This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft File: dnwXZvu9z_aLvDSjxr5poMigOrk.mft (raw, json) Hash identifier: 0leN7rFD2Kl9U0rSqY/xYqo1hH7RsKt1VL95kaYUyPY= Subject key identifier: EE:1F:9C:56:94:AD:1A:96:DF:A4:3E:09:81:54:C2:B0:78:E5:5F:E5 Authority key identifier: 76:7C:17:66:FB:BD:CF:F6:8B:BC:34:A3:C6:BE:69:A0:C8:A0:3A:B9 Certificate issuer: /CN=767c1766fbbdcff68bbc34a3c6be69a0c8a03ab9 Certificate serial: 019B3720F68D6A59E79ED3FBF20D17769DFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft Manifest number: 0F7F Signing time: Fri 19 Dec 2025 15:01:05 +0000 Manifest this update: Fri 19 Dec 2025 15:01:05 +0000 Manifest next update: Sat 20 Dec 2025 15:01:05 +0000 Files and hashes: 1: dnwXZvu9z_aLvDSjxr5poMigOrk.crl (hash: BxtmgqvP/ONi7Tx8j6djoh1blYW8C32vyWVAq4czE40=) 2: ffTvs6YF_hXAEglDFhneoTAWA7Y.roa (hash: McS9n7bcKq8O21qZ8IIp3IHODw/eCLO/50XCpVXjy20=) 3: xnRx0OSK9TIMFxn1VL8fIU-kDPQ.roa (hash: l/e913myQSQUa6e/Y2iqnvi7HmfqzgcIokF4oa8whYM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.crl rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:20:f6:8d:6a:59:e7:9e:d3:fb:f2:0d:17:76:9d:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767c1766fbbdcff68bbc34a3c6be69a0c8a03ab9 Validity Not Before: Dec 19 15:01:05 2025 GMT Not After : Dec 20 15:01:05 2025 GMT Subject: CN=ee1f9c5694ad1a96dfa43e098154c2b078e55fe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4f:e0:87:3b:6c:ad:a8:2b:39:b8:ea:e4:3a: 27:91:5f:f5:65:7a:85:3b:f8:83:f2:83:d4:85:a3: e8:55:4c:81:95:84:75:c6:6b:31:f0:bf:de:14:f3: d9:35:0d:9d:4e:37:e4:b1:93:62:23:c6:e8:7a:11: 27:1e:2f:49:58:6f:b1:71:ce:19:29:d1:c7:31:d5: f2:c8:a3:9d:ef:1f:20:1c:77:d6:c6:a1:d2:a4:50: c3:8c:00:ce:6d:9f:c7:fc:71:05:46:c9:83:8b:c6: ee:dc:60:1d:d0:a7:98:9b:00:fe:98:6a:88:2f:a5: 66:c2:ac:e2:ec:4e:20:4a:c9:4c:8f:11:67:1f:06: 05:55:d7:20:e5:92:cf:93:dc:56:35:89:95:c9:61: 7e:96:65:23:60:30:5c:b6:be:32:e7:63:08:c9:81: 04:e2:73:8a:2d:60:ae:8d:9e:6a:35:10:ec:13:40: 1e:da:46:96:d2:db:44:2a:b9:1a:e3:fc:fc:54:62: f3:27:18:15:71:7c:5d:d7:85:f1:51:ab:c9:1f:80: 1f:ee:90:eb:cd:b8:9f:b3:2b:ba:1c:8a:02:e7:a6: 13:76:a7:ce:8e:3b:0e:8c:7d:cb:fd:bb:d7:ac:8c: e0:6a:71:88:51:9a:47:f3:d6:20:a2:62:d6:ce:4c: 3f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:1F:9C:56:94:AD:1A:96:DF:A4:3E:09:81:54:C2:B0:78:E5:5F:E5 X509v3 Authority Key Identifier: keyid:76:7C:17:66:FB:BD:CF:F6:8B:BC:34:A3:C6:BE:69:A0:C8:A0:3A:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:48:62:76:73:ab:1f:71:e4:e1:ed:6e:3f:d0:b7:32:04:8d: 