This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft File: d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft (raw, json) Hash identifier: lPG28Wa9FBChA3dqnzToEsK4hGt4y3MuninRFQAXucI= Subject key identifier: 3F:96:C8:E2:CC:4D:1A:F2:13:4E:DC:E0:44:D4:3A:16:34:80:61:4A Authority key identifier: 77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC Certificate issuer: /CN=776405e0283743cf52180d5b13812dfba3ded7fc Certificate serial: 019B12387159782889D258815E1986DA9717 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft Manifest number: 1774 Signing time: Fri 12 Dec 2025 11:00:47 +0000 Manifest this update: Fri 12 Dec 2025 11:00:47 +0000 Manifest next update: Sat 13 Dec 2025 11:00:47 +0000 Files and hashes: 1: 8sj8akoHRTPz11r3jLvMNT_NbaE.roa (hash: P2s2WOOKeXdgHhsxpLmfEClu5cRmFqEQjIJDZyeuzkg=) 2: WGokscrqIFlveSQ3XENDC_qxhbE.roa (hash: +LF+EeNcjsZJ5uw2CKGcqJlYFeUGcZcbeYs75HR4O74=) 3: d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl (hash: naUzdMqDUnddzStVz4vFuOPR0ma0f/uuewnFeSPKN6U=) 4: dnAa52jzMLokgprr8j83t7M0O7A.roa (hash: RXb076NQLFmuO+ZHzSd4Sn5TggUypoGBas2+Hq6jEsg=) 5: wIY_dvatExTHxCY_kuzX-QET3Ok.roa (hash: kjV0Ojugy4LwLs+YAfKt1FqrpFMJ2uDqQ/zPE3W7Ris=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:38:71:59:78:28:89:d2:58:81:5e:19:86:da:97:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=776405e0283743cf52180d5b13812dfba3ded7fc Validity Not Before: Dec 12 11:00:47 2025 GMT Not After : Dec 13 11:00:47 2025 GMT Subject: CN=3f96c8e2cc4d1af2134edce044d43a163480614a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d7:22:08:1d:ed:21:e8:9e:d5:ec:6d:3e:1c: 42:c1:27:8f:85:ab:c5:8e:b4:d2:a0:88:e1:ff:5d: 54:2c:71:6b:72:f6:fc:80:b4:50:b2:4e:7d:17:17: 58:87:bc:f5:be:01:85:5a:44:a2:8a:0e:4b:6b:5c: 98:71:ad:ee:d2:c3:f2:77:9f:c5:0f:73:83:c6:79: 43:05:be:23:86:ec:be:92:fe:15:37:72:14:d2:86: b4:36:b5:64:36:02:ad:8c:35:9c:58:d5:1b:18:a7: 57:81:5f:a8:92:51:37:30:21:6a:26:5f:20:db:7f: d8:4e:01:2d:9f:e1:58:d2:03:db:0b:59:73:47:d5: 66:63:b2:44:ec:3b:1e:22:38:94:91:99:f5:8d:4c: 86:8d:fb:de:5f:4c:ac:15:d3:43:d5:4c:6c:eb:7a: 14:b1:67:aa:35:8b:de:56:7d:df:f7:c1:6a:b6:74: c2:a0:f5:6e:79:54:3f:0a:e7:f2:31:69:fd:b5:f4: 65:14:20:3c:a3:5a:f8:20:83:e9:4f:b9:9f:24:c3: 5d:0f:30:76:14:fc:dc:ba:ec:0e:8c:f7:12:4b:df: fe:5a:57:66:32:41:6a:74:fa:08:aa:d6:46:d6:b4: 19:f3:28:77:da:92:aa:08:83:a3:35:1d:be:12:86: 0a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:96:C8:E2:CC:4D:1A:F2:13:4E:DC:E0:44:D4:3A:16:34:80:61:4A X509v3 Authority Key Identifier: keyid:77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:45:61:89:df:91:22:b2:2f:87:22:91:11:37:8a:8d:d2:b5: fe:4e:e9:9b:1b:64:75:79:dc:9f:d9:02:89:52:bd:47:f8:c9: 27:a2:c9:8a:0d:d3:d6:95:70:38:c6:a7:d5:57:3d:dd:2a:fc: 07:38:2f:bb:36:91:a7:44:63:83:e9:3a:e5:e8:cf:ad:4f:10: 84:23:da:2c:d5:3c:08:45:73:d2:cb:f4:f7:6b:98:8a:f7:b2: 25:06:2f:a4:67:c4:cc:3d:66:42:41:44:ae:58:33:8b:79:7e: b6:6a:07:58:d5:94:8e:27:79:bc:b7:a7:f5:09:8a:54:d5:65: 96:fc:18:36:22:ff:c2:1c:41:60:74:64:29:71:1d:9b:af:77: 18:a1:e2:4e:d5:f7:23:ff:a8:71:9c:61:d9:25:32:65:85:52: c3:bd:7d:f5:62:13:14:e2:9c:4a:7a:1f:19:1c:1f:7e:13:8b: b8:90:46:6d:98:b0:3e:57:6d:dd:1c:f9:cf:b7:75:8c:4d:7b: 34:40:e7:47:37:7c:6f:3c:72:9f:eb:cf:76:23:c8:a6:27:00: 19:d2:2f:34:7c:ec:a7:25:af:12:82:dc:6e:fb:3a:b9:b7:d8: 27:f6:07:ec:2c:c4:c2:06:e1:9a:a8:8a:d9:ad:66:4d:21:9c: a2:cd:0f:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSOHFZeCiJ0liBXhmG2pcXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3NjQwNWUwMjgzNzQzY2Y1MjE4MGQ1YjEzODEyZGZiYTNk ZWQ3ZmMwHhcNMjUxMjEyMTEwMDQ3WhcNMjUxMjEzMTEwMDQ3WjAzMTEwLwYDVQQD EygzZjk2YzhlMmNjNGQxYWYyMTM0ZWRjZTA0NGQ0M2ExNjM0ODA2MTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9ciCB3tIeie1extPhxCwSePhavF jrTSoIjh/11ULHFrcvb8gLRQsk59FxdYh7z1vgGFWkSiig5La1yYca3u0sPyd5/F D3ODxnlDBb4jhuy+kv4VN3IU0oa0NrVkNgKtjDWcWNUbGKdXgV+oklE3MCFqJl8g 23/YTgEtn+FY0gPbC1lzR9VmY7JE7DseIjiUkZn1jUyGjfveX0ysFdND1Uxs63oU sWeqNYveVn3f98FqtnTCoPVueVQ/CufyMWn9tfRlFCA8o1r4IIPpT7mfJMNdDzB2 FPzcuuwOjPcSS9/+WldmMkFqdPoIqtZG1rQZ8yh32pKqCIOjNR2+EoYKxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD+WyOLMTRryE07c4ETUOhY0gGFKMB8GA1UdIwQY MBaAFHdkBeAoN0PPUhgNWxOBLfuj3tf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDJRRjRDZzNRODlTR0ExYkU0RXQtNlBlMV93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8zNjM1ODYtOWI4MC00NTdiLWJkZjAt NmNhNTJlMDI5Y2JlLzEvZDJRRjRDZzNRODlTR0ExYkU0RXQtNlBlMV93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8zNjM1ODYtOWI4MC00NTdiLWJkZjAtNmNhNTJlMDI5Y2Jl LzEvZDJRRjRDZzNRODlTR0ExYkU0RXQtNlBlMV93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa0Vhid+R IrIvhyKRETeKjdK1/k7pmxtkdXncn9kCiVK9R/jJJ6LJig3T1pVwOMan1Vc93Sr8 BzgvuzaRp0Rjg+k65ejPrU8QhCPaLNU8CEVz0sv092uYiveyJQYvpGfEzD1mQkFE rlgzi3l+tmoHWNWUjid5vLen9QmKVNVllvwYNiL/whxBYHRkKXEdm693GKHiTtX3 I/+ocZxh2SUyZYVSw7199WITFOKcSnofGRwffhOLuJBGbZiwPldt3Rz5z7d1jE17 NEDnRzd8bzxyn+vPdiPIpicAGdIvNHzspyWvEoLcbvs6ubfYJ/YH7CzEwgbhmqiK 2a1mTSGcos0PkQ== -----END CERTIFICATE-----Generated at Fri Dec 12 13:14:44 2025 by rpki-client