This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft File: dh55HzroOuiyY-PNtoKjR1tXB98.mft (raw, json) Hash identifier: +G/ctwmLW63KrwIMNg47WL5zKOKG8zX0HS80iylUcwU= Subject key identifier: F5:81:F3:D9:12:B7:71:92:12:45:9D:4F:D1:DF:48:7B:BC:2A:FE:FC Authority key identifier: 76:1E:79:1F:3A:E8:3A:E8:B2:63:E3:CD:B6:82:A3:47:5B:57:07:DF Certificate issuer: /CN=761e791f3ae83ae8b263e3cdb682a3475b5707df Certificate serial: 019B4D3AFA82AAB3CAA6DC09E82DB2AE1E97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft Manifest number: 1790 Signing time: Tue 23 Dec 2025 22:01:09 +0000 Manifest this update: Tue 23 Dec 2025 22:01:09 +0000 Manifest next update: Wed 24 Dec 2025 22:01:09 +0000 Files and hashes: 1: dh55HzroOuiyY-PNtoKjR1tXB98.crl (hash: uAetiflGx+36rTi8i4nlyFrKzS+xQtgecDC2gf4Vq7I=) 2: e3qYhLR-km5IQlHYrXGIQxD6r18.roa (hash: o3slshWpfwKW/e4DeCSWK9BRzXX7zHWEOnbvJOQywpo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:3a:fa:82:aa:b3:ca:a6:dc:09:e8:2d:b2:ae:1e:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=761e791f3ae83ae8b263e3cdb682a3475b5707df Validity Not Before: Dec 23 22:01:09 2025 GMT Not After : Dec 24 22:01:09 2025 GMT Subject: CN=f581f3d912b7719212459d4fd1df487bbc2afefc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cf:22:05:27:25:3f:39:15:29:71:08:c4:f3: ce:b0:64:68:e5:3b:a4:7d:ce:a1:02:8f:c0:75:90: 1d:ec:0d:19:45:b2:cc:1e:d5:92:aa:96:49:f8:8d: 14:9f:d3:02:f4:ce:99:ae:69:26:ee:78:34:90:f7: ae:09:cb:38:4f:8b:5b:aa:a2:ad:47:f8:c2:52:2c: f4:30:04:c7:86:af:ee:e3:37:1f:61:44:6d:84:da: 42:28:c2:b7:e6:24:1c:3a:3e:94:e0:10:d9:67:77: 4b:61:61:28:e9:ed:89:22:1a:f8:37:df:f3:7d:05: ad:1d:c6:7d:78:02:63:62:1c:4b:9f:5d:6d:a8:2a: 42:95:aa:6b:97:3d:c6:47:17:2d:ca:29:00:0b:ea: b2:a5:3f:1d:9b:51:6a:f8:c1:41:26:18:dd:9e:36: cf:4b:df:37:c5:ab:ba:c9:08:fb:55:f4:b6:27:a3: 1c:bb:95:2b:be:ff:77:45:52:66:24:d2:0f:e3:d8: 43:4a:a5:0b:4e:e0:f9:1d:db:d9:61:d1:13:60:a9: 91:9f:3e:cd:4c:9c:8a:0d:fb:9a:51:9e:dc:ba:f1: a6:de:e1:1c:e6:4e:9b:b4:f4:1e:e1:e6:a0:eb:7e: 4b:38:11:85:4b:7d:c6:5c:3f:c7:cc:8c:3a:1f:e2: 31:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:81:F3:D9:12:B7:71:92:12:45:9D:4F:D1:DF:48:7B:BC:2A:FE:FC X509v3 Authority Key Identifier: keyid:76:1E:79:1F:3A:E8:3A:E8:B2:63:E3:CD:B6:82:A3:47:5B:57:07:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:59:a1:06:46:5e:9a:af:ba:35:a9:7a:26:dc:5c:6b:b0:0c: 