This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.mft File: dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.mft (raw, json) Hash identifier: ptX2p8atmZ5Ve2G8A5mS3oMmz1RnZRNl/P32Xh+BFdQ= Subject key identifier: D0:D0:82:D4:2D:3A:0B:1E:12:5E:1B:B3:E7:B0:9C:1D:D8:4D:67:3F Authority key identifier: 77:03:FD:03:A5:F3:4D:8D:56:E9:94:C2:B7:F1:0C:A4:9A:0E:01:54 Certificate issuer: /CN=7703fd03a5f34d8d56e994c2b7f10ca49a0e0154 Certificate serial: 019B5072EF7BC0CD60766082FDCABAC1F383 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.mft Manifest number: 1792 Signing time: Wed 24 Dec 2025 13:01:08 +0000 Manifest this update: Wed 24 Dec 2025 13:01:08 +0000 Manifest next update: Thu 25 Dec 2025 13:01:08 +0000 Files and hashes: 1: WpMT8suijybaT-axFHyfyzyaTBs.roa (hash: I0+iXOVNpy84NiUe0arMh2Z225OGAdH9+ziecARxFHA=) 2: dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.crl (hash: TwDPb2W5YPrQM7H9m4MN2gBeKeEoUcIeM5e1ZLDVxxo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:72:ef:7b:c0:cd:60:76:60:82:fd:ca:ba:c1:f3:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7703fd03a5f34d8d56e994c2b7f10ca49a0e0154 Validity Not Before: Dec 24 13:01:08 2025 GMT Not After : Dec 25 13:01:08 2025 GMT Subject: CN=d0d082d42d3a0b1e125e1bb3e7b09c1dd84d673f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:65:f1:c2:9a:70:a8:b4:3f:b3:bf:0e:01:dd: 00:c6:32:37:1f:0d:9b:a9:c3:bd:19:39:9f:26:fa: c9:ac:a9:c8:d8:35:2a:7a:97:3e:1e:6d:d6:a4:01: 4f:89:23:99:a8:8e:69:95:6a:48:d5:b0:4d:6c:b1: 0e:7d:2b:f6:72:ef:30:76:f8:18:f3:16:0d:e7:2b: 26:56:4e:80:bf:fa:d3:e3:ce:18:11:90:2b:3d:84: 7a:c4:d9:81:09:f2:ff:4d:93:6c:aa:96:8d:bd:2e: 2d:74:de:a0:55:33:ea:91:55:cc:74:b3:a0:ac:52: 9a:0e:03:3c:e0:41:64:92:df:7e:e0:35:8c:cb:1c: f5:8e:e8:7f:54:70:04:ee:eb:ff:3e:3c:07:5d:ff: 6d:24:d2:64:c9:f5:14:fe:4e:5f:b7:bd:df:8f:46: 9c:79:10:29:51:20:5b:a5:59:38:e2:aa:1f:4b:92: f7:5a:3b:f7:b3:07:cb:e8:ea:b6:68:88:5f:d2:b7: a9:55:55:36:bc:b7:24:26:c9:ad:5f:c7:6e:7b:cb: 11:13:b4:69:a3:5c:3d:10:67:28:69:a1:33:ec:6d: 0d:52:b0:3e:c6:f9:e2:ae:c1:7b:bd:8d:70:14:87: b9:3b:66:6f:dc:f8:7c:7d:63:eb:2d:3f:ad:c9:bc: 6a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:D0:82:D4:2D:3A:0B:1E:12:5E:1B:B3:E7:B0:9C:1D:D8:4D:67:3F X509v3 Authority Key Identifier: keyid:77:03:FD:03:A5:F3:4D:8D:56:E9:94:C2:B7:F1:0C:A4:9A:0E:01:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:f5:48:22:03:0a:87:40:85:fa:31:ac:8b:72:dc:45:f5:95: 