This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.mft File: DpgibNz3QdzIpCplmos94hmBiPk.mft (raw, json) Hash identifier: FAN6MKp8h8F4WsGa2pvc+tmwBqFUkrV52UZUzXwkRBM= Subject key identifier: 1A:B2:3A:90:91:29:38:5B:03:53:92:08:E3:0F:39:E6:26:19:CC:93 Authority key identifier: 0E:98:22:6C:DC:F7:41:DC:C8:A4:2A:65:9A:8B:3D:E2:19:81:88:F9 Certificate issuer: /CN=0e98226cdcf741dcc8a42a659a8b3de2198188f9 Certificate serial: 019B3F480CC5BCDFD6727110ACC72385DD3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DpgibNz3QdzIpCplmos94hmBiPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.mft Manifest number: 148D Signing time: Sun 21 Dec 2025 05:00:44 +0000 Manifest this update: Sun 21 Dec 2025 05:00:44 +0000 Manifest next update: Mon 22 Dec 2025 05:00:44 +0000 Files and hashes: 1: C9YabYyYTwF76KS0OdJKS7svqe8.roa (hash: OaSH1c1TCgLCLOEvTQ5fN3rE7i93/Zx2eO7IyYukR98=) 2: DpgibNz3QdzIpCplmos94hmBiPk.crl (hash: g3t7yAbIElsBgHmDJ08raHPofGypekQ+5mUKbB4G0dU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.crl rsync://rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.mft rsync://rpki.ripe.net/repository/DEFAULT/DpgibNz3QdzIpCplmos94hmBiPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:0c:c5:bc:df:d6:72:71:10:ac:c7:23:85:dd:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e98226cdcf741dcc8a42a659a8b3de2198188f9 Validity Not Before: Dec 21 05:00:44 2025 GMT Not After : Dec 22 05:00:44 2025 GMT Subject: CN=1ab23a909129385b03539208e30f39e62619cc93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9a:d3:c0:67:bb:06:9c:69:44:e8:26:83:d7: ce:b7:f1:9c:ff:49:86:64:16:ae:e6:de:b5:83:c1: ad:39:04:fd:4a:9c:c7:ef:75:0d:8e:bb:96:a2:f1: 3c:fe:86:20:ac:4e:0f:8c:ba:c0:48:a6:a3:63:67: 8b:4f:b5:a2:6f:f6:2e:f9:9f:d7:ce:ed:3e:17:ef: 8a:48:7e:52:50:82:a4:ba:45:f0:82:a0:42:6a:15: 8d:81:d3:6e:38:47:f3:24:da:57:69:a1:8e:42:f5: ea:00:8b:76:ff:89:d6:5f:6c:fd:b9:81:0e:25:54: 80:f9:24:0d:d4:5f:34:ea:1c:d1:93:54:54:d8:d2: e7:ee:39:d2:24:ad:84:51:8d:df:f9:63:be:f1:7f: 51:48:a3:ac:56:c6:b6:22:14:24:29:68:6b:e0:ec: 62:73:4d:ed:19:6b:74:a6:28:b0:0f:4c:6c:f6:c4: 20:7f:e7:77:83:1d:41:41:c2:c9:e3:9c:0e:12:88: 5f:26:61:a8:9d:0a:76:f1:54:05:1e:58:09:e2:f3: 36:14:71:58:3a:b1:f9:98:cb:00:52:ae:5b:cf:59: 88:2f:88:7a:8b:10:17:23:17:bc:75:b9:8d:be:7d: 39:47:3b:50:a6:e9:35:43:a2:21:ba:e7:1e:98:e6: 46:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B2:3A:90:91:29:38:5B:03:53:92:08:E3:0F:39:E6:26:19:CC:93 X509v3 Authority Key Identifier: