This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft File: dPgamLSHAgyYEF1jE7zWneUKwXs.mft (raw, json) Hash identifier: uo3aB2/OHNqx27oktp66mVmuscW09PJHZnqz8tOuf4Y= Subject key identifier: 91:3B:2D:C0:D9:CC:FF:15:F5:DE:5A:A6:28:15:34:E7:FD:A4:55:FF Authority key identifier: 74:F8:1A:98:B4:87:02:0C:98:10:5D:63:13:BC:D6:9D:E5:0A:C1:7B Certificate issuer: /CN=74f81a98b487020c98105d6313bcd69de50ac17b Certificate serial: 019B5A884883BEC8FC7F38EA68F39D5AB5CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft Manifest number: 03E0 Signing time: Fri 26 Dec 2025 12:00:39 +0000 Manifest this update: Fri 26 Dec 2025 12:00:39 +0000 Manifest next update: Sat 27 Dec 2025 12:00:39 +0000 Files and hashes: 1: 7-iGt4e7trCrvhjbqw5ailuotG8.roa (hash: cy0FH1gqtKBfDPhq2ot6+GUFGCM2/G1KgLpKIId8UGA=) 2: dPgamLSHAgyYEF1jE7zWneUKwXs.crl (hash: B6ZFW+trq73vWFJnnFAkAUtdef4+Z0OpBsa33ZSrnYQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:48:83:be:c8:fc:7f:38:ea:68:f3:9d:5a:b5:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74f81a98b487020c98105d6313bcd69de50ac17b Validity Not Before: Dec 26 12:00:39 2025 GMT Not After : Dec 27 12:00:39 2025 GMT Subject: CN=913b2dc0d9ccff15f5de5aa6281534e7fda455ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a4:82:69:af:da:90:4d:28:eb:e6:cd:c4:67: d8:30:95:99:9e:62:f2:83:a4:33:72:6b:b5:d7:c6: b6:02:c9:71:0e:75:82:c8:fe:03:b9:ef:cf:11:b7: 06:a8:2a:70:d5:97:c6:0b:ca:0e:12:cc:b1:83:a7: 66:3c:f4:8a:99:e3:72:74:76:13:f5:61:3c:38:28: 63:b8:a6:e0:5a:20:ac:a8:88:61:5f:aa:6a:c8:74: 10:64:27:63:ce:bd:2d:d2:5b:6c:3d:6a:76:53:d6: bb:86:8f:df:8d:bd:9f:61:a4:44:18:7a:8b:15:34: 5c:93:d2:c4:52:41:11:9e:ac:37:41:20:a4:47:0c: 13:5e:09:9e:0a:b3:a0:56:d9:0b:b8:b4:18:14:fe: 5b:d7:22:ec:0c:ad:85:6e:88:1d:97:44:b2:2b:23: 5b:b5:45:48:bb:e2:73:a5:45:91:d9:ee:1c:60:8e: 85:14:fc:cc:5b:ba:18:ab:57:0d:50:9f:28:73:71: 69:b2:57:c9:9a:ff:72:c3:78:7c:93:d6:5b:02:da: ed:98:fb:b7:88:38:67:bb:25:ad:32:b8:87:ba:94: 82:f5:6c:41:88:f4:02:1b:94:13:ba:a2:e4:d5:ef: 57:9f:3b:7a:1f:33:2c:6d:88:c8:0d:c3:2c:6d:09: 77:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:3B:2D:C0:D9:CC:FF:15:F5:DE:5A:A6:28:15:34:E7:FD:A4:55:FF X509v3 Authority Key Identifier: keyid:74:F8:1A:98:B4:87:02:0C:98:10:5D:63:13:BC:D6:9D:E5:0A:C1:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPgamLSHAgyYEF1jE7zWneUKwXs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/682983-24bc-4ee1-ad36-01e7131ae1de/1/dPgamLSHAgyYEF1jE7zWneUKwXs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:e0:2b:b3:92:27:5f:cc:1e:66:95:b2:a4:ef:cc:0f:ce:c8: 