This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft File: DwJfo1fCCrvxGEJiNGWOYtfccHY.mft (raw, json) Hash identifier: STl3fQRneCjNihFpDZEN1SQDhoWIZz1zmWpDxnUkmro= Subject key identifier: 9E:4C:F0:6A:1A:2A:10:37:7C:CE:E3:92:4D:03:17:3C:0D:8C:B1:06 Authority key identifier: 0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76 Certificate issuer: /CN=0f025fa357c20abbf118426234658e62d7dc7076 Certificate serial: 019B4EF291EF6C30CFF20B299B4737F33BD1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft Manifest number: 0514 Signing time: Wed 24 Dec 2025 06:01:18 +0000 Manifest this update: Wed 24 Dec 2025 06:01:18 +0000 Manifest next update: Thu 25 Dec 2025 06:01:18 +0000 Files and hashes: 1: DwJfo1fCCrvxGEJiNGWOYtfccHY.crl (hash: FxQGqAe030WrMFzSUFnvtFRdZm/yoC0I23tKZXB+lew=) 2: PPz_1wH3hqFDjLC-MrIMRrZJxeQ.roa (hash: ZY1q21nV+Hi/oVRVSMTtHd27zoQ6myzruEINZqqxjKM=) 3: fnisj2MvVqaFaMeYW9lmJ0SCW9o.roa (hash: 6em1xLWv3WGsIAinbV2APlVzvS3mzKB3u+DwFqIP/5Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 06:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:f2:91:ef:6c:30:cf:f2:0b:29:9b:47:37:f3:3b:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f025fa357c20abbf118426234658e62d7dc7076 Validity Not Before: Dec 24 06:01:18 2025 GMT Not After : Dec 25 06:01:18 2025 GMT Subject: CN=9e4cf06a1a2a10377ccee3924d03173c0d8cb106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4d:6f:1c:d8:67:1a:5d:ae:24:2d:a7:a8:89: 54:e5:52:be:4e:c5:ce:62:12:a3:95:39:0a:1b:0f: d7:05:de:a0:b1:9d:7f:14:32:5c:3b:68:05:0e:92: f4:0f:1b:2d:fc:3a:24:f7:b8:4b:46:40:27:04:5f: d6:6b:af:15:95:6b:a9:6f:89:c2:bd:57:f2:1f:37: b9:c9:4c:a0:8f:0f:93:43:50:52:4c:37:1b:7b:d7: 6e:1b:d4:3d:c7:1e:98:51:a4:f6:92:c6:e9:b0:53: 2c:f3:61:ee:d7:2b:f3:28:36:3e:ef:aa:08:df:8b: 05:be:3d:55:0e:6e:74:a6:88:5b:87:e8:13:bb:50: 63:be:02:49:2b:02:c5:e6:1b:4c:df:f7:ed:dd:e6: 3f:05:76:b4:fd:52:78:03:93:b1:e1:71:18:4f:04: 8a:53:18:71:39:34:d9:a9:4a:2f:d9:e6:a8:11:6d: 34:bb:71:29:83:4c:17:72:16:a6:1b:a5:5c:7e:b5: 92:d5:26:c6:cc:1d:72:30:c6:43:d9:27:31:62:79: 79:5f:e8:bc:66:47:b8:97:32:86:df:f3:53:b5:13: 53:42:aa:2f:a1:7c:cc:a0:37:63:72:ab:2c:60:42: 51:2e:4d:7d:e4:0d:79:43:cd:e6:f1:f5:ca:8c:f0: 8a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:4C:F0:6A:1A:2A:10:37:7C:CE:E3:92:4D:03:17:3C:0D:8C:B1:06 X509v3 Authority Key Identifier: keyid:0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:66:d7:93:0f:12:c7:62:32:5b:84:ba:7b:d5:57:36:c7:bd: 