This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft File: dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft (raw, json) Hash identifier: l/U84nkhxEoJgybiEWf36JI7eCvkhFzYKF9nsVUgdjY= Subject key identifier: 43:0B:37:0D:FB:28:B8:EB:29:A3:21:01:CA:07:A9:C7:4F:7A:2D:71 Authority key identifier: 74:F9:36:9C:6E:23:C1:BF:0D:BE:D3:01:C7:D0:0B:4A:3F:DF:0D:04 Certificate issuer: /CN=74f9369c6e23c1bf0dbed301c7d00b4a3fdf0d04 Certificate serial: 019B5ABF8BCD23B888B8052D5B3F390530AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft Manifest number: 179A Signing time: Fri 26 Dec 2025 13:01:01 +0000 Manifest this update: Fri 26 Dec 2025 13:01:01 +0000 Manifest next update: Sat 27 Dec 2025 13:01:01 +0000 Files and hashes: 1: IVq_YZ1jGuMcDD4JRK3mmzzTW3o.roa (hash: sPByzBItFj1JqphVomCmYz50m1zlhsIta4Uhmwr6ALo=) 2: dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl (hash: N5B4de03y5aJ+v579VCix2+/5ene/zbsSegU45bYh5g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:8b:cd:23:b8:88:b8:05:2d:5b:3f:39:05:30:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74f9369c6e23c1bf0dbed301c7d00b4a3fdf0d04 Validity Not Before: Dec 26 13:01:01 2025 GMT Not After : Dec 27 13:01:01 2025 GMT Subject: CN=430b370dfb28b8eb29a32101ca07a9c74f7a2d71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:dd:61:69:f5:04:85:16:76:d7:43:2e:14:e7: b0:ed:6b:e1:78:5b:7e:1e:1c:f5:27:4b:9f:e9:2c: 2e:36:b4:4b:04:16:70:b7:21:53:60:dc:d4:97:96: 9f:1a:23:55:1e:1a:0a:5c:e7:ba:83:f2:75:86:07: e3:b4:c1:fd:bd:56:fe:16:be:2b:50:2d:ad:c6:f3: 94:21:9e:14:1e:7d:18:f5:fa:a2:d1:dd:be:fa:1f: 84:f5:4b:00:7f:2a:da:38:eb:cc:5a:1a:28:47:6f: 84:1a:63:c9:29:a6:b0:fe:4a:58:45:83:b3:e0:66: 03:2c:3b:fc:2d:e9:e2:30:29:2d:87:36:9e:17:0a: c3:6b:41:2c:a4:7f:11:4d:4b:46:24:71:af:47:0e: ff:cf:70:39:a2:9d:a8:0e:19:2c:82:c2:32:fb:0e: 4e:6c:1e:14:05:67:3d:ba:96:1e:81:85:cf:02:8a: 81:f0:c6:0a:3c:34:a8:8d:eb:28:ff:ae:74:42:7e: bb:23:bd:74:51:70:e4:84:5b:ad:62:98:0a:90:5d: 20:aa:58:2f:c0:9e:6b:49:ed:ae:88:bf:a8:e5:12: 8b:39:9f:3e:74:e0:57:e1:80:a4:c8:9e:c0:a7:03: b1:e1:df:6d:57:ef:01:b3:d2:23:50:e5:5a:41:a0: 94:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:0B:37:0D:FB:28:B8:EB:29:A3:21:01:CA:07:A9:C7:4F:7A:2D:71 X509v3 Authority Key Identifier: keyid:74:F9:36:9C:6E:23:C1:BF:0D:BE:D3:01:C7:D0:0B:4A:3F:DF:0D:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dc4c-643a-41b8-a459-2b518acb78f3/1/dPk2nG4jwb8NvtMBx9ALSj_fDQQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:07:0d:e5:a1:3f:9d:ae:66:cd:36:2f:83:fc:ab:d8:69:c1: 