This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft File: DHiHWC2D0_CHaCr4eAoySjU854I.mft (raw, json) Hash identifier: /kmJIsRY9NGM99/XwgHPhBUwO8vFWn8WKK5JPfwBYV4= Subject key identifier: CF:04:DB:EF:6B:70:3F:00:FB:E8:AE:97:42:F9:4B:8D:91:6B:EE:E2 Authority key identifier: 0C:78:87:58:2D:83:D3:F0:87:68:2A:F8:78:0A:32:4A:35:3C:E7:82 Certificate issuer: /CN=0c7887582d83d3f087682af8780a324a353ce782 Certificate serial: 019B1A6027F12CE0BD61A6E7D55BC7D5CE15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft Manifest number: 035D Signing time: Sun 14 Dec 2025 01:01:07 +0000 Manifest this update: Sun 14 Dec 2025 01:01:07 +0000 Manifest next update: Mon 15 Dec 2025 01:01:07 +0000 Files and hashes: 1: DHiHWC2D0_CHaCr4eAoySjU854I.crl (hash: Nsyaz6Kr3Q1a0r8JUcBwlLflW++2ho5OdoP0lTET5xQ=) 2: NKGpONeNnSpGwNOfgTkqUqFSjcA.roa (hash: WjB4Os9y0GFlUDkg//rucVelf/mCKnH3dM3BpCHYRSs=) 3: _fSVy8gUALSmUPQ-yxN1Q7l_wXM.roa (hash: FrBR6FuZTCnouiuHvCixUxsBalYSZNZhY0D3KcXPGlM=) 4: _rfOVyo7DuPsLTQU__hvST7kgv0.roa (hash: uPbFY4d1NRbHScZUPpEXzuR0hfWtaapZ5VL4DMx2+zU=) 5: iX_xELZoVhjZx2tmfK6PH-R4qfg.roa (hash: 8Md57/s7g7icy63N7gSiYrFS0c7WsDeTkry4vuIPhFc=) 6: ihZ66_FRP1ZEi9NozSdwfCGel-M.roa (hash: wFOQHVX1zMY4YtBKixW4VOsy+9ZxuzYcQZi+JYB6nWA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.crl rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 01:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:60:27:f1:2c:e0:bd:61:a6:e7:d5:5b:c7:d5:ce:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c7887582d83d3f087682af8780a324a353ce782 Validity Not Before: Dec 14 01:01:07 2025 GMT Not After : Dec 15 01:01:07 2025 GMT Subject: CN=cf04dbef6b703f00fbe8ae9742f94b8d916beee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:ca:f9:7b:f8:d8:c5:ef:72:cd:a3:1c:c0:7b: 41:ab:88:e2:4a:a9:bf:e7:f0:1e:ff:3a:b3:21:63: cf:c9:bb:ec:86:a1:00:25:8c:3e:a3:19:86:b5:a0: 9c:03:29:bb:91:e5:0e:e5:f3:b6:c4:e1:55:28:c9: f1:df:a8:fc:fd:51:cc:74:28:97:d9:62:27:f2:a4: 45:62:e5:8d:64:87:cc:78:a5:c0:39:c0:5a:f4:e3: 63:4d:38:b1:b1:bc:6b:4e:eb:40:8e:a4:48:05:b0: 13:54:b4:47:3f:c1:bd:7f:6d:81:57:d5:3a:d8:74: 97:f3:1b:80:12:fb:fc:13:60:a5:f6:91:f7:5f:80: ca:83:5a:cc:c3:ed:26:df:24:0f:30:c7:ad:52:0e: 3c:5d:1e:2c:15:12:04:62:6b:42:b2:9d:d3:bf:d1: 0c:01:0f:4b:4e:d5:e0:f7:51:7b:54:12:00:ba:8a: 63:4e:40:17:32:c0:9f:2e:f8:1b:3c:40:7f:c2:69: 56:05:1f:df:c3:1d:3e:13:c8:d7:ef:b1:f9:b7:d0: 4e:83:aa:b2:23:8c:36:af:f0:6a:05:7d:d9:6b:c8: 43:7a:5f:4b:2e:5e:7b:d8:4e:67:65:7e:b8:3f:40: 1d:99:5d:9f:11:d7:c5:b2:62:33:ed:45:8c:6c:95: e7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:04:DB:EF:6B:70:3F:00:FB:E8:AE:97:42:F9:4B:8D:91:6B:EE:E2 