4f:73:db:bd:78:68:6e:7f:34:7a:22:ed:bf:5c:d4:b4:e2:97: b1:0f:9e:ea:b7:54:47:b2:d3:b1:95:ef:34:68:4f:c0:16:19: b5:c3:1e:d5:05:82:75:5a:f6:4d:cb:f6:f3:ee:bb:a5:c2:6b: 77:4c:c4:86:c7:80:88:6b:b4:3e:7d:06:a5:e2:68:90:41:92: e3:d9:b5:d1:cd:5d:0f:6d:53:47:b9:24:2c:07:fc:ed:d9:ee: d4:58:b0:41:45:06:3f:e0:d9:bb:00:39:a3:6c:ab:e9:77:60: 2e:fd:70:97:bb:08:b8:4c:7c:a5:cd:66:25:f2:df:f5:a6:a2: 5d:e3:46:00:fe:25:aa:21:cb:9e:fb:e4:28:c1:f8:64:f1:60: a0:94:cc:69:7e:e7:c0:49:af:e2:83:57:d7:12:85:e9:e7:33: 1e:b3:a6:ee:af:e6:cb:df:8e:95:49:50:04:d1:4b:e6:00:5b: 2b:46:d1:20:9c:3b:d0:6c:1f:36:ec:02:2f:34:ad:c7:89:c3: 10:79:6f:bc:0b:8d:1e:df:03:93:8a:7a:a6:40:38:ed:fa:c5: 65:f1:b7:a2:be:1a:08:45:4a:e1:1c:c2:61:08:78:4d:36:59: ee:f8:ac:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtO8pHvbDDP8gspm0c38zvRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMDI1ZmEzNTdjMjBhYmJmMTE4NDI2MjM0NjU4ZTYyZDdk YzcwNzYwHhcNMjUxMjI0MDYwMTE4WhcNMjUxMjI1MDYwMTE4WjAzMTEwLwYDVQQD Eyg5ZTRjZjA2YTFhMmExMDM3N2NjZWUzOTI0ZDAzMTczYzBkOGNiMTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsk1vHNhnGl2uJC2nqIlU5VK+TsXO YhKjlTkKGw/XBd6gsZ1/FDJcO2gFDpL0Dxst/Dok97hLRkAnBF/Wa68VlWupb4nC vVfyHze5yUygjw+TQ1BSTDcbe9duG9Q9xx6YUaT2ksbpsFMs82Hu1yvzKDY+76oI 34sFvj1VDm50pohbh+gTu1BjvgJJKwLF5htM3/ft3eY/BXa0/VJ4A5Ox4XEYTwSK UxhxOTTZqUov2eaoEW00u3Epg0wXchamG6VcfrWS1SbGzB1yMMZD2ScxYnl5X+i8 Zke4lzKG3/NTtRNTQqovoXzMoDdjcqssYEJRLk195A15Q83m8fXKjPCKlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ5M8GoaKhA3fM7jkk0DFzwNjLEGMB8GA1UdIwQY MBaAFA8CX6NXwgq78RhCYjRljmLX3HB2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHdKZm8xZkNDcnZ4R0VKaU5HV09ZdGZjY0hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xMTRhMTAtOGVmNy00OTAzLTk2M2Ut ZDRkNTlhMDk1YzdmLzEvRHdKZm8xZkNDcnZ4R0VKaU5HV09ZdGZjY0hZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8xMTRhMTAtOGVmNy00OTAzLTk2M2UtZDRkNTlhMDk1Yzdm LzEvRHdKZm8xZkNDcnZ4R0VKaU5HV09ZdGZjY0hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXWbXkw8S x2IyW4S6e9VXNse9T3PbvXhobn80eiLtv1zUtOKXsQ+e6rdUR7LTsZXvNGhPwBYZ tcMe1QWCdVr2Tcv28+67pcJrd0zEhseAiGu0Pn0GpeJokEGS49m10c1dD21TR7kk LAf87dnu1FiwQUUGP+DZuwA5o2yr6XdgLv1wl7sIuEx8pc1mJfLf9aaiXeNGAP4l qiHLnvvkKMH4ZPFgoJTMaX7nwEmv4oNX1xKF6eczHrOm7q/my9+OlUlQBNFL5gBb K0bRIJw70GwfNuwCLzStx4nDEHlvvAuNHt8Dk4p6pkA47frFZfG3or4aCEVK4RzC YQh4TTZZ7vis3w== -----END CERTIFICATE-----Generated at Wed Dec 24 12:00:19 2025 by rpki-client