This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.mft File: DW3GbMOENrasMel-cS0hlAfIPPQ.mft (raw, json) Hash identifier: rAfqh9I1ethIurOLHnF+jzthJfRgvrjBzrY54IBL0Cc= Subject key identifier: 7B:82:D0:B4:05:BF:C7:04:3B:FA:9B:F9:49:8C:38:1D:62:92:35:61 Authority key identifier: 0D:6D:C6:6C:C3:84:36:B6:AC:31:E9:7E:71:2D:21:94:07:C8:3C:F4 Certificate issuer: /CN=0d6dc66cc38436b6ac31e97e712d219407c83cf4 Certificate serial: 019B32319200587D5FBED65F3519EC4D3877 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DW3GbMOENrasMel-cS0hlAfIPPQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.mft Manifest number: 0606 Signing time: Thu 18 Dec 2025 16:01:07 +0000 Manifest this update: Thu 18 Dec 2025 16:01:07 +0000 Manifest next update: Fri 19 Dec 2025 16:01:07 +0000 Files and hashes: 1: DW3GbMOENrasMel-cS0hlAfIPPQ.crl (hash: tSJFaT827znNQ+RCiD+duwllBYRwT67CFs6TTXTkhSs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.crl rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DW3GbMOENrasMel-cS0hlAfIPPQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:92:00:58:7d:5f:be:d6:5f:35:19:ec:4d:38:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d6dc66cc38436b6ac31e97e712d219407c83cf4 Validity Not Before: Dec 18 16:01:07 2025 GMT Not After : Dec 19 16:01:07 2025 GMT Subject: CN=7b82d0b405bfc7043bfa9bf9498c381d62923561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3e:62:54:d0:99:61:c7:21:51:53:d1:60:7e: 8e:e1:23:16:e1:2b:71:16:cd:25:10:78:19:6b:29: 1b:90:2a:14:6c:29:09:7d:8d:73:21:45:92:39:76: ab:f4:b3:54:29:24:e8:eb:0f:31:06:c9:61:10:f6: f6:d7:79:28:e0:37:28:64:ba:f0:c7:5d:17:b6:37: b0:63:ee:f6:41:24:e9:08:5a:9d:f5:23:e7:51:10: aa:8c:07:8e:9a:d3:64:7f:fe:ef:ee:eb:e9:c4:7e: 33:c7:f2:37:e2:56:38:30:33:e7:a1:38:34:bb:a7: 30:3b:ec:51:0c:28:eb:96:4f:03:44:1a:57:9a:e1: 43:cd:07:8b:41:22:0e:5d:79:61:b2:5f:d0:a2:ad: b3:c3:40:1a:f4:9d:69:d5:f9:b2:fb:5d:5b:57:73: f5:67:5e:14:b9:2c:e4:72:05:5f:62:9c:59:32:5c: 97:5a:8a:42:68:2f:5c:40:38:90:f8:eb:fb:ac:15: 72:b0:89:90:97:42:2b:e2:db:2e:e9:76:12:c3:33: 64:c0:56:42:f2:4f:a8:8c:43:96:1d:80:dd:a8:42: ff:98:65:4b:ae:e9:2e:c7:29:b8:82:b9:97:ea:36: d4:41:dd:bc:6a:f0:3b:3f:95:a5:1c:18:cb:35:e6: db:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:82:D0:B4:05:BF:C7:04:3B:FA:9B:F9:49:8C:38:1D:62:92:35:61 X509v3 Authority Key Identifier: keyid:0D:6D:C6:6C:C3:84:36:B6:AC:31:E9:7E:71:2D:21:94:07:C8:3C:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DW3GbMOENrasMel-cS0hlAfIPPQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:7b:96:55:45:af:c1:7d:95:ef:04:70:ae:a3:6c:d2:39:a7: 