This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft File: Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft (raw, json) Hash identifier: AqGyBo+8VOZM0ywbluqynyDnvQUywUYOOgEymlAQcl4= Subject key identifier: AB:54:B0:7B:C7:49:2E:CE:41:0F:25:42:A7:83:6F:D6:8E:AF:5C:96 Authority key identifier: 0F:09:1B:DC:66:6B:8A:59:43:3C:68:D9:0E:0D:8C:C3:7A:CD:CE:92 Certificate issuer: /CN=0f091bdc666b8a59433c68d90e0d8cc37acdce92 Certificate serial: 019B6279518956052C490A969F2302EB048F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft Manifest number: 17A1 Signing time: Sun 28 Dec 2025 01:01:16 +0000 Manifest this update: Sun 28 Dec 2025 01:01:16 +0000 Manifest next update: Mon 29 Dec 2025 01:01:16 +0000 Files and hashes: 1: 7i8JH2gDDE50EmzV6j2wTHTOrXc.roa (hash: N1lOwseUmLTmn9OgnciUdbf6hlxuHBxxnuvg8UgK1o8=) 2: Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl (hash: 8eojqMQ5gUxSJro4qiXIeE3QCoRmEcU3Cb6PhGvia8A=) 3: Q5TavcFKtR_0I79BfhZ4NkPDGaA.roa (hash: EO/fBdrumGLJMFUy0n9hpgnFqYeN6WeBPt+jfe8wV+o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:79:51:89:56:05:2c:49:0a:96:9f:23:02:eb:04:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f091bdc666b8a59433c68d90e0d8cc37acdce92 Validity Not Before: Dec 28 01:01:16 2025 GMT Not After : Dec 29 01:01:16 2025 GMT Subject: CN=ab54b07bc7492ece410f2542a7836fd68eaf5c96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ff:ee:62:c1:46:77:32:41:c3:ec:6b:72:53: bb:3e:18:2d:2e:9c:b1:f5:1e:db:13:e5:dd:57:35: 70:18:2f:f7:f0:c9:21:15:4a:a9:bc:56:96:70:38: 18:d5:0d:6c:99:7c:77:88:48:b0:5d:8d:8a:88:6c: d3:2e:b3:95:23:18:88:97:06:12:1d:73:44:8d:58: 37:b8:d4:93:bb:80:94:8a:e7:7d:cd:5e:69:41:18: f7:bb:ec:0b:6a:e9:5f:10:10:b4:03:f7:3f:26:c5: e9:b7:4d:a9:dd:4f:57:70:a8:4c:a7:33:e6:16:d0: 6b:6c:7d:65:27:80:9b:9c:22:96:a7:0b:f9:e6:73: 59:87:4f:9d:99:c9:70:8f:65:c4:93:7c:3e:20:7f: a9:77:56:c7:af:27:d7:b5:8f:ec:a6:30:9e:3d:dc: 27:5c:fb:5b:5c:9e:4b:91:35:73:ca:e9:21:05:cc: 1e:a2:02:71:37:79:7e:e2:8b:3d:32:f5:30:bb:60: 46:8b:20:f4:10:dd:0c:47:7e:63:fa:55:9f:50:d9: 84:a5:43:e6:2b:ef:27:3a:75:3a:3f:0d:34:d2:a2: 11:ae:8c:7f:31:1a:12:89:c6:e8:7a:3f:82:4c:61: 0b:6c:cf:b3:2a:06:d9:f8:3b:66:97:90:c3:76:b8: a9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:54:B0:7B:C7:49:2E:CE:41:0F:25:42:A7:83:6F:D6:8E:AF:5C:96 X509v3 Authority Key Identifier: keyid:0F:09:1B:DC:66:6B:8A:59:43:3C:68:D9:0E:0D:8C:C3:7A:CD:CE:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:31:c0:e2:04:0d:56:ee:cb:97:da:29:89:af:f7:fb:c8:18: 