This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft File: DNpch0NU2Dgm5DwlNbduINW2GwU.mft (raw, json) Hash identifier: cOk7CKwU5gH1BtePtmcmtEnK77shYyK0t618jiiXdoE= Subject key identifier: A5:4D:33:F5:07:78:19:1B:9E:DC:A9:7A:3B:FF:60:F2:66:48:B5:96 Authority key identifier: 0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05 Certificate issuer: /CN=0cda5c874354d83826e43c2535b76e20d5b61b05 Certificate serial: 019B3E6C48D53902C70D7298709EABEDD872 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft Manifest number: 1794 Signing time: Sun 21 Dec 2025 01:00:42 +0000 Manifest this update: Sun 21 Dec 2025 01:00:42 +0000 Manifest next update: Mon 22 Dec 2025 01:00:42 +0000 Files and hashes: 1: 32CQUiCUfdquX7Jbo_dmPVa4RAU.roa (hash: FAfiLPwl0dHpiVR3Uys5QcBsWLGjmkF+BWAYhU6veIk=) 2: DNpch0NU2Dgm5DwlNbduINW2GwU.crl (hash: nAKrg9LEtE7Vvf0YwEsvyyIMTGA48NmoF3ei1LbelNM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:48:d5:39:02:c7:0d:72:98:70:9e:ab:ed:d8:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cda5c874354d83826e43c2535b76e20d5b61b05 Validity Not Before: Dec 21 01:00:42 2025 GMT Not After : Dec 22 01:00:42 2025 GMT Subject: CN=a54d33f50778191b9edca97a3bff60f26648b596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7c:cd:4f:bc:d8:70:d2:a0:79:06:74:15:50: 3e:93:a8:92:ac:c7:41:a0:e0:0b:54:0f:7e:e5:2b: 16:a8:99:70:fd:7b:f3:9e:d1:4e:e6:b7:22:30:ae: e8:f3:a2:2c:20:68:01:b1:b4:3b:e6:d0:a3:23:ba: bc:95:d0:23:2a:81:32:75:da:c2:99:29:51:dd:39: 07:d0:63:e8:08:9a:26:ce:d0:6c:07:63:07:20:94: 48:ea:be:e9:31:24:9d:b6:db:52:44:b6:63:3c:c0: 1a:aa:e1:6d:ab:da:b9:e1:21:2e:a7:ab:27:6e:f9: 5b:ec:e4:79:bd:dd:a9:22:11:8e:e6:75:72:11:da: 2a:83:ae:2c:da:c0:f9:74:4f:8e:96:ce:5f:f7:6f: 0b:f3:a6:37:79:3d:a3:92:4a:60:0b:46:a4:01:01: 9f:92:60:54:25:7b:43:96:61:99:a8:62:7a:9a:e9: f6:f1:a2:e2:6b:61:1e:4f:89:4a:02:38:e7:44:6b: b9:df:44:cc:7a:1e:29:d1:64:9c:92:fc:1c:01:8a: d8:2c:99:df:0c:2f:22:88:30:6b:3c:48:3c:78:19: 2b:46:a5:ba:67:27:82:89:ca:c2:86:96:26:b9:03: 0e:f6:95:ee:3c:e0:a4:fe:cd:b0:3b:e0:31:bd:67: 18:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:4D:33:F5:07:78:19:1B:9E:DC:A9:7A:3B:FF:60:F2:66:48:B5:96 X509v3 Authority Key Identifier: keyid:0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:09:e8:c2:f3:3d:58:c2:fc:b3:17:4f:b7:0a:c1:b0:9c:69: 8d:0e:81:6e:35:55:78:9c:7b:cb:60:0d:ac:71:4c:4c:3e:d6: 