This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft File: dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft (raw, json) Hash identifier: NPj6wuw5jrWXhx0Gnk+RGdCb1b768Ozhm56E/VvZt4Y= Subject key identifier: 4D:B9:14:DF:0D:A5:17:4D:C7:FD:C1:B2:4B:4D:AD:C8:37:05:FE:A0 Authority key identifier: 74:6C:0E:1A:73:3A:D8:33:BC:BE:50:A8:12:44:8B:F5:E0:99:E9:5F Certificate issuer: /CN=746c0e1a733ad833bcbe50a812448bf5e099e95f Certificate serial: 019B21752BCD0A39B9550AE719122E00729B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft Manifest number: 0C35 Signing time: Mon 15 Dec 2025 10:01:25 +0000 Manifest this update: Mon 15 Dec 2025 10:01:25 +0000 Manifest next update: Tue 16 Dec 2025 10:01:25 +0000 Files and hashes: 1: EkI17AhjtH4o6y1KK4g_wzf3KNE.roa (hash: Mqae8JvuYfzZf4ghYC7/qSTNS8cE9NEKQ8xHhpacTOs=) 2: dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl (hash: UdfaceP4qr4jMhncuFh2XoYp7Fq0Dc9KJngmERMgLUE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:75:2b:cd:0a:39:b9:55:0a:e7:19:12:2e:00:72:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746c0e1a733ad833bcbe50a812448bf5e099e95f Validity Not Before: Dec 15 10:01:25 2025 GMT Not After : Dec 16 10:01:25 2025 GMT Subject: CN=4db914df0da5174dc7fdc1b24b4dadc83705fea0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:16:a5:60:32:9b:40:59:d5:c7:84:04:73:fd: d2:b1:d6:bf:2a:b5:06:87:bd:b1:24:d2:08:97:60: db:37:e8:7c:4b:2f:5c:5b:f2:f0:40:1b:a2:5d:95: 55:cb:2d:ca:70:65:4a:99:79:f1:b8:02:93:78:e5: 7f:7a:15:70:55:71:2d:95:5b:03:7d:b2:81:57:96: c5:c6:e0:a7:af:d5:0d:e8:48:a5:25:60:7e:b4:f7: 6b:ef:c1:e9:15:63:af:4a:fd:de:40:77:97:87:cd: 57:dd:c6:e5:79:6f:b8:cd:0d:8c:b8:9f:18:0e:20: c8:3d:9e:97:6b:08:d3:dc:8b:13:c1:1f:6e:81:43: 08:8e:14:43:23:ee:25:eb:b0:dd:3c:9d:1d:86:9b: f3:85:ad:bf:2a:85:00:8a:8b:bf:20:44:b4:2d:78: 20:02:a7:bb:60:2d:a8:4d:bf:8e:ec:f0:27:86:a5: 4a:8e:ad:46:1a:94:46:2f:fc:0d:89:36:0c:4c:11: 63:c9:9f:3f:fc:aa:6f:4d:e2:1d:39:d9:33:df:bf: 98:f2:42:60:da:dc:26:4a:dc:3b:b9:00:e6:a7:1b: bf:e0:4b:55:37:5b:16:12:21:9b:b3:2b:ab:02:bf: a6:63:a2:43:28:ee:ef:c4:ba:d2:f1:26:6c:dd:d2: 10:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:B9:14:DF:0D:A5:17:4D:C7:FD:C1:B2:4B:4D:AD:C8:37:05:FE:A0 X509v3 Authority Key Identifier: keyid:74:6C:0E:1A:73:3A:D8:33:BC:BE:50:A8:12:44:8B:F5:E0:99:E9:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:c0:50:34:4c:df:f0:68:7c:60:a7:ec:34:b0:ec:6c:52:c1: 