This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft File: dhwFdTsZvNtTL9x_b0fpfpNboKI.mft (raw, json) Hash identifier: 2ttGy+1YUssk9QEDCYi0spjuBMkjmX1BXH4/zDmagRE= Subject key identifier: DD:E6:56:BD:BB:13:70:AD:0C:27:E3:8A:8A:96:F6:99:C0:3E:14:B3 Authority key identifier: 76:1C:05:75:3B:19:BC:DB:53:2F:DC:7F:6F:47:E9:7E:93:5B:A0:A2 Certificate issuer: /CN=761c05753b19bcdb532fdc7f6f47e97e935ba0a2 Certificate serial: 019B529815447318C81E69A8507C523E5EBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhwFdTsZvNtTL9x_b0fpfpNboKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft Manifest number: 1273 Signing time: Wed 24 Dec 2025 23:00:57 +0000 Manifest this update: Wed 24 Dec 2025 23:00:57 +0000 Manifest next update: Thu 25 Dec 2025 23:00:57 +0000 Files and hashes: 1: dhwFdTsZvNtTL9x_b0fpfpNboKI.crl (hash: pUSEjz5C9v/hRdfcxE4Zt5HF0h2s2Exq3jDAQ0KXyi8=) 2: xzA5d-E1vgeb4mwlvmzNBazR01w.roa (hash: ajfP28ApDq4Q5y/sbVJlhsT7w2HrFwDNTtJP+3l1w9U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft rsync://rpki.ripe.net/repository/DEFAULT/dhwFdTsZvNtTL9x_b0fpfpNboKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 23:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:98:15:44:73:18:c8:1e:69:a8:50:7c:52:3e:5e:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=761c05753b19bcdb532fdc7f6f47e97e935ba0a2 Validity Not Before: Dec 24 23:00:57 2025 GMT Not After : Dec 25 23:00:57 2025 GMT Subject: CN=dde656bdbb1370ad0c27e38a8a96f699c03e14b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ba:de:1e:7a:79:c7:ed:af:72:48:fe:8e:d8: 7f:aa:85:e4:ea:2a:1d:43:ec:f0:8b:24:20:e0:e0: 05:3e:98:a1:c1:e5:b8:60:89:97:fc:d0:38:30:ed: 5f:5b:bf:50:fd:24:41:d9:ee:eb:1b:2c:ae:bd:3c: 4b:94:10:57:04:1e:c0:7b:7a:78:3a:44:9d:00:b6: f7:6b:77:b3:9a:08:92:b1:58:f0:7e:ef:d5:da:c8: c0:35:62:16:d6:d3:25:60:21:b7:80:55:16:93:99: 35:1d:cc:cc:46:47:16:62:c8:82:31:a0:9a:8d:e0: ef:95:09:ae:dc:59:1d:4d:68:76:e9:5f:32:e1:6f: 5d:fb:8b:97:82:f1:6d:e0:58:0c:41:4b:47:75:44: 7a:05:40:b5:fe:aa:75:88:a9:39:67:48:e4:ea:84: f0:c1:0d:73:77:84:c6:07:a1:80:ad:22:44:28:1d: 56:7b:b1:bf:31:c1:9c:46:5d:0e:72:5c:19:25:07: 94:ba:00:7d:b7:6b:23:b8:fd:c0:a1:d0:2e:a6:9a: 91:6d:06:90:f9:6b:f8:14:da:05:04:fa:20:07:65: a3:51:8d:0d:e8:96:b6:d5:e8:89:c9:ca:aa:51:f7: b7:65:55:32:51:00:56:35:ea:ee:7f:52:47:61:03: cb:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:E6:56:BD:BB:13:70:AD:0C:27:E3:8A:8A:96:F6:99:C0:3E:14:B3 X509v3 Authority Key Identifier: keyid:76:1C:05:75:3B:19:BC:DB:53:2F:DC:7F:6F:47:E9:7E:93:5B:A0:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhwFdTsZvNtTL9x_b0fpfpNboKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:f9:36:e1:36:28:e1:41:ff:1a:48:c1:3f:92:3f:28:cf:50: 02:ee:2b:ed:f7:52:ad:20:d1:0d:3e:0a:f8:c2:d7:b6:85:01: a7:00:14:88:a8:c3:dc:3d:86:02:62:1c:7e:55:22:7f:9c:52: f7:7c:ec:49:6c:cf:d1:d1:4f:f5:9b:53:27:1a:63:84:ff:32: cc:54:8c:6e:77:c4:57:c5:b5:f1:fc:4b:41:01:a5:bc:c0:bf: e3:57:a6:d6:b0:ee:8e:82:e3:8d:39:9c:fb:42:aa:25:44:0d: 47:46:c6:fa:13:63:15:d7:14:81:12:dc:5e:51:3c:6d:a5:dc: 63:ff:22:28:b2:84:bf:4b:d4:d0:cf:34:c6:2c:6b:4a:e5:3b: 73:06:fb:17:3b:e9:4d:8c:94:75:24:44:8e:64:e6:6e:05:9a: 14:52:af:9d:0d:4a:85:d2:a9:b8:2a:a8:ea:bb:f1:39:2b:55: b5:5b:35:5e:a6:32:dc:0e:0e:fc:0e:24:34:6a:0a:4c:00:8a: da:db:04:3f:f8:9c:16:cd:d2:3f:2e:b6:33:82:22:cb:71:57: 40:60:0a:f4:b7:cb:45:1d:f8:e5:7e:35:7a:f9:0a:2b:35:b1: 7d:72:63:47:fb:7a:53:2b:26:c5:b6:63:b5:84:b0:22:94:54: d0:47:64:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSmBVEcxjIHmmoUHxSPl67MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2MWMwNTc1M2IxOWJjZGI1MzJmZGM3ZjZmNDdlOTdlOTM1 YmEwYTIwHhcNMjUxMjI0MjMwMDU3WhcNMjUxMjI1MjMwMDU3WjAzMTEwLwYDVQQD EyhkZGU2NTZiZGJiMTM3MGFkMGMyN2UzOGE4YTk2ZjY5OWMwM2UxNGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LreHnp5x+2vckj+jth/qoXk6iod Q+zwiyQg4OAFPpihweW4YImX/NA4MO1fW79Q/SRB2e7rGyyuvTxLlBBXBB7Ae3p4 OkSdALb3a3ezmgiSsVjwfu/V2sjANWIW1tMlYCG3gFUWk5k1HczMRkcWYsiCMaCa jeDvlQmu3FkdTWh26V8y4W9d+4uXgvFt4FgMQUtHdUR6BUC1/qp1iKk5Z0jk6oTw wQ1zd4TGB6GArSJEKB1We7G/McGcRl0OclwZJQeUugB9t2sjuP3AodAuppqRbQaQ +Wv4FNoFBPogB2WjUY0N6Ja21eiJycqqUfe3ZVUyUQBWNeruf1JHYQPLcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN3mVr27E3CtDCfjioqW9pnAPhSzMB8GA1UdIwQY MBaAFHYcBXU7GbzbUy/cf29H6X6TW6CiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGh3RmRUc1p2TnRUTDl4X2IwZnBmcE5ib0tJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81YmVmYTctODdmZC00NGEyLWIxZjQt M2U4ZjU3NWVkZGZmLzEvZGh3RmRUc1p2TnRUTDl4X2IwZnBmcE5ib0tJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy81YmVmYTctODdmZC00NGEyLWIxZjQtM2U4ZjU3NWVkZGZm LzEvZGh3RmRUc1p2TnRUTDl4X2IwZnBmcE5ib0tJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgfk24TYo 4UH/GkjBP5I/KM9QAu4r7fdSrSDRDT4K+MLXtoUBpwAUiKjD3D2GAmIcflUif5xS 93zsSWzP0dFP9ZtTJxpjhP8yzFSMbnfEV8W18fxLQQGlvMC/41em1rDujoLjjTmc +0KqJUQNR0bG+hNjFdcUgRLcXlE8baXcY/8iKLKEv0vU0M80xixrSuU7cwb7Fzvp TYyUdSREjmTmbgWaFFKvnQ1KhdKpuCqo6rvxOStVtVs1XqYy3A4O/A4kNGoKTACK 2tsEP/icFs3SPy62M4Iiy3FXQGAK9LfLRR345X41evkKKzWxfXJjR/t6UysmxbZj tYSwIpRU0EdkSA== -----END CERTIFICATE-----Generated at Thu Dec 25 09:14:34 2025 by rpki-client