13:cf:b2:c8:88:9f:b2:15:cf:db:13:8f:ef:e5:23:f5:66:ac: 84:b8:c2:51:37:ad:6e:fa:d3:86:66:23:db:3f:f6:83:43:cd: 5d:42:e8:c7:61:55:b9:97:c6:dc:4d:c2:84:21:ee:3c:e7:53: c8:84:59:f5:ee:f2:9e:d4:1c:bf:34:92:f7:e0:8a:e7:e8:d9: a8:f8:ba:b0:a2:84:e9:26:69:b1:8e:fc:ec:3b:8d:da:c3:60: 80:6d:bf:e1:9b:e4:53:7c:aa:e6:9b:68:6a:06:0a:c8:e1:a7: 50:27:36:27:5b:f5:49:66:35:b1:ff:03:a8:bc:37:19:68:45: 59:3e:a4:6b:8c:8b:bd:ba:15:e5:9c:c8:cb:f7:38:e5:8b:d1: 9c:7b:57:a6:c7:ce:18:f7:2d:e5:d1:18:5e:a0:8b:ea:c1:ce: 50:97:42:2e:b7:18:28:c6:5c:41:e2:c4:04:ba:b4:65:ba:a4: a3:03:08:8d:8c:3d:b2:fa:32:34:99:a0:af:23:7a:44:f6:c0: 36:c2:20:44:b3:3b:ce:62:f8:13:94:08:e2:5f:f4:cc:a2:b7: 22:7e:53:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bEjVOQLHDXKYcJ6r7dhyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZGE1Yzg3NDM1NGQ4MzgyNmU0M2MyNTM1Yjc2ZTIwZDVi NjFiMDUwHhcNMjUxMjIxMDEwMDQyWhcNMjUxMjIyMDEwMDQyWjAzMTEwLwYDVQQD EyhhNTRkMzNmNTA3NzgxOTFiOWVkY2E5N2EzYmZmNjBmMjY2NDhiNTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXzNT7zYcNKgeQZ0FVA+k6iSrMdB oOALVA9+5SsWqJlw/XvzntFO5rciMK7o86IsIGgBsbQ75tCjI7q8ldAjKoEyddrC mSlR3TkH0GPoCJomztBsB2MHIJRI6r7pMSSdtttSRLZjPMAaquFtq9q54SEup6sn bvlb7OR5vd2pIhGO5nVyEdoqg64s2sD5dE+Ols5f928L86Y3eT2jkkpgC0akAQGf kmBUJXtDlmGZqGJ6mun28aLia2EeT4lKAjjnRGu530TMeh4p0WSckvwcAYrYLJnf DC8iiDBrPEg8eBkrRqW6ZyeCicrChpYmuQMO9pXuPOCk/s2wO+AxvWcY3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKVNM/UHeBkbntypejv/YPJmSLWWMB8GA1UdIwQY MBaAFAzaXIdDVNg4JuQ8JTW3biDVthsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE5wY2gwTlUyRGdtNUR3bE5iZHVJTlcyR3dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi85MjMzMmYtMDNlMC00MTE2LWI2ZjMt YzgyZjQyNGI2ZDBkLzEvRE5wY2gwTlUyRGdtNUR3bE5iZHVJTlcyR3dVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi85MjMzMmYtMDNlMC00MTE2LWI2ZjMtYzgyZjQyNGI2ZDBk LzEvRE5wY2gwTlUyRGdtNUR3bE5iZHVJTlcyR3dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmAnowvM9 WML8sxdPtwrBsJxpjQ6BbjVVeJx7y2ANrHFMTD7WE8+yyIifshXP2xOP7+Uj9Was hLjCUTetbvrThmYj2z/2g0PNXULox2FVuZfG3E3ChCHuPOdTyIRZ9e7yntQcvzSS 9+CK5+jZqPi6sKKE6SZpsY787DuN2sNggG2/4ZvkU3yq5ptoagYKyOGnUCc2J1v1 SWY1sf8DqLw3GWhFWT6ka4yLvboV5ZzIy/c45YvRnHtXpsfOGPct5dEYXqCL6sHO UJdCLrcYKMZcQeLEBLq0ZbqkowMIjYw9svoyNJmgryN6RPbANsIgRLM7zmL4E5QI 4l/0zKK3In5TMw== -----END CERTIFICATE-----Generated at Sun Dec 21 09:00:26 2025 by rpki-client