This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft File: dahWeFOS2ifQC9snCRxZJsMVXYk.mft (raw, json) Hash identifier: 5CSqoFL8wJpacSlQrVyifG41R1SwEwcSdkEsth3d+Dc= Subject key identifier: D7:68:44:AC:DD:9B:95:4E:D3:76:AA:61:5E:92:6A:93:D8:76:60:03 Authority key identifier: 75:A8:56:78:53:92:DA:27:D0:0B:DB:27:09:1C:59:26:C3:15:5D:89 Certificate issuer: /CN=75a856785392da27d00bdb27091c5926c3155d89 Certificate serial: 019B2EF917BAFF9709449BA2D993DE574166 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dahWeFOS2ifQC9snCRxZJsMVXYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft Manifest number: 0FB4 Signing time: Thu 18 Dec 2025 01:00:34 +0000 Manifest this update: Thu 18 Dec 2025 01:00:34 +0000 Manifest next update: Fri 19 Dec 2025 01:00:34 +0000 Files and hashes: 1: 4Ibv1mRm3BSugEZRLZ50GEzm6Bc.roa (hash: Ox7Eku50X67DCQ6L0nXfJGgK/iPhql76+0sQGSQq9Q4=) 2: dahWeFOS2ifQC9snCRxZJsMVXYk.crl (hash: BkVT1MZszPa4qHxolvHn8LaMAAhYRiEa87F+Gouwrr0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft rsync://rpki.ripe.net/repository/DEFAULT/dahWeFOS2ifQC9snCRxZJsMVXYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:17:ba:ff:97:09:44:9b:a2:d9:93:de:57:41:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75a856785392da27d00bdb27091c5926c3155d89 Validity Not Before: Dec 18 01:00:34 2025 GMT Not After : Dec 19 01:00:34 2025 GMT Subject: CN=d76844acdd9b954ed376aa615e926a93d8766003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:53:b2:b4:28:ae:31:9e:9c:d8:6f:3d:b6:c2: 05:a4:d0:3d:c2:4f:e5:a4:3e:fc:fd:33:7f:39:5f: 7e:4a:54:69:d3:52:00:9a:aa:eb:f4:d7:c4:c9:d9: b4:89:34:50:1c:94:b9:cd:e5:04:6e:a8:a4:19:7f: 2c:84:b2:d7:13:6a:df:68:e9:7a:64:c3:eb:24:33: e8:3c:ec:03:7b:07:ef:28:bb:7d:e1:d9:af:95:ea: ab:4e:74:58:19:05:c4:61:97:44:48:bd:52:8e:33: d9:98:76:94:af:89:5a:a7:da:20:5b:6f:37:7d:64: 44:fd:15:93:e0:53:c7:b4:18:a5:b4:32:ab:bd:6a: b1:f6:03:92:f6:1b:43:e8:96:94:d4:22:df:e8:53: 91:f0:4f:cf:79:89:4c:9a:3a:aa:f3:3d:14:5e:e1: a7:f2:7f:f5:72:09:59:9e:77:32:2d:40:7c:c0:4c: 76:09:ac:bb:cd:8f:e8:34:9d:6a:b1:bb:71:fb:47: 9b:f6:88:b7:dc:f1:db:1f:d5:6e:9b:1e:60:2b:02: db:a0:55:30:14:31:98:05:b6:8c:c2:76:76:55:48: 54:71:2a:08:1c:c0:16:e4:b4:a6:ff:63:4d:7c:f6: 80:e9:14:3a:b1:f2:23:b3:7a:e7:2d:43:9c:a9:6a: 2f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:68:44:AC:DD:9B:95:4E:D3:76:AA:61:5E:92:6A:93:D8:76:60:03 X509v3 Authority Key Identifier: keyid:75:A8:56:78:53:92:DA:27:D0:0B:DB:27:09:1C:59:26:C3:15:5D:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dahWeFOS2ifQC9snCRxZJsMVXYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:35:7f:3b:7e:06:9e:c7:db:1d:3b:a8:54:ff:0d:07:ba:bd: 77:5e:57:17:a1:02:95:c7:bf:39:2c:e7:d5:09:cd:14:8f:98: 2d:b1:5c:bd:77:17:fb:ad:42:d9:03:41:24:a0:70:ef:94:cc: 43:7f:b5:4e:5f:ae:7a:92:31:ca:5d:91:0a:f8:90:c8:27:30: 48:1d:a3:67:fb:b8:6f:cb:51:92:9a:f5:3e:c0:1d:e8:fd:0e: 50:7d:4a:f0:49:a6:b3:a5:59:6b:2e:c8:4f:ab:7c:bf:44:cf: 8e:e3:c4:12:b0:a7:bc:db:3c:eb:8a:d9:75:3d:86:1b:2b:cb: b5:f6:f9:2b:1d:a3:f1:0f:9e:75:12:b5:70:b8:e1:ca:1f:a1: ec:ed:d8:b3:e1:b5:8c:0f:e1:1a:d0:94:75:e1:0b:60:88:ff: 8a:7c:64:d8:0a:a7:89:2e:4e:53:ee:d5:13:c1:af:43:f2:a6: 75:75:d7:5f:88:c0:d6:98:e2:a3:6a:c9:c7:73:51:a5:8a:f8: d0:64:b4:70:86:61:7a:70:e8:49:81:b3:88:c7:e8:fa:41:a6: 8f:0b:77:b2:98:f3:fe:93:47:16:58:97:f8:d3:fe:c1:1d:fc: 97:d0:b0:69:bc:11:61:ed:bb:ae:0b:2c:82:55:16:ba:b5:f2: a8:ea:17:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+Re6/5cJRJui2ZPeV0FmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1YTg1Njc4NTM5MmRhMjdkMDBiZGIyNzA5MWM1OTI2YzMx NTVkODkwHhcNMjUxMjE4MDEwMDM0WhcNMjUxMjE5MDEwMDM0WjAzMTEwLwYDVQQD EyhkNzY4NDRhY2RkOWI5NTRlZDM3NmFhNjE1ZTkyNmE5M2Q4NzY2MDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5FOytCiuMZ6c2G89tsIFpNA9wk/l pD78/TN/OV9+SlRp01IAmqrr9NfEydm0iTRQHJS5zeUEbqikGX8shLLXE2rfaOl6 ZMPrJDPoPOwDewfvKLt94dmvleqrTnRYGQXEYZdESL1SjjPZmHaUr4lap9ogW283 fWRE/RWT4FPHtBiltDKrvWqx9gOS9htD6JaU1CLf6FOR8E/PeYlMmjqq8z0UXuGn 8n/1cglZnncyLUB8wEx2Cay7zY/oNJ1qsbtx+0eb9oi33PHbH9Vumx5gKwLboFUw FDGYBbaMwnZ2VUhUcSoIHMAW5LSm/2NNfPaA6RQ6sfIjs3rnLUOcqWovYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNdoRKzdm5VO03aqYV6SapPYdmADMB8GA1UdIwQY MBaAFHWoVnhTkton0AvbJwkcWSbDFV2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGFoV2VGT1MyaWZRQzlzbkNSeFpKc01WWFlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9lYzBkYTktZWE4Yy00YjhlLWEzMmEt YTViYzBjNzBjNTEzLzEvZGFoV2VGT1MyaWZRQzlzbkNSeFpKc01WWFlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9lYzBkYTktZWE4Yy00YjhlLWEzMmEtYTViYzBjNzBjNTEz LzEvZGFoV2VGT1MyaWZRQzlzbkNSeFpKc01WWFlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWTV/O34G nsfbHTuoVP8NB7q9d15XF6EClce/OSzn1QnNFI+YLbFcvXcX+61C2QNBJKBw75TM Q3+1Tl+uepIxyl2RCviQyCcwSB2jZ/u4b8tRkpr1PsAd6P0OUH1K8Emms6VZay7I T6t8v0TPjuPEErCnvNs864rZdT2GGyvLtfb5Kx2j8Q+edRK1cLjhyh+h7O3Ys+G1 jA/hGtCUdeELYIj/inxk2AqniS5OU+7VE8GvQ/KmdXXXX4jA1pjio2rJx3NRpYr4 0GS0cIZhenDoSYGziMfo+kGmjwt3spjz/pNHFliX+NP+wR38l9CwabwRYe27rgss glUWurXyqOoXlA== -----END CERTIFICATE-----Generated at Thu Dec 18 03:52:30 2025 by rpki-client