This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft File: dNAyUoux0Vl2bNed5HhtzZYqH7s.mft (raw, json) Hash identifier: dlWIoURCqNVQLVChMtDpjJoOA1jBorT1mHuVeDnAfHM= Subject key identifier: 54:4A:96:55:B9:18:92:9A:C6:C5:26:77:4A:83:CA:D6:B8:9C:AF:E4 Authority key identifier: 74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB Certificate issuer: /CN=74d032528bb1d159766cd79de4786dcd962a1fbb Certificate serial: 019B0E2576329CEA74B259126F98EFB3FC28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft Manifest number: 152F Signing time: Thu 11 Dec 2025 16:01:34 +0000 Manifest this update: Thu 11 Dec 2025 16:01:34 +0000 Manifest next update: Fri 12 Dec 2025 16:01:34 +0000 Files and hashes: 1: O2QrsRpu21AzPFWSKx6-icFIuDk.roa (hash: yYvXQaBaDt2Fw+c7tWeP9pRQ80CLvEe29rG4qx33m94=) 2: dNAyUoux0Vl2bNed5HhtzZYqH7s.crl (hash: eIdUMXjaMaB5zONKdXQx5cxQCh73/U4cGE2jZ6LyvWw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 16:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:25:76:32:9c:ea:74:b2:59:12:6f:98:ef:b3:fc:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74d032528bb1d159766cd79de4786dcd962a1fbb Validity Not Before: Dec 11 16:01:34 2025 GMT Not After : Dec 12 16:01:34 2025 GMT Subject: CN=544a9655b918929ac6c526774a83cad6b89cafe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:77:ac:aa:8a:46:0e:2b:9b:87:9b:52:34:b8: a4:a2:2c:61:2f:ca:95:d9:4b:a3:ac:59:58:7f:c4: ed:ad:d4:25:08:cf:a1:89:e5:79:b7:06:48:50:e8: 23:8c:69:6f:ed:d3:01:c3:9f:10:1e:91:70:61:0e: ca:dd:7b:ab:36:02:59:e1:76:85:1e:b9:85:6d:a8: 69:d9:bf:40:0c:84:e7:90:92:80:ce:e6:2f:d2:bd: 94:4e:c7:41:ad:eb:0c:a8:94:64:77:12:81:86:be: 2f:88:d6:a8:5c:27:39:3f:41:32:4d:d4:e2:e1:c7: 5d:86:8c:61:b4:ca:b9:96:70:a9:85:60:08:ed:45: d0:79:a0:b9:5e:53:4f:48:6c:9f:a0:59:44:c2:18: 7e:a1:db:12:63:23:42:27:84:2c:de:7d:70:b0:5a: 6c:c9:fe:82:fc:1a:2d:1d:0d:9f:6a:17:a5:be:71: 63:c6:ec:9b:1a:d6:62:8b:dd:99:e0:d5:20:92:21: b5:5f:00:c0:e5:0a:d8:41:a4:29:76:8e:ab:b3:72: 06:e2:69:ee:06:51:c2:97:c3:d0:b3:f7:b6:cc:cf: ce:5a:d5:06:29:bd:c4:de:3f:99:75:8a:62:5d:d7: 04:e8:8a:d6:ab:4c:dc:78:27:1b:c1:12:81:bb:af: 59:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:4A:96:55:B9:18:92:9A:C6:C5:26:77:4A:83:CA:D6:B8:9C:AF:E4 X509v3 Authority Key Identifier: keyid:74:D0:32:52:8B:B1:D1:59:76:6C:D7:9D:E4:78:6D:CD:96:2A:1F:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNAyUoux0Vl2bNed5HhtzZYqH7s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29a422-a791-4dcf-90fb-2c9127ab48c3/1/dNAyUoux0Vl2bNed5HhtzZYqH7s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e3:9c:97:2d:ba:96:d6:ff:35:54:5c:11:a1:50:5a:2b:b0:a5: 