This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/00d927-ed1b-4b19-ad6b-8429ba79319f/1/dwrtd5md59Z-nfM_VVkd7e62JqU.mft File: dwrtd5md59Z-nfM_VVkd7e62JqU.mft (raw, json) Hash identifier: 7+10RQs0BiiQX6nYdd0XicM8cS32exduMRVdhdw4Yxo= Subject key identifier: D6:46:A4:83:5D:31:8E:AC:6E:4F:D0:9D:4D:22:F7:25:27:1A:D4:6B Authority key identifier: 77:0A:ED:77:99:9D:E7:D6:7E:9D:F3:3F:55:59:1D:ED:EE:B6:26:A5 Certificate issuer: /CN=770aed77999de7d67e9df33f55591dedeeb626a5 Certificate serial: 019B39EB15C0809F426C2AC652ABF18C490B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dwrtd5md59Z-nfM_VVkd7e62JqU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/00d927-ed1b-4b19-ad6b-8429ba79319f/1/dwrtd5md59Z-nfM_VVkd7e62JqU.mft Manifest number: 0989 Signing time: Sat 20 Dec 2025 04:01:06 +0000 Manifest this update: Sat 20 Dec 2025 04:01:06 +0000 Manifest next update: Sun 21 Dec 2025 04:01:06 +0000 Files and hashes: 1: HD-O2jkuswq0DBtkA_qMAtYHpi0.roa (hash: vMxKnkHwvEkLxZMUSLynqgj1bxvvWTA51P3OBUUHA7o=) 2: dwrtd5md59Z-nfM_VVkd7e62JqU.crl (hash: jfzDbMQU/VQ+mUXMORkwK14tTYvfpYEY+9wsBLaR7X4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/00d927-ed1b-4b19-ad6b-8429ba79319f/1/dwrtd5md59Z-nfM_VVkd7e62JqU.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/00d927-ed1b-4b19-ad6b-8429ba79319f/1/dwrtd5md59Z-nfM_VVkd7e62JqU.mft rsync://rpki.ripe.net/repository/DEFAULT/dwrtd5md59Z-nfM_VVkd7e62JqU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:15:c0:80:9f:42:6c:2a:c6:52:ab:f1:8c:49:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=770aed77999de7d67e9df33f55591dedeeb626a5 Validity Not Before: Dec 20 04:01:06 2025 GMT Not After : Dec 21 04:01:06 2025 GMT Subject: CN=d646a4835d318eac6e4fd09d4d22f725271ad46b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c0:66:1b:73:e5:03:f5:25:f7:20:c0:06:96: 1c:7e:f3:39:12:66:2a:1a:70:b3:b9:1b:5d:7a:f5: 6f:2a:f3:81:a0:13:7b:f8:f3:57:68:8f:2a:5b:e4: ca:3d:1b:1a:a8:30:74:dc:1a:a8:f1:8d:25:ca:cf: 77:5a:97:e5:a5:b8:48:08:14:75:2c:f7:1c:57:38: 42:f1:7a:a1:e7:45:3d:5e:ec:5c:b8:a2:66:7d:03: ad:77:c1:e7:e5:14:6f:e0:35:b1:b9:bd:8c:09:34: f6:e9:4b:84:48:40:ef:d4:df:a0:68:3c:3d:e2:ae: 69:17:fd:50:89:dd:c4:61:47:53:e4:1d:7a:3c:cf: 7f:c7:97:92:45:7f:41:81:e4:b5:89:5d:81:f6:ce: 11:2e:7c:fd:8b:f2:5e:bf:76:99:60:bb:c5:e7:ee: 08:58:f5:28:c9:39:e3:a5:02:0f:ea:20:11:96:4e: 47:fe:82:6b:ca:d7:f6:e3:ce:96:56:c1:d2:05:3e: 98:ab:6a:6b:ad:8b:4c:f8:6e:ff:dd:07:8b:e4:d1: 72:a1:b9:d0:09:51:8b:00:19:b0:ad:42:bc:d3:41: 2e:4f:82:c4:50:b5:a7:27:2c:09:13:25:4d:31:61: d2:36:7d:ea:64:ae:de:0b:23:91:78:a1:86:e8:87: 22:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:46:A4:83:5D:31:8E:AC:6E:4F:D0:9D:4D:22:F7:25:27:1A:D4:6B X509v3 Authority Key Identifier: keyid:77:0A:ED:77:99:9D:E7:D6:7E:9D:F3:3F:55:59:1D:ED:EE:B6:26:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dwrtd5md59Z-nfM_VVkd7e62JqU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/00d927-ed1b-4b19-ad6b-8429ba79319f/1/dwrtd5md59Z-nfM_VVkd7e62JqU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/00d927-ed1b-4b19-ad6b-8429ba79319f/1/dwrtd5md59Z-nfM_VVkd7e62JqU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:ff:e7:ff:b5:c1:39:ff:ac:47:0f:66:fc:cd:fb:60:69:61: 08:c1:25:c7:5f:ea:b9:0a:97:44:38:0e:2b:d5:42:59:4e:0a: 5a:70:d1:5f:f9:5a:35:40:e3:dc:1c:b8:b2:3a:72:2e:16:e3: bd:7f:c9:1a:d9:6a:db:ba:07:63:d8:30:36:7c:26:7e:ca:ab: ae:e6:77:bf:76:3b:8c:36:b1:1c:46:cb:64:15:d3:fa:16:33: 74:63:3c:42:72:0c:80:3f:bc:ab:ba:7a:43:cd:98:42:c6:9e: 60:c6:de:ae:5e:c3:ec:6d:e5:40:7c:48:d1:11:55:10:1d:ef: 33:b7:b6:4e:60:de:16:4e:17:ce:79:19:bd:3a:8d:8f:e2:e9: 6c:cf:ac:af:aa:f9:dc:c7:d1:2e:32:34:ed:26:2e:27:92:1a: 85:e9:d2:7b:b0:e5:16:cf:8a:7e:b5:93:9d:eb:85:64:63:58: 41:21:60:bc:3e:e5:e2:ed:6d:15:c4:21:fd:a1:c7:53:db:81: 2b:ac:f6:36:e0:38:1b:65:d8:9e:b0:d5:cc:40:4e:b4:cf:0c: 3d:38:86:0d:f4:4f:fe:b5:62:17:91:48:d3:cc:48:b3:19:b7: a6:02:c8:70:22:d1:d8:57:9d:ac:ad:49:a4:18:32:21:b9:7f: 23:e2:17:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56xXAgJ9CbCrGUqvxjEkLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MGFlZDc3OTk5ZGU3ZDY3ZTlkZjMzZjU1NTkxZGVkZWVi NjI2YTUwHhcNMjUxMjIwMDQwMTA2WhcNMjUxMjIxMDQwMTA2WjAzMTEwLwYDVQQD EyhkNjQ2YTQ4MzVkMzE4ZWFjNmU0ZmQwOWQ0ZDIyZjcyNTI3MWFkNDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucBmG3PlA/Ul9yDABpYcfvM5EmYq GnCzuRtdevVvKvOBoBN7+PNXaI8qW+TKPRsaqDB03Bqo8Y0lys93WpflpbhICBR1 LPccVzhC8Xqh50U9XuxcuKJmfQOtd8Hn5RRv4DWxub2MCTT26UuESEDv1N+gaDw9 4q5pF/1Qid3EYUdT5B16PM9/x5eSRX9BgeS1iV2B9s4RLnz9i/Jev3aZYLvF5+4I WPUoyTnjpQIP6iARlk5H/oJrytf2486WVsHSBT6Yq2prrYtM+G7/3QeL5NFyobnQ CVGLABmwrUK800EuT4LEULWnJywJEyVNMWHSNn3qZK7eCyOReKGG6IcitwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNZGpINdMY6sbk/QnU0i9yUnGtRrMB8GA1UdIwQY MBaAFHcK7XeZnefWfp3zP1VZHe3utialMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHdydGQ1bWQ1OVotbmZNX1ZWa2Q3ZTYySnFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8wMGQ5MjctZWQxYi00YjE5LWFkNmIt ODQyOWJhNzkzMTlmLzEvZHdydGQ1bWQ1OVotbmZNX1ZWa2Q3ZTYySnFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8wMGQ5MjctZWQxYi00YjE5LWFkNmItODQyOWJhNzkzMTlm LzEvZHdydGQ1bWQ1OVotbmZNX1ZWa2Q3ZTYySnFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL//n/7XB Of+sRw9m/M37YGlhCMElx1/quQqXRDgOK9VCWU4KWnDRX/laNUDj3By4sjpyLhbj vX/JGtlq27oHY9gwNnwmfsqrruZ3v3Y7jDaxHEbLZBXT+hYzdGM8QnIMgD+8q7p6 Q82YQsaeYMberl7D7G3lQHxI0RFVEB3vM7e2TmDeFk4XznkZvTqNj+LpbM+sr6r5 3MfRLjI07SYuJ5IahenSe7DlFs+KfrWTneuFZGNYQSFgvD7l4u1tFcQh/aHHU9uB K6z2NuA4G2XYnrDVzEBOtM8MPTiGDfRP/rViF5FI08xIsxm3pgLIcCLR2FedrK1J pBgyIbl/I+IXAQ== -----END CERTIFICATE-----Generated at Sat Dec 20 08:40:05 2025 by rpki-client