This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft File: Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft (raw, json) Hash identifier: 8e+kz4/u00uAK3XOQkvatYVe+wA68RUk7x63GOx6FhY= Subject key identifier: 82:EA:BB:66:FA:42:38:3D:F2:70:74:19:AC:BC:A3:A3:91:FC:48:ED Authority key identifier: 0E:6B:38:5C:7B:87:78:BF:78:AF:24:21:C9:9F:5D:38:BD:55:69:14 Certificate issuer: /CN=0e6b385c7b8778bf78af2421c99f5d38bd556914 Certificate serial: 019B3CB53647304CC3A396F47CECF888A55D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 17:01:07 +0000 Manifest this update: Sat 20 Dec 2025 17:01:07 +0000 Manifest next update: Sun 21 Dec 2025 17:01:07 +0000 Files and hashes: 1: Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl (hash: Z+UNhTktKGLwivxDfpug7XIl4fn9N6f801Ja49y8xXc=) 2: eB8JcdNMitcIB4IK3YDPeoxd_sE.roa (hash: uAuMd6C1FXSh+wtAiy0MbK5wWWHEYjRTVBUBNDQkdQU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:36:47:30:4c:c3:a3:96:f4:7c:ec:f8:88:a5:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e6b385c7b8778bf78af2421c99f5d38bd556914 Validity Not Before: Dec 20 17:01:07 2025 GMT Not After : Dec 21 17:01:07 2025 GMT Subject: CN=82eabb66fa42383df2707419acbca3a391fc48ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:bb:aa:f0:a6:17:75:db:de:0e:2a:e8:63:c7: 6b:0b:f3:03:97:f7:0b:9e:71:5b:b3:f3:10:24:5e: d7:7b:25:af:2e:7f:52:34:4f:de:bf:d3:19:bc:82: bc:6b:40:d1:d2:1d:9e:49:b7:43:cd:48:25:37:66: 88:c7:d1:d3:39:19:f1:10:7c:dd:bc:59:96:07:46: e9:f4:92:c1:6c:2a:1a:a5:4f:8b:92:7f:14:d8:68: 66:b1:71:42:58:04:12:4a:e8:93:35:cc:5d:49:79: ae:01:51:bc:bb:77:6f:13:bc:57:ad:1b:77:73:1f: ca:2e:c4:cd:bb:76:6a:0f:0b:2f:fd:51:4f:9d:02: 2d:03:48:db:a6:a2:a4:60:a8:52:40:7b:18:6d:69: 5f:e0:32:97:30:0c:ae:7c:f0:30:dc:46:f1:c4:49: 8c:2f:af:a4:31:74:b6:d2:5c:58:19:44:2d:a4:20: 83:ab:b4:2b:1a:1f:92:ca:21:b4:a1:bd:bb:ba:47: c5:69:93:15:7e:99:72:00:04:cb:0a:d3:78:34:5a: bf:d0:f7:c0:82:f8:8b:77:95:0c:15:4a:d1:a3:a4: c5:55:2a:04:80:fd:05:fd:4c:5c:50:19:63:84:9c: ce:92:46:bc:13:ac:4b:91:1e:dc:8c:f9:7e:3b:fc: ba:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:EA:BB:66:FA:42:38:3D:F2:70:74:19:AC:BC:A3:A3:91:FC:48:ED X509v3 Authority Key Identifier: keyid:0E:6B:38:5C:7B:87:78:BF:78:AF:24:21:C9:9F:5D:38:BD:55:69:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:77:b8:23:81:22:27:58:c1:bb:ff:77:29:ad:c6:67:b1:c0: 