4f:d0:8e:df:2a:b7:a9:b5:2d:39:9f:71:07:d5:58:63:0c:f9: 08:60:be:4b:c3:42:0a:f3:fb:80:b3:0e:32:c0:22:e2:23:ba: b7:83:ec:57:6d:e9:43:90:2e:11:32:ad:4a:9e:e1:43:d7:08: 02:f8:04:a9:e3:45:19:83:57:35:72:89:5b:03:d9:4b:77:f4: 04:4f:43:4c:24:0b:ce:3c:f7:6b:02:7c:89:ca:9c:49:f4:35: 86:ca:1e:07:0e:85:55:31:b8:b6:0c:af:d3:e5:6d:b6:a4:d0: fb:cf:4e:5b:78:9b:2e:b1:47:fa:bf:f6:13:ec:de:34:a5:e9: cd:f2:4c:cc:a7:78:dc:48:fe:63:57:6e:66:3a:b3:ae:85:5f: d4:59:99:63:5b:e9:6c:5f:75:82:e8:dc:40:58:5d:35:34:ab: 7f:12:54:8d:8e:0a:cb:e1:2c:a4:27:c1:70:5c:c0:82:f6:ee: 62:f0:58:df:4b:b8:eb:02:c2:e3:55:07:5e:8e:09:79:6e:99: 9a:cd:34:79:a8:e6:a1:e6:d7:a5:43:a8:da:c7:75:5e:0c:4a: 7f:cf:09:c5:d3:05:fb:b5:c6:14:ac:2a:0c:bf:0e:08:c8:b1: 80:ad:1a:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQcu97wM1gdmCC/cq6wfODMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MDNmZDAzYTVmMzRkOGQ1NmU5OTRjMmI3ZjEwY2E0OWEw ZTAxNTQwHhcNMjUxMjI0MTMwMTA4WhcNMjUxMjI1MTMwMTA4WjAzMTEwLwYDVQQD EyhkMGQwODJkNDJkM2EwYjFlMTI1ZTFiYjNlN2IwOWMxZGQ4NGQ2NzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mXxwppwqLQ/s78OAd0AxjI3Hw2b qcO9GTmfJvrJrKnI2DUqepc+Hm3WpAFPiSOZqI5plWpI1bBNbLEOfSv2cu8wdvgY 8xYN5ysmVk6Av/rT484YEZArPYR6xNmBCfL/TZNsqpaNvS4tdN6gVTPqkVXMdLOg rFKaDgM84EFkkt9+4DWMyxz1juh/VHAE7uv/PjwHXf9tJNJkyfUU/k5ft73fj0ac eRApUSBbpVk44qofS5L3Wjv3swfL6Oq2aIhf0repVVU2vLckJsmtX8due8sRE7Rp o1w9EGcoaaEz7G0NUrA+xvnirsF7vY1wFIe5O2Zv3Ph8fWPrLT+tybxq9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNDQgtQtOgseEl4bs+ewnB3YTWc/MB8GA1UdIwQY MBaAFHcD/QOl802NVumUwrfxDKSaDgFUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHdQOUE2WHpUWTFXNlpUQ3RfRU1wSm9PQVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9jNTAyNTEtYTRlMS00MjRkLTllOTIt YWM2NzgxZTIzZTg3LzEvZHdQOUE2WHpUWTFXNlpUQ3RfRU1wSm9PQVZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9jNTAyNTEtYTRlMS00MjRkLTllOTItYWM2NzgxZTIzZTg3 LzEvZHdQOUE2WHpUWTFXNlpUQ3RfRU1wSm9PQVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIvVIIgMK h0CF+jGsi3LcRfWVT9CO3yq3qbUtOZ9xB9VYYwz5CGC+S8NCCvP7gLMOMsAi4iO6 t4PsV23pQ5AuETKtSp7hQ9cIAvgEqeNFGYNXNXKJWwPZS3f0BE9DTCQLzjz3awJ8 icqcSfQ1hsoeBw6FVTG4tgyv0+VttqTQ+89OW3ibLrFH+r/2E+zeNKXpzfJMzKd4 3Ej+Y1duZjqzroVf1FmZY1vpbF91gujcQFhdNTSrfxJUjY4Ky+EspCfBcFzAgvbu YvBY30u46wLC41UHXo4JeW6Zms00eajmoebXpUOo2sd1XgxKf88JxdMF+7XGFKwq DL8OCMixgK0aaA== -----END CERTIFICATE-----Generated at Wed Dec 24 18:27:07 2025 by rpki-client