This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft File: dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft (raw, json) Hash identifier: 5KX0AaMiRxr3uAvOj/W9yzMASU10wpnCk5dnuJeDdCE= Subject key identifier: 99:94:AF:72:C7:6A:3F:D7:43:86:E7:C2:B2:F0:CC:0E:00:CB:4C:93 Authority key identifier: 74:6C:0E:1A:73:3A:D8:33:BC:BE:50:A8:12:44:8B:F5:E0:99:E9:5F Certificate issuer: /CN=746c0e1a733ad833bcbe50a812448bf5e099e95f Certificate serial: 019B462747934E8154770D99EE57A545D235 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft Manifest number: 0C48 Signing time: Mon 22 Dec 2025 13:02:17 +0000 Manifest this update: Mon 22 Dec 2025 13:02:17 +0000 Manifest next update: Tue 23 Dec 2025 13:02:17 +0000 Files and hashes: 1: EkI17AhjtH4o6y1KK4g_wzf3KNE.roa (hash: Mqae8JvuYfzZf4ghYC7/qSTNS8cE9NEKQ8xHhpacTOs=) 2: dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl (hash: lfTWsHL7X0xiBntfKJ5ckmhzuHjx3XGM0NnlH9fd7/I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 13:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:27:47:93:4e:81:54:77:0d:99:ee:57:a5:45:d2:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746c0e1a733ad833bcbe50a812448bf5e099e95f Validity Not Before: Dec 22 13:02:17 2025 GMT Not After : Dec 23 13:02:17 2025 GMT Subject: CN=9994af72c76a3fd74386e7c2b2f0cc0e00cb4c93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0f:4f:95:5f:ad:34:eb:3a:86:55:07:cb:1f: 3c:c2:b2:3f:79:4d:dc:f6:de:a4:11:40:00:41:f5: 88:bd:05:7a:96:86:4f:bf:b6:1b:11:90:bd:99:af: b8:0d:6e:d7:7c:9d:b4:40:55:63:e0:34:42:9a:13: 9e:aa:24:00:d7:d5:6f:d5:0a:5c:9b:bd:61:1a:fe: 14:27:14:ef:19:db:e6:45:53:b2:c6:35:68:35:a7: 3a:17:c9:6f:04:35:39:92:83:8b:32:8e:ef:65:2f: 6f:8c:ee:aa:50:d4:b8:e2:09:49:54:82:8f:eb:3a: 0c:16:19:b7:56:a8:9d:e5:c0:0a:08:5d:5e:42:ee: 4c:b6:e1:e1:4a:9e:05:2c:6f:9a:ca:01:9a:20:ea: 80:2c:51:6e:36:88:4d:13:1e:d9:de:eb:10:8b:40: 2e:84:11:f2:34:00:e5:77:06:76:06:b4:63:d0:3e: 2f:85:ab:3e:9e:7b:f1:8e:60:51:2e:de:40:16:f2: 4f:79:83:62:a4:01:33:65:b7:ba:8f:c7:d9:04:52: 4e:63:ee:ba:35:ae:0a:19:05:7c:bc:dd:4e:69:4a: de:93:82:77:42:55:15:6b:db:ae:0b:1c:ce:fb:dd: 62:41:5e:7c:04:41:da:9a:e9:c0:38:0a:19:da:be: 10:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:94:AF:72:C7:6A:3F:D7:43:86:E7:C2:B2:F0:CC:0E:00:CB:4C:93 X509v3 Authority Key Identifier: keyid:74:6C:0E:1A:73:3A:D8:33:BC:BE:50:A8:12:44:8B:F5:E0:99:E9:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:50:8b:56:44:97:e4:4c:23:3e:4d:01:13:bc:c8:9d:00:48: a2:9e:c6:fc:b7:28:f0:16:17:6d:20:11:3a:51:fc:ed:8d:57: 37:39:92:43:78:40:8a:2c:6a:8f:9f:27:05:56:d9:da:07:38: ac:1c:f6:c3:2e:6d:a1:21:43:d2:8c:49:31:ae:6d:55:39:fe: d7:19:a1:cb:10:f9:d6:a4:1c:50:a8:ab:a7:cc:85:9e:9d:5a: e6:33:e3:21:a3:2b:85:5a:c0:17:9d:84:15:e6:cb:75:32:9f: 0a:f0:b3:de:db:61:50:a5:10:61:94:0e:64:2f:63:f5:7f:7f: 9c:36:e6:07:9c:e8:e0:e4:3b:27:20:a0:f7:8d:4d:b1:40:2d: e4:f2:cd:98:9b:c1:b0:49:0c:97:70:99:f2:43:be:c0:8b:b5: bf:a9:01:7d:a6:63:20:26:83:60:58:ad:20:d0:d0:c9:3d:6c: af:42:13:be:a3:1a:64:3d:b9:66:c0:ea:7e:be:b0:f5:60:9e: 65:e4:07:d7:11:e3:53:2a:98:f8:81:1a:22:3a:10:99:32:08: a8:30:6a:8c:5a:a6:d1:00:79:b2:fa:14:0a:e9:4a:c4:39:89: e2:f0:d7:3d:1d:72:6b:76:f1:d4:cd:4f:25:72:de:48:60:11: 41:ea:c7:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJ0eTToFUdw2Z7lelRdI1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NmMwZTFhNzMzYWQ4MzNiY2JlNTBhODEyNDQ4YmY1ZTA5 OWU5NWYwHhcNMjUxMjIyMTMwMjE3WhcNMjUxMjIzMTMwMjE3WjAzMTEwLwYDVQQD Eyg5OTk0YWY3MmM3NmEzZmQ3NDM4NmU3YzJiMmYwY2MwZTAwY2I0YzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQ9PlV+tNOs6hlUHyx88wrI/eU3c 9t6kEUAAQfWIvQV6loZPv7YbEZC9ma+4DW7XfJ20QFVj4DRCmhOeqiQA19Vv1Qpc m71hGv4UJxTvGdvmRVOyxjVoNac6F8lvBDU5koOLMo7vZS9vjO6qUNS44glJVIKP 6zoMFhm3Vqid5cAKCF1eQu5MtuHhSp4FLG+aygGaIOqALFFuNohNEx7Z3usQi0Au hBHyNADldwZ2BrRj0D4vhas+nnvxjmBRLt5AFvJPeYNipAEzZbe6j8fZBFJOY+66 Na4KGQV8vN1OaUrek4J3QlUVa9uuCxzO+91iQV58BEHamunAOAoZ2r4QEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJmUr3LHaj/XQ4bnwrLwzA4Ay0yTMB8GA1UdIwQY MBaAFHRsDhpzOtgzvL5QqBJEi/XgmelfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEd3T0duTTYyRE84dmxDb0VrU0w5ZUNaNlY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC82MWVhNDgtM2UzOS00MWU4LWIyMmEt NmM5YTgyNTU4MWNiLzEvZEd3T0duTTYyRE84dmxDb0VrU0w5ZUNaNlY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC82MWVhNDgtM2UzOS00MWU4LWIyMmEtNmM5YTgyNTU4MWNi LzEvZEd3T0duTTYyRE84dmxDb0VrU0w5ZUNaNlY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkFCLVkSX 5EwjPk0BE7zInQBIop7G/Lco8BYXbSAROlH87Y1XNzmSQ3hAiixqj58nBVbZ2gc4 rBz2wy5toSFD0oxJMa5tVTn+1xmhyxD51qQcUKirp8yFnp1a5jPjIaMrhVrAF52E FebLdTKfCvCz3tthUKUQYZQOZC9j9X9/nDbmB5zo4OQ7JyCg941NsUAt5PLNmJvB sEkMl3CZ8kO+wIu1v6kBfaZjICaDYFitINDQyT1sr0ITvqMaZD25ZsDqfr6w9WCe ZeQH1xHjUyqY+IEaIjoQmTIIqDBqjFqm0QB5svoUCulKxDmJ4vDXPR1ya3bx1M1P JXLeSGARQerHew== -----END CERTIFICATE-----Generated at Mon Dec 22 18:38:48 2025 by rpki-client