This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/V4DOZAV5R263qnPBnLdOvt_daCs.mft File: V4DOZAV5R263qnPBnLdOvt_daCs.mft (raw, json) Hash identifier: q9edWjJMQErqFqP74L3ZALbfclQCpkyd8KbqEf12Ji4= Subject key identifier: C4:9F:45:CB:58:C6:85:06:84:9F:AF:43:97:6A:53:45:5B:49:28:58 Authority key identifier: 57:80:CE:64:05:79:47:6E:B7:AA:73:C1:9C:B7:4E:BE:DF:DD:68:2B Certificate issuer: /CN=5780ce640579476eb7aa73c19cb74ebedfdd682b Certificate serial: 019B37FD0D99CFE27FB33FB5DA18087D3DC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V4DOZAV5R263qnPBnLdOvt_daCs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/V4DOZAV5R263qnPBnLdOvt_daCs.mft Manifest number: 0EB9 Signing time: Fri 19 Dec 2025 19:01:29 +0000 Manifest this update: Fri 19 Dec 2025 19:01:29 +0000 Manifest next update: Sat 20 Dec 2025 19:01:29 +0000 Files and hashes: 1: V4DOZAV5R263qnPBnLdOvt_daCs.crl (hash: CWbwiDeT6wGpv0bcIvVyJPp/TSaVms10SL5LVq7hcFc=) 2: r_tsaMbjHoSCsd17cgTnbS8F0qc.roa (hash: GyoTnn/PfaIn4sRuGe7d5zf2OcCelYM3H/gIy6Qo2Lo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/V4DOZAV5R263qnPBnLdOvt_daCs.crl rsync://rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/V4DOZAV5R263qnPBnLdOvt_daCs.mft rsync://rpki.ripe.net/repository/DEFAULT/V4DOZAV5R263qnPBnLdOvt_daCs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fd:0d:99:cf:e2:7f:b3:3f:b5:da:18:08:7d:3d:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5780ce640579476eb7aa73c19cb74ebedfdd682b Validity Not Before: Dec 19 19:01:29 2025 GMT Not After : Dec 20 19:01:29 2025 GMT Subject: CN=c49f45cb58c68506849faf43976a53455b492858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:47:59:1a:30:a6:98:a9:d3:3f:f7:3e:32:c3: e2:54:37:d7:e0:45:ca:73:b4:71:2d:b1:5b:81:7b: c9:4b:6c:94:64:c5:ca:7b:f4:c6:d7:9d:7e:79:8e: c0:b3:2d:e9:78:a4:e4:f3:e8:cb:b4:a4:58:6f:d7: 5a:01:01:44:72:b1:ed:f2:59:55:67:f0:76:f7:c7: 14:a4:f3:d1:60:91:8f:96:c1:3e:10:41:21:08:5c: 9c:02:dc:2a:27:b5:91:4d:35:e1:a6:1e:72:2c:9e: 2c:c3:c2:43:17:52:5d:a2:ac:71:19:f4:62:7d:75: 21:03:3b:45:8b:9d:f2:5b:20:62:dc:d1:06:e1:71: 94:9f:3e:6d:26:5c:bd:55:4d:b9:18:5a:1c:72:46: b5:b7:e6:2a:5a:2b:cd:6a:f1:20:9c:c2:95:99:90: 74:b4:18:83:34:6f:46:36:f2:8a:8a:6c:a1:ee:15: 1d:30:3d:19:29:dd:a1:b2:7c:94:c8:71:05:a3:4d: 00:8e:45:d5:c5:3a:30:ed:9c:86:82:5c:ed:7e:6a: 22:b2:0e:e1:ba:91:b3:d5:d2:08:f4:33:a5:4c:aa: 07:c0:57:90:eb:ce:6e:81:79:41:b1:69:52:9f:e9: 64:5e:fa:8b:32:f3:5c:84:7e:0c:08:48:65:9d:54: 39:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:9F:45:CB:58:C6:85:06:84:9F:AF:43:97:6A:53:45:5B:49:28:58 X509v3 Authority Key Identifier: