This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft File: dOgVmhbXKz1s37qgltaROf3p0pA.mft (raw, json) Hash identifier: vZ+B7afVNpEERR+1fTk83Afgj0avFp3akpLnX6USFDo= Subject key identifier: A0:59:30:14:75:65:DC:F9:C0:D4:73:56:21:15:56:EB:4F:AD:24:46 Authority key identifier: 74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90 Certificate issuer: /CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290 Certificate serial: 019B38332876E53C55B6438375250E4D7879 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft Manifest number: 0825 Signing time: Fri 19 Dec 2025 20:00:35 +0000 Manifest this update: Fri 19 Dec 2025 20:00:35 +0000 Manifest next update: Sat 20 Dec 2025 20:00:35 +0000 Files and hashes: 1: dOgVmhbXKz1s37qgltaROf3p0pA.crl (hash: H1kpsEQ4/xHS9sXP5IIltpLAMRQsP5NdG9zIwc5dWJY=) 2: oH2IWQRozN1-75odpKh66sr4uwc.roa (hash: wPfO52+kbkGCq6+uVpP9AwZp/WGjoxj4/guIax27VIU=) 3: y77dBZKkwdBWSaHuC-2LOWhhnDE.roa (hash: Mve9fSJEqTyFEiPK9mxYy3Dvl/+0Q/tVpXlrv6a1VIY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:33:28:76:e5:3c:55:b6:43:83:75:25:0e:4d:78:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290 Validity Not Before: Dec 19 20:00:35 2025 GMT Not After : Dec 20 20:00:35 2025 GMT Subject: CN=a05930147565dcf9c0d47356211556eb4fad2446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:63:e0:e3:4c:4b:a4:ef:98:34:ee:8f:d5:f5: cc:58:5b:31:cc:2a:2d:f6:4f:97:03:2a:e1:b4:6f: d0:14:af:98:79:7c:07:05:32:79:a5:c8:33:97:d9: f3:7f:78:01:48:1b:83:f2:22:b5:d5:20:ec:8c:17: 99:9b:44:76:42:54:13:28:8e:d9:ee:e4:13:af:16: b9:0e:f4:d0:2e:8c:15:ed:49:e0:88:d1:52:66:ad: 9c:38:17:e4:46:87:c7:ed:19:70:92:79:d8:a8:2d: ec:37:cd:51:b7:a2:b8:91:c6:d1:2b:ca:fa:40:fb: 82:95:9b:3e:d8:1f:fc:a1:7c:12:a9:ee:00:7e:e8: ce:67:d4:5c:29:ed:a9:90:70:1e:86:83:16:d0:66: 2d:29:d5:80:51:86:80:02:c6:1c:90:00:ad:9a:a0: 0b:ae:60:a0:d3:b5:2e:e1:20:76:a8:5d:33:44:d4: e2:7d:ff:28:c5:b5:a7:8c:f4:94:e8:85:6e:6a:cb: ad:d5:a0:ac:3a:db:49:70:67:f4:43:cd:62:35:15: 6a:5f:9b:a0:cb:e9:25:8a:04:08:ca:31:8c:77:db: 7c:29:76:3e:6f:d1:75:f3:c8:ab:85:2c:b0:10:91: 9b:53:06:bf:77:ed:20:e4:2b:c4:84:d5:f9:6c:90: c0:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:59:30:14:75:65:DC:F9:C0:D4:73:56:21:15:56:EB:4F:AD:24:46 X509v3 Authority Key Identifier: keyid:74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:28:5a:80:ea:73:62:4b:f2:9f:d0:5b:19:1c:dd:95:e5:c8: e3:60:4b:39:24:f6:50:31:79:96:7e:69:49:03:44:1f:b8:5e: 94:ed:34:20:d1:45:2c:02:3e:25:bd:af:cd:b9:3c:00:f8:cc: 52:c7:27:f2:7a:d1:34:97:33:12:78:e4:df:37:84:3d:cc:62: 91:5c:b7:2c:52:60:cd:53:0d:d0:53:e3:44:88:a1:2e:b5:bc: 75:49:57:d9:a2:7f:e1:1a:b9:4a:ac:94:ac:0c:9f:53:60:c0: dd:ed:ba:af:5a:3e:9a:be:04:9c:a7:9a:1f:e9:e1:97:7f:58: 22:99:c5:7f:e5:db:02:a8:d6:06:b3:9f:65:9a:94:43:90:ad: ac:05:1d:6b:00:e0:9d:47:bb:dd:11:8d:65:ba:97:3a:67:5d: 24:f5:58:b4:d1:2d:7d:95:b8:02:a2:d2:8b:eb:68:2a:2f:8e: 8f:1a:0e:dd:39:6a:35:bc:76:18:86:a8:47:63:ac:ba:97:c1: 4e:63:de:b2:f7:4e:7b:77:44:8d:09:5d:eb:30:9b:9b:fd:60: 12:b2:af:5c:59:bf:8b:b8:55:fe:53:bd:a7:3f:69:87:10:dc: 3d:51:af:6b:d6:c5:23:13:15:81:d8:13:cb:fb:27:ed:ed:33: 96:1a:21:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4Myh25TxVtkODdSUOTXh5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZTgxNTlhMTZkNzJiM2Q2Y2RmYmFhMDk2ZDY5MTM5ZmRl OWQyOTAwHhcNMjUxMjE5MjAwMDM1WhcNMjUxMjIwMjAwMDM1WjAzMTEwLwYDVQQD EyhhMDU5MzAxNDc1NjVkY2Y5YzBkNDczNTYyMTE1NTZlYjRmYWQyNDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGPg40xLpO+YNO6P1fXMWFsxzCot 9k+XAyrhtG/QFK+YeXwHBTJ5pcgzl9nzf3gBSBuD8iK11SDsjBeZm0R2QlQTKI7Z 7uQTrxa5DvTQLowV7UngiNFSZq2cOBfkRofH7RlwknnYqC3sN81Rt6K4kcbRK8r6 QPuClZs+2B/8oXwSqe4AfujOZ9RcKe2pkHAehoMW0GYtKdWAUYaAAsYckACtmqAL rmCg07Uu4SB2qF0zRNTiff8oxbWnjPSU6IVuasut1aCsOttJcGf0Q81iNRVqX5ug y+kligQIyjGMd9t8KXY+b9F188irhSywEJGbUwa/d+0g5CvEhNX5bJDAOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKBZMBR1Zdz5wNRzViEVVutPrSRGMB8GA1UdIwQY MBaAFHToFZoW1ys9bN+6oJbWkTn96dKQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE9nVm1oYlhLejFzMzdxZ2x0YVJPZjNwMHBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS85YmUwYTctNDFiMy00OGE1LThhMzgt ODRjYmM4NWEyMzQzLzEvZE9nVm1oYlhLejFzMzdxZ2x0YVJPZjNwMHBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS85YmUwYTctNDFiMy00OGE1LThhMzgtODRjYmM4NWEyMzQz LzEvZE9nVm1oYlhLejFzMzdxZ2x0YVJPZjNwMHBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADyhagOpz Ykvyn9BbGRzdleXI42BLOST2UDF5ln5pSQNEH7helO00INFFLAI+Jb2vzbk8APjM Uscn8nrRNJczEnjk3zeEPcxikVy3LFJgzVMN0FPjRIihLrW8dUlX2aJ/4Rq5SqyU rAyfU2DA3e26r1o+mr4EnKeaH+nhl39YIpnFf+XbAqjWBrOfZZqUQ5CtrAUdawDg nUe73RGNZbqXOmddJPVYtNEtfZW4AqLSi+toKi+OjxoO3TlqNbx2GIaoR2OsupfB TmPesvdOe3dEjQld6zCbm/1gErKvXFm/i7hV/lO9pz9phxDcPVGva9bFIxMVgdgT y/sn7e0zlhohfQ== -----END CERTIFICATE-----Generated at Sat Dec 20 00:12:16 2025 by rpki-client