This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft File: dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft (raw, json) Hash identifier: zhHaNSRn8HMY2hW0NlVnTL/485RiCyBP/xT4cHsNumE= Subject key identifier: 26:BD:88:B2:CB:30:FD:88:99:2B:F6:30:BF:7D:EA:B5:86:37:7F:87 Authority key identifier: 75:6F:BA:46:63:4D:22:B9:3D:B1:BF:46:EC:5A:8D:66:5E:62:DA:C7 Certificate issuer: /CN=756fba46634d22b93db1bf46ec5a8d665e62dac7 Certificate serial: 019B0F37BF9D552F4FBB334BAA4FB6E02A95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dW-6RmNNIrk9sb9G7FqNZl5i2sc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft Manifest number: 0BDB Signing time: Thu 11 Dec 2025 21:01:10 +0000 Manifest this update: Thu 11 Dec 2025 21:01:10 +0000 Manifest next update: Fri 12 Dec 2025 21:01:10 +0000 Files and hashes: 1: Zeibnx0jQfHrKCngsBYyNBtyCY8.roa (hash: 1tTIgh7rGioAClAEx5jMHBx5r9sM7mmraGPRQnv9pR0=) 2: dW-6RmNNIrk9sb9G7FqNZl5i2sc.crl (hash: cvuW9IOFdqdkt3E7xgrsWgpHUl+J7wyFIs9TsyX5vqQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft rsync://rpki.ripe.net/repository/DEFAULT/dW-6RmNNIrk9sb9G7FqNZl5i2sc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:bf:9d:55:2f:4f:bb:33:4b:aa:4f:b6:e0:2a:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=756fba46634d22b93db1bf46ec5a8d665e62dac7 Validity Not Before: Dec 11 21:01:10 2025 GMT Not After : Dec 12 21:01:10 2025 GMT Subject: CN=26bd88b2cb30fd88992bf630bf7deab586377f87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:3c:db:7d:39:0b:45:b8:76:3f:b1:20:5a:e2: c8:dc:6a:1f:12:68:c8:7b:f0:37:9d:54:3f:ea:06: 32:3c:33:27:81:bf:2d:c0:ec:3e:9a:bd:70:3c:b5: 90:8d:7d:ec:30:cc:ef:16:0e:d6:f2:13:37:8f:48: 1a:69:a1:b1:48:45:a0:90:a3:50:6c:17:68:de:53: 8b:df:c4:76:67:7c:81:e5:69:5c:c9:21:8c:ca:ad: c3:cb:ee:13:e2:c3:77:3d:ca:cd:f2:7f:c7:9a:e0: c3:72:6c:7e:18:e2:1b:b8:33:91:ad:86:23:6d:1b: 95:b9:c7:4a:74:e7:fa:18:7d:90:79:f2:72:82:35: 5f:79:70:e2:50:77:37:7e:9a:fb:35:61:0a:01:3a: 0e:4d:15:8f:ac:47:df:88:6d:34:ac:34:71:7c:f6: 68:10:43:2d:93:a0:a3:7b:20:a3:04:2c:c1:99:c6: b7:79:43:3b:5b:ff:2f:2c:7f:e0:c8:2e:7a:32:39: 22:9a:2a:a3:fd:63:9a:09:38:a0:9f:62:5e:83:c3: a1:6e:48:8a:8c:e6:26:3e:5e:b0:21:22:43:0e:44: 44:e7:f1:85:40:94:2a:bc:ea:48:1b:76:3f:27:7b: 68:ce:0e:6b:a8:86:a0:9a:ec:cb:13:42:97:c9:e6: bf:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:BD:88:B2:CB:30:FD:88:99:2B:F6:30:BF:7D:EA:B5:86:37:7F:87 X509v3 Authority Key Identifier: keyid:75:6F:BA:46:63:4D:22:B9:3D:B1:BF:46:EC:5A:8D:66:5E:62:DA:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dW-6RmNNIrk9sb9G7FqNZl5i2sc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:93:57:ed:67:15:48:ed:32:23:d8:4b:4c:95:cc:d6:83:ef: 09:56:74:db:c5:1f:c9:2a:b2:90:1d:b7:06:0f:27:09:1c:57: b9:b0:a3:34:d4:13:14:1b:1c:9b:c9:4e:e1:07:dc:a5:3e:cf: 12:d8:93:1f:b1:23:16:b4:38:0c:c5:a0:f3:14:18:39:07:65: cf:30:ea:b7:ed:2b:bb:9b:a7:27:9d:46:b8:b8:74:39:05:01: 0a:bb:e6:de:05:2b:b6:1b:04:2b:fe:49:fe:35:ad:8b:76:53: 72:d5:4f:a4:70:68:77:26:bb:6a:5e:73:bf:0b:a6:aa:22:5d: 28:07:5e:f1:8c:69:4a:30:c9:b8:94:53:79:61:61:bb:ea:a3: 87:7d:81:c4:05:1f:17:bc:f1:84:cf:cd:67:c0:a4:af:13:40: 9c:92:d3:0a:71:41:1f:e7:8e:2c:46:b3:76:c8:ec:3b:de:86: c9:7d:ed:c4:3a:73:8f:55:da:e3:fa:be:62:61:89:fb:a7:c9: 0c:73:25:44:62:ad:e0:de:cf:01:c7:ee:a0:7b:16:5c:79:8e: b7:39:c7:b8:da:e0:85:50:97:63:7d:1e:c7:ae:ff:c2:12:6b: 6e:05:2f:19:fb:13:74:54:56:41:40:93:45:d8:d4:9b:fd:05: 47:44:0c:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN7+dVS9PuzNLqk+24CqVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1NmZiYTQ2NjM0ZDIyYjkzZGIxYmY0NmVjNWE4ZDY2NWU2 MmRhYzcwHhcNMjUxMjExMjEwMTEwWhcNMjUxMjEyMjEwMTEwWjAzMTEwLwYDVQQD EygyNmJkODhiMmNiMzBmZDg4OTkyYmY2MzBiZjdkZWFiNTg2Mzc3Zjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jzbfTkLRbh2P7EgWuLI3GofEmjI e/A3nVQ/6gYyPDMngb8twOw+mr1wPLWQjX3sMMzvFg7W8hM3j0gaaaGxSEWgkKNQ bBdo3lOL38R2Z3yB5WlcySGMyq3Dy+4T4sN3PcrN8n/HmuDDcmx+GOIbuDORrYYj bRuVucdKdOf6GH2QefJygjVfeXDiUHc3fpr7NWEKAToOTRWPrEffiG00rDRxfPZo EEMtk6CjeyCjBCzBmca3eUM7W/8vLH/gyC56Mjkimiqj/WOaCTign2Jeg8OhbkiK jOYmPl6wISJDDkRE5/GFQJQqvOpIG3Y/J3tozg5rqIagmuzLE0KXyea/SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCa9iLLLMP2ImSv2ML996rWGN3+HMB8GA1UdIwQY MBaAFHVvukZjTSK5PbG/RuxajWZeYtrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFctNlJtTk5Jcms5c2I5RzdGcU5abDVpMnNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9iNjg0MjEtOTliMS00ODVlLWIyMTct ZDNhZGM3NDQ5MzkxLzEvZFctNlJtTk5Jcms5c2I5RzdGcU5abDVpMnNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9iNjg0MjEtOTliMS00ODVlLWIyMTctZDNhZGM3NDQ5Mzkx LzEvZFctNlJtTk5Jcms5c2I5RzdGcU5abDVpMnNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQpNX7WcV SO0yI9hLTJXM1oPvCVZ028UfySqykB23Bg8nCRxXubCjNNQTFBscm8lO4QfcpT7P EtiTH7EjFrQ4DMWg8xQYOQdlzzDqt+0ru5unJ51GuLh0OQUBCrvm3gUrthsEK/5J /jWti3ZTctVPpHBodya7al5zvwumqiJdKAde8YxpSjDJuJRTeWFhu+qjh32BxAUf F7zxhM/NZ8CkrxNAnJLTCnFBH+eOLEazdsjsO96GyX3txDpzj1Xa4/q+YmGJ+6fJ DHMlRGKt4N7PAcfuoHsWXHmOtznHuNrghVCXY30ex67/whJrbgUvGfsTdFRWQUCT RdjUm/0FR0QMMg== -----END CERTIFICATE-----Generated at Fri Dec 12 04:03:33 2025 by rpki-client