This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft File: DnX7T1KoKdE24pqaAlxjbRmuMo4.mft (raw, json) Hash identifier: slKPdoB9WQZ57s8hpBV9EkMnFmGHikBodoH2pqA0OZ8= Subject key identifier: 76:F5:9F:86:D8:53:A8:E5:00:6C:F2:86:07:4D:32:02:F3:7C:1A:82 Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Certificate serial: 019B40FFB0DD5A2B888CC32222CE26BD74CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft Manifest number: 0ADD Signing time: Sun 21 Dec 2025 13:00:57 +0000 Manifest this update: Sun 21 Dec 2025 13:00:57 +0000 Manifest next update: Mon 22 Dec 2025 13:00:57 +0000 Files and hashes: 1: 2i2Vy05Tg_e1ak_1Uk12CnilxHg.roa (hash: NqduqZJuAkmB6MV5SKQihh3yDbwkeeFnfpDnTNMY130=) 2: 73x2Y8rtkrW56QrQQDyvuiFLG40.roa (hash: oxRcUfzeJXkoQZbB0gN4SvScUE5rLGzaBI9pXSTycUY=) 3: 9V0vcgO-bdJZakQILqcfcNUVDzs.roa (hash: rTVAfA+3goVyX4gfp8i16RQoEb4IWxA+yVUwUEUJp9c=) 4: 9wVDQpp0z04zwfoESc_S5u9etZ0.roa (hash: +x8r2JMNLKJOL0pGTh/MSwGY9V5+DOeggrdlCFNLMkg=) 5: DEEKMObjh2dv97ksxPHzfvJBIUE.roa (hash: g8hI8D0q/fLifbYomnOLeWF4o33+VutdXsr+kOmxBJU=) 6: DnX7T1KoKdE24pqaAlxjbRmuMo4.crl (hash: 4DFYi0sO8ol09lq6DeaY46bp8eALQ9ax0yH69CQmHGI=) 7: F13VMR-AbtuNFors2WcIvfh7S0c.roa (hash: alIy453fzo5rCkQ2zWT1hQS9+f4qzXDbUL2ajOhe4wQ=) 8: GZgpng6Ot_FGRMQou9o62VcEekY.roa (hash: LX9b2Js5i118pOJ0Nzr+pm+rZAe5EZDelGHWiSHQOWA=) 9: KX36I7dSkLFi2aH0eqBcDdn1RlA.roa (hash: uMMjk83OkXZQb4cTo6pJ1weYcZ0/vJkq+xb1gidjyYA=) 10: OjaH7K6CfyojVS6c46fulaH1p-M.roa (hash: +oZE9RnQm2ybyt6c5+lMZS7HBhz+F/aKH1dTBent0OM=) 11: WggPonyi31b-yIkSaCuExsTR9U0.roa (hash: tkUrHPw54S3hnUlb390kJ2ECtbQXaVRTzWQhKus6rlQ=) 12: cJ1rW8VClyRweGHbeEMtWBhnXAQ.roa (hash: xDtfcFeuvoc7H53dx6XMFpyYCc4Qq+FPUImWBrlN+70=) 13: fkiMonxbwz3kZc8YkJyvn2qIywM.roa (hash: fqrrGCyxmQcRYifeeyyNsSENvJ1MUubmLT6QjBEi5nc=) 14: hirG0wCdPPp74UU2BJCRBx2I3xI.roa (hash: NoA4bfTe2eDgcbMz4bkkr7hReCXWcPMZ0ab/qV2+EuU=) 15: yQ91zssiLccRHA5nLDLCbHVrzwY.roa (hash: jHNMPrDscbkXMeLXgNIGaBErBrBnGqdgI+yTuRlxq7Q=) 16: yohJslaqJeqxG9ZdmhfVBivAGaE.roa (hash: SxCXBWVxQCB+hqHsFFhyla2B81f/O/PjbQmRobaYZP8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:ff:b0:dd:5a:2b:88:8c:c3:22:22:ce:26:bd:74:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Validity Not Before: Dec 21 13:00:57 2025 GMT Not After : Dec 22 13:00:57 2025 GMT Subject: CN=76f59f86d853a8e5006cf286074d3202f37c1a82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:2b:86:21:28:88:f9:ba:bb:e8:b1:b0:46:9f: fe:a3:53:11:7d:69:44:0c:ef:fd:a6:9d:01:da:bf: aa:18:d4:18:5b:12:60:b8:1b:3e:82:41:2f:2a:24: 34:69:40:14:13:c3:be:5e:ba:24:8c:ef:b4:4d:50: c6:c6:aa:11:ab:8b:ed:2f:43:32:ec:a6:aa:46:39: 59:37:6e:fe:9f:2f:1b:38:8c:0d:f4:d9:b2:35:0a: 4e:fc:b1:25:f7:8d:37:ca:8f:25:de:9b:0d:db:24: ad:b5:88:5c:3c:e8:6c:49:6b:49:ea:bf:7e:de:bf: 24:88:66:4b:5f:33:cc:dc:ab:c3:67:76:88:b9:22: 