keyid:0E:98:22:6C:DC:F7:41:DC:C8:A4:2A:65:9A:8B:3D:E2:19:81:88:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpgibNz3QdzIpCplmos94hmBiPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:28:b2:cb:2b:d8:7e:e4:64:e1:b3:37:cf:ac:d1:79:8f:03: b5:f0:7b:66:9d:fa:fc:bf:87:35:58:f9:80:94:46:55:78:e8: f8:0b:34:10:25:f6:59:f7:76:bc:b8:8e:d2:a3:bb:c8:b0:9e: 1b:a2:ec:c8:84:43:17:cd:fc:21:0b:73:21:88:cc:56:b7:4c: 0c:4d:ed:6b:d4:ec:a7:14:c1:d0:ae:b9:51:44:0a:32:5d:45: 13:78:ed:c3:18:c9:f8:90:0f:92:55:81:fa:16:2c:4c:81:f0: 88:42:6b:a8:e5:ae:11:67:31:03:9d:9a:bc:24:ec:82:5c:13: 4d:c6:f8:88:e7:e1:ec:d3:f8:01:98:87:8c:c1:ae:c7:e4:1b: 0a:9d:a2:f9:a5:88:14:c5:2f:a8:1d:ed:13:45:36:46:ae:b6: c0:ce:8c:16:e0:df:47:19:18:69:d6:0c:01:86:e8:b4:fb:18: 8e:b4:3e:2d:55:02:9b:3a:9e:7a:70:a5:79:42:3b:79:a2:28: 26:c9:b3:9f:0f:ee:bb:af:ec:f7:d8:14:c2:a5:8b:92:86:35: af:a7:10:17:6a:b0:9d:6e:f3:f6:79:5f:ad:67:42:6a:46:ea: f7:be:ee:dd:78:9a:1d:45:98:52:37:c9:90:0f:b5:cb:1c:0e: d4:5c:66:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SAzFvN/WcnEQrMcjhd09MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlOTgyMjZjZGNmNzQxZGNjOGE0MmE2NTlhOGIzZGUyMTk4 MTg4ZjkwHhcNMjUxMjIxMDUwMDQ0WhcNMjUxMjIyMDUwMDQ0WjAzMTEwLwYDVQQD EygxYWIyM2E5MDkxMjkzODViMDM1MzkyMDhlMzBmMzllNjI2MTljYzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyprTwGe7BpxpROgmg9fOt/Gc/0mG ZBau5t61g8GtOQT9SpzH73UNjruWovE8/oYgrE4PjLrASKajY2eLT7Wib/Yu+Z/X zu0+F++KSH5SUIKkukXwgqBCahWNgdNuOEfzJNpXaaGOQvXqAIt2/4nWX2z9uYEO JVSA+SQN1F806hzRk1RU2NLn7jnSJK2EUY3f+WO+8X9RSKOsVsa2IhQkKWhr4Oxi c03tGWt0piiwD0xs9sQgf+d3gx1BQcLJ45wOEohfJmGonQp28VQFHlgJ4vM2FHFY OrH5mMsAUq5bz1mIL4h6ixAXIxe8dbmNvn05RztQpuk1Q6IhuucemOZGKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBqyOpCRKThbA1OSCOMPOeYmGcyTMB8GA1UdIwQY MBaAFA6YImzc90HcyKQqZZqLPeIZgYj5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHBnaWJOejNRZHpJcENwbG1vczk0aG1CaVBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS83OTAyNGQtNWI0NS00ZWY0LWI1Mjgt ZTljN2I1NTA2ZTU1LzEvRHBnaWJOejNRZHpJcENwbG1vczk0aG1CaVBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS83OTAyNGQtNWI0NS00ZWY0LWI1MjgtZTljN2I1NTA2ZTU1 LzEvRHBnaWJOejNRZHpJcENwbG1vczk0aG1CaVBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJCiyyyvY fuRk4bM3z6zReY8DtfB7Zp36/L+HNVj5gJRGVXjo+As0ECX2Wfd2vLiO0qO7yLCe G6LsyIRDF838IQtzIYjMVrdMDE3ta9TspxTB0K65UUQKMl1FE3jtwxjJ+JAPklWB +hYsTIHwiEJrqOWuEWcxA52avCTsglwTTcb4iOfh7NP4AZiHjMGux+QbCp2i+aWI FMUvqB3tE0U2Rq62wM6MFuDfRxkYadYMAYbotPsYjrQ+LVUCmzqeenCleUI7eaIo Jsmznw/uu6/s99gUwqWLkoY1r6cQF2qwnW7z9nlfrWdCakbq977u3XiaHUWYUjfJ kA+1yxwO1FxmsA== -----END CERTIFICATE-----Generated at Sun Dec 21 12:11:42 2025 by rpki-client