This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft File: DHiHWC2D0_CHaCr4eAoySjU854I.mft (raw, json) Hash identifier: UNUnnOJbeu3c5JtGXDBi5KM8/qFUshqhyGfXp8LAskY= Subject key identifier: 48:8D:8E:0B:19:1C:03:E7:F2:EA:9E:D7:B7:43:67:77:AB:33:6D:96 Authority key identifier: 0C:78:87:58:2D:83:D3:F0:87:68:2A:F8:78:0A:32:4A:35:3C:E7:82 Certificate issuer: /CN=0c7887582d83d3f087682af8780a324a353ce782 Certificate serial: 019B2F9E0DE528E61918D3517B6BF9F8FF3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft Manifest number: 0368 Signing time: Thu 18 Dec 2025 04:00:45 +0000 Manifest this update: Thu 18 Dec 2025 04:00:45 +0000 Manifest next update: Fri 19 Dec 2025 04:00:45 +0000 Files and hashes: 1: DHiHWC2D0_CHaCr4eAoySjU854I.crl (hash: F91ZZAzwRBuQxRcZp8pXeMfStQ+NNSJn5yD2MtB1mbI=) 2: NKGpONeNnSpGwNOfgTkqUqFSjcA.roa (hash: WjB4Os9y0GFlUDkg//rucVelf/mCKnH3dM3BpCHYRSs=) 3: _fSVy8gUALSmUPQ-yxN1Q7l_wXM.roa (hash: FrBR6FuZTCnouiuHvCixUxsBalYSZNZhY0D3KcXPGlM=) 4: _rfOVyo7DuPsLTQU__hvST7kgv0.roa (hash: uPbFY4d1NRbHScZUPpEXzuR0hfWtaapZ5VL4DMx2+zU=) 5: iX_xELZoVhjZx2tmfK6PH-R4qfg.roa (hash: 8Md57/s7g7icy63N7gSiYrFS0c7WsDeTkry4vuIPhFc=) 6: ihZ66_FRP1ZEi9NozSdwfCGel-M.roa (hash: wFOQHVX1zMY4YtBKixW4VOsy+9ZxuzYcQZi+JYB6nWA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.crl rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:0d:e5:28:e6:19:18:d3:51:7b:6b:f9:f8:ff:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c7887582d83d3f087682af8780a324a353ce782 Validity Not Before: Dec 18 04:00:45 2025 GMT Not After : Dec 19 04:00:45 2025 GMT Subject: CN=488d8e0b191c03e7f2ea9ed7b7436777ab336d96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:99:93:d7:8c:8d:22:47:12:cc:b5:16:15:2b: b9:38:e8:3c:26:de:4e:ba:5e:7f:7b:5b:49:93:e3: 59:e0:10:bb:9c:46:0c:ac:d6:70:16:07:1f:39:6d: 91:ca:9b:24:c9:b2:82:9d:7c:82:3a:b1:4b:2c:49: 73:fd:51:07:7a:8a:04:11:4e:9e:67:d2:03:4f:45: 67:75:13:fe:06:32:26:2b:ca:8f:45:37:ee:b2:2a: bd:8f:4a:8a:d6:e9:aa:5b:99:12:5a:40:63:2e:46: c7:74:46:9f:c5:22:1f:0e:4a:6e:bf:9f:3b:7b:80: 52:ce:c0:95:93:a5:f2:4d:e2:82:71:23:6e:2d:d7: 0a:56:5d:49:25:55:9e:54:aa:b8:74:00:e8:f5:3f: 54:cb:53:3d:30:b8:69:f5:bb:98:e5:5b:3d:16:bb: 55:31:a3:8e:2a:ef:9b:3d:09:9a:73:0a:ec:b4:e1: c7:c1:28:13:6f:3e:38:67:77:ff:f0:58:95:30:b0: f2:f7:e2:19:98:8c:6b:07:84:77:75:39:b1:1a:7e: db:69:50:58:21:0f:e7:3b:64:92:85:b1:54:23:2b: e5:de:b7:e1:ad:8f:d5:0b:41:17:79:0d:f5:36:ff: c5:dc:d8:4e:9f:15:60:4a:b4:b1:1e:44:3f:45:9c: b9:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:8D:8E:0B:19:1C:03:E7:F2:EA:9E:D7:B7:43:67:77:AB:33:6D:96 X509v3 Authority