This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft File: dp1cUsMVfllF5mO5LtRALGBhbjs.mft (raw, json) Hash identifier: K17JhEV7E54JRJwpx4OtPyshMoE4o6UG3iViEh+J7gU= Subject key identifier: B5:3F:36:58:82:8B:9F:EC:43:FA:B4:86:B3:55:C3:A7:A0:8B:6E:02 Authority key identifier: 76:9D:5C:52:C3:15:7E:59:45:E6:63:B9:2E:D4:40:2C:60:61:6E:3B Certificate issuer: /CN=769d5c52c3157e5945e663b92ed4402c60616e3b Certificate serial: 019B1049CC05B9C5A739AAC7E7F14A029E20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft Manifest number: 0455 Signing time: Fri 12 Dec 2025 02:00:30 +0000 Manifest this update: Fri 12 Dec 2025 02:00:30 +0000 Manifest next update: Sat 13 Dec 2025 02:00:30 +0000 Files and hashes: 1: 08Xj6P3LiBkWV-XyPE1sfuebHwg.roa (hash: GOb53BquANot8lO8WUgTLWPiXo2ewEYSLTJKkoVM5kk=) 2: dp1cUsMVfllF5mO5LtRALGBhbjs.crl (hash: BV9/+5hQypQuEd0Iuzyj0t5ffkOtyjC+OId+wM+ZoF0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.crl rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:49:cc:05:b9:c5:a7:39:aa:c7:e7:f1:4a:02:9e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=769d5c52c3157e5945e663b92ed4402c60616e3b Validity Not Before: Dec 12 02:00:30 2025 GMT Not After : Dec 13 02:00:30 2025 GMT Subject: CN=b53f3658828b9fec43fab486b355c3a7a08b6e02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e0:da:19:6e:f2:a0:8b:d1:25:66:d8:03:86: 9c:53:40:46:14:fb:fa:ed:6f:90:7c:7d:2e:e1:2a: 52:5a:8e:19:9f:e9:c3:37:40:2d:44:39:77:56:e0: 21:3c:57:83:77:38:19:75:92:72:79:31:89:57:b6: bd:e3:89:b3:65:e0:ad:83:8d:90:71:3b:f0:1a:32: 85:c3:2f:61:f4:b6:35:99:28:07:0c:06:c9:30:f0: 34:09:90:f1:de:64:30:06:64:83:35:75:b7:94:47: 54:c8:2b:40:ac:1a:fe:23:eb:31:57:32:0b:03:ec: 5d:20:e6:ef:fa:9b:62:60:2d:7d:6b:bd:ab:3c:0b: a2:20:dd:39:e8:2c:9b:2f:14:5a:f2:59:71:fe:0a: ab:2e:09:55:9f:32:39:1e:4d:62:2b:73:a0:12:60: 9a:7b:3d:5b:63:4a:d7:89:be:68:7b:11:68:37:b8: e6:7c:88:e5:7a:95:f7:fd:a6:e6:91:28:80:3b:e1: f9:3c:7d:8c:9b:43:5e:d0:e0:e2:ad:33:f2:06:80: 70:8e:6f:8e:b4:b2:12:4c:7e:91:39:b7:05:27:4a: 0b:43:4f:f5:68:a2:90:b9:1b:cf:45:0e:c3:fb:91: d6:e4:f2:52:b2:c7:0d:66:db:82:f2:c6:cf:35:dc: 8c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:3F:36:58:82:8B:9F:EC:43:FA:B4:86:B3:55:C3:A7:A0:8B:6E:02 X509v3 Authority Key Identifier: keyid:76:9D:5C:52:C3:15:7E:59:45:E6:63:B9:2E:D4:40:2C:60:61:6E:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:b5:7e:e8:50:fb:d6:6e:b1:2e:93:5c:d2:bc:41:1b:0f:53: 