This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft File: dv4wVehykAAOMof3q1iDgCpapto.mft (raw, json) Hash identifier: rRBMxFYEa5t5PBzSHi0y0f28OnLEuRCADy3az37PMoU= Subject key identifier: 5F:DA:BF:7E:56:70:CF:F4:6E:61:B8:82:EA:33:FA:DC:48:8A:FE:F4 Authority key identifier: 76:FE:30:55:E8:72:90:00:0E:32:87:F7:AB:58:83:80:2A:5A:A6:DA Certificate issuer: /CN=76fe3055e87290000e3287f7ab5883802a5aa6da Certificate serial: 019B5B648135B36B41312F6FDC5CA4F4E638 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft Manifest number: 0ABF Signing time: Fri 26 Dec 2025 16:01:11 +0000 Manifest this update: Fri 26 Dec 2025 16:01:11 +0000 Manifest next update: Sat 27 Dec 2025 16:01:11 +0000 Files and hashes: 1: 8nt8dsbMeiqtSt6KoDNGgs5pyTM.roa (hash: RvFtibhd8tSawl3iSjZ76rX4z9HhG8SM7MwleTD5nY0=) 2: dv4wVehykAAOMof3q1iDgCpapto.crl (hash: 7KETSnvMN7LLa0gY3121SIjIXRofMcKsTxLbcoiV8Zc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.crl rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:64:81:35:b3:6b:41:31:2f:6f:dc:5c:a4:f4:e6:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe3055e87290000e3287f7ab5883802a5aa6da Validity Not Before: Dec 26 16:01:11 2025 GMT Not After : Dec 27 16:01:11 2025 GMT Subject: CN=5fdabf7e5670cff46e61b882ea33fadc488afef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e0:3f:92:31:28:a4:36:e0:8f:87:af:f4:5e: ad:0b:e7:d3:68:c9:87:c1:3b:37:f8:5a:88:28:08: 68:d4:33:75:ca:39:85:df:b0:20:bc:e1:c5:c4:d8: 63:40:cc:27:94:b4:7e:0e:a7:c5:c7:1f:fd:74:da: 31:f1:f6:b4:a9:19:02:8b:eb:67:7e:e7:db:1d:30: 35:92:d5:54:cb:82:1e:8c:51:23:f5:90:17:1a:4c: 19:82:79:fd:8f:1a:0a:02:98:bb:a8:99:0a:0f:44: b0:5b:d7:b0:92:42:e8:98:d2:4c:d6:81:66:4a:05: 5c:7a:0d:6d:63:5a:13:d6:84:ab:99:a8:a9:bc:ca: ae:c1:bd:84:72:42:a0:d3:22:f3:97:60:e3:c2:e2: fc:63:45:d8:4f:67:4b:46:34:a8:57:62:bc:cd:77: 76:ff:a5:fd:5e:69:93:42:d5:e1:d0:16:a5:fd:de: fa:91:15:8d:e6:4a:69:d4:49:df:d3:82:99:ee:e5: 25:e4:9d:a2:d3:29:72:d5:e0:a9:60:11:47:c6:db: c8:a8:c0:cd:1f:d0:e6:cb:c5:1a:c9:e8:87:c7:78: d6:60:32:f5:ef:e9:f7:f4:0a:8f:95:b9:1d:37:22: 2d:af:ca:e4:88:bf:d1:31:5e:a6:5d:4d:b1:07:42: 37:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:DA:BF:7E:56:70:CF:F4:6E:61:B8:82:EA:33:FA:DC:48:8A:FE:F4 X509v3 Authority Key Identifier: keyid:76:FE:30:55:E8:72:90:00:0E:32:87:F7:AB:58:83:80:2A:5A:A6:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dv4wVehykAAOMof3q1iDgCpapto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bce141-e9c2-4a5d-8e16-84b5176a2a4c/1/dv4wVehykAAOMof3q1iDgCpapto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:43:1c:92:47:61:33:b8:fe:d3:db:01:f9:14:46:85:6e:13: 