This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft File: dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft (raw, json) Hash identifier: DkCj5dMXYxTKauMYtKL0wMdLitJL6xj3S2VfKC/Yp/E= Subject key identifier: 79:BE:F8:3B:0D:5E:7F:31:EB:2C:38:D2:65:35:A8:EE:05:37:FF:63 Authority key identifier: 74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7 Certificate issuer: /CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7 Certificate serial: 019B1382B4FA85AF7EC37D50B866B8B2CAA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft Manifest number: 123C Signing time: Fri 12 Dec 2025 17:01:31 +0000 Manifest this update: Fri 12 Dec 2025 17:01:31 +0000 Manifest next update: Sat 13 Dec 2025 17:01:31 +0000 Files and hashes: 1: 1-jgtOPobXCJDbrHGNdmL9rzJbgM.roa (hash: uCWGxr32WWfEG1/b7Z2jim0tRFwDuOHUsX5k577/0+I=) 2: dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl (hash: HV2InNFLLjETES2RwyPq7pt1EE+JjfRGxAzZPwSdc1k=) 3: x3drftlfvyiEtkh0afmWcroU9Js.roa (hash: NILZn8jb2pSCwJZ594oMmV5sakNi3NDJXkj51QTnCsM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 16:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:13:82:b4:fa:85:af:7e:c3:7d:50:b8:66:b8:b2:ca:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7 Validity Not Before: Dec 12 17:01:31 2025 GMT Not After : Dec 13 17:01:31 2025 GMT Subject: CN=79bef83b0d5e7f31eb2c38d26535a8ee0537ff63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8b:5c:af:76:0e:fd:08:78:0d:65:93:c7:4e: 1b:b9:97:ab:a4:e5:b6:6f:6f:d8:18:aa:e6:9e:a9: 1d:34:43:69:15:0a:11:a3:d3:df:f8:0f:79:c8:1d: 9e:76:95:cf:ce:99:b9:3e:93:9d:c3:72:f9:8a:fe: e5:3c:b2:e4:b1:88:61:d5:2e:49:b5:ea:1a:e6:02: 37:fd:98:5d:5d:4c:82:94:97:cc:5b:d9:55:d0:42: 73:77:6b:84:3c:e0:fa:aa:c1:54:7f:04:ef:6e:f1: 85:4a:90:8f:ce:9b:fc:36:11:16:c3:68:93:ef:c7: 30:32:d6:91:fd:70:a2:a3:31:a2:c1:91:a7:07:f0: f5:2d:1e:1a:06:5e:b3:94:a9:a0:8b:fa:eb:81:93: f4:30:71:92:da:c8:fd:ac:63:9c:82:ec:20:1d:24: bd:41:00:97:69:2c:3d:06:db:9f:d3:c2:81:db:86: d9:33:9c:e7:28:08:18:9a:54:c6:5b:90:8a:a7:d1: a0:ea:48:0f:3a:f7:e4:33:c5:c0:9a:c3:6c:d1:70: 72:a8:b0:6b:37:76:ae:0b:ac:6e:8a:40:ea:f5:8d: d7:ad:81:cd:73:4a:b7:04:cd:bb:67:a9:c8:f8:57: e7:54:35:56:27:90:03:1d:8e:64:6c:11:0f:bf:20: ac:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:BE:F8:3B:0D:5E:7F:31:EB:2C:38:D2:65:35:A8:EE:05:37:FF:63 X509v3 Authority Key Identifier: keyid:74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:2d:c8:16:a4:08:4e:4b:17:1d:75:b3:1c:c4:55:b8:e4:11: