This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft File: DWu1npe_Ox78NWnflWxF5HKEmGE.mft (raw, json) Hash identifier: vN+CqqR8pBWu067euPwNT0sbq2kcrcnkWuUlZqBdUB0= Subject key identifier: 64:05:F9:64:B7:09:4C:76:67:BB:40:CF:BB:F6:22:13:63:68:6E:6F Authority key identifier: 0D:6B:B5:9E:97:BF:3B:1E:FC:35:69:DF:95:6C:45:E4:72:84:98:61 Certificate issuer: /CN=0d6bb59e97bf3b1efc3569df956c45e472849861 Certificate serial: 019B3E358443A2A0306804E25D2B6E311271 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWu1npe_Ox78NWnflWxF5HKEmGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft Manifest number: 0A99 Signing time: Sun 21 Dec 2025 00:00:53 +0000 Manifest this update: Sun 21 Dec 2025 00:00:53 +0000 Manifest next update: Mon 22 Dec 2025 00:00:53 +0000 Files and hashes: 1: DWu1npe_Ox78NWnflWxF5HKEmGE.crl (hash: uB3aqiTkne2DemJt0y151JumZNTUC3ivEYUamXW/yNc=) 2: QGurDva1s4alg8iGu6qVYxbvUlE.roa (hash: eFsT2lU76i8V7l6B+0U5YuaE3bHnUDv4afzG2LbiiJM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft rsync://rpki.ripe.net/repository/DEFAULT/DWu1npe_Ox78NWnflWxF5HKEmGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:35:84:43:a2:a0:30:68:04:e2:5d:2b:6e:31:12:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d6bb59e97bf3b1efc3569df956c45e472849861 Validity Not Before: Dec 21 00:00:53 2025 GMT Not After : Dec 22 00:00:53 2025 GMT Subject: CN=6405f964b7094c7667bb40cfbbf6221363686e6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e6:db:5b:1e:d9:a5:b2:b7:95:0f:99:2e:17: 00:e4:61:4b:dc:a2:96:14:7f:b1:b0:51:39:ad:14: ee:ae:c9:63:9e:bf:73:ce:61:7e:27:fe:e5:b2:1d: 23:39:86:af:06:c3:10:f5:3d:b8:9e:88:50:f1:26: 22:df:60:c7:0e:28:4f:b2:10:72:65:a5:73:c7:74: 77:ab:18:e0:f0:01:d4:b5:63:6d:3d:07:7e:98:07: 69:fc:fd:1e:14:29:43:f0:55:fe:af:2e:49:a4:16: 29:fc:d8:01:b3:9f:7f:cb:4b:d5:2a:76:e6:9c:4a: 2e:09:ee:81:9e:5f:7a:4f:b7:9f:cc:f7:f0:24:37: 17:93:d9:0d:6b:38:c8:81:a5:eb:9d:70:72:43:54: a1:75:1b:10:7e:77:ca:fc:fa:5c:7f:4c:e8:4d:b9: 9c:da:ca:d2:15:32:d2:91:bd:b1:b9:7d:5d:65:46: 94:1a:73:2f:34:73:3a:f1:d2:35:de:da:b5:36:a8: f5:73:e6:18:26:24:25:20:53:b3:e4:2c:dd:10:b1: a1:cd:1e:39:55:cd:74:88:cf:3d:fc:f2:3d:23:54: fe:50:b6:69:88:1c:cc:11:12:79:cc:58:46:8e:7a: 25:7c:a0:a1:ce:19:14:8f:84:da:54:71:1b:88:ce: 19:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:05:F9:64:B7:09:4C:76:67:BB:40:CF:BB:F6:22:13:63:68:6E:6F X509v3 Authority Key Identifier: keyid:0D:6B:B5:9E:97:BF:3B:1E:FC:35:69:DF:95:6C:45:E4:72:84:98:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWu1npe_Ox78NWnflWxF5HKEmGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:9a:c9:d8:55:76:9f:85:1d:64:10:6d:28:b4:8d:90:7c:e9: 3e:ca:bd:b9:0d:5c:92:42:dc:28:09:fd:0c:cc:01:85:dc:36: 7b:cf:8b:3a:70:ba:38:30:78:17:99:68:5d:e2:f6:be:7c:dc: b2:83:0c:9e:9f:1f:ec:c4:65:ee:72:83:3c:c5:c6:a0:d8:5d: 0b:9c:23:5b:5b:da:15:a4:5f:da:2d:05:a7:ce:fe:93:47:35: 5d:a7:68:07:9b:e6:a6:46:af:1b:ba:90:eb:0d:af:3b:34:05: 2f:28:b4:24:50:8f:3a:15:df:f4:2c:48:58:34:85:55:ed:2d: cd:06:0d:9f:93:82:3c:34:1e:3a:e8:9d:9d:04:17:bb:f5:42: 39:5f:6e:6b:74:9a:52:cf:62:88:cc:16:74:71:b2:07:d6:6b: 65:f2:b8:84:4d:84:70:a0:91:20:f6:93:fd:44:63:e3:39:39: c5:bd:78:f5:70:5a:78:d4:a2:d8:d7:69:1b:dd:7b:ef:61:e3: 8a:e5:2c:4a:ec:d3:bb:e9:f2:d4:59:0d:fd:63:3f:d3:a0:c0: 63:ce:71:cd:9e:a4:41:b4:2d:16:49:59:1c:94:71:57:71:d6: bb:af:64:ff:55:77:17:93:c9:53:fe:1b:6e:9f:e5:98:83:b6: 43:42:62:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+NYRDoqAwaATiXStuMRJxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNmJiNTllOTdiZjNiMWVmYzM1NjlkZjk1NmM0NWU0NzI4 NDk4NjEwHhcNMjUxMjIxMDAwMDUzWhcNMjUxMjIyMDAwMDUzWjAzMTEwLwYDVQQD Eyg2NDA1Zjk2NGI3MDk0Yzc2NjdiYjQwY2ZiYmY2MjIxMzYzNjg2ZTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArObbWx7ZpbK3lQ+ZLhcA5GFL3KKW FH+xsFE5rRTursljnr9zzmF+J/7lsh0jOYavBsMQ9T24nohQ8SYi32DHDihPshBy ZaVzx3R3qxjg8AHUtWNtPQd+mAdp/P0eFClD8FX+ry5JpBYp/NgBs59/y0vVKnbm nEouCe6Bnl96T7efzPfwJDcXk9kNazjIgaXrnXByQ1ShdRsQfnfK/Ppcf0zoTbmc 2srSFTLSkb2xuX1dZUaUGnMvNHM68dI13tq1Nqj1c+YYJiQlIFOz5CzdELGhzR45 Vc10iM89/PI9I1T+ULZpiBzMERJ5zFhGjnolfKChzhkUj4TaVHEbiM4ZiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGQF+WS3CUx2Z7tAz7v2IhNjaG5vMB8GA1UdIwQY MBaAFA1rtZ6Xvzse/DVp35VsReRyhJhhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFd1MW5wZV9PeDc4TlduZmxXeEY1SEtFbUdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZDNkZTQtNzZhNS00OTQxLWI2MjYt ZTk1NGUxNmFiMjdkLzEvRFd1MW5wZV9PeDc4TlduZmxXeEY1SEtFbUdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85ZDNkZTQtNzZhNS00OTQxLWI2MjYtZTk1NGUxNmFiMjdk LzEvRFd1MW5wZV9PeDc4TlduZmxXeEY1SEtFbUdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk5rJ2FV2 n4UdZBBtKLSNkHzpPsq9uQ1ckkLcKAn9DMwBhdw2e8+LOnC6ODB4F5loXeL2vnzc soMMnp8f7MRl7nKDPMXGoNhdC5wjW1vaFaRf2i0Fp87+k0c1XadoB5vmpkavG7qQ 6w2vOzQFLyi0JFCPOhXf9CxIWDSFVe0tzQYNn5OCPDQeOuidnQQXu/VCOV9ua3Sa Us9iiMwWdHGyB9ZrZfK4hE2EcKCRIPaT/URj4zk5xb149XBaeNSi2NdpG91772Hj iuUsSuzTu+ny1FkN/WM/06DAY85xzZ6kQbQtFklZHJRxV3HWu69k/1V3F5PJU/4b bp/lmIO2Q0JiKg== -----END CERTIFICATE-----Generated at Sun Dec 21 04:57:53 2025 by rpki-client