keyid:57:80:CE:64:05:79:47:6E:B7:AA:73:C1:9C:B7:4E:BE:DF:DD:68:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V4DOZAV5R263qnPBnLdOvt_daCs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/V4DOZAV5R263qnPBnLdOvt_daCs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/V4DOZAV5R263qnPBnLdOvt_daCs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:4a:b3:68:44:1d:e4:55:ec:88:c9:c9:7c:c0:e1:f7:18:3b: 30:0f:ac:78:27:d2:5c:a0:fc:28:ac:37:70:bd:50:ba:b3:e7: 94:d8:9a:00:5e:49:61:92:2f:8b:f1:76:1b:92:58:9d:ac:70: 7c:a7:91:97:f0:88:e4:0d:56:96:96:7d:c2:50:55:23:90:52: 57:d4:8e:d5:23:56:48:7a:46:c4:b2:30:6e:44:2f:c9:4b:7f: 17:58:0a:ea:4d:60:9e:36:73:c4:3a:c7:ca:9f:14:35:04:3b: 46:4a:56:82:24:d4:b5:bb:49:6d:74:8b:51:d9:8e:a4:a2:74: 72:08:21:ad:4e:e1:cc:7d:e1:68:72:9b:c3:fa:39:b8:e5:0d: 72:ae:47:0b:5f:be:f1:41:3c:7b:ea:32:ac:b3:65:f3:0e:3a: df:e4:f4:77:84:f3:c7:a0:41:69:2b:11:fa:62:0a:6f:3f:76: df:fb:02:fc:c8:da:ab:9a:23:85:b9:b9:d0:d5:5f:b4:3d:c8: bc:a3:79:04:e9:92:6f:b9:88:c4:fc:91:80:16:fc:bd:86:31: d2:78:27:ee:db:4d:88:88:d7:10:a4:2b:fd:7f:7b:3a:5b:9a: 2f:ba:da:a4:68:5f:fa:93:1e:75:c4:d6:92:94:ed:e8:95:4b: d4:4a:a1:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/Q2Zz+J/sz+12hgIfT3IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3ODBjZTY0MDU3OTQ3NmViN2FhNzNjMTljYjc0ZWJlZGZk ZDY4MmIwHhcNMjUxMjE5MTkwMTI5WhcNMjUxMjIwMTkwMTI5WjAzMTEwLwYDVQQD EyhjNDlmNDVjYjU4YzY4NTA2ODQ5ZmFmNDM5NzZhNTM0NTViNDkyODU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkdZGjCmmKnTP/c+MsPiVDfX4EXK c7RxLbFbgXvJS2yUZMXKe/TG151+eY7Asy3peKTk8+jLtKRYb9daAQFEcrHt8llV Z/B298cUpPPRYJGPlsE+EEEhCFycAtwqJ7WRTTXhph5yLJ4sw8JDF1JdoqxxGfRi fXUhAztFi53yWyBi3NEG4XGUnz5tJly9VU25GFoccka1t+YqWivNavEgnMKVmZB0 tBiDNG9GNvKKimyh7hUdMD0ZKd2hsnyUyHEFo00AjkXVxTow7ZyGglztfmoisg7h upGz1dII9DOlTKoHwFeQ685ugXlBsWlSn+lkXvqLMvNchH4MCEhlnVQ5+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMSfRctYxoUGhJ+vQ5dqU0VbSShYMB8GA1UdIwQY MBaAFFeAzmQFeUdut6pzwZy3Tr7f3WgrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjRET1pBVjVSMjYzcW5QQm5MZE92dF9kYUNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kZDZkYjQtZjUyMy00ZGU2LThiZTYt ZTdlOTcxNWU3ODEzLzEvVjRET1pBVjVSMjYzcW5QQm5MZE92dF9kYUNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9kZDZkYjQtZjUyMy00ZGU2LThiZTYtZTdlOTcxNWU3ODEz LzEvVjRET1pBVjVSMjYzcW5QQm5MZE92dF9kYUNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHkqzaEQd 5FXsiMnJfMDh9xg7MA+seCfSXKD8KKw3cL1QurPnlNiaAF5JYZIvi/F2G5JYnaxw fKeRl/CI5A1WlpZ9wlBVI5BSV9SO1SNWSHpGxLIwbkQvyUt/F1gK6k1gnjZzxDrH yp8UNQQ7RkpWgiTUtbtJbXSLUdmOpKJ0cgghrU7hzH3haHKbw/o5uOUNcq5HC1++ 8UE8e+oyrLNl8w463+T0d4Tzx6BBaSsR+mIKbz923/sC/Mjaq5ojhbm50NVftD3I vKN5BOmSb7mIxPyRgBb8vYYx0ngn7ttNiIjXEKQr/X97OluaL7rapGhf+pMedcTW kpTt6JVL1EqhFQ== -----END CERTIFICATE-----Generated at Fri Dec 19 23:53:29 2025 by rpki-client