This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft File: Dw-fBE4rkph410fF_7uArRDj1r0.mft (raw, json) Hash identifier: oqkVA7VA8hXYBX8zipt12kmUXbGomgWrJ0VpOUWSTKE= Subject key identifier: 17:5D:72:DF:FF:E5:D0:36:BA:C0:0B:A8:FE:60:CD:49:92:0D:BB:06 Authority key identifier: 0F:0F:9F:04:4E:2B:92:98:78:D7:47:C5:FF:BB:80:AD:10:E3:D6:BD Certificate issuer: /CN=0f0f9f044e2b929878d747c5ffbb80ad10e3d6bd Certificate serial: 019B45B8665C196BC6623400FBF74AD74925 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dw-fBE4rkph410fF_7uArRDj1r0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft Manifest number: 0C25 Signing time: Mon 22 Dec 2025 11:01:11 +0000 Manifest this update: Mon 22 Dec 2025 11:01:11 +0000 Manifest next update: Tue 23 Dec 2025 11:01:11 +0000 Files and hashes: 1: Dw-fBE4rkph410fF_7uArRDj1r0.crl (hash: EpQJz5p/Xs+isvf4Zc5p5tGex74PsnBfL7MV9Emw0M8=) 2: NY6GkITWKlUtVSGSEXVFnWklUFA.roa (hash: bc90pfjZ3z6bn5Sd1cSbU6mDm4LudyLIA08FEeaNBvM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.crl rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft rsync://rpki.ripe.net/repository/DEFAULT/Dw-fBE4rkph410fF_7uArRDj1r0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 11:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:b8:66:5c:19:6b:c6:62:34:00:fb:f7:4a:d7:49:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f0f9f044e2b929878d747c5ffbb80ad10e3d6bd Validity Not Before: Dec 22 11:01:11 2025 GMT Not After : Dec 23 11:01:11 2025 GMT Subject: CN=175d72dfffe5d036bac00ba8fe60cd49920dbb06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:18:ac:15:b9:a7:02:b6:e6:cb:8b:15:60:aa: af:4a:af:24:66:ac:15:db:e9:19:c4:66:73:be:7a: 66:97:07:de:e8:4a:fb:6e:d0:ab:60:95:dc:52:46: 48:0b:cf:a1:51:8b:8d:a4:3d:12:31:02:6e:d7:f9: 7a:b6:7a:fe:fb:5a:29:00:f2:3f:86:2d:f6:ec:dd: de:90:0f:3e:f6:76:f6:77:69:e9:d0:88:80:69:ef: fe:3b:08:02:65:50:94:58:c8:f1:d7:3f:d5:47:a6: 86:26:7c:dd:7e:9d:f2:ac:4c:bc:1d:2a:3d:a8:79: 3c:1f:dd:f7:fb:f0:ba:39:af:e8:86:3d:e8:98:65: dd:1d:a3:ec:09:45:57:00:95:15:4f:7e:07:57:60: 57:27:a6:94:35:3d:23:3b:98:17:37:20:f9:c1:a7: f3:77:6c:c4:05:7c:b0:40:41:70:cb:34:3e:15:d8: 39:c4:9f:25:2e:e0:91:ed:1c:c5:9c:a7:21:b8:ef: 35:34:52:7e:ad:42:2d:64:74:df:52:32:73:51:18: 27:2c:ca:10:cd:62:26:10:43:73:92:ad:87:de:1d: 48:3c:f2:35:91:47:da:01:3d:72:d7:e0:e5:03:78: 51:95:08:76:c8:37:45:95:14:d7:4a:ac:b7:37:fb: 2a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:5D:72:DF:FF:E5:D0:36:BA:C0:0B:A8:FE:60:CD:49:92:0D:BB:06 X509v3 Authority Key Identifier: keyid:0F:0F:9F:04:4E:2B:92:98:78:D7:47:C5:FF:BB:80:AD:10:E3:D6:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dw-fBE4rkph410fF_7uArRDj1r0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:54:aa:8f:1e:6d:60:8b:22:67:1d:a8:09:80:79:91:d0:74: 90:a8:94:cb:7e:8c:1e:8d:64:d0:e8:87:83:47:6e:21:b8:66: c6:bf:94:52:bd:29:e2:8c:e4:8c:dd:62:2d:27:4c:a2:5a:96: 53:fc:d1:86:4a:bc:b6:fb:05:cf:2b:c1:68:e8:35:6c:3b:e1: 8a:e7:b7:4f:81:01:d3:92:34:ff:b5:cb:b4:0d:ea:b8:3a:ac: 7e:cc:6b:cc:a1:eb:ec:6a:f7:d9:14:e3:de:c2:f9:e0:e1:39: 76:5e:fc:3b:8a:aa:68:b3:90:41:5a:65:51:49:d0:d5:0c:be: 30:2e:fb:db:8f:cb:d6:4d:98:30:37:19:76:3e:24:24:c2:8c: 0c:c1:b9:eb:6e:b3:a4:63:34:a0:9b:0f:45:c6:98:95:cd:a3: bd:76:c8:3e:0f:68:b2:e1:72:3f:3f:93:43:db:69:44:9b:d9: 9e:83:69:d7:c6:c0:cb:42:21:e0:2d:df:97:00:ce:e3:bb:3a: d5:12:d9:6b:67:0b:c6:32:60:3e:f4:ef:27:6f:ac:54:76:5a: fc:ae:50:36:3c:d3:95:1e:70:6c:de:8c:25:29:45:a2:d1:bf: a9:f9:ad:c1:4b:49:68:ae:12:95:c4:dc:eb:d2:01:9b:5f:1f: 7c:f4:17:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFuGZcGWvGYjQA+/dK10klMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMGY5ZjA0NGUyYjkyOTg3OGQ3NDdjNWZmYmI4MGFkMTBl M2Q2YmQwHhcNMjUxMjIyMTEwMTExWhcNMjUxMjIzMTEwMTExWjAzMTEwLwYDVQQD EygxNzVkNzJkZmZmZTVkMDM2YmFjMDBiYThmZTYwY2Q0OTkyMGRiYjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhisFbmnArbmy4sVYKqvSq8kZqwV 2+kZxGZzvnpmlwfe6Er7btCrYJXcUkZIC8+hUYuNpD0SMQJu1/l6tnr++1opAPI/ hi327N3ekA8+9nb2d2np0IiAae/+OwgCZVCUWMjx1z/VR6aGJnzdfp3yrEy8HSo9 qHk8H933+/C6Oa/ohj3omGXdHaPsCUVXAJUVT34HV2BXJ6aUNT0jO5gXNyD5wafz d2zEBXywQEFwyzQ+Fdg5xJ8lLuCR7RzFnKchuO81NFJ+rUItZHTfUjJzURgnLMoQ zWImEENzkq2H3h1IPPI1kUfaAT1y1+DlA3hRlQh2yDdFlRTXSqy3N/sq+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBddct//5dA2usALqP5gzUmSDbsGMB8GA1UdIwQY MBaAFA8PnwROK5KYeNdHxf+7gK0Q49a9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHctZkJFNHJrcGg0MTBmRl83dUFyUkRqMXIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85M2Q0NjAtMzY4Yy00NmQ3LThlN2Et Y2RiZDNiNmNlNzc3LzEvRHctZkJFNHJrcGg0MTBmRl83dUFyUkRqMXIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS85M2Q0NjAtMzY4Yy00NmQ3LThlN2EtY2RiZDNiNmNlNzc3 LzEvRHctZkJFNHJrcGg0MTBmRl83dUFyUkRqMXIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdVSqjx5t YIsiZx2oCYB5kdB0kKiUy36MHo1k0OiHg0duIbhmxr+UUr0p4ozkjN1iLSdMolqW U/zRhkq8tvsFzyvBaOg1bDvhiue3T4EB05I0/7XLtA3quDqsfsxrzKHr7Gr32RTj 3sL54OE5dl78O4qqaLOQQVplUUnQ1Qy+MC7724/L1k2YMDcZdj4kJMKMDMG5626z pGM0oJsPRcaYlc2jvXbIPg9osuFyPz+TQ9tpRJvZnoNp18bAy0Ih4C3flwDO47s6 1RLZa2cLxjJgPvTvJ2+sVHZa/K5QNjzTlR5wbN6MJSlFotG/qfmtwUtJaK4SlcTc 69IBm18ffPQXRg== -----END CERTIFICATE-----Generated at Mon Dec 22 17:30:57 2025 by rpki-client