11:a9:85:37:3d:a2:67:38:4a:d7:55:d8:2f:61:1f:eb:a9:15: 5d:13:6b:d1:59:db:fe:05:f9:19:3b:4a:c6:ed:01:c2:88:b0: 08:18:a5:89:75:db:72:01:ed:ef:e1:71:f6:6d:c4:1f:3d:c5: 21:99:9e:24:00:d6:a3:c6:fb:e2:9a:e9:4b:a6:2a:e6:af:e1: dc:4a:39:97:73:07:45:3a:bb:cd:8a:55:24:c1:f0:3f:ac:8d: a4:ea:45:2d:de:66:a4:86:00:df:b9:2c:f5:96:f7:4b:cb:87: 7c:4e:d4:e5:4e:7e:83:1c:4e:73:bd:9c:c7:83:51:a7:c0:9b: 5e:d4:7b:cb:51:e0:cb:f7:2e:6a:bd:57:b9:3f:a9:1a:f5:6e: 28:a8:91:89:34:ca:5f:26:6e:06:43:d9:bd:02:5e:d7:07:17: 6b:d2:2e:7e:18:ea:be:a8:c1:73:d4:ba:e6:c1:32:95:97:d3: a7:65:ad:42:38:b8:73:a1:79:69:86:78:ae:5a:e4:5a:f2:a3: 6e:e8:80:47:10:26:ba:10:34:46:9a:7e:3e:74:51:3b:81:7f: 20:f5:63:1f:0b:b0:f7:9b:ee:70:4b:bb:0c:92:7b:9a:03:ac: de:2b:f3:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtNOvqCqrPKptwJ6C2yrh6XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2MWU3OTFmM2FlODNhZThiMjYzZTNjZGI2ODJhMzQ3NWI1 NzA3ZGYwHhcNMjUxMjIzMjIwMTA5WhcNMjUxMjI0MjIwMTA5WjAzMTEwLwYDVQQD EyhmNTgxZjNkOTEyYjc3MTkyMTI0NTlkNGZkMWRmNDg3YmJjMmFmZWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAys8iBSclPzkVKXEIxPPOsGRo5Tuk fc6hAo/AdZAd7A0ZRbLMHtWSqpZJ+I0Un9MC9M6Zrmkm7ng0kPeuCcs4T4tbqqKt R/jCUiz0MATHhq/u4zcfYURthNpCKMK35iQcOj6U4BDZZ3dLYWEo6e2JIhr4N9/z fQWtHcZ9eAJjYhxLn11tqCpClaprlz3GRxctyikAC+qypT8dm1Fq+MFBJhjdnjbP S983xau6yQj7VfS2J6Mcu5Urvv93RVJmJNIP49hDSqULTuD5HdvZYdETYKmRnz7N TJyKDfuaUZ7cuvGm3uEc5k6btPQe4eag635LOBGFS33GXD/HzIw6H+Ix5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPWB89kSt3GSEkWdT9HfSHu8Kv78MB8GA1UdIwQY MBaAFHYeeR866DrosmPjzbaCo0dbVwffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGg1NUh6cm9PdWl5WS1QTnRvS2pSMXRYQjk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9mY2Q5OTAtNzJmNC00ZWJkLTg2NGEt OTJlNDUxODc3ZDJjLzEvZGg1NUh6cm9PdWl5WS1QTnRvS2pSMXRYQjk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9mY2Q5OTAtNzJmNC00ZWJkLTg2NGEtOTJlNDUxODc3ZDJj LzEvZGg1NUh6cm9PdWl5WS1QTnRvS2pSMXRYQjk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADFmhBkZe mq+6Nal6Jtxca7AMEamFNz2iZzhK11XYL2Ef66kVXRNr0Vnb/gX5GTtKxu0Bwoiw CBiliXXbcgHt7+Fx9m3EHz3FIZmeJADWo8b74prpS6Yq5q/h3Eo5l3MHRTq7zYpV JMHwP6yNpOpFLd5mpIYA37ks9Zb3S8uHfE7U5U5+gxxOc72cx4NRp8CbXtR7y1Hg y/cuar1XuT+pGvVuKKiRiTTKXyZuBkPZvQJe1wcXa9IufhjqvqjBc9S65sEylZfT p2WtQji4c6F5aYZ4rlrkWvKjbuiARxAmuhA0Rpp+PnRRO4F/IPVjHwuw95vucEu7 DJJ7mgOs3ivz9g== -----END CERTIFICATE-----Generated at Wed Dec 24 03:32:34 2025 by rpki-client