40:8d:03:b1:d3:29:fd:6e:7d:da:3f:18:a0:85:56:fa:ea:dc: 8f:48:3a:a0:96:ef:92:f9:2c:b7:bd:34:6c:be:bb:d6:ed:42: 75:bb:00:1b:2d:5c:fb:47:21:ac:0f:49:05:a0:8b:8d:44:01: ed:da:1c:fa:f0:1b:d0:29:19:33:cc:13:f2:6d:c9:93:71:a6: d0:37:f8:ec:d0:e5:d0:29:b2:22:82:d7:78:43:63:d5:58:76: 5d:10:d5:e6:d9:ed:61:0d:d7:a5:f9:d0:de:a2:0d:0e:0a:90: 96:1b:73:3c:27:d0:40:15:1a:19:3f:76:f9:66:55:a1:b3:29: 9b:19:12:b0:89:05:14:82:0f:74:a6:70:19:3b:b5:0d:82:6b: 6d:2a:ab:f2:df:29:7d:30:57:ac:a5:16:d1:95:7e:97:7d:4b: 3c:dc:56:f9:05:b4:76:d9:75:23:d5:98:a9:01:b9:97:95:62: 5b:ee:24:3d:16:5d:84:f2:41:60:55:64:b8:6f:b7:b5:41:fe: 88:70:93:91:1d:cb:a6:37:29:1e:4a:e9:19:41:c5:03:f0:00: aa:59:98:03:e4:a2:1d:f1:19:bb:51:d0:8f:65:a7:b3:07:74: b4:f9:b1:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtieVGJVgUsSQqWnyMC6wSPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMDkxYmRjNjY2YjhhNTk0MzNjNjhkOTBlMGQ4Y2MzN2Fj ZGNlOTIwHhcNMjUxMjI4MDEwMTE2WhcNMjUxMjI5MDEwMTE2WjAzMTEwLwYDVQQD EyhhYjU0YjA3YmM3NDkyZWNlNDEwZjI1NDJhNzgzNmZkNjhlYWY1Yzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6//uYsFGdzJBw+xrclO7PhgtLpyx 9R7bE+XdVzVwGC/38MkhFUqpvFaWcDgY1Q1smXx3iEiwXY2KiGzTLrOVIxiIlwYS HXNEjVg3uNSTu4CUiud9zV5pQRj3u+wLaulfEBC0A/c/JsXpt02p3U9XcKhMpzPm FtBrbH1lJ4CbnCKWpwv55nNZh0+dmclwj2XEk3w+IH+pd1bHryfXtY/spjCePdwn XPtbXJ5LkTVzyukhBcweogJxN3l+4os9MvUwu2BGiyD0EN0MR35j+lWfUNmEpUPm K+8nOnU6Pw000qIRrox/MRoSicboej+CTGELbM+zKgbZ+Dtml5DDdripWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKtUsHvHSS7OQQ8lQqeDb9aOr1yWMB8GA1UdIwQY MBaAFA8JG9xma4pZQzxo2Q4NjMN6zc6SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHdrYjNHWnJpbGxEUEdqWkRnMk13M3JOenBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9iNjQwODMtNTUwZS00Y2FmLWJjMjkt YTM0YThiODA2ODMyLzEvRHdrYjNHWnJpbGxEUEdqWkRnMk13M3JOenBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9iNjQwODMtNTUwZS00Y2FmLWJjMjktYTM0YThiODA2ODMy LzEvRHdrYjNHWnJpbGxEUEdqWkRnMk13M3JOenBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAajHA4gQN Vu7Ll9opia/3+8gYQI0DsdMp/W592j8YoIVW+urcj0g6oJbvkvkst700bL671u1C dbsAGy1c+0chrA9JBaCLjUQB7doc+vAb0CkZM8wT8m3Jk3Gm0Df47NDl0CmyIoLX eENj1Vh2XRDV5tntYQ3XpfnQ3qINDgqQlhtzPCfQQBUaGT92+WZVobMpmxkSsIkF FIIPdKZwGTu1DYJrbSqr8t8pfTBXrKUW0ZV+l31LPNxW+QW0dtl1I9WYqQG5l5Vi W+4kPRZdhPJBYFVkuG+3tUH+iHCTkR3LpjcpHkrpGUHFA/AAqlmYA+SiHfEZu1HQ j2Wnswd0tPmx5g== -----END CERTIFICATE-----Generated at Sun Dec 28 05:52:43 2025 by rpki-client