This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft File: Dv0crRIZAnVQiePKgLptfMxLm3E.mft (raw, json) Hash identifier: DHZ5iS9liZeOfRp+28QDn6dJv8Z3A7gbRuTc+/PuPMQ= Subject key identifier: 61:0E:74:32:B9:7D:50:C8:F1:74:4F:53:AC:BD:69:68:6F:F3:19:D9 Authority key identifier: 0E:FD:1C:AD:12:19:02:75:50:89:E3:CA:80:BA:6D:7C:CC:4B:9B:71 Certificate issuer: /CN=0efd1cad121902755089e3ca80ba6d7ccc4b9b71 Certificate serial: 019B69FBAF6C684964553B1E2E2A586477E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dv0crRIZAnVQiePKgLptfMxLm3E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft Manifest number: 0D9B Signing time: Mon 29 Dec 2025 12:01:00 +0000 Manifest this update: Mon 29 Dec 2025 12:01:00 +0000 Manifest next update: Tue 30 Dec 2025 12:01:00 +0000 Files and hashes: 1: Dv0crRIZAnVQiePKgLptfMxLm3E.crl (hash: g92sgc+6wtRdJjv2jJtGH6ZzLX6ALM/OtrSdE7ZVJwE=) 2: kzypufx1A54QL9RnefA55meWSPM.roa (hash: cK+sc1FxI2UgckK1YuVxFsSFuYcOk8chhmHAVw1PhQ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.crl rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft rsync://rpki.ripe.net/repository/DEFAULT/Dv0crRIZAnVQiePKgLptfMxLm3E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 10:15:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:fb:af:6c:68:49:64:55:3b:1e:2e:2a:58:64:77:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0efd1cad121902755089e3ca80ba6d7ccc4b9b71 Validity Not Before: Dec 29 12:01:00 2025 GMT Not After : Dec 30 12:01:00 2025 GMT Subject: CN=610e7432b97d50c8f1744f53acbd69686ff319d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:89:84:fa:55:d1:48:ee:2e:d1:cf:b2:13:f7: 76:a9:19:bd:75:45:ee:c0:f5:a3:7b:ee:ed:e6:09: 6e:d5:ee:d3:d4:61:2f:c9:e0:c8:65:49:68:4f:52: a6:95:8f:71:2e:4d:25:30:9f:17:f1:ac:dc:35:55: 1d:96:8f:67:a1:f3:7b:ae:0e:dd:4b:0e:f8:26:34: 3c:ec:a5:48:4d:cb:c8:1f:b6:40:62:fd:d0:af:b6: aa:14:74:c6:0e:4b:4b:13:ef:ca:01:32:f6:ca:61: 22:d2:97:e6:2a:a5:84:83:fe:e8:22:37:c4:d2:b8: 3a:22:f6:48:ef:3e:9f:4b:57:9d:e3:90:6d:d0:e3: 65:55:fa:3f:ad:54:4b:75:5f:84:5e:48:8e:82:4a: ed:c4:9a:42:1a:e3:90:1a:20:8d:ca:33:d1:21:2f: df:75:61:8e:e5:ff:b5:5a:20:9d:78:ed:c7:f7:45: 8c:3f:58:2d:3f:22:a0:ff:ea:db:fb:60:74:67:24: bf:29:be:8b:df:11:97:da:8a:ec:ab:90:b2:da:92: c5:2f:7f:2e:57:a7:da:c3:29:c6:57:fb:74:d9:78: 45:70:b8:6d:b2:0c:54:14:ed:f8:da:36:e3:82:91: 2a:54:76:cb:b2:40:27:e9:a0:58:dc:f9:cf:0f:87: 4a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:0E:74:32:B9:7D:50:C8:F1:74:4F:53:AC:BD:69:68:6F:F3:19:D9 X509v3 Authority Key Identifier: keyid:0E:FD:1C:AD:12:19:02:75:50:89:E3:CA:80:BA:6D:7C:CC:4B:9B:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dv0crRIZAnVQiePKgLptfMxLm3E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:23:0d:6d:8a:a0:4f:2d:07:92:e7:d1:23:91:44:69:cc:c4: 42:54:e6:9c:97:2f:ec:d1:d0:0e:4d:5a:ac:51:68:41:fc:fa: a0:d3:e6:a3:1d:f2:73:46:5e:f7:fc:80:a2:b6:19:87:9a:7f: 54:b7:1f:5c:2f:ab:89:87:09:f1:73:8c:58:dc:72:27:f0:94: 1f:7b:48:99:d2:ca:d8:52:73:e5:7a:6f:97:2a:50:7a:d5:2d: 53:59:b3:d9:26:87:cb:cf:34:a4:d6:26:13:eb:76:fe:a9:b2: bc:2d:66:f9:55:9e:b1:57:1f:fa:bd:f2:f8:f7:b0:e6:f7:74: 34:09:5e:99:1e:65:90:94:6e:43:86:d7:07:6e:54:72:55:a6: bb:3a:13:cb:33:21:b8:fb:0a:b0:fc:e3:cf:c2:05:c2:ea:9a: 42:5f:fb:9b:4d:f5:b3:d4:3f:55:17:3e:40:b8:ba:45:16:5a: d9:d2:f1:14:3f:31:8c:08:b8:60:b9:6d:69:00:c8:43:64:12: 12:54:7a:d3:3d:a8:d9:00:3e:fe:73:55:c5:3a:d7:d0:70:82: be:a6:08:1e:1c:71:0d:af:14:5a:52:59:17:e4:85:52:6e:e3: 2e:3b:2b:25:29:35:96:ab:1b:91:40:5e:60:70:bb:6c:79:98: 5f:c5:53:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtp+69saElkVTseLipYZHfgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlZmQxY2FkMTIxOTAyNzU1MDg5ZTNjYTgwYmE2ZDdjY2M0 YjliNzEwHhcNMjUxMjI5MTIwMTAwWhcNMjUxMjMwMTIwMTAwWjAzMTEwLwYDVQQD Eyg2MTBlNzQzMmI5N2Q1MGM4ZjE3NDRmNTNhY2JkNjk2ODZmZjMxOWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiImE+lXRSO4u0c+yE/d2qRm9dUXu wPWje+7t5glu1e7T1GEvyeDIZUloT1KmlY9xLk0lMJ8X8azcNVUdlo9nofN7rg7d Sw74JjQ87KVITcvIH7ZAYv3Qr7aqFHTGDktLE+/KATL2ymEi0pfmKqWEg/7oIjfE 0rg6IvZI7z6fS1ed45Bt0ONlVfo/rVRLdV+EXkiOgkrtxJpCGuOQGiCNyjPRIS/f dWGO5f+1WiCdeO3H90WMP1gtPyKg/+rb+2B0ZyS/Kb6L3xGX2orsq5Cy2pLFL38u V6fawynGV/t02XhFcLhtsgxUFO342jbjgpEqVHbLskAn6aBY3PnPD4dKYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGEOdDK5fVDI8XRPU6y9aWhv8xnZMB8GA1UdIwQY MBaAFA79HK0SGQJ1UInjyoC6bXzMS5txMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHYwY3JSSVpBblZRaWVQS2dMcHRmTXhMbTNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9kZjk5ZDMtNTAyOC00MzYxLWI3OTUt M2FmNGE5NDYzYjc3LzEvRHYwY3JSSVpBblZRaWVQS2dMcHRmTXhMbTNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9kZjk5ZDMtNTAyOC00MzYxLWI3OTUtM2FmNGE5NDYzYjc3 LzEvRHYwY3JSSVpBblZRaWVQS2dMcHRmTXhMbTNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeiMNbYqg Ty0HkufRI5FEaczEQlTmnJcv7NHQDk1arFFoQfz6oNPmox3yc0Ze9/yAorYZh5p/ VLcfXC+riYcJ8XOMWNxyJ/CUH3tImdLK2FJz5XpvlypQetUtU1mz2SaHy880pNYm E+t2/qmyvC1m+VWesVcf+r3y+Pew5vd0NAlemR5lkJRuQ4bXB25UclWmuzoTyzMh uPsKsPzjz8IFwuqaQl/7m031s9Q/VRc+QLi6RRZa2dLxFD8xjAi4YLltaQDIQ2QS ElR60z2o2QA+/nNVxTrX0HCCvqYIHhxxDa8UWlJZF+SFUm7jLjsrJSk1lqsbkUBe YHC7bHmYX8VTng== -----END CERTIFICATE-----Generated at Mon Dec 29 14:41:25 2025 by rpki-client