This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft File: DwgImqp8KDZUvNpQqTNGTnEnkbA.mft (raw, json) Hash identifier: Y7xybobLgjbWgdBzywVIZhgmeRwB/FsYsk/UpOHFTHQ= Subject key identifier: C9:C2:94:40:0A:7D:FC:58:0D:F9:4F:05:A5:E8:90:20:3C:DC:9B:19 Authority key identifier: 0F:08:08:9A:AA:7C:28:36:54:BC:DA:50:A9:33:46:4E:71:27:91:B0 Certificate issuer: /CN=0f08089aaa7c283654bcda50a933464e712791b0 Certificate serial: 019B808397466FFDEB153771CAB984298F5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft Manifest number: 1459 Signing time: Fri 02 Jan 2026 21:01:06 +0000 Manifest this update: Fri 02 Jan 2026 21:01:06 +0000 Manifest next update: Sat 03 Jan 2026 21:01:06 +0000 Files and hashes: 1: DwgImqp8KDZUvNpQqTNGTnEnkbA.crl (hash: JgdFHWwrgBu9k+WWpLRxSF9QbkQRZCQACwGMkfsUkeQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:80:83:97:46:6f:fd:eb:15:37:71:ca:b9:84:29:8f:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f08089aaa7c283654bcda50a933464e712791b0 Validity Not Before: Jan 2 21:01:06 2026 GMT Not After : Jan 3 21:01:06 2026 GMT Subject: CN=c9c294400a7dfc580df94f05a5e890203cdc9b19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:80:2d:78:a5:b8:36:19:9c:05:4e:ba:e7:b6: b3:0b:4f:12:c0:8c:aa:b8:bb:88:fe:9d:58:04:2c: 1f:0c:34:41:c1:6d:2a:b8:8e:79:5d:08:2e:40:e4: 18:2d:d8:c6:0e:9f:3a:82:c3:79:01:0d:fb:96:69: 01:c1:27:ac:ad:c0:0e:03:2a:6c:12:f3:5f:88:16: 70:78:07:1e:97:22:27:22:48:78:1b:1a:e7:e9:cd: 73:0e:9f:08:bd:72:27:c9:f6:62:1f:12:9a:5f:d7: 69:7e:cf:b2:38:af:9e:3c:0b:92:bd:ec:79:f5:ef: 5f:16:16:0a:91:c4:49:cc:17:2d:b0:32:a0:7d:76: 23:42:78:3a:d3:22:57:3c:9f:df:ac:48:98:2d:b5: db:e1:ba:83:cb:1e:41:1c:0d:33:03:8b:a2:f4:3f: 5a:e0:a0:74:37:f5:65:8c:c8:63:80:94:6a:50:12: fd:d4:f3:58:07:db:53:80:ce:2e:16:9c:ba:78:db: d3:17:7c:7b:10:63:13:26:f9:f2:61:9f:ae:5b:2e: 93:be:d1:ce:7b:da:70:9f:6d:8d:c0:3b:0c:58:1e: 81:5c:54:5c:f4:91:19:79:7b:e5:24:9c:86:8b:32: 48:a2:af:34:c0:8c:38:43:14:ee:22:af:a3:94:9f: c9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:C2:94:40:0A:7D:FC:58:0D:F9:4F:05:A5:E8:90:20:3C:DC:9B:19 X509v3 Authority Key Identifier: keyid:0F:08:08:9A:AA:7C:28:36:54:BC:DA:50:A9:33:46:4E:71:27:91:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:81:70:66:3a:c8:57:9c:0c:d4:df:cf:b8:b5:d7:19:6f:34: e9:0b:15:46:69:bc:06:97:6c:3a:f7:8e:b5:cf:25:32:87:dd: 