This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.mft File: DWnj7lXdhiZ01FhmG6NJCLBhf6E.mft (raw, json) Hash identifier: fFJoroZzH29c8tgkHGqcQ0edp6iDoFfzYz3CtppiwKA= Subject key identifier: 55:E3:7C:16:1F:55:03:8F:2A:70:5E:CB:08:CE:E0:AF:17:52:B1:20 Authority key identifier: 0D:69:E3:EE:55:DD:86:26:74:D4:58:66:1B:A3:49:08:B0:61:7F:A1 Certificate issuer: /CN=0d69e3ee55dd862674d458661ba34908b0617fa1 Certificate serial: 019B4A398164C866B43B72BC1A78865B3754 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWnj7lXdhiZ01FhmG6NJCLBhf6E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.mft Manifest number: 09A5 Signing time: Tue 23 Dec 2025 08:00:41 +0000 Manifest this update: Tue 23 Dec 2025 08:00:41 +0000 Manifest next update: Wed 24 Dec 2025 08:00:41 +0000 Files and hashes: 1: DWnj7lXdhiZ01FhmG6NJCLBhf6E.crl (hash: h7rMsgWg1SkK/lsYRpoyWZL9wwv76fCAAFA53+zRNVw=) 2: EjaSjQvA_h8ofCWrzWooV6nayF8.roa (hash: gCmjXDkeCn1nqh4fUFSkYceSyNQm14lj5sOPimTxKOE=) 3: wS1UXRfPtMS1NBYtNz71NeZmtRk.roa (hash: iGK/CXBp/TXIP03g8PJuN3+7774KqoPIJH5kjoUJiwk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.mft rsync://rpki.ripe.net/repository/DEFAULT/DWnj7lXdhiZ01FhmG6NJCLBhf6E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 08:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:39:81:64:c8:66:b4:3b:72:bc:1a:78:86:5b:37:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d69e3ee55dd862674d458661ba34908b0617fa1 Validity Not Before: Dec 23 08:00:41 2025 GMT Not After : Dec 24 08:00:41 2025 GMT Subject: CN=55e37c161f55038f2a705ecb08cee0af1752b120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b1:40:0f:e5:6d:74:4f:51:25:c2:44:8c:35: 9e:d6:12:cb:9d:2b:c6:17:19:91:09:b8:4f:79:da: 52:67:0d:0b:cc:b8:82:d3:5c:5b:e3:e5:1a:a6:5b: e2:40:db:a0:19:ac:82:c1:23:5f:5c:c9:32:89:38: da:ea:7b:76:67:8d:31:53:be:e6:27:42:db:57:ea: 6e:2a:c8:5e:97:e5:da:93:c0:7f:f6:52:de:af:3e: 7c:fb:29:39:8a:83:f3:ca:65:99:7a:35:ec:ae:79: 20:5f:c8:d8:9a:74:66:6e:8b:7a:ef:9f:17:42:40: 98:a9:1a:71:aa:ab:d3:b9:0c:07:37:54:a3:72:1f: 80:4e:50:97:26:8e:c0:cb:24:0f:e9:21:e2:72:62: 93:c6:ca:43:05:5b:f3:5b:52:12:3b:a3:95:43:db: ec:c8:32:8d:bd:3a:03:5d:9a:40:4d:cc:6d:be:33: 0e:23:0d:c1:1b:c4:f5:55:56:b8:c6:f2:5a:3a:ef: e6:51:6f:63:af:1e:36:35:c9:f6:89:c2:93:ce:18: 4b:bd:87:95:42:eb:df:5f:b6:37:02:76:81:b8:0e: 2f:1a:98:83:34:2a:4e:ce:3e:4e:c2:fd:bb:f8:27: 8c:40:32:bf:3c:5a:30:c3:ef:f8:f7:f0:ef:40:f1: a5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:E3:7C:16:1F:55:03:8F:2A:70:5E:CB:08:CE:E0:AF:17:52:B1:20 X509v3 Authority Key Identifier: keyid:0D:69:E3:EE:55:DD:86:26:74:D4:58:66:1B:A3:49:08:B0:61:7F:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWnj7lXdhiZ01FhmG6NJCLBhf6E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:09:b6:67:f3:1b:45:e3:a0:19:da:ec:e7:5d:4d:16:f7:51: 19:1a:13:79:0e:60:54:9c:31:74:85:5a:28:47:25:6d:ac:20: 50:d1:10:fb:16:5c:cc:6c:26:87:36:e3:34:35:4a:b7:df:76: 3d:ee:14:87:97:fe:5c:6b:77:6b:7e:3a:ef:0a:f8:f5:a3:32: 41:81:b0:ff:60:7e:71:78:be:0c:21:f4:c6:9e:5d:3b:7c:07: d0:2a:72:c0:5e:0f:f4:2a:b5:1f:6c:98:fb:6f:e1:f6:7d:93: 43:18:b0:7f:00:3f:28:f5:0f:b3:44:12:32:35:23:be:e0:dc: 85:ee:cb:ef:9b:59:a5:8c:ab:2f:7e:7b:20:fc:70:f1:9f:1f: 3c:f3:60:a9:3d:64:92:4a:63:5c:28:de:85:d6:a4:d0:28:70: 98:c9:f8:a9:89:05:b0:c1:df:c9:52:49:0d:04:23:ec:37:0f: a4:8d:be:50:6a:86:fe:63:da:09:1e:88:4b:f7:74:da:20:01: 71:d6:e3:9c:8a:2b:36:cd:83:61:87:e3:9b:2c:a3:14:5a:83: 84:b4:72:2f:ca:3d:3b:8e:61:bf:c4:ff:4e:c3:4b:cc:c6:1d: af:ff:2c:c6:53:22:59:10:d7:1d:94:ff:e7:06:5b:cb:64:94: 7b:92:16:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKOYFkyGa0O3K8GniGWzdUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNjllM2VlNTVkZDg2MjY3NGQ0NTg2NjFiYTM0OTA4YjA2 MTdmYTEwHhcNMjUxMjIzMDgwMDQxWhcNMjUxMjI0MDgwMDQxWjAzMTEwLwYDVQQD Eyg1NWUzN2MxNjFmNTUwMzhmMmE3MDVlY2IwOGNlZTBhZjE3NTJiMTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrFAD+VtdE9RJcJEjDWe1hLLnSvG FxmRCbhPedpSZw0LzLiC01xb4+UaplviQNugGayCwSNfXMkyiTja6nt2Z40xU77m J0LbV+puKshel+Xak8B/9lLerz58+yk5ioPzymWZejXsrnkgX8jYmnRmbot6758X QkCYqRpxqqvTuQwHN1Sjch+ATlCXJo7AyyQP6SHicmKTxspDBVvzW1ISO6OVQ9vs yDKNvToDXZpATcxtvjMOIw3BG8T1VVa4xvJaOu/mUW9jrx42Ncn2icKTzhhLvYeV QuvfX7Y3AnaBuA4vGpiDNCpOzj5Owv27+CeMQDK/PFoww+/49/DvQPGlnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFXjfBYfVQOPKnBeywjO4K8XUrEgMB8GA1UdIwQY MBaAFA1p4+5V3YYmdNRYZhujSQiwYX+hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFduajdsWGRoaVowMUZobUc2TkpDTEJoZjZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8xZDJlZjgtYTg2ZS00NDZmLThjMzUt YjgzM2JkOWUwYjNhLzEvRFduajdsWGRoaVowMUZobUc2TkpDTEJoZjZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8xZDJlZjgtYTg2ZS00NDZmLThjMzUtYjgzM2JkOWUwYjNh LzEvRFduajdsWGRoaVowMUZobUc2TkpDTEJoZjZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYwm2Z/Mb ReOgGdrs511NFvdRGRoTeQ5gVJwxdIVaKEclbawgUNEQ+xZczGwmhzbjNDVKt992 Pe4Uh5f+XGt3a3467wr49aMyQYGw/2B+cXi+DCH0xp5dO3wH0CpywF4P9Cq1H2yY +2/h9n2TQxiwfwA/KPUPs0QSMjUjvuDche7L75tZpYyrL357IPxw8Z8fPPNgqT1k kkpjXCjehdak0ChwmMn4qYkFsMHfyVJJDQQj7DcPpI2+UGqG/mPaCR6IS/d02iAB cdbjnIorNs2DYYfjmyyjFFqDhLRyL8o9O45hv8T/TsNLzMYdr/8sxlMiWRDXHZT/ 5wZby2SUe5IWgQ== -----END CERTIFICATE-----Generated at Tue Dec 23 13:58:34 2025 by rpki-client