pNhBANA== -----END CERTIFICATE-----Generated at Tue Dec 23 10:53:59 2025 by rpki-client