6a:29:97:97:3c:65:60:da:92:57:30:1b:8f:9f:c1:ab:27:8b: 4d:3a:c9:75:c0:50:ef:c5:9b:c7:1f:ea:3f:03:62:ce:6c:de: c7:8d:c5:52:dc:b7:5f:db:5b:e9:f1:92:f6:0c:7e:e3:5c:f3: 26:4e:b5:da:ff:69:f8:39:da:b7:09:8b:89:12:97:a5:69:57: 2e:cc:c7:d9:33:54:3a:13:8c:94:55:fc:39:ba:7e:8f:66:0c: 03:f9:ad:49:16:48:1c:e0:55:55:12:41:04:81:e7:0d:8b:cb: 11:e1:27:b7:35:0e:46:ab:20:60:a0:04:01:52:61:39:89:e4: cd:df:c9:5a:56:af:80:b3:2f:10:27:76:60:b6:1d:49:fa:f9: 7d:ff:54:d6:fb:e9:62:2d:29:b9:8c:a6:a1:57:08:0e:33:57: 0d:3c:78:fa:f8:3f:c2:57:7f:0a:80:32:65:ab:fa:72:9f:67: f7:59:5c:2b:82:90:40:3d:4a:54:aa:c0:85:5b:4a:63:c1:88: 6f:9d:fb:50:c0:ac:d7:09:b0:27:a2:07:bb:ab:22:aa:f6:53: 3e:d0:f0:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuAg5dGb/3rFTdxyrmEKY9bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMDgwODlhYWE3YzI4MzY1NGJjZGE1MGE5MzM0NjRlNzEy NzkxYjAwHhcNMjYwMTAyMjEwMTA2WhcNMjYwMTAzMjEwMTA2WjAzMTEwLwYDVQQD EyhjOWMyOTQ0MDBhN2RmYzU4MGRmOTRmMDVhNWU4OTAyMDNjZGM5YjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIAteKW4NhmcBU6657azC08SwIyq uLuI/p1YBCwfDDRBwW0quI55XQguQOQYLdjGDp86gsN5AQ37lmkBwSesrcAOAyps EvNfiBZweAcelyInIkh4Gxrn6c1zDp8IvXInyfZiHxKaX9dpfs+yOK+ePAuSvex5 9e9fFhYKkcRJzBctsDKgfXYjQng60yJXPJ/frEiYLbXb4bqDyx5BHA0zA4ui9D9a 4KB0N/VljMhjgJRqUBL91PNYB9tTgM4uFpy6eNvTF3x7EGMTJvnyYZ+uWy6TvtHO e9pwn22NwDsMWB6BXFRc9JEZeXvlJJyGizJIoq80wIw4QxTuIq+jlJ/JzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMnClEAKffxYDflPBaXokCA83JsZMB8GA1UdIwQY MBaAFA8ICJqqfCg2VLzaUKkzRk5xJ5GwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHdnSW1xcDhLRFpVdk5wUXFUTkdUbkVua2JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9jYTc4MDktYTdhOC00OGJjLTg0ZTgt NjMwNDIzMmJlYzNjLzEvRHdnSW1xcDhLRFpVdk5wUXFUTkdUbkVua2JBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9jYTc4MDktYTdhOC00OGJjLTg0ZTgtNjMwNDIzMmJlYzNj LzEvRHdnSW1xcDhLRFpVdk5wUXFUTkdUbkVua2JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfYFwZjrI V5wM1N/PuLXXGW806QsVRmm8BpdsOveOtc8lMofdaimXlzxlYNqSVzAbj5/BqyeL TTrJdcBQ78Wbxx/qPwNizmzex43FUty3X9tb6fGS9gx+41zzJk612v9p+DnatwmL iRKXpWlXLszH2TNUOhOMlFX8Obp+j2YMA/mtSRZIHOBVVRJBBIHnDYvLEeEntzUO RqsgYKAEAVJhOYnkzd/JWlavgLMvECd2YLYdSfr5ff9U1vvpYi0puYymoVcIDjNX DTx4+vg/wld/CoAyZav6cp9n91lcK4KQQD1KVKrAhVtKY8GIb537UMCs1wmwJ6IH u6siqvZTPtDwig== -----END CERTIFICATE-----Generated at Sat Jan 3 00:57:39 2026 by rpki-client