This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft File: dPEFnCc8UO3PPc7fxYABUuyR26I.mft (raw, json) Hash identifier: 9vQ2jC8EBRPg0h1YsJbl+Z3JlAzQxhbKkaJnGjqk2YY= Subject key identifier: D7:06:36:DB:2D:BA:6E:AA:AB:4E:D9:89:6B:1F:09:AD:D6:7C:4F:8D Authority key identifier: 74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2 Certificate issuer: /CN=74f1059c273c50edcf3dcedfc5800152ec91dba2 Certificate serial: 019B288A11A9A1727DAAE522AF67DAFA85E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft Manifest number: 177C Signing time: Tue 16 Dec 2025 19:01:35 +0000 Manifest this update: Tue 16 Dec 2025 19:01:35 +0000 Manifest next update: Wed 17 Dec 2025 19:01:35 +0000 Files and hashes: 1: _2TO4dSOjfvwTixfDBf-WBuIl0o.roa (hash: RPjvUg/mlm5LB8eSfOAwiB9MoMFdNTXRZHFg7kwXImU=) 2: dPEFnCc8UO3PPc7fxYABUuyR26I.crl (hash: Ds8QWIF3uP3GJlMOFkIkKBlqX3U2U25HL5/NQO+igzE=) 3: f516EGaO9yNnpKCtINgDdW37z6Y.roa (hash: ED6BLlxCP1AdH6cMJc87FGQDnI7Gyi9C1L6MTbKzt54=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 19:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:8a:11:a9:a1:72:7d:aa:e5:22:af:67:da:fa:85:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74f1059c273c50edcf3dcedfc5800152ec91dba2 Validity Not Before: Dec 16 19:01:35 2025 GMT Not After : Dec 17 19:01:35 2025 GMT Subject: CN=d70636db2dba6eaaab4ed9896b1f09add67c4f8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a6:47:7b:d4:5a:c6:97:d7:1d:d4:96:a7:4f: 0a:cb:2a:87:34:1a:89:d6:81:85:db:4d:2c:82:1a: c4:eb:56:99:4d:e9:56:84:ba:16:4f:1f:60:65:e1: b9:0d:11:6d:4c:d3:54:5f:c7:25:a1:94:e4:7a:8f: e1:a4:0f:f8:ca:a4:99:87:cd:d5:78:14:e5:70:5b: 26:57:34:e3:7f:c2:5f:9a:3f:72:4f:c3:4a:5f:be: bf:08:09:5d:13:01:96:e3:2a:fb:9a:66:c3:d6:83: db:df:fd:6e:31:f4:5b:11:cb:f0:fb:98:30:9a:b3: 31:1b:17:34:a3:41:07:b8:8e:93:3c:9b:76:3e:58: f1:ba:3a:05:b9:c8:13:2c:fc:76:55:f0:ae:8e:26: c2:6b:2e:0a:4c:bc:14:34:b5:ff:07:e3:1a:61:0e: 4a:30:33:e4:fd:55:48:1e:fa:3a:25:eb:c6:49:a6: 75:d2:e6:93:2e:e1:31:6e:9b:b4:fa:6f:7f:c7:d6: 2f:1f:7b:6b:14:c0:12:fa:8d:d5:c5:cd:71:14:90: ea:03:3b:d4:1c:dc:25:32:24:4d:48:24:fd:80:08: e1:87:79:c2:43:9f:ab:5e:12:1b:74:bb:a8:47:74: 95:7e:d1:d6:19:74:41:ce:99:44:83:60:a3:18:d1: f6:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:06:36:DB:2D:BA:6E:AA:AB:4E:D9:89:6B:1F:09:AD:D6:7C:4F:8D X509v3 Authority Key Identifier: keyid:74:F1:05:9C:27:3C:50:ED:CF:3D:CE:DF:C5:80:01:52:EC:91:DB:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPEFnCc8UO3PPc7fxYABUuyR26I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/70f8bb-9a37-4f3e-a581-3ea8194fb446/1/dPEFnCc8UO3PPc7fxYABUuyR26I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:87:f8:1d:78:7c:b3:a3:d5:d0:4e:51:b7:b0:97:2c:12:e6: dd:06:0e:0b:c3:3d:29:6f:0f:e7:02:18:1f:10:e3:8c:bd:0a: 06:82:a3:ca:bb:f9:dc:af:2a:17:ab:7d:ea:d5:c8:d4:33:4f: de:d3:d5:c0:80:7f:83:10:1f:bf:89:df:29:90:07:eb:c6:18: 2e:62:6f:33:0e:e0:f3:5f:d2:2b:32:7d:e8:7e:49:02:d0:58: c4:e6:bf:46:33:41:15:4c:80:04:00:39:8d:17:c1:d6:08:33: bb:d0:a8:ec:d3:4b:31:de:fd:6a:c1:73:a8:53:7c:bb:1b:a7: 39:ef:b7:a6:91:0b:c8:3e:9c:3f:31:b4:21:15:a3:70:fc:54: c8:d2:42:90:5a:0e:5e:08:d7:2c:3b:52:56:15:25:2f:f4:6a: c0:8e:a5:e5:0c:70:93:88:76:22:f7:8a:e2:fd:fb:fa:0d:ef: 6e:0d:03:7f:46:b5:5e:c2:ad:93:a6:c6:ec:b2:a9:71:06:3f: b1:5e:69:b9:fe:6b:ec:bc:3e:b1:8a:1b:48:7d:70:31:72:ec: db:65:43:9e:c5:e8:e8:17:a0:5d:fc:43:75:51:b2:e8:8c:5d: bf:00:5b:30:7e:1d:32:97:93:71:63:e3:5e:c2:f7:28:89:9b: 61:98:81:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoihGpoXJ9quUir2fa+oXgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZjEwNTljMjczYzUwZWRjZjNkY2VkZmM1ODAwMTUyZWM5 MWRiYTIwHhcNMjUxMjE2MTkwMTM1WhcNMjUxMjE3MTkwMTM1WjAzMTEwLwYDVQQD EyhkNzA2MzZkYjJkYmE2ZWFhYWI0ZWQ5ODk2YjFmMDlhZGQ2N2M0ZjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKZHe9RaxpfXHdSWp08KyyqHNBqJ 1oGF200sghrE61aZTelWhLoWTx9gZeG5DRFtTNNUX8cloZTkeo/hpA/4yqSZh83V eBTlcFsmVzTjf8Jfmj9yT8NKX76/CAldEwGW4yr7mmbD1oPb3/1uMfRbEcvw+5gw mrMxGxc0o0EHuI6TPJt2PljxujoFucgTLPx2VfCujibCay4KTLwUNLX/B+MaYQ5K MDPk/VVIHvo6JevGSaZ10uaTLuExbpu0+m9/x9YvH3trFMAS+o3Vxc1xFJDqAzvU HNwlMiRNSCT9gAjhh3nCQ5+rXhIbdLuoR3SVftHWGXRBzplEg2CjGNH2gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNcGNtstum6qq07ZiWsfCa3WfE+NMB8GA1UdIwQY MBaAFHTxBZwnPFDtzz3O38WAAVLskduiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFBFRm5DYzhVTzNQUGM3ZnhZQUJVdXlSMjZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS83MGY4YmItOWEzNy00ZjNlLWE1ODEt M2VhODE5NGZiNDQ2LzEvZFBFRm5DYzhVTzNQUGM3ZnhZQUJVdXlSMjZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS83MGY4YmItOWEzNy00ZjNlLWE1ODEtM2VhODE5NGZiNDQ2 LzEvZFBFRm5DYzhVTzNQUGM3ZnhZQUJVdXlSMjZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFYf4HXh8 s6PV0E5Rt7CXLBLm3QYOC8M9KW8P5wIYHxDjjL0KBoKjyrv53K8qF6t96tXI1DNP 3tPVwIB/gxAfv4nfKZAH68YYLmJvMw7g81/SKzJ96H5JAtBYxOa/RjNBFUyABAA5 jRfB1ggzu9Co7NNLMd79asFzqFN8uxunOe+3ppELyD6cPzG0IRWjcPxUyNJCkFoO XgjXLDtSVhUlL/RqwI6l5Qxwk4h2IveK4v37+g3vbg0Df0a1XsKtk6bG7LKpcQY/ sV5puf5r7Lw+sYobSH1wMXLs22VDnsXo6BegXfxDdVGy6IxdvwBbMH4dMpeTcWPj XsL3KImbYZiBOQ== -----END CERTIFICATE-----Generated at Wed Dec 17 03:35:53 2025 by rpki-client