a5:c9:a6:3d:e8:c3:a2:b8:60:2c:2c:99:4e:b3:67:af:90:80: 6f:ff:d3:d5:7e:8d:b8:10:c0:89:a5:88:f3:70:ad:7d:80:00: 40:0b:c8:ba:71:d0:74:c6:48:8a:c3:f1:34:b0:af:ea:95:85: 4e:df:65:7c:68:fb:b0:62:74:cd:57:c7:c8:c7:04:84:37:7f: 96:45:3e:fc:26:7d:ed:f6:d1:4e:1f:6b:9b:29:61:98:2d:85: 5e:05:e7:4a:b4:5e:87:eb:60:b4:c9:6c:3d:93:f4:7d:6f:78: 66:72:43:0d:f9:70:8e:6a:89:cb:af:f8:cb:fd:47:95:19:38: 10:8f:aa:60:f7:09:27:ba:22:08:de:d8:31:a0:40:13:21:22: 83:27:da:2b:2f:42:ea:27:ec:00:03:82:e7:7e:54:fb:59:a2: a0:f6:56:da:49:45:ac:14:90:5a:48:10:77:ee:77:40:77:1b: ec:6b:e2:c2:28:6d:a1:20:c6:33:44:1e:91:2d:c4:7e:80:85: f7:6d:2b:c4:b3:e1:bc:fc:60:48:84:0d:c6:ea:ba:38:6d:a2: da:77:61:3c:7a:1e:51:7d:0c:a6:39:f4:17:51:83:e5:5f:16: b2:3c:97:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsTgrT6ha9+w31QuGa4ssqiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0M2Q4NTBjZDEyYTM2M2RkY2RiMGRjMjczZTFkZmM4NjNi NzA1ZjcwHhcNMjUxMjEyMTcwMTMxWhcNMjUxMjEzMTcwMTMxWjAzMTEwLwYDVQQD Eyg3OWJlZjgzYjBkNWU3ZjMxZWIyYzM4ZDI2NTM1YThlZTA1MzdmZjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4tcr3YO/Qh4DWWTx04buZerpOW2 b2/YGKrmnqkdNENpFQoRo9Pf+A95yB2edpXPzpm5PpOdw3L5iv7lPLLksYhh1S5J teoa5gI3/ZhdXUyClJfMW9lV0EJzd2uEPOD6qsFUfwTvbvGFSpCPzpv8NhEWw2iT 78cwMtaR/XCiozGiwZGnB/D1LR4aBl6zlKmgi/rrgZP0MHGS2sj9rGOcguwgHSS9 QQCXaSw9Btuf08KB24bZM5znKAgYmlTGW5CKp9Gg6kgPOvfkM8XAmsNs0XByqLBr N3auC6xuikDq9Y3XrYHNc0q3BM27Z6nI+FfnVDVWJ5ADHY5kbBEPvyCsMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHm++DsNXn8x6yw40mU1qO4FN/9jMB8GA1UdIwQY MBaAFHQ9hQzRKjY93NsNwnPh38hjtwX3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEQyRkRORXFOajNjMnczQ2MtSGZ5R08zQmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wODFlOTYtMTBlMS00Yzk3LWI5MzIt MWRhZjgwYzUxOWQwLzEvZEQyRkRORXFOajNjMnczQ2MtSGZ5R08zQmZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8wODFlOTYtMTBlMS00Yzk3LWI5MzItMWRhZjgwYzUxOWQw LzEvZEQyRkRORXFOajNjMnczQ2MtSGZ5R08zQmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWi3IFqQI TksXHXWzHMRVuOQRpcmmPejDorhgLCyZTrNnr5CAb//T1X6NuBDAiaWI83CtfYAA QAvIunHQdMZIisPxNLCv6pWFTt9lfGj7sGJ0zVfHyMcEhDd/lkU+/CZ97fbRTh9r mylhmC2FXgXnSrReh+tgtMlsPZP0fW94ZnJDDflwjmqJy6/4y/1HlRk4EI+qYPcJ J7oiCN7YMaBAEyEigyfaKy9C6ifsAAOC535U+1mioPZW2klFrBSQWkgQd+53QHcb 7GviwihtoSDGM0QekS3EfoCF920rxLPhvPxgSIQNxuq6OG2i2ndhPHoeUX0Mpjn0 F1GD5V8WsjyXLA== -----END CERTIFICATE-----Generated at Fri Dec 12 19:09:12 2025 by rpki-client