Key Identifier: keyid:0C:78:87:58:2D:83:D3:F0:87:68:2A:F8:78:0A:32:4A:35:3C:E7:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:2e:21:50:e6:97:b9:b1:2b:0d:ba:97:7e:bc:4e:3e:1f:5c: 35:ec:93:97:c5:b3:85:39:2f:19:8d:35:c3:c3:f3:76:c6:15: 4e:c8:2e:c0:b4:4a:6a:50:a5:17:c0:95:4e:83:3a:cc:ab:a4: a2:b4:87:ad:a5:83:95:92:27:d7:14:bf:c9:c8:9f:87:c5:66: c5:58:80:9f:12:3d:2e:60:e0:76:a7:de:28:6d:e4:e0:43:b7: cf:ff:69:83:48:33:a3:b1:ba:5d:56:b1:e6:91:64:9d:92:8a: 22:66:62:de:8e:af:6d:31:60:e1:ed:52:6a:84:6c:bd:57:8a: 1f:2f:95:cd:32:35:9f:cb:a6:c0:fd:b6:b9:dd:93:1f:e1:3e: 08:1c:b2:e7:f1:1a:36:02:4b:68:b6:ca:c8:08:88:c1:0c:a2: 25:aa:9c:dc:17:3c:81:d0:4e:81:43:0e:4b:4e:ca:f7:71:cb: 48:3a:af:0a:78:ac:dd:cf:8d:fa:6c:50:ea:5b:3c:72:ac:f5: fc:b8:f0:b4:02:32:5b:2e:40:a0:8d:8b:61:14:57:49:9e:1a: 90:ff:85:c6:b2:42:9f:1f:6b:c1:aa:17:38:b7:5a:f8:4c:db: 6b:52:15:fc:da:db:2d:6e:c9:56:4c:f1:e7:bf:b9:03:49:53: fb:c1:ce:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvng3lKOYZGNNRe2v5+P88MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNzg4NzU4MmQ4M2QzZjA4NzY4MmFmODc4MGEzMjRhMzUz Y2U3ODIwHhcNMjUxMjE4MDQwMDQ1WhcNMjUxMjE5MDQwMDQ1WjAzMTEwLwYDVQQD Eyg0ODhkOGUwYjE5MWMwM2U3ZjJlYTllZDdiNzQzNjc3N2FiMzM2ZDk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZmT14yNIkcSzLUWFSu5OOg8Jt5O ul5/e1tJk+NZ4BC7nEYMrNZwFgcfOW2RypskybKCnXyCOrFLLElz/VEHeooEEU6e Z9IDT0VndRP+BjImK8qPRTfusiq9j0qK1umqW5kSWkBjLkbHdEafxSIfDkpuv587 e4BSzsCVk6XyTeKCcSNuLdcKVl1JJVWeVKq4dADo9T9Uy1M9MLhp9buY5Vs9FrtV MaOOKu+bPQmacwrstOHHwSgTbz44Z3f/8FiVMLDy9+IZmIxrB4R3dTmxGn7baVBY IQ/nO2SShbFUIyvl3rfhrY/VC0EXeQ31Nv/F3NhOnxVgSrSxHkQ/RZy5FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEiNjgsZHAPn8uqe17dDZ3erM22WMB8GA1UdIwQY MBaAFAx4h1gtg9Pwh2gq+HgKMko1POeCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREhpSFdDMkQwX0NIYUNyNGVBb3lTalU4NTRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9iZmY0OGYtMGEzMC00NzhkLWIyZGIt YWQ0YTFkYTM5M2ExLzEvREhpSFdDMkQwX0NIYUNyNGVBb3lTalU4NTRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9iZmY0OGYtMGEzMC00NzhkLWIyZGItYWQ0YTFkYTM5M2Ex LzEvREhpSFdDMkQwX0NIYUNyNGVBb3lTalU4NTRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALC4hUOaX ubErDbqXfrxOPh9cNeyTl8WzhTkvGY01w8PzdsYVTsguwLRKalClF8CVToM6zKuk orSHraWDlZIn1xS/ycifh8VmxViAnxI9LmDgdqfeKG3k4EO3z/9pg0gzo7G6XVax 5pFknZKKImZi3o6vbTFg4e1SaoRsvVeKHy+VzTI1n8umwP22ud2TH+E+CByy5/Ea NgJLaLbKyAiIwQyiJaqc3Bc8gdBOgUMOS07K93HLSDqvCnis3c+N+mxQ6ls8cqz1 /LjwtAIyWy5AoI2LYRRXSZ4akP+FxrJCnx9rwaoXOLda+Ezba1IV/NrbLW7JVkzx 57+5A0lT+8HOSA== -----END CERTIFICATE-----Generated at Thu Dec 18 10:25:36 2025 by rpki-client