This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft File: dim08aCQrAe-F2LewzjmoP412X4.mft (raw, json) Hash identifier: lIhogBWezEA0MjusWfre8EOzlCWzpMuNjwZfvejP9h8= Subject key identifier: 8B:FA:96:F9:8F:E0:B6:70:0B:78:D2:04:F2:11:51:09:FB:7D:D1:BA Authority key identifier: 76:29:B4:F1:A0:90:AC:07:BE:17:62:DE:C3:38:E6:A0:FE:35:D9:7E Certificate issuer: /CN=7629b4f1a090ac07be1762dec338e6a0fe35d97e Certificate serial: 019B5977630D2693CB94979091431E6E9ACD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dim08aCQrAe-F2LewzjmoP412X4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft Manifest number: 076A Signing time: Fri 26 Dec 2025 07:02:34 +0000 Manifest this update: Fri 26 Dec 2025 07:02:34 +0000 Manifest next update: Sat 27 Dec 2025 07:02:34 +0000 Files and hashes: 1: 5YMm7iUmf7YXCbeTMsZ2gbUF8Mc.roa (hash: IgoqrrmJPuGzGpT+UcpwCttOwj7BjxbDg3tOXCDKJe8=) 2: dim08aCQrAe-F2LewzjmoP412X4.crl (hash: 1f4OQa3BuZv4Kt9t7BxB0Ou8ZyQYDd0CA750I+njc2o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.crl rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft rsync://rpki.ripe.net/repository/DEFAULT/dim08aCQrAe-F2LewzjmoP412X4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:63:0d:26:93:cb:94:97:90:91:43:1e:6e:9a:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7629b4f1a090ac07be1762dec338e6a0fe35d97e Validity Not Before: Dec 26 07:02:34 2025 GMT Not After : Dec 27 07:02:34 2025 GMT Subject: CN=8bfa96f98fe0b6700b78d204f2115109fb7dd1ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fd:e2:a7:c1:da:11:c8:f2:28:8b:b9:6d:7b: 39:04:55:fd:0c:93:72:8a:2f:49:11:5c:af:46:92: d9:ab:8f:c5:e7:73:24:18:27:75:4c:9a:cf:b8:40: 76:4b:f0:15:61:d4:8c:5f:66:18:00:ca:95:45:74: 30:ec:78:6c:60:2a:a6:53:7e:44:59:61:22:ef:fd: 79:84:15:7d:a2:9c:6f:d8:a7:eb:b5:07:d7:e3:e1: 82:0c:df:e5:13:0c:3c:6d:59:55:11:a8:e3:8d:07: 82:83:f0:bc:8e:ef:95:8f:bd:6d:eb:cd:86:94:6e: 39:c2:1b:10:fd:b7:a9:b0:36:c4:2c:a4:15:4c:ea: b8:e5:50:1d:c7:7e:09:0f:a8:8e:a0:04:9c:0f:e9: 03:46:06:58:8b:1a:94:c4:07:f4:a8:e6:22:32:34: 70:12:47:78:58:34:28:06:c7:a5:b2:9d:49:f0:42: f7:ec:8a:ab:28:d5:45:9c:8a:4c:00:08:6c:2a:7b: aa:90:8c:2d:4d:64:bf:83:47:58:08:17:d0:c5:63: 2f:78:36:08:db:5d:5e:eb:81:3e:42:c6:f1:a2:b7: 3c:c2:3e:b8:1a:71:4b:f5:90:15:6b:42:3b:4b:22: 79:54:3f:fb:04:44:29:f6:53:d7:da:59:e7:40:11: 23:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:FA:96:F9:8F:E0:B6:70:0B:78:D2:04:F2:11:51:09:FB:7D:D1:BA X509v3 Authority Key Identifier: keyid:76:29:B4:F1:A0:90:AC:07:BE:17:62:DE:C3:38:E6:A0:FE:35:D9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dim08aCQrAe-F2LewzjmoP412X4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:db:33:91:c6:2b:3d:2f:02:14:3f:09:50:9e:77:67:e4:c0: cc:5f:36:a3:95:fe:67:f9:0a:74:b2:9e:32:92:7e:1a:16:58: 2a:ef:1f:f6:58:62:7c:36:10:56:5f:0a:36:c4:96:99:21:b7: 15:3f:ad:2d:67:1c:8a:63:3d:20:c3:39:7e:d6:fd:e8:33:d3: b4:4e:0e:87:32:a7:bc:71:a8:2d:79:68:e5:05:79:83:ad:40: 1d:56:ca:2a:90:8c:46:6a:f5:94:39:5c:d3:db:4f:09:df:67: c6:85:ed:d9:7f:f4:63:59:31:4a:7a:8b:c7:67:23:ba:b6:9f: 48:1e:0e:71:75:65:7b:f3:9e:4d:ce:26:56:a8:4f:6d:ee:2f: 25:72:57:9e:09:e5:73:87:fc:09:78:a0:c5:19:d6:14:c4:0b: 4d:6a:cf:1b:a2:3a:04:54:7b:35:7b:30:3c:cb:13:dc:90:da: c8:3c:f2:7c:75:3c:46:fa:07:60:29:e9:27:c4:b4:4c:8e:2b: 0f:2e:6c:d1:51:0b:67:82:d0:4d:74:ce:df:12:df:c1:79:8c: 33:91:c2:21:90:24:ee:db:c9:e9:3c:96:11:09:7e:8f:e7:04: f2:1c:d6:cd:c8:40:99:54:7a:0e:ab:4e:38:d6:de:03:69:3b: 8b:95:53:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZd2MNJpPLlJeQkUMebprNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2MjliNGYxYTA5MGFjMDdiZTE3NjJkZWMzMzhlNmEwZmUz NWQ5N2UwHhcNMjUxMjI2MDcwMjM0WhcNMjUxMjI3MDcwMjM0WjAzMTEwLwYDVQQD Eyg4YmZhOTZmOThmZTBiNjcwMGI3OGQyMDRmMjExNTEwOWZiN2RkMWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyP3ip8HaEcjyKIu5bXs5BFX9DJNy ii9JEVyvRpLZq4/F53MkGCd1TJrPuEB2S/AVYdSMX2YYAMqVRXQw7HhsYCqmU35E WWEi7/15hBV9opxv2KfrtQfX4+GCDN/lEww8bVlVEajjjQeCg/C8ju+Vj71t682G lG45whsQ/bepsDbELKQVTOq45VAdx34JD6iOoAScD+kDRgZYixqUxAf0qOYiMjRw Ekd4WDQoBselsp1J8EL37IqrKNVFnIpMAAhsKnuqkIwtTWS/g0dYCBfQxWMveDYI 211e64E+Qsbxorc8wj64GnFL9ZAVa0I7SyJ5VD/7BEQp9lPX2lnnQBEjxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIv6lvmP4LZwC3jSBPIRUQn7fdG6MB8GA1UdIwQY MBaAFHYptPGgkKwHvhdi3sM45qD+Ndl+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGltMDhhQ1FyQWUtRjJMZXd6am1vUDQxMlg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9hMWVmNjMtMTZhNy00YTk0LWIxMTQt NWYxNzViNWFlMDM4LzEvZGltMDhhQ1FyQWUtRjJMZXd6am1vUDQxMlg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9hMWVmNjMtMTZhNy00YTk0LWIxMTQtNWYxNzViNWFlMDM4 LzEvZGltMDhhQ1FyQWUtRjJMZXd6am1vUDQxMlg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAONszkcYr PS8CFD8JUJ53Z+TAzF82o5X+Z/kKdLKeMpJ+GhZYKu8f9lhifDYQVl8KNsSWmSG3 FT+tLWccimM9IMM5ftb96DPTtE4OhzKnvHGoLXlo5QV5g61AHVbKKpCMRmr1lDlc 09tPCd9nxoXt2X/0Y1kxSnqLx2cjurafSB4OcXVle/OeTc4mVqhPbe4vJXJXngnl c4f8CXigxRnWFMQLTWrPG6I6BFR7NXswPMsT3JDayDzyfHU8RvoHYCnpJ8S0TI4r Dy5s0VELZ4LQTXTO3xLfwXmMM5HCIZAk7tvJ6TyWEQl+j+cE8hzWzchAmVR6DqtO ONbeA2k7i5VTWw== -----END CERTIFICATE-----Generated at Fri Dec 26 09:23:14 2025 by rpki-client