0e:ff:86:54:8c:44:a6:1a:34:41:57:9d:09:d1:17:21:4f:34: d9:f3:2c:8e:13:1b:d9:f4:5d:7f:a4:8c:ba:c8:67:c5:e0:06: 50:ea:68:91:d0:7f:2f:bf:54:5a:47:98:5c:15:c3:30:a6:bf: 35:23:b2:eb:ab:d1:b0:7e:fd:9b:64:55:d6:24:c9:5f:91:91: 8c:64:f0:c9:8a:c6:ac:84:26:01:99:b5:bf:10:59:b3:0a:95: 22:81:ff:4a:2b:be:a6:42:40:00:8c:23:04:db:0d:6d:09:18: 94:f7:d7:34:55:4c:db:60:bd:1d:03:87:9a:8b:56:9d:19:9d: 15:84:0b:9e:a0:5e:a8:4d:57:4a:e9:68:17:d6:94:29:f0:4a: 94:25:85:b2:f0:7d:0a:e7:5d:3a:e2:79:67:7a:90:c1:eb:fb: 43:d1:76:b2:ff:ac:b5:77:71:c6:df:ff:c7:74:d0:96:aa:4d: ea:98:68:8e:c7:ba:d4:1f:dc:74:ec:ba:d8:86:1b:3c:b0:1b: bf:bc:c5:52:98:38:ae:fc:8c:2c:cb:da:54:f0:77:0f:ab:a3: 90:05:06:35:31:48:08:ed:72:23:ba:95:56:98:48:84:85:ff: 80:3e:5c:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtbZIE1s2tBMS9v3Fyk9OY4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2ZmUzMDU1ZTg3MjkwMDAwZTMyODdmN2FiNTg4MzgwMmE1 YWE2ZGEwHhcNMjUxMjI2MTYwMTExWhcNMjUxMjI3MTYwMTExWjAzMTEwLwYDVQQD Eyg1ZmRhYmY3ZTU2NzBjZmY0NmU2MWI4ODJlYTMzZmFkYzQ4OGFmZWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeA/kjEopDbgj4ev9F6tC+fTaMmH wTs3+FqIKAho1DN1yjmF37AgvOHFxNhjQMwnlLR+DqfFxx/9dNox8fa0qRkCi+tn fufbHTA1ktVUy4IejFEj9ZAXGkwZgnn9jxoKApi7qJkKD0SwW9ewkkLomNJM1oFm SgVceg1tY1oT1oSrmaipvMquwb2EckKg0yLzl2DjwuL8Y0XYT2dLRjSoV2K8zXd2 /6X9XmmTQtXh0Bal/d76kRWN5kpp1Enf04KZ7uUl5J2i0yly1eCpYBFHxtvIqMDN H9Dmy8UayeiHx3jWYDL17+n39AqPlbkdNyItr8rkiL/RMV6mXU2xB0I3pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF/av35WcM/0bmG4guoz+txIiv70MB8GA1UdIwQY MBaAFHb+MFXocpAADjKH96tYg4AqWqbaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHY0d1ZlaHlrQUFPTW9mM3ExaURnQ3BhcHRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9iY2UxNDEtZTljMi00YTVkLThlMTYt ODRiNTE3NmEyYTRjLzEvZHY0d1ZlaHlrQUFPTW9mM3ExaURnQ3BhcHRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9iY2UxNDEtZTljMi00YTVkLThlMTYtODRiNTE3NmEyYTRj LzEvZHY0d1ZlaHlrQUFPTW9mM3ExaURnQ3BhcHRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk0Mckkdh M7j+09sB+RRGhW4TDv+GVIxEpho0QVedCdEXIU802fMsjhMb2fRdf6SMushnxeAG UOpokdB/L79UWkeYXBXDMKa/NSOy66vRsH79m2RV1iTJX5GRjGTwyYrGrIQmAZm1 vxBZswqVIoH/Siu+pkJAAIwjBNsNbQkYlPfXNFVM22C9HQOHmotWnRmdFYQLnqBe qE1XSuloF9aUKfBKlCWFsvB9CuddOuJ5Z3qQwev7Q9F2sv+stXdxxt//x3TQlqpN 6phojse61B/cdOy62IYbPLAbv7zFUpg4rvyMLMvaVPB3D6ujkAUGNTFICO1yI7qV VphIhIX/gD5caQ== -----END CERTIFICATE-----Generated at Fri Dec 26 17:40:35 2025 by rpki-client