33:80:1f:a7:7d:17:36:85:1d:de:c9:b9:07:f3:dd:be:2b:2a: c3:04:76:c6:1c:f7:7f:01:f3:b9:bf:7a:c6:de:06:f1:ee:b0: bd:19:ea:bc:3f:cd:09:04:39:69:29:b8:b0:f7:f0:d6:51:81: 2e:d8:66:dc:6a:da:89:ce:87:2f:53:7f:4d:49:84:44:75:71: 9d:db:b3:77:3c:cf:9a:0c:a0:94:11:ce:fd:c2:18:4c:02:1c: a3:74:d7:78:1b:46:b6:4e:8b:26:bd:a4:0d:1c:32:f8:13:eb: c1:56:08:06:0c:c1:d9:c5:9a:56:20:f0:ab:39:82:62:a9:cb: 0a:23:e3:ff:7c:98:81:b2:d7:2e:e6:b5:c6:5f:48:07:5e:e9: 69:33:94:e4:15:51:ad:ac:4a:d2:8f:86:f9:19:dc:06:05:1f: 5a:d1:b6:96:0e:e8:39:c8:d2:0c:36:ea:aa:2d:be:61:56:7a: b1:f7:77:3d:c1:e4:e5:03:d1:fb:f9:99:e2:02:f2:61:d0:5b: 7b:66:cb:68:80:45:59:e4:ab:f5:71:79:39:95:d7:ea:06:ed: 98:e6:22:1b:9d:e4:ed:c9:10:bd:aa:7a:7d:31:bd:73:e6:9d: ff:e5:ac:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiEiDvsj8fzjqaPOdWrXOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZjgxYTk4YjQ4NzAyMGM5ODEwNWQ2MzEzYmNkNjlkZTUw YWMxN2IwHhcNMjUxMjI2MTIwMDM5WhcNMjUxMjI3MTIwMDM5WjAzMTEwLwYDVQQD Eyg5MTNiMmRjMGQ5Y2NmZjE1ZjVkZTVhYTYyODE1MzRlN2ZkYTQ1NWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKSCaa/akE0o6+bNxGfYMJWZnmLy g6Qzcmu118a2AslxDnWCyP4Due/PEbcGqCpw1ZfGC8oOEsyxg6dmPPSKmeNydHYT 9WE8OChjuKbgWiCsqIhhX6pqyHQQZCdjzr0t0ltsPWp2U9a7ho/fjb2fYaREGHqL FTRck9LEUkERnqw3QSCkRwwTXgmeCrOgVtkLuLQYFP5b1yLsDK2Fbogdl0SyKyNb tUVIu+JzpUWR2e4cYI6FFPzMW7oYq1cNUJ8oc3FpslfJmv9yw3h8k9ZbAtrtmPu3 iDhnuyWtMriHupSC9WxBiPQCG5QTuqLk1e9Xnzt6HzMsbYjIDcMsbQl3rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJE7LcDZzP8V9d5apigVNOf9pFX/MB8GA1UdIwQY MBaAFHT4Gpi0hwIMmBBdYxO81p3lCsF7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFBnYW1MU0hBZ3lZRUYxakU3elduZVVLd1hzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82ODI5ODMtMjRiYy00ZWUxLWFkMzYt MDFlNzEzMWFlMWRlLzEvZFBnYW1MU0hBZ3lZRUYxakU3elduZVVLd1hzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy82ODI5ODMtMjRiYy00ZWUxLWFkMzYtMDFlNzEzMWFlMWRl LzEvZFBnYW1MU0hBZ3lZRUYxakU3elduZVVLd1hzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd+Ars5In X8weZpWypO/MD87IM4Afp30XNoUd3sm5B/PdvisqwwR2xhz3fwHzub96xt4G8e6w vRnqvD/NCQQ5aSm4sPfw1lGBLthm3Graic6HL1N/TUmERHVxnduzdzzPmgyglBHO /cIYTAIco3TXeBtGtk6LJr2kDRwy+BPrwVYIBgzB2cWaViDwqzmCYqnLCiPj/3yY gbLXLua1xl9IB17paTOU5BVRraxK0o+G+RncBgUfWtG2lg7oOcjSDDbqqi2+YVZ6 sfd3PcHk5QPR+/mZ4gLyYdBbe2bLaIBFWeSr9XF5OZXX6gbtmOYiG53k7ckQvap6 fTG9c+ad/+Ws4A== -----END CERTIFICATE-----Generated at Fri Dec 26 15:58:09 2025 by rpki-client