26:2e:e8:35:43:4c:07:0a:95:d9:71:8f:c4:9e:c1:4f:14:3d: 31:9c:48:74:6e:22:6d:be:ee:d3:14:ee:99:58:b7:eb:7f:14: 2a:06:1b:0d:41:f6:60:ee:13:ea:fc:49:ff:f6:4f:61:50:19: 94:ea:dc:ed:54:c7:aa:43:1a:70:d3:46:1c:1d:21:c3:bb:69: b0:a3:25:c7:8f:1e:59:56:63:7a:53:98:e9:a3:a8:e0:b0:8a: 6e:27:66:cd:42:0a:9d:dc:92:f6:6a:4c:63:91:e4:64:e6:25: 5a:64:c7:73:0f:16:91:a4:44:1e:5b:03:2a:f0:c6:fc:85:db: 86:45:e8:d0:63:ed:f8:d8:1c:bf:f6:c7:15:e0:44:da:a9:50: 6a:1d:75:7a:07:c6:26:e2:5e:66:4a:c6:56:bb:38:7a:86:af: 72:b8:34:ac:80:0f:cd:22:84:ba:29:a7:52:77:2d:2a:d4:1c: f2:93:e6:e0:c4:e7:be:8a:50:ed:b7:0f:94:14:9d:1d:ff:df: 0e:47:1c:29:13:f0:98:72:db:d7:2c:c1:ea:a4:23:a9:17:82: c4:dd:19:4e:fb:d7:f4:ce:51:cc:72:9f:3f:c6:a0:80:02:92: c2:9c:08:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tTZHMEzDo5b0fOz4iKVdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNmIzODVjN2I4Nzc4YmY3OGFmMjQyMWM5OWY1ZDM4YmQ1 NTY5MTQwHhcNMjUxMjIwMTcwMTA3WhcNMjUxMjIxMTcwMTA3WjAzMTEwLwYDVQQD Eyg4MmVhYmI2NmZhNDIzODNkZjI3MDc0MTlhY2JjYTNhMzkxZmM0OGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Luq8KYXddveDiroY8drC/MDl/cL nnFbs/MQJF7XeyWvLn9SNE/ev9MZvIK8a0DR0h2eSbdDzUglN2aIx9HTORnxEHzd vFmWB0bp9JLBbCoapU+Lkn8U2GhmsXFCWAQSSuiTNcxdSXmuAVG8u3dvE7xXrRt3 cx/KLsTNu3ZqDwsv/VFPnQItA0jbpqKkYKhSQHsYbWlf4DKXMAyufPAw3EbxxEmM L6+kMXS20lxYGUQtpCCDq7QrGh+SyiG0ob27ukfFaZMVfplyAATLCtN4NFq/0PfA gviLd5UMFUrRo6TFVSoEgP0F/UxcUBljhJzOkka8E6xLkR7cjPl+O/y6swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFILqu2b6Qjg98nB0Gay8o6OR/EjtMB8GA1UdIwQY MBaAFA5rOFx7h3i/eK8kIcmfXTi9VWkUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG1zNFhIdUhlTDk0cnlRaHlaOWRPTDFWYVJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8wYThmYzEtOTg2ZS00MjA5LTkzMGMt MWM3NzQzMWIwNWY3LzEvRG1zNFhIdUhlTDk0cnlRaHlaOWRPTDFWYVJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi8wYThmYzEtOTg2ZS00MjA5LTkzMGMtMWM3NzQzMWIwNWY3 LzEvRG1zNFhIdUhlTDk0cnlRaHlaOWRPTDFWYVJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaHe4I4Ei J1jBu/93Ka3GZ7HAJi7oNUNMBwqV2XGPxJ7BTxQ9MZxIdG4ibb7u0xTumVi3638U KgYbDUH2YO4T6vxJ//ZPYVAZlOrc7VTHqkMacNNGHB0hw7tpsKMlx48eWVZjelOY 6aOo4LCKbidmzUIKndyS9mpMY5HkZOYlWmTHcw8WkaREHlsDKvDG/IXbhkXo0GPt +Ngcv/bHFeBE2qlQah11egfGJuJeZkrGVrs4eoavcrg0rIAPzSKEuimnUnctKtQc 8pPm4MTnvopQ7bcPlBSdHf/fDkccKRPwmHLb1yzB6qQjqReCxN0ZTvvX9M5RzHKf P8aggAKSwpwILw== -----END CERTIFICATE-----Generated at Sat Dec 20 19:28:26 2025 by rpki-client