3b:06:f9:e8:c0:26:58:b3:65:84:38:58:ea:ec:ab:91:5a:2c: f9:ba:78:7a:56:52:5f:6a:28:8a:f2:6d:8c:92:fb:97:cd:86: 1f:6d:b1:03:31:3d:28:7d:9b:a2:a1:3a:b7:87:ef:ef:5f:72: 73:d2:d0:cc:9d:61:5a:fb:62:92:21:4b:7f:8f:c2:3d:d9:29: 6e:11:20:8c:a9:f6:ca:00:c6:19:28:6f:c7:5e:b7:97:50:4b: 02:d6:87:4a:75:69:40:af:65:f3:6e:d6:36:f4:76:3e:ad:48: 6e:b7:6a:95:76:12:0b:14:1d:6e:e6:0d:a0:a0:a9:32:4d:7b: 9c:66:23:4d:8a:59:d7:6d:f7:6b:70:cd:43:3b:29:5e:37:51: 0a:51:8e:38:5f:df:91:b7:8b:22:47:28:bf:b0:9b:ac:fc:58: 7a:64:65:c4:de:8e:de:5e:61:a9:b8:7f:d0:25:db:38:f4:c8: 5a:9a:8e:77:21:fb:5d:a3:76:de:02:a7:6c:29:f1:cc:de:0f: c9:c1:23:8e:7c:7c:15:ca:90:e4:c6:09:b2:30:a4:16:86:90: 80:15:da:1d:22:6c:56:6f:20:69:a0:ae:89:a5:ce:5d:36:12: 64:d1:81:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav4vNI7iIuAUtWz85BTCuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZjkzNjljNmUyM2MxYmYwZGJlZDMwMWM3ZDAwYjRhM2Zk ZjBkMDQwHhcNMjUxMjI2MTMwMTAxWhcNMjUxMjI3MTMwMTAxWjAzMTEwLwYDVQQD Eyg0MzBiMzcwZGZiMjhiOGViMjlhMzIxMDFjYTA3YTljNzRmN2EyZDcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsd1hafUEhRZ210MuFOew7WvheFt+ Hhz1J0uf6SwuNrRLBBZwtyFTYNzUl5afGiNVHhoKXOe6g/J1hgfjtMH9vVb+Fr4r UC2txvOUIZ4UHn0Y9fqi0d2++h+E9UsAfyraOOvMWhooR2+EGmPJKaaw/kpYRYOz 4GYDLDv8LeniMCkthzaeFwrDa0EspH8RTUtGJHGvRw7/z3A5op2oDhksgsIy+w5O bB4UBWc9upYegYXPAoqB8MYKPDSojeso/650Qn67I710UXDkhFutYpgKkF0gqlgv wJ5rSe2uiL+o5RKLOZ8+dOBX4YCkyJ7ApwOx4d9tV+8Bs9IjUOVaQaCUxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEMLNw37KLjrKaMhAcoHqcdPei1xMB8GA1UdIwQY MBaAFHT5NpxuI8G/Db7TAcfQC0o/3w0EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFBrMm5HNGp3YjhOdnRNQng5QUxTal9mRFFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9iOWRjNGMtNjQzYS00MWI4LWE0NTkt MmI1MThhY2I3OGYzLzEvZFBrMm5HNGp3YjhOdnRNQng5QUxTal9mRFFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9iOWRjNGMtNjQzYS00MWI4LWE0NTktMmI1MThhY2I3OGYz LzEvZFBrMm5HNGp3YjhOdnRNQng5QUxTal9mRFFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAwcN5aE/ na5mzTYvg/yr2GnBOwb56MAmWLNlhDhY6uyrkVos+bp4elZSX2ooivJtjJL7l82G H22xAzE9KH2boqE6t4fv719yc9LQzJ1hWvtikiFLf4/CPdkpbhEgjKn2ygDGGShv x163l1BLAtaHSnVpQK9l827WNvR2Pq1IbrdqlXYSCxQdbuYNoKCpMk17nGYjTYpZ 1233a3DNQzspXjdRClGOOF/fkbeLIkcov7CbrPxYemRlxN6O3l5hqbh/0CXbOPTI WpqOdyH7XaN23gKnbCnxzN4PycEjjnx8FcqQ5MYJsjCkFoaQgBXaHSJsVm8gaaCu iaXOXTYSZNGB8A== -----END CERTIFICATE-----Generated at Fri Dec 26 14:07:10 2025 by rpki-client