50:05:81:e8:58:a8:1a:3e:6b:0d:25:5a:12:77:ce:c9:81:7f: 79:96:67:cd:98:c5:7c:ba:89:d4:65:ef:8e:c9:5d:2a:f6:d7: 6d:4b:e2:67:4f:04:11:8b:77:4c:b7:d6:2f:0c:33:24:1a:d5: 8c:ea:43:39:e0:ad:83:1d:13:5b:57:b3:3c:43:ea:42:1e:d8: 49:3f:f8:53:3a:06:54:54:ef:74:fc:3e:9b:66:af:e5:a8:d1: 4b:44:a1:80:89:18:1f:59:3a:51:45:c0:40:03:69:64:42:65: 43:d8:5f:38:a6:9f:e7:5b:0f:61:0f:17:34:20:f5:dd:27:44: e4:3d:87:5b:ba:d8:ba:2b:b4:ed:2b:9c:dc:5f:65:82:ae:be: 18:72:ba:96:53:a3:3e:7b:81:52:bf:ba:09:67:4f:98:f5:e8: 91:3e:d6:06:68:ff:91:e0:6d:18:cc:1e:6e:da:2c:45:fa:66: 03:48:1e:67:98:48:46:99:77:87:c1:ba:22:8a:93:93:31:4b: 98:9a:97:33:f5:2c:72:34:76:93:3e:f9:bc:27:1b:9d:2b:9c: b5:37:b7:13:d8:82:34:77:b2:e9:c3:79:b9:8c:38:c1:cc:f1: a4:63:31:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMZIAWH1fvtZfNRnsTTh3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNmRjNjZjYzM4NDM2YjZhYzMxZTk3ZTcxMmQyMTk0MDdj ODNjZjQwHhcNMjUxMjE4MTYwMTA3WhcNMjUxMjE5MTYwMTA3WjAzMTEwLwYDVQQD Eyg3YjgyZDBiNDA1YmZjNzA0M2JmYTliZjk0OThjMzgxZDYyOTIzNTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuz5iVNCZYcchUVPRYH6O4SMW4Stx Fs0lEHgZaykbkCoUbCkJfY1zIUWSOXar9LNUKSTo6w8xBslhEPb213ko4DcoZLrw x10XtjewY+72QSTpCFqd9SPnURCqjAeOmtNkf/7v7uvpxH4zx/I34lY4MDPnoTg0 u6cwO+xRDCjrlk8DRBpXmuFDzQeLQSIOXXlhsl/Qoq2zw0Aa9J1p1fmy+11bV3P1 Z14UuSzkcgVfYpxZMlyXWopCaC9cQDiQ+Ov7rBVysImQl0Ir4tsu6XYSwzNkwFZC 8k+ojEOWHYDdqEL/mGVLrukuxym4grmX6jbUQd28avA7P5WlHBjLNebb6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHuC0LQFv8cEO/qb+UmMOB1ikjVhMB8GA1UdIwQY MBaAFA1txmzDhDa2rDHpfnEtIZQHyDz0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFczR2JNT0VOcmFzTWVsLWNTMGhsQWZJUFBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zODU5ZTYtNDNhYy00Yzc0LWI0ZmEt OWRkNTIzMTNhZTdjLzEvRFczR2JNT0VOcmFzTWVsLWNTMGhsQWZJUFBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8zODU5ZTYtNDNhYy00Yzc0LWI0ZmEtOWRkNTIzMTNhZTdj LzEvRFczR2JNT0VOcmFzTWVsLWNTMGhsQWZJUFBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGnuWVUWv wX2V7wRwrqNs0jmnUAWB6FioGj5rDSVaEnfOyYF/eZZnzZjFfLqJ1GXvjsldKvbX bUviZ08EEYt3TLfWLwwzJBrVjOpDOeCtgx0TW1ezPEPqQh7YST/4UzoGVFTvdPw+ m2av5ajRS0ShgIkYH1k6UUXAQANpZEJlQ9hfOKaf51sPYQ8XNCD13SdE5D2HW7rY uiu07Suc3F9lgq6+GHK6llOjPnuBUr+6CWdPmPXokT7WBmj/keBtGMwebtosRfpm A0geZ5hIRpl3h8G6IoqTkzFLmJqXM/UscjR2kz75vCcbnSuctTe3E9iCNHey6cN5 uYw4wczxpGMx3A== -----END CERTIFICATE-----Generated at Thu Dec 18 18:35:51 2025 by rpki-client