This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.mft File: dFYQDLNjsOFKnzhOeowc-aO4W_M.mft (raw, json) Hash identifier: btwQjZNgYnZYHEJBwdzf8nRppNSpAYH9xMKkLGWf7R8= Subject key identifier: C0:69:71:42:D5:83:59:7A:8E:EB:9B:D1:FB:E0:76:18:CE:45:4B:92 Authority key identifier: 74:56:10:0C:B3:63:B0:E1:4A:9F:38:4E:7A:8C:1C:F9:A3:B8:5B:F3 Certificate issuer: /CN=7456100cb363b0e14a9f384e7a8c1cf9a3b85bf3 Certificate serial: 019B20CFEF701D3F4567AE961119B0FC4E42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFYQDLNjsOFKnzhOeowc-aO4W_M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.mft Manifest number: 1099 Signing time: Mon 15 Dec 2025 07:00:56 +0000 Manifest this update: Mon 15 Dec 2025 07:00:56 +0000 Manifest next update: Tue 16 Dec 2025 07:00:56 +0000 Files and hashes: 1: 6APrd79kmuyNwpex626uNLGMIX0.roa (hash: 7Zm/lOFTt+AfdsIxcjvvrXgteW7mXkxvg9D1ZZh9It8=) 2: dFYQDLNjsOFKnzhOeowc-aO4W_M.crl (hash: WbzAfNQrsfru3QQlR5e1Z3HXQ9W1N61f1UAVE3YU5xA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.mft rsync://rpki.ripe.net/repository/DEFAULT/dFYQDLNjsOFKnzhOeowc-aO4W_M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 07:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:cf:ef:70:1d:3f:45:67:ae:96:11:19:b0:fc:4e:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7456100cb363b0e14a9f384e7a8c1cf9a3b85bf3 Validity Not Before: Dec 15 07:00:56 2025 GMT Not After : Dec 16 07:00:56 2025 GMT Subject: CN=c0697142d583597a8eeb9bd1fbe07618ce454b92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:12:1f:e7:62:30:27:11:7d:13:11:c9:38:f6: 29:bd:02:af:11:67:98:8c:bf:93:16:53:1f:46:9b: a8:a6:97:f5:93:a4:2a:cc:15:eb:0a:8b:6d:39:66: cf:9f:8a:67:09:79:b5:97:db:89:9b:54:c8:37:98: a7:32:d7:f5:3a:87:db:23:1e:e6:7c:b9:98:bd:3d: 20:43:20:18:19:99:e5:ce:a3:21:4f:c9:d7:3a:eb: c1:4a:b5:3e:35:9f:25:90:ea:b8:11:ac:8f:74:f3: 1e:dd:73:6e:4c:21:48:9c:94:75:cb:d9:2d:d7:1d: 80:9d:1b:b2:0d:4d:a9:c2:5f:3e:bb:22:83:e1:c8: 39:e1:e6:08:e7:94:bc:11:4c:68:8d:7a:08:ed:03: b5:e9:05:e9:8c:ee:4f:db:6f:90:57:0f:ae:62:a3: 16:6c:4c:24:8d:fe:c2:d8:52:00:13:72:ba:87:90: e8:20:7e:51:9d:c7:fe:b5:47:83:e9:17:d8:7a:9f: 7c:c8:7b:37:e2:f9:e3:47:65:97:84:a9:61:d6:56: ff:57:2d:2f:65:d0:cb:0d:5e:79:06:24:d0:25:14: 4e:01:3e:49:fe:0a:d2:5a:45:c6:20:0c:f1:08:3d: 0b:76:d1:c9:77:08:a9:3b:ec:37:0b:52:b0:cd:d7: 36:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:69:71:42:D5:83:59:7A:8E:EB:9B:D1:FB:E0:76:18:CE:45:4B:92 X509v3 Authority Key Identifier: keyid:74:56:10:0C:B3:63:B0:E1:4A:9F:38:4E:7A:8C:1C:F9:A3:B8:5B:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFYQDLNjsOFKnzhOeowc-aO4W_M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12b32c-94a6-48bb-8956-89898b2ed15e/1/dFYQDLNjsOFKnzhOeowc-aO4W_M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption de:6b:c7:9e:9f:b3:8c:f0:6e:0d:a4:27:22:a0:a9:28:f7:f5: 5d:1e:e4:69:eb:4a:68:ad:15:c0:66:39:62:aa:49:a9:64:e5: 11:7d:c2:c1:39:bc:00:46:2c:8e:92:93:33:d3:81:c3:25:f7: e2:63:c1:42:97:09:19:e8:38:c7:5a:1b:2b:f4:c6:7f:8c:ef: 77:b4:d2:12:57:50:ed:c8:0c:ce:a7:98:1f:22:82:63:8f:a9: 68:5c:ff:35:85:87:aa:e4:17:9d:ed:b0:c0:66:fa:cd:aa:1a: be:6d:85:86:41:19:5f:2d:66:2b:5f:0c:95:9d:47:2e:ec:ca: 8d:61:eb:91:ce:29:66:42:94:7a:91:52:b0:23:d7:63:1b:0c: 68:94:b7:6d:46:12:6f:65:b1:c1:f7:41:f0:89:88:58:ed:01: 36:6e:71:56:a4:b3:28:38:58:80:d3:8e:34:67:62:6e:36:09: ae:e2:7c:f1:c9:b5:00:62:61:f2:48:4d:f0:38:fa:12:df:8f: 9e:b6:ac:fe:9b:d5:18:ac:51:72:52:51:f8:8c:7a:63:33:ac: cd:66:00:a5:7a:a7:04:3c:04:70:85:af:5e:ac:09:d8:97:3b: c9:b7:af:34:78:c0:c1:e6:26:4f:ce:73:26:1e:dc:6d:25:eb: 4a:ea:14:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgz+9wHT9FZ66WERmw/E5CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NTYxMDBjYjM2M2IwZTE0YTlmMzg0ZTdhOGMxY2Y5YTNi ODViZjMwHhcNMjUxMjE1MDcwMDU2WhcNMjUxMjE2MDcwMDU2WjAzMTEwLwYDVQQD EyhjMDY5NzE0MmQ1ODM1OTdhOGVlYjliZDFmYmUwNzYxOGNlNDU0YjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RIf52IwJxF9ExHJOPYpvQKvEWeY jL+TFlMfRpuoppf1k6QqzBXrCottOWbPn4pnCXm1l9uJm1TIN5inMtf1OofbIx7m fLmYvT0gQyAYGZnlzqMhT8nXOuvBSrU+NZ8lkOq4EayPdPMe3XNuTCFInJR1y9kt 1x2AnRuyDU2pwl8+uyKD4cg54eYI55S8EUxojXoI7QO16QXpjO5P22+QVw+uYqMW bEwkjf7C2FIAE3K6h5DoIH5Rncf+tUeD6RfYep98yHs34vnjR2WXhKlh1lb/Vy0v ZdDLDV55BiTQJRROAT5J/grSWkXGIAzxCD0LdtHJdwipO+w3C1Kwzdc2NQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMBpcULVg1l6juub0fvgdhjORUuSMB8GA1UdIwQY MBaAFHRWEAyzY7DhSp84TnqMHPmjuFvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEZZUURMTmpzT0ZLbnpoT2Vvd2MtYU80V19NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8xMmIzMmMtOTRhNi00OGJiLTg5NTYt ODk4OThiMmVkMTVlLzEvZEZZUURMTmpzT0ZLbnpoT2Vvd2MtYU80V19NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy8xMmIzMmMtOTRhNi00OGJiLTg5NTYtODk4OThiMmVkMTVl LzEvZEZZUURMTmpzT0ZLbnpoT2Vvd2MtYU80V19NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3mvHnp+z jPBuDaQnIqCpKPf1XR7kaetKaK0VwGY5YqpJqWTlEX3CwTm8AEYsjpKTM9OBwyX3 4mPBQpcJGeg4x1obK/TGf4zvd7TSEldQ7cgMzqeYHyKCY4+paFz/NYWHquQXne2w wGb6zaoavm2FhkEZXy1mK18MlZ1HLuzKjWHrkc4pZkKUepFSsCPXYxsMaJS3bUYS b2WxwfdB8ImIWO0BNm5xVqSzKDhYgNOONGdibjYJruJ88cm1AGJh8khN8Dj6Et+P nras/pvVGKxRclJR+Ix6YzOszWYApXqnBDwEcIWvXqwJ2Jc7ybevNHjAweYmT85z Jh7cbSXrSuoUug== -----END CERTIFICATE-----Generated at Mon Dec 15 12:00:27 2025 by rpki-client