This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft File: dh55HzroOuiyY-PNtoKjR1tXB98.mft (raw, json) Hash identifier: mChZyKNEKWm7+kIrqMNBYmFflxZxpfw/YbC5CDdL/fY= Subject key identifier: 0C:34:4B:17:CF:F0:16:85:54:B4:8E:8E:25:9D:BE:46:22:42:FA:0E Authority key identifier: 76:1E:79:1F:3A:E8:3A:E8:B2:63:E3:CD:B6:82:A3:47:5B:57:07:DF Certificate issuer: /CN=761e791f3ae83ae8b263e3cdb682a3475b5707df Certificate serial: 019B5ABFDF197523052B3447787F3BBF0BAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 13:01:22 +0000 Manifest this update: Fri 26 Dec 2025 13:01:22 +0000 Manifest next update: Sat 27 Dec 2025 13:01:22 +0000 Files and hashes: 1: dh55HzroOuiyY-PNtoKjR1tXB98.crl (hash: jWRJhaB/26Wkcs7BhaWMAshTXOrJTlm2x5UXRkY3XIg=) 2: e3qYhLR-km5IQlHYrXGIQxD6r18.roa (hash: o3slshWpfwKW/e4DeCSWK9BRzXX7zHWEOnbvJOQywpo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:df:19:75:23:05:2b:34:47:78:7f:3b:bf:0b:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=761e791f3ae83ae8b263e3cdb682a3475b5707df Validity Not Before: Dec 26 13:01:22 2025 GMT Not After : Dec 27 13:01:22 2025 GMT Subject: CN=0c344b17cff0168554b48e8e259dbe462242fa0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:44:f2:a5:c6:8b:ce:69:6b:ab:07:4b:b2:87: b1:3d:68:78:b7:4e:b0:81:85:51:62:cc:19:2d:98: 2f:d1:f0:dc:e8:40:cd:d3:cc:92:13:5c:ac:c3:ac: bc:30:a8:64:25:47:7f:a1:38:39:49:0c:ab:c3:f7: d1:57:75:4f:41:fc:82:1a:b5:e8:56:dd:90:c6:81: b6:b3:34:f2:78:03:c4:2d:46:26:e6:1b:e0:b9:28: ab:79:00:3c:3f:a8:68:e6:7b:16:d7:93:ca:f1:8c: f5:93:b0:4a:21:98:10:0c:69:b8:ab:3d:97:52:ae: 9a:89:87:ad:09:e7:6a:ae:45:38:28:54:c9:92:5e: 0d:80:08:0b:3d:8c:53:47:d8:79:b1:6b:50:a2:e5: d1:06:a9:22:71:1a:38:fd:77:cf:50:7f:a2:ea:71: 2f:7b:f9:b3:c5:ec:67:64:cc:97:19:bc:bb:75:49: eb:6b:80:52:11:93:da:05:8c:84:d1:21:06:04:d5: a8:40:4e:46:e1:ac:75:bf:45:a7:f3:34:c8:36:9b: bf:b4:ae:8c:e0:c0:17:57:85:12:65:46:d3:d4:f1: 77:4f:97:85:0b:c4:89:99:d2:43:40:53:9d:c2:e2: 24:ef:0e:42:b6:11:e0:fc:6d:56:06:52:20:79:cc: 0a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:34:4B:17:CF:F0:16:85:54:B4:8E:8E:25:9D:BE:46:22:42:FA:0E X509v3 Authority Key Identifier: keyid:76:1E:79:1F:3A:E8:3A:E8:B2:63:E3:CD:B6:82:A3:47:5B:57:07:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:1a:a1:e1:87:ba:4d:bf:c6:61:e0:d0:f0:af:b5:6c:8a:c9: a0:8b:60:a2:dd:17:c1:15:be:bb:cf:25:cc:89:85:b4:bf:6f: c1:1c:c3:04:9d:cd:ed:62:14:c6:08:29:50:e0:aa:19:2f:9c: 4a:a4:06:a7:a8:af:a9:2e:5a:a3:8e:0a:a1:45:75:df:22:ca: 0f:ca:4c:09:3f:1f:8e:ce:7f:63:f2:ff:f1:58:de:78:b9:96: 7c:88:1e:51:e2:64:94:37:be:f0:17:bd:6c:0b:0e:26:3d:38: 4e:14:3c:b4:f2:e0:b7:72:cf:8b:51:f7:92:f9:98:97:13:f5: f4:11:92:dc:07:40:1e:ae:61:2f:a4:55:d4:2a:75:06:0a:ca: 2c:d3:3d:3a:53:30:55:bf:96:25:15:c9:f4:6c:79:9d:d0:da: 21:58:50:3b:e7:25:33:49:96:71:58:c5:25:fa:17:12:98:ab: 1a:36:55:17:ad:2c:3d:bd:12:c0:c9:35:da:cb:3c:ee:71:d3: 9b:21:ec:f7:c8:37:52:2d:f4:76:e4:67:ac:4b:1e:9b:70:d0: b0:96:e0:90:0c:0f:ef:89:b4:09:ee:d0:a3:08:fe:74:ce:37: b8:0d:91:d2:e4:68:c4:8e:ac:e6:bb:e2:91:70:ef:66:6c:94: d6:39:16:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav98ZdSMFKzRHeH87vwuqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2MWU3OTFmM2FlODNhZThiMjYzZTNjZGI2ODJhMzQ3NWI1 NzA3ZGYwHhcNMjUxMjI2MTMwMTIyWhcNMjUxMjI3MTMwMTIyWjAzMTEwLwYDVQQD EygwYzM0NGIxN2NmZjAxNjg1NTRiNDhlOGUyNTlkYmU0NjIyNDJmYTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkTypcaLzmlrqwdLsoexPWh4t06w gYVRYswZLZgv0fDc6EDN08ySE1ysw6y8MKhkJUd/oTg5SQyrw/fRV3VPQfyCGrXo Vt2QxoG2szTyeAPELUYm5hvguSireQA8P6ho5nsW15PK8Yz1k7BKIZgQDGm4qz2X Uq6aiYetCedqrkU4KFTJkl4NgAgLPYxTR9h5sWtQouXRBqkicRo4/XfPUH+i6nEv e/mzxexnZMyXGby7dUnra4BSEZPaBYyE0SEGBNWoQE5G4ax1v0Wn8zTINpu/tK6M 4MAXV4USZUbT1PF3T5eFC8SJmdJDQFOdwuIk7w5CthHg/G1WBlIgecwKWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAw0SxfP8BaFVLSOjiWdvkYiQvoOMB8GA1UdIwQY MBaAFHYeeR866DrosmPjzbaCo0dbVwffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGg1NUh6cm9PdWl5WS1QTnRvS2pSMXRYQjk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9mY2Q5OTAtNzJmNC00ZWJkLTg2NGEt OTJlNDUxODc3ZDJjLzEvZGg1NUh6cm9PdWl5WS1QTnRvS2pSMXRYQjk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9mY2Q5OTAtNzJmNC00ZWJkLTg2NGEtOTJlNDUxODc3ZDJj LzEvZGg1NUh6cm9PdWl5WS1QTnRvS2pSMXRYQjk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGxqh4Ye6 Tb/GYeDQ8K+1bIrJoItgot0XwRW+u88lzImFtL9vwRzDBJ3N7WIUxggpUOCqGS+c SqQGp6ivqS5ao44KoUV13yLKD8pMCT8fjs5/Y/L/8VjeeLmWfIgeUeJklDe+8Be9 bAsOJj04ThQ8tPLgt3LPi1H3kvmYlxP19BGS3AdAHq5hL6RV1Cp1BgrKLNM9OlMw Vb+WJRXJ9Gx5ndDaIVhQO+clM0mWcVjFJfoXEpirGjZVF60sPb0SwMk12ss87nHT myHs98g3Ui30duRnrEsem3DQsJbgkAwP74m0Ce7Qowj+dM43uA2R0uRoxI6s5rvi kXDvZmyU1jkWww== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:32 2025 by rpki-client