4e:c2:a6:a4:75:1d:a4:0f:73:33:cb:40:f3:92:aa:4a:ac:bb: ea:96:a1:ea:27:37:1b:98:eb:da:86:5d:5c:84:02:7f:85:f0: f3:1d:a6:05:ae:80:ce:a0:45:29:96:f6:fd:27:f8:66:ed:7e: d0:cb:d8:7a:82:c9:43:4e:9d:96:09:c6:a1:41:2f:c0:44:0b: 1e:5f:99:2b:2d:69:46:a8:7d:91:cc:34:7b:69:10:c9:47:74: 0f:8b:49:cb:45:09:cf:6c:6d:7f:6e:10:73:e5:a6:26:b0:bf: 33:ea:5b:a2:ba:d7:a0:18:70:9f:f8:fe:fc:a9:c9:e9:fb:f7: bc:d8:5f:ab:6a:e8:11:7d:7c:f1:d4:46:ee:27:d2:70:5a:56: 55:a8:23:24:b9:13:43:71:fb:61:62:90:b3:47:c8:17:5e:e6: b7:07:30:1b:cd:e3:c4:73:be:e1:fe:32:91:21:26:5e:8f:14: bd:42:e8:16:a0:34:8c:1f:49:86:19:38:a2:2e:e0:58:6b:42: a2:78:8c:c0:45:17:f3:c2:39:17:e1:fc:f3:9f:47:60:43:1f: 0a:dd:87:4e:e9:12:02:ef:b9:8e:cb:60:72:11:e1:4f:e0:0c: 8a:27:60:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQScwFucWnOarH5/FKAp4gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2OWQ1YzUyYzMxNTdlNTk0NWU2NjNiOTJlZDQ0MDJjNjA2 MTZlM2IwHhcNMjUxMjEyMDIwMDMwWhcNMjUxMjEzMDIwMDMwWjAzMTEwLwYDVQQD EyhiNTNmMzY1ODgyOGI5ZmVjNDNmYWI0ODZiMzU1YzNhN2EwOGI2ZTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+DaGW7yoIvRJWbYA4acU0BGFPv6 7W+QfH0u4SpSWo4Zn+nDN0AtRDl3VuAhPFeDdzgZdZJyeTGJV7a944mzZeCtg42Q cTvwGjKFwy9h9LY1mSgHDAbJMPA0CZDx3mQwBmSDNXW3lEdUyCtArBr+I+sxVzIL A+xdIObv+ptiYC19a72rPAuiIN056CybLxRa8llx/gqrLglVnzI5Hk1iK3OgEmCa ez1bY0rXib5oexFoN7jmfIjlepX3/abmkSiAO+H5PH2Mm0Ne0ODirTPyBoBwjm+O tLISTH6RObcFJ0oLQ0/1aKKQuRvPRQ7D+5HW5PJSsscNZtuC8sbPNdyM/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLU/NliCi5/sQ/q0hrNVw6egi24CMB8GA1UdIwQY MBaAFHadXFLDFX5ZReZjuS7UQCxgYW47MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHAxY1VzTVZmbGxGNW1PNUx0UkFMR0JoYmpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jYzY2YjItMTI2Ny00NTE2LWEzOWYt Mzc2YjQ5ZDUyZDdlLzEvZHAxY1VzTVZmbGxGNW1PNUx0UkFMR0JoYmpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9jYzY2YjItMTI2Ny00NTE2LWEzOWYtMzc2YjQ5ZDUyZDdl LzEvZHAxY1VzTVZmbGxGNW1PNUx0UkFMR0JoYmpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc7V+6FD7 1m6xLpNc0rxBGw9TTsKmpHUdpA9zM8tA85KqSqy76pah6ic3G5jr2oZdXIQCf4Xw 8x2mBa6AzqBFKZb2/Sf4Zu1+0MvYeoLJQ06dlgnGoUEvwEQLHl+ZKy1pRqh9kcw0 e2kQyUd0D4tJy0UJz2xtf24Qc+WmJrC/M+pborrXoBhwn/j+/KnJ6fv3vNhfq2ro EX188dRG7ifScFpWVagjJLkTQ3H7YWKQs0fIF17mtwcwG83jxHO+4f4ykSEmXo8U vULoFqA0jB9Jhhk4oi7gWGtConiMwEUX88I5F+H8859HYEMfCt2HTukSAu+5jstg chHhT+AMiidgrA== -----END CERTIFICATE-----Generated at Fri Dec 12 04:01:53 2025 by rpki-client