30:66:95:1d:7f:e7:bf:59:9d:fa:67:d4:12:f9:a2:be:00:fe: ab:97:3d:f2:25:25:a7:b2:cb:b1:67:b1:2b:24:d1:b4:e5:4a: b1:99:b5:8e:6c:b8:9e:0a:6b:88:a6:20:33:9f:e7:44:73:b9: b3:b0:c5:74:b0:4f:b9:ac:08:6d:f7:f7:3b:18:46:1f:cc:59: 5b:c7:e3:44:b1:51:84:6d:f8:20:ea:1a:4b:1f:46:37:7a:d6: b0:a5:ff:4f:8a:b3:c6:e8:6c:5f:7b:32:c8:2d:be:96:a5:32: 4f:f7:d4:d4:da:e1:0d:52:9d:64:a1:1c:89:68:fe:7d:4a:ff: ca:ca:9b:69:1e:69:36:86:e0:79:e5:1a:80:42:cd:a6:ff:40: c0:fa:ab:a2:78:79:46:60:da:85:9b:87:06:c9:f3:d3:5b:c6: 41:4d:5d:b8:5f:82:9a:92:17:34:c4:18:b1:23:41:f2:4d:40: 90:75:d6:1c:7c:b4:b9:bb:9f:01:88:f1:6c:30:c8:16:08:30: 11:b3:ba:a4:19:d2:1c:30:ce:41:4b:ee:3f:6e:a8:0e:cd:86: c7:cb:c9:17:ac:cb:19:bd:28:d1:49:2f:f7:7e:1e:4c:23:82: 8d:46:36:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3IPaNalnnntP78g0Xdp3+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2N2MxNzY2ZmJiZGNmZjY4YmJjMzRhM2M2YmU2OWEwYzhh MDNhYjkwHhcNMjUxMjE5MTUwMTA1WhcNMjUxMjIwMTUwMTA1WjAzMTEwLwYDVQQD EyhlZTFmOWM1Njk0YWQxYTk2ZGZhNDNlMDk4MTU0YzJiMDc4ZTU1ZmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0/ghztsragrObjq5DonkV/1ZXqF O/iD8oPUhaPoVUyBlYR1xmsx8L/eFPPZNQ2dTjfksZNiI8boehEnHi9JWG+xcc4Z KdHHMdXyyKOd7x8gHHfWxqHSpFDDjADObZ/H/HEFRsmDi8bu3GAd0KeYmwD+mGqI L6Vmwqzi7E4gSslMjxFnHwYFVdcg5ZLPk9xWNYmVyWF+lmUjYDBctr4y52MIyYEE 4nOKLWCujZ5qNRDsE0Ae2kaW0ttEKrka4/z8VGLzJxgVcXxd14XxUavJH4Af7pDr zbifsyu6HIoC56YTdqfOjjsOjH3L/bvXrIzganGIUZpH89YgomLWzkw/KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO4fnFaUrRqW36Q+CYFUwrB45V/lMB8GA1UdIwQY MBaAFHZ8F2b7vc/2i7w0o8a+aaDIoDq5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG53WFp2dTl6X2FMdkRTanhyNXBvTWlnT3JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84ODQzNTYtN2UyYS00YzJhLThmZjQt MzU2OGUxZDI5ZDRhLzEvZG53WFp2dTl6X2FMdkRTanhyNXBvTWlnT3JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS84ODQzNTYtN2UyYS00YzJhLThmZjQtMzU2OGUxZDI5ZDRh LzEvZG53WFp2dTl6X2FMdkRTanhyNXBvTWlnT3JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhkhidnOr H3Hk4e1uP9C3MgSNMGaVHX/nv1md+mfUEvmivgD+q5c98iUlp7LLsWexKyTRtOVK sZm1jmy4ngpriKYgM5/nRHO5s7DFdLBPuawIbff3OxhGH8xZW8fjRLFRhG34IOoa Sx9GN3rWsKX/T4qzxuhsX3syyC2+lqUyT/fU1NrhDVKdZKEciWj+fUr/ysqbaR5p NobgeeUagELNpv9AwPqronh5RmDahZuHBsnz01vGQU1duF+CmpIXNMQYsSNB8k1A kHXWHHy0ubufAYjxbDDIFggwEbO6pBnSHDDOQUvuP26oDs2Gx8vJF6zLGb0o0Ukv 934eTCOCjUY2uA== -----END CERTIFICATE-----Generated at Fri Dec 19 23:27:37 2025 by rpki-client