This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft File: dFkBtALUgvPW3Sko6oztLuts5BI.mft (raw, json) Hash identifier: mvJ8Fmfx9znv7QNZGN6SptHzV+g7ky/SOuY43LlH2QI= Subject key identifier: 6C:02:67:C5:DB:51:1E:08:1A:EB:7C:91:91:BE:FE:A1:04:67:41:2F Authority key identifier: 74:59:01:B4:02:D4:82:F3:D6:DD:29:28:EA:8C:ED:2E:EB:6C:E4:12 Certificate issuer: /CN=745901b402d482f3d6dd2928ea8ced2eeb6ce412 Certificate serial: 019B1E738937988A891F44DE6E02F5AFC013 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft Manifest number: 1777 Signing time: Sun 14 Dec 2025 20:00:46 +0000 Manifest this update: Sun 14 Dec 2025 20:00:46 +0000 Manifest next update: Mon 15 Dec 2025 20:00:46 +0000 Files and hashes: 1: cx1g5onsIc-hAAu8dnSh1N5rp3U.roa (hash: CrKS5W6ytqqKToe/UhGDJrUzFXfuo+vTp+g8QhgmrYQ=) 2: dFkBtALUgvPW3Sko6oztLuts5BI.crl (hash: LQFQn5Fo3QPswgZPqfxYZJK/bqJjru5pFBjg3YOrcbg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:73:89:37:98:8a:89:1f:44:de:6e:02:f5:af:c0:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=745901b402d482f3d6dd2928ea8ced2eeb6ce412 Validity Not Before: Dec 14 20:00:46 2025 GMT Not After : Dec 15 20:00:46 2025 GMT Subject: CN=6c0267c5db511e081aeb7c9191befea10467412f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:37:86:6f:5b:56:0a:52:d4:cc:95:87:b5:d9: 8a:46:ae:12:6f:a9:a7:d7:20:95:08:e8:30:f7:1d: 3c:4f:76:d4:a9:4c:88:60:da:1d:07:f2:75:c3:3b: 5a:12:84:a7:70:a8:c9:f2:7e:c2:ca:51:b2:d5:5d: 6c:48:b9:eb:12:72:87:06:a8:d3:74:82:a4:b8:12: 18:76:a7:17:bd:51:fd:81:47:1b:04:e4:bf:4d:f6: 66:bf:97:4b:f2:3a:55:e6:05:3a:1b:e5:0f:24:a3: 2a:32:3f:9d:d1:c2:09:79:8d:64:c4:29:1e:59:3c: 7f:0f:5a:fe:69:b6:fb:bc:9a:19:16:1c:eb:e9:eb: 16:01:82:e1:40:d3:f6:16:3c:50:23:a0:c1:51:40: 06:c0:d0:5d:0d:60:e2:56:d4:a0:a4:a5:6a:f1:20: 02:10:0c:3e:eb:ce:cf:21:cd:a3:83:7b:27:6d:93: b4:64:7e:99:17:bb:13:ab:86:84:41:9c:d6:69:84: 7e:0f:26:c2:19:d5:7f:e7:45:e9:c8:85:e7:ab:7f: 55:f2:f1:1d:e8:b3:dd:41:c8:3e:0b:e8:50:24:cf: 27:3f:3e:54:be:be:32:ac:03:56:c8:8c:27:ba:26: 90:85:cd:26:4f:ef:4c:39:32:72:5a:1d:d0:ac:42: b5:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:02:67:C5:DB:51:1E:08:1A:EB:7C:91:91:BE:FE:A1:04:67:41:2F X509v3 Authority Key Identifier: keyid:74:59:01:B4:02:D4:82:F3:D6:DD:29:28:EA:8C:ED:2E:EB:6C:E4:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:e1:49:24:7b:b7:b7:59:89:e4:81:71:a7:84:10:2a:41:e4: e3:3a:37:6f:4b:f8:21:76:50:14:fa:07:37:34:b4:68:5e:8c: 51:ff:ee:d0:a5:7d:25:e1:9f:fd:f7:36:6a:61:37:1d:6d:70: 1a:ec:9e:f4:21:74:7d:bc:1d:20:c8:09:3c:42:e0:37:97:42: 55:08:38:2e:6c:60:76:26:2a:9e:6d:81:84:64:06:ab:ea:0b: e3:3a:53:00:e3:a0:26:d8:ff:1b:4e:bd:4b:a2:99:18:5b:17: 7f:65:b6:a3:18:9f:d1:35:75:f7:b0:c6:3e:19:41:77:f8:06: 26:45:ff:04:4d:fb:27:a7:a0:7f:df:57:aa:60:59:4b:a3:dd: f6:8d:2d:6b:4c:45:0d:ca:47:8b:75:66:77:c2:6f:bc:fd:cc: 68:57:34:36:7f:43:a1:dc:23:e4:2c:bf:02:ff:66:79:12:ec: 93:33:0b:3e:1d:43:24:d8:91:0e:63:8a:95:e9:58:e8:4d:61: 19:6d:fa:54:69:ee:9c:6a:66:6b:81:37:a7:82:30:89:b2:e1: ac:42:b9:81:92:06:16:c7:ce:63:22:a1:1d:d9:21:b7:01:67: 17:8b:d6:68:80:34:ed:b1:69:e0:1a:13:da:5d:48:2a:41:b1: b2:78:9b:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsec4k3mIqJH0TebgL1r8ATMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NTkwMWI0MDJkNDgyZjNkNmRkMjkyOGVhOGNlZDJlZWI2 Y2U0MTIwHhcNMjUxMjE0MjAwMDQ2WhcNMjUxMjE1MjAwMDQ2WjAzMTEwLwYDVQQD Eyg2YzAyNjdjNWRiNTExZTA4MWFlYjdjOTE5MWJlZmVhMTA0Njc0MTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjeGb1tWClLUzJWHtdmKRq4Sb6mn 1yCVCOgw9x08T3bUqUyIYNodB/J1wztaEoSncKjJ8n7CylGy1V1sSLnrEnKHBqjT dIKkuBIYdqcXvVH9gUcbBOS/TfZmv5dL8jpV5gU6G+UPJKMqMj+d0cIJeY1kxCke WTx/D1r+abb7vJoZFhzr6esWAYLhQNP2FjxQI6DBUUAGwNBdDWDiVtSgpKVq8SAC EAw+687PIc2jg3snbZO0ZH6ZF7sTq4aEQZzWaYR+DybCGdV/50XpyIXnq39V8vEd 6LPdQcg+C+hQJM8nPz5Uvr4yrANWyIwnuiaQhc0mT+9MOTJyWh3QrEK1UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGwCZ8XbUR4IGut8kZG+/qEEZ0EvMB8GA1UdIwQY MBaAFHRZAbQC1ILz1t0pKOqM7S7rbOQSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEZrQnRBTFVndlBXM1NrbzZvenRMdXRzNUJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84ZmQ2ZGYtMzAxMi00ZTQ2LWJiZDgt ZDdjMzZlMTVjZjBlLzEvZEZrQnRBTFVndlBXM1NrbzZvenRMdXRzNUJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi84ZmQ2ZGYtMzAxMi00ZTQ2LWJiZDgtZDdjMzZlMTVjZjBl LzEvZEZrQnRBTFVndlBXM1NrbzZvenRMdXRzNUJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZOFJJHu3 t1mJ5IFxp4QQKkHk4zo3b0v4IXZQFPoHNzS0aF6MUf/u0KV9JeGf/fc2amE3HW1w Guye9CF0fbwdIMgJPELgN5dCVQg4LmxgdiYqnm2BhGQGq+oL4zpTAOOgJtj/G069 S6KZGFsXf2W2oxif0TV197DGPhlBd/gGJkX/BE37J6egf99XqmBZS6Pd9o0ta0xF DcpHi3Vmd8JvvP3MaFc0Nn9Dodwj5Cy/Av9meRLskzMLPh1DJNiRDmOKlelY6E1h GW36VGnunGpma4E3p4IwibLhrEK5gZIGFsfOYyKhHdkhtwFnF4vWaIA07bFp4BoT 2l1IKkGxsnibaQ== -----END CERTIFICATE-----Generated at Mon Dec 15 02:14:52 2025 by rpki-client