This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/3f7cda-1062-4b7c-afd9-9d0dfd38d949/1/dRWCm38DQRu-IbGiAEmM7r9cBsA.mft File: dRWCm38DQRu-IbGiAEmM7r9cBsA.mft (raw, json) Hash identifier: 892V12PJYar+K08GiZrATPrAv3xcNW+/ezml2bpHLRU= Subject key identifier: 87:1E:77:51:98:B4:88:75:91:8A:F4:8E:28:A2:D3:EB:2B:59:42:10 Authority key identifier: 75:15:82:9B:7F:03:41:1B:BE:21:B1:A2:00:49:8C:EE:BF:5C:06:C0 Certificate issuer: /CN=7515829b7f03411bbe21b1a200498ceebf5c06c0 Certificate serial: 019B59E42DEA3F38000531492D093DCFEBC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRWCm38DQRu-IbGiAEmM7r9cBsA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/3f7cda-1062-4b7c-afd9-9d0dfd38d949/1/dRWCm38DQRu-IbGiAEmM7r9cBsA.mft Manifest number: 0F Signing time: Fri 26 Dec 2025 09:01:24 +0000 Manifest this update: Fri 26 Dec 2025 09:01:24 +0000 Manifest next update: Sat 27 Dec 2025 09:01:24 +0000 Files and hashes: 1: 3ToCoWRbwQIxnoDHHaq-sPlgMyY.roa (hash: QcOyon6JbPWT+YBxjPmL38UPWGZe+8sOMVBjlq5tN+Q=) 2: dRWCm38DQRu-IbGiAEmM7r9cBsA.crl (hash: /SDOQXnV3kk6CiHNfktCNaWErcM9m11M6WZairJZ5cQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/3f7cda-1062-4b7c-afd9-9d0dfd38d949/1/dRWCm38DQRu-IbGiAEmM7r9cBsA.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/3f7cda-1062-4b7c-afd9-9d0dfd38d949/1/dRWCm38DQRu-IbGiAEmM7r9cBsA.mft rsync://rpki.ripe.net/repository/DEFAULT/dRWCm38DQRu-IbGiAEmM7r9cBsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:2d:ea:3f:38:00:05:31:49:2d:09:3d:cf:eb:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7515829b7f03411bbe21b1a200498ceebf5c06c0 Validity Not Before: Dec 26 09:01:24 2025 GMT Not After : Dec 27 09:01:24 2025 GMT Subject: CN=871e775198b48875918af48e28a2d3eb2b594210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:98:b8:7d:8e:f1:2f:80:4b:12:83:42:4a:a0: ed:64:90:ed:c3:50:8e:69:7b:44:d1:62:a8:2d:6f: 2a:d5:c5:4b:dd:22:2b:b5:27:e0:31:c1:9c:da:95: 81:d5:8b:f0:44:01:ff:c3:1c:74:89:7a:8d:98:4e: eb:ba:12:a2:ee:3b:32:82:ac:fa:ba:17:04:03:a4: 9c:d3:26:e9:7d:ac:9d:92:51:52:b4:f2:d3:7b:83: 85:28:41:94:6c:94:55:6c:7a:a0:7a:dc:ab:0a:ea: de:56:74:55:f5:a9:c2:b4:5e:3b:81:45:cc:c9:aa: 53:16:93:8c:71:7a:4a:5b:a4:1a:4a:77:ac:37:94: c4:8a:78:71:c8:0a:8f:8d:83:0f:e7:94:7d:01:58: b0:67:b9:33:17:c8:97:fb:fd:ea:d7:21:e2:c7:d0: b2:b1:7c:ed:cd:27:4c:dc:ef:d8:46:5d:4b:14:ef: 06:1d:9f:49:c6:5c:6b:fb:a4:5c:34:9c:79:68:ea: c3:e2:35:b3:9d:58:8d:71:2a:88:fd:ca:e8:dd:c6: b3:85:7e:41:48:35:c4:84:6b:82:29:84:9f:09:d6: 2b:d6:32:e2:1f:21:36:85:64:c4:85:0a:1d:5f:8b: 42:0c:36:b5:4a:77:36:31:47:a7:19:2f:2c:6d:fe: 45:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:1E:77:51:98:B4:88:75:91:8A:F4:8E:28:A2:D3:EB:2B:59:42:10 X509v3 Authority Key Identifier: keyid:75:15:82:9B:7F:03:41:1B:BE:21:B1:A2:00:49:8C:EE:BF:5C:06:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRWCm38DQRu-IbGiAEmM7r9cBsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3f7cda-1062-4b7c-afd9-9d0dfd38d949/1/dRWCm38DQRu-IbGiAEmM7r9cBsA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3f7cda-1062-4b7c-afd9-9d0dfd38d949/1/dRWCm38DQRu-IbGiAEmM7r9cBsA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:e2:e4:87:29:a3:2c:f5:36:2e:4a:1b:55:fc:dc:08:97:bf: 95:6c:88:1a:6b:e4:d0:5d:85:51:cf:d3:1a:23:63:f6:53:51: 9a:46:df:b9:6d:1d:79:c6:db:9a:22:f6:dc:28:52:27:ec:0e: 8c:cb:b2:0b:c1:52:dd:ba:30:ee:86:ee:b5:d9:1f:dc:ec:16: 81:e0:47:2c:5f:4a:db:ab:a9:ef:96:da:c6:7c:da:d8:51:b9: 99:c8:50:62:8a:c3:57:41:27:56:1a:ed:9d:16:6c:98:fc:99: 94:d9:10:33:91:55:b1:7c:6e:a0:c0:85:ec:e0:56:a9:b1:4e: 05:34:bd:e3:e7:c2:18:64:b6:77:bf:26:d0:e2:1d:ab:3c:02: 16:bc:45:05:c5:22:e6:aa:0f:2e:b3:ab:47:1c:07:94:10:b0: cb:7a:7a:68:9c:18:9e:17:ce:37:4b:6d:ca:57:68:ff:f7:06: d4:06:3a:28:fa:dc:2c:b8:85:be:62:29:84:ac:d3:9d:c1:dc: 4f:36:56:ca:06:24:db:7b:f2:22:c1:34:be:4c:3a:bf:23:04: a9:87:ce:d2:8e:de:81:38:0b:1a:4d:30:f9:3a:62:0a:8c:82: 4d:2b:22:6d:67:93:c4:62:92:32:2d:51:20:23:3d:2b:30:4f: 54:c2:bd:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5C3qPzgABTFJLQk9z+vFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MTU4MjliN2YwMzQxMWJiZTIxYjFhMjAwNDk4Y2VlYmY1 YzA2YzAwHhcNMjUxMjI2MDkwMTI0WhcNMjUxMjI3MDkwMTI0WjAzMTEwLwYDVQQD Eyg4NzFlNzc1MTk4YjQ4ODc1OTE4YWY0OGUyOGEyZDNlYjJiNTk0MjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZi4fY7xL4BLEoNCSqDtZJDtw1CO aXtE0WKoLW8q1cVL3SIrtSfgMcGc2pWB1YvwRAH/wxx0iXqNmE7ruhKi7jsygqz6 uhcEA6Sc0ybpfaydklFStPLTe4OFKEGUbJRVbHqgetyrCureVnRV9anCtF47gUXM yapTFpOMcXpKW6QaSnesN5TEinhxyAqPjYMP55R9AViwZ7kzF8iX+/3q1yHix9Cy sXztzSdM3O/YRl1LFO8GHZ9Jxlxr+6RcNJx5aOrD4jWznViNcSqI/cro3cazhX5B SDXEhGuCKYSfCdYr1jLiHyE2hWTEhQodX4tCDDa1Snc2MUenGS8sbf5FPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIced1GYtIh1kYr0jiii0+srWUIQMB8GA1UdIwQY MBaAFHUVgpt/A0EbviGxogBJjO6/XAbAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFJXQ20zOERRUnUtSWJHaUFFbU03cjljQnNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8zZjdjZGEtMTA2Mi00YjdjLWFmZDkt OWQwZGZkMzhkOTQ5LzEvZFJXQ20zOERRUnUtSWJHaUFFbU03cjljQnNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8zZjdjZGEtMTA2Mi00YjdjLWFmZDktOWQwZGZkMzhkOTQ5 LzEvZFJXQ20zOERRUnUtSWJHaUFFbU03cjljQnNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW+Lkhymj LPU2LkobVfzcCJe/lWyIGmvk0F2FUc/TGiNj9lNRmkbfuW0decbbmiL23ChSJ+wO jMuyC8FS3bow7obutdkf3OwWgeBHLF9K26up75baxnza2FG5mchQYorDV0EnVhrt nRZsmPyZlNkQM5FVsXxuoMCF7OBWqbFOBTS94+fCGGS2d78m0OIdqzwCFrxFBcUi 5qoPLrOrRxwHlBCwy3p6aJwYnhfON0ttyldo//cG1AY6KPrcLLiFvmIphKzTncHc TzZWygYk23vyIsE0vkw6vyMEqYfO0o7egTgLGk0w+TpiCoyCTSsibWeTxGKSMi1R ICM9KzBPVMK9iQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:41:50 2025 by rpki-client