This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft File: dnwXZvu9z_aLvDSjxr5poMigOrk.mft (raw, json) Hash identifier: L6lq0aesPnyPIlEHyOd0IDtHVVXh7UjmOZc31DgM9Aw= Subject key identifier: F4:9A:14:05:17:C4:D8:89:56:16:07:FB:D8:C1:9F:A4:DC:68:1C:CE Authority key identifier: 76:7C:17:66:FB:BD:CF:F6:8B:BC:34:A3:C6:BE:69:A0:C8:A0:3A:B9 Certificate issuer: /CN=767c1766fbbdcff68bbc34a3c6be69a0c8a03ab9 Certificate serial: 019B710FDAD9FE0CC755A88ECE124B3D7D64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft Manifest number: 0F9D Signing time: Tue 30 Dec 2025 21:00:23 +0000 Manifest this update: Tue 30 Dec 2025 21:00:23 +0000 Manifest next update: Wed 31 Dec 2025 21:00:23 +0000 Files and hashes: 1: dnwXZvu9z_aLvDSjxr5poMigOrk.crl (hash: 0ID2BRU00AhdyZWEpvq56C/Gu3RFpt/24wV4DwTyVbM=) 2: ffTvs6YF_hXAEglDFhneoTAWA7Y.roa (hash: McS9n7bcKq8O21qZ8IIp3IHODw/eCLO/50XCpVXjy20=) 3: xnRx0OSK9TIMFxn1VL8fIU-kDPQ.roa (hash: l/e913myQSQUa6e/Y2iqnvi7HmfqzgcIokF4oa8whYM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.crl rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 21:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:0f:da:d9:fe:0c:c7:55:a8:8e:ce:12:4b:3d:7d:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767c1766fbbdcff68bbc34a3c6be69a0c8a03ab9 Validity Not Before: Dec 30 21:00:23 2025 GMT Not After : Dec 31 21:00:23 2025 GMT Subject: CN=f49a140517c4d889561607fbd8c19fa4dc681cce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:31:28:83:d1:6e:fc:6b:1b:31:4a:e2:40:0c: 21:8d:f2:b2:7a:ad:a4:fe:c7:60:6e:f8:5c:b9:e3: d1:d9:83:c6:3b:ea:a5:6a:aa:fc:54:0b:77:a5:00: cf:47:18:12:7a:70:3e:24:9f:93:ab:f7:4a:9e:ce: 4f:32:e2:f9:6d:6d:88:cd:48:19:d8:ed:f0:8e:66: 50:f2:5f:71:f2:ac:53:94:4d:8d:88:65:a3:53:12: 36:cf:d4:96:b1:a2:00:05:94:00:1c:7b:01:af:4d: 23:43:c0:ba:56:a8:8c:02:21:98:65:8e:de:62:d5: 54:1d:90:01:47:6b:d9:e2:11:8b:2f:bc:cc:6e:f1: fa:e9:8a:56:47:c1:ca:de:8e:2b:d1:44:34:ed:73: c1:0d:0b:42:61:ef:26:08:40:ae:97:87:ef:8d:64: ba:e3:34:49:72:dd:82:4f:c9:fa:00:ce:35:8d:f3: 83:3f:87:7f:4f:76:e8:ec:03:46:80:ff:4e:f6:37: f9:87:41:23:67:2c:36:df:58:19:f1:9d:a6:e8:07: 87:a8:e7:15:e0:51:c4:bd:af:bd:82:f7:e8:d8:e3: 83:59:29:9e:91:d1:24:ac:86:93:60:8a:d5:f7:a5: 90:d1:f4:c6:43:89:da:03:d1:b6:13:9c:ec:91:0a: fa:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:9A:14:05:17:C4:D8:89:56:16:07:FB:D8:C1:9F:A4:DC:68:1C:CE X509v3 Authority Key Identifier: keyid:76:7C:17:66:FB:BD:CF:F6:8B:BC:34:A3:C6:BE:69:A0:C8:A0:3A:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:c6:73:d2:46:d9:61:a5:c5:7d:f1:d1:9e:bb:a6:f6:a2:cd: f7:f5:ae:c5:25:c3:3a:fb:8a:95:fd:61:6c:7f:e2:d4:d4:c0: 50:43:b4:5b:14:d3:ed:48:1e:8f:9a:61:e8:55:bb:1d:73:80: 58:5d:7e:fe:07:8a:65:21:b0:dd:27:08:55:87:7c:99:ca:ce: 09:a0:38:eb:fd:50:60:f0:92:27:f1:00:0d:67:52:97:8c:f9: d4:5a:57:da:c6:a0:28:94:13:5a:85:2a:90:86:71:cc:1a:28: b0:af:e2:ae:67:a1:e8:f8:cc:83:c4:48:fe:44:51:28:af:75: 30:06:de:71:84:8d:e1:e7:b3:e4:b9:83:ec:a9:db:6b:da:9f: a9:9f:cb:43:7b:ca:6a:47:ca:01:dc:8c:4c:03:87:d5:77:17: 85:cb:05:09:05:9f:28:94:c7:8d:4c:17:c0:69:77:b7:03:bb: 9d:ff:b2:6d:3a:13:54:3c:b9:94:00:c7:72:76:45:dc:cf:a1: 8d:48:86:fd:48:53:92:ff:0c:4e:a0:4f:c4:3f:31:49:10:68: 46:b0:52:15:13:3a:d9:b5:57:cd:6d:23:46:d9:e7:a4:96:9d: a6:a5:9f:6b:60:6d:5c:80:c6:39:4b:37:91:26:b2:1b:86:bb: 13:71:9a:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxD9rZ/gzHVaiOzhJLPX1kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2N2MxNzY2ZmJiZGNmZjY4YmJjMzRhM2M2YmU2OWEwYzhh MDNhYjkwHhcNMjUxMjMwMjEwMDIzWhcNMjUxMjMxMjEwMDIzWjAzMTEwLwYDVQQD EyhmNDlhMTQwNTE3YzRkODg5NTYxNjA3ZmJkOGMxOWZhNGRjNjgxY2NlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzEog9Fu/GsbMUriQAwhjfKyeq2k /sdgbvhcuePR2YPGO+qlaqr8VAt3pQDPRxgSenA+JJ+Tq/dKns5PMuL5bW2IzUgZ 2O3wjmZQ8l9x8qxTlE2NiGWjUxI2z9SWsaIABZQAHHsBr00jQ8C6VqiMAiGYZY7e YtVUHZABR2vZ4hGLL7zMbvH66YpWR8HK3o4r0UQ07XPBDQtCYe8mCECul4fvjWS6 4zRJct2CT8n6AM41jfODP4d/T3bo7ANGgP9O9jf5h0EjZyw231gZ8Z2m6AeHqOcV 4FHEva+9gvfo2OODWSmekdEkrIaTYIrV96WQ0fTGQ4naA9G2E5zskQr62QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPSaFAUXxNiJVhYH+9jBn6TcaBzOMB8GA1UdIwQY MBaAFHZ8F2b7vc/2i7w0o8a+aaDIoDq5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG53WFp2dTl6X2FMdkRTanhyNXBvTWlnT3JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84ODQzNTYtN2UyYS00YzJhLThmZjQt MzU2OGUxZDI5ZDRhLzEvZG53WFp2dTl6X2FMdkRTanhyNXBvTWlnT3JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS84ODQzNTYtN2UyYS00YzJhLThmZjQtMzU2OGUxZDI5ZDRh LzEvZG53WFp2dTl6X2FMdkRTanhyNXBvTWlnT3JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPMZz0kbZ YaXFffHRnrum9qLN9/WuxSXDOvuKlf1hbH/i1NTAUEO0WxTT7Ugej5ph6FW7HXOA WF1+/geKZSGw3ScIVYd8mcrOCaA46/1QYPCSJ/EADWdSl4z51FpX2sagKJQTWoUq kIZxzBoosK/irmeh6PjMg8RI/kRRKK91MAbecYSN4eez5LmD7Knba9qfqZ/LQ3vK akfKAdyMTAOH1XcXhcsFCQWfKJTHjUwXwGl3twO7nf+ybToTVDy5lADHcnZF3M+h jUiG/UhTkv8MTqBPxD8xSRBoRrBSFRM62bVXzW0jRtnnpJadpqWfa2BtXIDGOUs3 kSayG4a7E3GaYw== -----END CERTIFICATE-----Generated at Wed Dec 31 07:19:49 2025 by rpki-client