0e:2c:1e:21:63:41:75:aa:48:13:b0:24:c3:9a:3e:fa:c0:64: a9:7b:d2:a9:2b:90:e4:b6:df:31:28:f9:22:48:b8:d0:61:79: 34:53:00:77:44:61:75:db:67:dd:35:92:3c:ae:e7:af:1f:44: 98:83:bd:1a:9e:34:0e:74:ec:27:55:c8:f3:95:ab:fd:34:a4: 42:7a:9c:29:b9:cd:31:97:19:21:85:f6:6d:a4:05:df:39:0f: eb:b9:70:79:2f:bc:57:0d:67:6b:a7:4a:e3:7a:09:30:9a:cf: 4d:83:cb:b3:ea:ca:f2:ff:37:d0:5c:3e:a4:12:f6:26:37:0d: 4a:bd:53:20:42:8b:b8:dc:4e:c6:83:6f:8c:c1:40:ce:98:f1: f9:7b:31:3b:79:1c:53:cd:69:19:55:a0:83:c3:0b:9e:cb:1d: a5:70:05:73:6d:b9:d5:61:f8:44:b3:b2:61:6e:7a:0c:86:c8: 69:13:6b:17:34:28:b9:cf:f0:d6:ef:a0:1c:07:cb:00:0b:a4: 01:f8:c0:b5:82:6f:e9:7e:75:a9:32:00:a3:33:49:2e:0f:80: 80:eb:ba:74:52:bd:d5:88:9a:fb:4c:ab:eb:81:6f:4c:70:23: ab:7c:48:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJXYynOp0slkSb5jvs/woMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZDAzMjUyOGJiMWQxNTk3NjZjZDc5ZGU0Nzg2ZGNkOTYy YTFmYmIwHhcNMjUxMjExMTYwMTM0WhcNMjUxMjEyMTYwMTM0WjAzMTEwLwYDVQQD Eyg1NDRhOTY1NWI5MTg5MjlhYzZjNTI2Nzc0YTgzY2FkNmI4OWNhZmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HesqopGDiubh5tSNLikoixhL8qV 2UujrFlYf8TtrdQlCM+hieV5twZIUOgjjGlv7dMBw58QHpFwYQ7K3XurNgJZ4XaF HrmFbahp2b9ADITnkJKAzuYv0r2UTsdBresMqJRkdxKBhr4viNaoXCc5P0EyTdTi 4cddhoxhtMq5lnCphWAI7UXQeaC5XlNPSGyfoFlEwhh+odsSYyNCJ4Qs3n1wsFps yf6C/BotHQ2fahelvnFjxuybGtZii92Z4NUgkiG1XwDA5QrYQaQpdo6rs3IG4mnu BlHCl8PQs/e2zM/OWtUGKb3E3j+ZdYpiXdcE6IrWq0zceCcbwRKBu69Z8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFRKllW5GJKaxsUmd0qDyta4nK/kMB8GA1UdIwQY MBaAFHTQMlKLsdFZdmzXneR4bc2WKh+7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE5BeVVvdXgwVmwyYk5lZDVIaHR6WllxSDdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yOWE0MjItYTc5MS00ZGNmLTkwZmIt MmM5MTI3YWI0OGMzLzEvZE5BeVVvdXgwVmwyYk5lZDVIaHR6WllxSDdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8yOWE0MjItYTc5MS00ZGNmLTkwZmItMmM5MTI3YWI0OGMz LzEvZE5BeVVvdXgwVmwyYk5lZDVIaHR6WllxSDdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA45yXLbqW 1v81VFwRoVBaK7ClDiweIWNBdapIE7Akw5o++sBkqXvSqSuQ5LbfMSj5Iki40GF5 NFMAd0Rhddtn3TWSPK7nrx9EmIO9Gp40DnTsJ1XI85Wr/TSkQnqcKbnNMZcZIYX2 baQF3zkP67lweS+8Vw1na6dK43oJMJrPTYPLs+rK8v830Fw+pBL2JjcNSr1TIEKL uNxOxoNvjMFAzpjx+XsxO3kcU81pGVWgg8MLnssdpXAFc2251WH4RLOyYW56DIbI aRNrFzQouc/w1u+gHAfLAAukAfjAtYJv6X51qTIAozNJLg+AgOu6dFK91Yia+0yr 64FvTHAjq3xIew== -----END CERTIFICATE-----Generated at Fri Dec 12 00:27:38 2025 by rpki-client