This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.mft File: dtRNl2U6BthGskQ1Nbg-jLw52Sg.mft (raw, json) Hash identifier: Xd7i18eMbAINNSEvlG1GiYEnI0veTxDdl3OAkAwM1tw= Subject key identifier: 56:40:F8:7D:F7:45:F0:A3:A9:C3:8F:7E:75:90:E3:63:4A:E7:E7:42 Authority key identifier: 76:D4:4D:97:65:3A:06:D8:46:B2:44:35:35:B8:3E:8C:BC:39:D9:28 Certificate issuer: /CN=76d44d97653a06d846b2443535b83e8cbc39d928 Certificate serial: 019B25883C1401215A43DEAA519E4EC01400 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dtRNl2U6BthGskQ1Nbg-jLw52Sg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.mft Manifest number: 03EA Signing time: Tue 16 Dec 2025 05:00:43 +0000 Manifest this update: Tue 16 Dec 2025 05:00:43 +0000 Manifest next update: Wed 17 Dec 2025 05:00:43 +0000 Files and hashes: 1: BuJq75MR8DCU5hnHyoHSIDgc_Go.roa (hash: WYFNii4ePD8MQfSQILNRQNPBQSQiOXOjnZErIQSWojg=) 2: XwqfYEtRGpVmtxULo8IDWcyQXIY.roa (hash: Qx5i/G9uqQlJ2PX+MsevYGq69DXaRpp3PFojSyjEu/0=) 3: dtRNl2U6BthGskQ1Nbg-jLw52Sg.crl (hash: Pm3NZaowWabIYnXGhT/dsGvNe36DEc9iQg+7O4APMKk=) 4: kuduuaUOyGakCO9Tn5rzfY0i8Hk.roa (hash: Q9PoN1sRWuaTY4KshxWn50PXqDpvKrsvU7VleCWrxSA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.mft rsync://rpki.ripe.net/repository/DEFAULT/dtRNl2U6BthGskQ1Nbg-jLw52Sg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 05:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:88:3c:14:01:21:5a:43:de:aa:51:9e:4e:c0:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76d44d97653a06d846b2443535b83e8cbc39d928 Validity Not Before: Dec 16 05:00:43 2025 GMT Not After : Dec 17 05:00:43 2025 GMT Subject: CN=5640f87df745f0a3a9c38f7e7590e3634ae7e742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:15:d3:fc:3a:d9:6e:9d:6f:02:58:8f:e5:f0: 94:76:18:e2:a6:d3:59:b3:cf:15:99:ad:81:3e:de: eb:58:8d:51:7c:48:e5:44:0a:81:69:b5:70:8d:3a: 1b:4d:45:e0:b3:16:36:82:2f:77:64:11:f7:37:d7: b4:19:a3:08:71:88:91:1e:08:03:ee:76:15:2b:6f: e4:9e:3b:0e:a1:bd:ba:e6:da:5c:36:37:ff:35:af: 26:bb:9c:8d:7c:8a:a7:9a:bc:9b:96:b6:55:f2:5f: 3b:db:25:28:db:13:3a:76:dc:20:45:24:9b:46:fe: ba:74:69:05:1f:42:a9:38:7a:15:eb:10:df:5a:eb: c4:12:3e:67:a0:c1:9a:ee:24:34:83:b2:ca:62:de: f9:a5:59:10:e5:78:6a:26:e9:e9:9d:1a:ea:17:9e: 8b:8a:c5:48:45:b0:a4:2e:b6:99:0a:d3:57:51:a3: 8e:ff:d9:8d:38:0e:6b:e0:d4:14:01:ef:4f:c1:96: e6:d1:dc:04:cf:de:e1:01:b9:52:a9:e1:52:b4:43: c2:7c:d2:f8:12:a3:a5:a9:b1:2b:be:35:a2:6f:f4: c0:e4:02:ab:15:53:91:3f:cd:a6:c9:e2:23:3b:b0: a3:f0:ec:93:f3:b2:b3:c0:88:9c:a9:b7:66:70:37: e4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:40:F8:7D:F7:45:F0:A3:A9:C3:8F:7E:75:90:E3:63:4A:E7:E7:42 X509v3 Authority Key Identifier: keyid:76:D4:4D:97:65:3A:06:D8:46:B2:44:35:35:B8:3E:8C:BC:39:D9:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dtRNl2U6BthGskQ1Nbg-jLw52Sg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/6a3069-ad3c-4388-b1e8-0c27adb75cdf/1/dtRNl2U6BthGskQ1Nbg-jLw52Sg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:2d:a4:5a:ea:5a:75:d3:b8:f5:0e:61:18:cf:a1:98:04:0f: 06:6f:84:d3:9a:98:32:58:9e:9e:80:d4:f7:e1:33:0b:fe:ad: 62:02:da:ba:f1:03:a3:e6:0e:98:85:1d:95:aa:66:79:2f:05: 89:31:20:39:c3:e9:c1:71:4a:ea:e5:7a:e0:a0:82:c7:13:0a: 18:97:b6:79:c3:e5:d4:40:ad:7a:8f:62:10:1e:26:a3:e9:14: 70:86:3f:af:b5:4a:47:39:e5:29:10:b1:10:e2:b1:57:c1:54: c7:d7:8b:1a:c6:a7:0c:6a:cb:6f:f3:e3:ed:ac:34:b0:4f:3c: 8f:7d:b7:a3:49:20:47:dd:9a:8a:4f:76:d4:4b:f4:10:d0:30: e8:60:be:99:02:cb:7c:b6:5f:cd:b4:61:e4:19:f5:e4:31:7f: f6:a3:3f:7e:94:4f:a4:28:74:4b:cf:63:1e:2a:fa:35:5a:15: 3f:bb:65:72:6b:d1:1e:28:b7:8d:57:e6:f8:24:7c:e9:ea:55: 58:12:f7:58:31:eb:55:25:30:d3:bc:ae:bf:70:92:81:f4:61: 7f:04:67:72:6d:4b:14:b9:42:58:43:f7:96:30:25:6f:b6:95: 06:9d:64:5f:4d:30:c1:56:ea:1d:49:8c:b3:d0:b4:68:e6:4f: 94:24:39:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsliDwUASFaQ96qUZ5OwBQAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2ZDQ0ZDk3NjUzYTA2ZDg0NmIyNDQzNTM1YjgzZThjYmMz OWQ5MjgwHhcNMjUxMjE2MDUwMDQzWhcNMjUxMjE3MDUwMDQzWjAzMTEwLwYDVQQD Eyg1NjQwZjg3ZGY3NDVmMGEzYTljMzhmN2U3NTkwZTM2MzRhZTdlNzQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhXT/DrZbp1vAliP5fCUdhjiptNZ s88Vma2BPt7rWI1RfEjlRAqBabVwjTobTUXgsxY2gi93ZBH3N9e0GaMIcYiRHggD 7nYVK2/knjsOob265tpcNjf/Na8mu5yNfIqnmryblrZV8l872yUo2xM6dtwgRSSb Rv66dGkFH0KpOHoV6xDfWuvEEj5noMGa7iQ0g7LKYt75pVkQ5XhqJunpnRrqF56L isVIRbCkLraZCtNXUaOO/9mNOA5r4NQUAe9PwZbm0dwEz97hAblSqeFStEPCfNL4 EqOlqbErvjWib/TA5AKrFVORP82myeIjO7Cj8OyT87KzwIicqbdmcDfkdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFZA+H33RfCjqcOPfnWQ42NK5+dCMB8GA1UdIwQY MBaAFHbUTZdlOgbYRrJENTW4Poy8OdkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHRSTmwyVTZCdGhHc2tRMU5iZy1qTHc1MlNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi82YTMwNjktYWQzYy00Mzg4LWIxZTgt MGMyN2FkYjc1Y2RmLzEvZHRSTmwyVTZCdGhHc2tRMU5iZy1qTHc1MlNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi82YTMwNjktYWQzYy00Mzg4LWIxZTgtMGMyN2FkYjc1Y2Rm LzEvZHRSTmwyVTZCdGhHc2tRMU5iZy1qTHc1MlNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfy2kWupa ddO49Q5hGM+hmAQPBm+E05qYMlienoDU9+EzC/6tYgLauvEDo+YOmIUdlapmeS8F iTEgOcPpwXFK6uV64KCCxxMKGJe2ecPl1ECteo9iEB4mo+kUcIY/r7VKRznlKRCx EOKxV8FUx9eLGsanDGrLb/Pj7aw0sE88j323o0kgR92aik921Ev0ENAw6GC+mQLL fLZfzbRh5Bn15DF/9qM/fpRPpCh0S89jHir6NVoVP7tlcmvRHii3jVfm+CR86epV WBL3WDHrVSUw07yuv3CSgfRhfwRncm1LFLlCWEP3ljAlb7aVBp1kX00wwVbqHUmM s9C0aOZPlCQ55Q== -----END CERTIFICATE-----Generated at Tue Dec 16 12:15:19 2025 by rpki-client