X509v3 Authority Key Identifier: keyid:0C:78:87:58:2D:83:D3:F0:87:68:2A:F8:78:0A:32:4A:35:3C:E7:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:61:44:81:72:e9:c9:3f:1d:13:3a:c9:4b:aa:08:11:07:47: d0:5d:25:62:89:91:34:01:35:05:c6:38:46:d0:be:01:59:29: 72:7f:18:29:da:2d:9d:b9:fb:fb:30:79:0b:7a:e2:17:6b:21: 2b:85:4f:41:be:be:10:bc:3f:1c:c0:fb:b9:9f:99:d4:5b:27: fd:4d:dc:bd:b8:11:c6:72:fd:56:0e:fc:6e:f2:59:11:a6:82: 0d:91:ea:e4:01:69:a2:b9:0a:02:9d:2b:45:2f:9f:e2:a8:31: 95:01:f9:f8:4d:66:da:31:5a:8e:e1:a9:61:43:d2:a3:64:58: 57:83:31:20:1f:cb:36:70:6c:b8:87:60:1d:28:25:6f:71:6d: 4c:2c:ad:54:2f:a6:f7:83:fd:17:e6:43:93:0e:d9:07:1b:73: 8e:09:4e:06:55:89:71:75:c8:45:49:ac:ba:47:46:78:72:c3: 33:dc:a9:e4:4e:41:af:e8:22:37:d0:80:0f:2d:87:ac:fb:b3: f0:cb:75:31:a6:de:21:62:4c:13:bd:84:ab:9c:eb:9b:28:10: a5:26:38:d4:dd:fb:5d:22:a0:41:58:26:37:58:fc:eb:7f:31: 2e:be:de:59:e4:70:b7:ae:fa:27:f8:f4:e4:2d:c0:63:93:3d: ae:b6:e3:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaYCfxLOC9Yabn1VvH1c4VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNzg4NzU4MmQ4M2QzZjA4NzY4MmFmODc4MGEzMjRhMzUz Y2U3ODIwHhcNMjUxMjE0MDEwMTA3WhcNMjUxMjE1MDEwMTA3WjAzMTEwLwYDVQQD EyhjZjA0ZGJlZjZiNzAzZjAwZmJlOGFlOTc0MmY5NGI4ZDkxNmJlZWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8sr5e/jYxe9yzaMcwHtBq4jiSqm/ 5/Ae/zqzIWPPybvshqEAJYw+oxmGtaCcAym7keUO5fO2xOFVKMnx36j8/VHMdCiX 2WIn8qRFYuWNZIfMeKXAOcBa9ONjTTixsbxrTutAjqRIBbATVLRHP8G9f22BV9U6 2HSX8xuAEvv8E2Cl9pH3X4DKg1rMw+0m3yQPMMetUg48XR4sFRIEYmtCsp3Tv9EM AQ9LTtXg91F7VBIAuopjTkAXMsCfLvgbPEB/wmlWBR/fwx0+E8jX77H5t9BOg6qy I4w2r/BqBX3Za8hDel9LLl572E5nZX64P0AdmV2fEdfFsmIz7UWMbJXntwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM8E2+9rcD8A++iul0L5S42Ra+7iMB8GA1UdIwQY MBaAFAx4h1gtg9Pwh2gq+HgKMko1POeCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREhpSFdDMkQwX0NIYUNyNGVBb3lTalU4NTRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9iZmY0OGYtMGEzMC00NzhkLWIyZGIt YWQ0YTFkYTM5M2ExLzEvREhpSFdDMkQwX0NIYUNyNGVBb3lTalU4NTRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9iZmY0OGYtMGEzMC00NzhkLWIyZGItYWQ0YTFkYTM5M2Ex LzEvREhpSFdDMkQwX0NIYUNyNGVBb3lTalU4NTRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOWFEgXLp yT8dEzrJS6oIEQdH0F0lYomRNAE1BcY4RtC+AVkpcn8YKdotnbn7+zB5C3riF2sh K4VPQb6+ELw/HMD7uZ+Z1Fsn/U3cvbgRxnL9Vg78bvJZEaaCDZHq5AFporkKAp0r RS+f4qgxlQH5+E1m2jFajuGpYUPSo2RYV4MxIB/LNnBsuIdgHSglb3FtTCytVC+m 94P9F+ZDkw7ZBxtzjglOBlWJcXXIRUmsukdGeHLDM9yp5E5Br+giN9CADy2HrPuz 8Mt1MabeIWJME72Eq5zrmygQpSY41N37XSKgQVgmN1j8638xLr7eWeRwt676J/j0 5C3AY5M9rrbjFQ== -----END CERTIFICATE-----Generated at Sun Dec 14 09:31:22 2025 by rpki-client