91:5b:07:43:a3:3d:c3:78:5c:ec:09:14:cc:61:ce:8e:0e:b8: 74:c7:49:1c:eb:d7:d1:e6:16:29:e9:68:32:e9:c6:fc:18:51: 51:ce:3d:9f:49:8f:f3:f9:41:be:11:dd:be:74:da:0d:66:b1: c9:e7:3a:ed:a6:b8:27:d4:60:81:62:f5:9c:4f:a5:4d:fb:bd: 67:89:75:64:dc:7b:c9:d5:7e:a1:b4:9a:a5:8a:a5:db:ba:7c: 32:8c:2f:da:f2:b3:41:76:db:45:ec:f2:8b:79:7b:3b:22:b5: 36:1f:1c:d2:83:5e:c0:1d:33:18:5a:0a:da:af:e1:4f:a3:3f: 3a:32:fa:71:d5:c3:09:9e:ad:06:e4:e7:65:2d:55:46:7c:e8: 7f:0f:77:d7:06:f1:91:20:69:f4:6f:a2:63:01:61:41:69:9d: ef:f1:b6:64:a8:53:41:47:89:04:8c:d3:91:de:e9:30:45:2e: e6:f1:04:81:90:48:0a:07:00:f6:21:c7:70:bc:5e:16:60:58: 41:dd:c1:df:79:9a:17:6b:a5:14:c2:4e:5e:23:ce:33:e6:fb: 36:0a:d2:5c:9c:a7:d0:82:f5:2e:cd:86:76:d8:2b:ae:df:8c: 27:08:56:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdSvNCjm5VQrnGRIuAHKbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NmMwZTFhNzMzYWQ4MzNiY2JlNTBhODEyNDQ4YmY1ZTA5 OWU5NWYwHhcNMjUxMjE1MTAwMTI1WhcNMjUxMjE2MTAwMTI1WjAzMTEwLwYDVQQD Eyg0ZGI5MTRkZjBkYTUxNzRkYzdmZGMxYjI0YjRkYWRjODM3MDVmZWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1halYDKbQFnVx4QEc/3Ssda/KrUG h72xJNIIl2DbN+h8Sy9cW/LwQBuiXZVVyy3KcGVKmXnxuAKTeOV/ehVwVXEtlVsD fbKBV5bFxuCnr9UN6EilJWB+tPdr78HpFWOvSv3eQHeXh81X3cbleW+4zQ2MuJ8Y DiDIPZ6XawjT3IsTwR9ugUMIjhRDI+4l67DdPJ0dhpvzha2/KoUAiou/IES0LXgg Aqe7YC2oTb+O7PAnhqVKjq1GGpRGL/wNiTYMTBFjyZ8//KpvTeIdOdkz37+Y8kJg 2twmStw7uQDmpxu/4EtVN1sWEiGbsyurAr+mY6JDKO7vxLrS8SZs3dIQ1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE25FN8NpRdNx/3BsktNrcg3Bf6gMB8GA1UdIwQY MBaAFHRsDhpzOtgzvL5QqBJEi/XgmelfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEd3T0duTTYyRE84dmxDb0VrU0w5ZUNaNlY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC82MWVhNDgtM2UzOS00MWU4LWIyMmEt NmM5YTgyNTU4MWNiLzEvZEd3T0duTTYyRE84dmxDb0VrU0w5ZUNaNlY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC82MWVhNDgtM2UzOS00MWU4LWIyMmEtNmM5YTgyNTU4MWNi LzEvZEd3T0duTTYyRE84dmxDb0VrU0w5ZUNaNlY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHMBQNEzf 8Gh8YKfsNLDsbFLBkVsHQ6M9w3hc7AkUzGHOjg64dMdJHOvX0eYWKeloMunG/BhR Uc49n0mP8/lBvhHdvnTaDWaxyec67aa4J9RggWL1nE+lTfu9Z4l1ZNx7ydV+obSa pYql27p8Mowv2vKzQXbbRezyi3l7OyK1Nh8c0oNewB0zGFoK2q/hT6M/OjL6cdXD CZ6tBuTnZS1VRnzofw931wbxkSBp9G+iYwFhQWmd7/G2ZKhTQUeJBIzTkd7pMEUu 5vEEgZBICgcA9iHHcLxeFmBYQd3B33maF2ulFMJOXiPOM+b7NgrSXJyn0IL1Ls2G dtgrrt+MJwhW8w== -----END CERTIFICATE-----Generated at Mon Dec 15 12:01:39 2025 by rpki-client