8c:ee:e6:61:ae:bd:8b:79:61:35:77:48:02:3e:9c: 16:44:07:09:f6:9f:b8:31:34:c1:8a:90:87:a7:0f: 3d:14:42:34:da:b5:c3:e7:bb:0e:3f:17:4c:65:c1: a4:de:4c:2f:30:30:64:7b:22:8c:0b:74:5c:d3:94: 1f:3b:75:0d:6b:f4:e9:fc:85:1f:28:54:32:f3:52: a8:f4:27:bb:af:5c:01:a9:44:48:a3:fa:20:46:c0: 16:f3:fa:3b:53:2a:30:c6:bd:56:61:a8:24:bb:98: a7:31:e3:a4:67:2e:e8:8e:d3:f5:24:95:0a:64:bb: 33:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:F5:9F:86:D8:53:A8:E5:00:6C:F2:86:07:4D:32:02:F3:7C:1A:82 X509v3 Authority Key Identifier: keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:cb:90:4e:14:e0:f1:ba:50:e8:46:20:54:85:f0:95:db:fa: 3e:98:d6:23:57:e7:23:6a:a8:e3:72:ff:1c:37:17:d8:8f:56: 2e:3a:02:29:b8:14:c0:32:97:1c:9f:79:39:d2:93:bf:8a:69: 38:f8:a9:e1:de:5e:ec:8a:19:44:32:5b:67:e2:b6:34:98:ce: 36:3d:d3:00:13:c1:1f:2b:eb:61:ac:14:ce:31:c0:98:e9:d6: c6:09:54:a2:48:c9:25:d6:36:ab:35:48:1b:94:93:9c:8d:3d: 0e:88:eb:0a:b8:e1:92:35:a8:58:2e:fe:b3:76:46:23:be:5d: fc:a9:f1:48:50:ed:a5:df:87:68:ea:15:cd:aa:70:c9:94:61: 75:db:34:44:f1:de:17:aa:8f:ef:8e:ba:42:17:44:c7:ae:98: 21:7c:15:10:7e:e1:47:4e:c9:0d:56:5c:f3:9c:36:2a:df:e6: 1f:fb:9c:30:87:f5:65:d2:cb:67:ee:41:ff:ce:97:bb:75:f4: 93:2b:d3:5f:25:82:6d:6a:b4:06:0e:fc:fa:f5:10:be:b9:5d: eb:52:7b:b3:6d:59:69:32:75:64:72:4a:29:e4:ed:aa:04:76: 3b:de:b5:95:23:5f:45:9b:25:e1:9d:6a:e6:c7:ee:46:23:37: 58:04:2d:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtA/7DdWiuIjMMiIs4mvXTMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNzVmYjRmNTJhODI5ZDEzNmUyOWE5YTAyNWM2MzZkMTlh ZTMyOGUwHhcNMjUxMjIxMTMwMDU3WhcNMjUxMjIyMTMwMDU3WjAzMTEwLwYDVQQD Eyg3NmY1OWY4NmQ4NTNhOGU1MDA2Y2YyODYwNzRkMzIwMmYzN2MxYTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7SuGISiI+bq76LGwRp/+o1MRfWlE DO/9pp0B2r+qGNQYWxJguBs+gkEvKiQ0aUAUE8O+XrokjO+0TVDGxqoRq4vtL0My 7KaqRjlZN27+ny8bOIwN9NmyNQpO/LEl9403yo8l3psN2ySttYhcPOhsSWtJ6r9+ 3r8kiGZLXzPM3KvDZ3aIuSKM7uZhrr2LeWE1d0gCPpwWRAcJ9p+4MTTBipCHpw89 FEI02rXD57sOPxdMZcGk3kwvMDBkeyKMC3Rc05QfO3UNa/Tp/IUfKFQy81Ko9Ce7 r1wBqURIo/ogRsAW8/o7Uyowxr1WYagku5inMeOkZy7ojtP1JJUKZLszpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHb1n4bYU6jlAGzyhgdNMgLzfBqCMB8GA1UdIwQY MBaAFA51+09SqCnRNuKamgJcY20ZrjKOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYt MzViYTI2N2RlZDNiLzEvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYtMzViYTI2N2RlZDNi LzEvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe8uQThTg 8bpQ6EYgVIXwldv6PpjWI1fnI2qo43L/HDcX2I9WLjoCKbgUwDKXHJ95OdKTv4pp OPip4d5e7IoZRDJbZ+K2NJjONj3TABPBHyvrYawUzjHAmOnWxglUokjJJdY2qzVI G5STnI09DojrCrjhkjWoWC7+s3ZGI75d/KnxSFDtpd+HaOoVzapwyZRhdds0RPHe F6qP7466QhdEx66YIXwVEH7hR07JDVZc85w2Kt/mH/ucMIf1ZdLLZ+5B/86Xu3X0 kyvTXyWCbWq0Bg78+vUQvrld61J7s21ZaTJ1ZHJKKeTtqgR2O961lSNfRZsl4Z1q 5sfuRiM3WAQt7g== -----END CERTIFICATE-----Generated at Sun Dec 21 20:55:00 2025 by rpki-client