This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft File: DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft (raw, json) Hash identifier: D09BtydkNkWzqGtMOQJCEGo5UCPJm4/LT0cBoY0UJsU= Subject key identifier: 97:89:A2:3E:74:A3:92:E1:A8:5E:F2:73:4A:AD:F2:EC:A3:D6:A3:6A Authority key identifier: 0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C Certificate issuer: /CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c Certificate serial: 019B0A49B1CFB1CCC8DBE897180AA9338446 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft Manifest number: 1770 Signing time: Wed 10 Dec 2025 22:02:40 +0000 Manifest this update: Wed 10 Dec 2025 22:02:40 +0000 Manifest next update: Thu 11 Dec 2025 22:02:40 +0000 Files and hashes: 1: DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl (hash: ymbXiXOqJciPpNwJ8s6AzLyUuTZVL3sPQL5lI4VUMLk=) 2: KX71aYDc7COcBvGYMtW_I8jVEro.roa (hash: m4mYzz0InD89bmwaO+N//OYVwFvsqF8sbCWbylUSfpU=) 3: VLH2ggfYLmRlUNQmOTDaXEZemRU.roa (hash: r81ADMKeWWOVhBZY/dzL8YFhvpB6T7KTTWyAmAeGrA4=) 4: Z31e2uZ4ZUo0ifh9SmP5d6rs9YA.roa (hash: 99LlYSdIOpp68PEiIS1MO6ONGzvLDbJLydlaJmSyBos=) 5: dpvfrInTYFYCDpSNy4nBJ7fMOBk.roa (hash: MFcK6MCir3IwgLRCLZLFYaFpQhejKg3ixDBCQgs5rTk=) 6: iY-7T8h9t9V2urHTmIgGwZIOHVQ.roa (hash: irtz9XTfXBHEHapv6cSGMQPMme8obAG5vt6M1vHm4qQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 22:02:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0a:49:b1:cf:b1:cc:c8:db:e8:97:18:0a:a9:33:84:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c Validity Not Before: Dec 10 22:02:40 2025 GMT Not After : Dec 11 22:02:40 2025 GMT Subject: CN=9789a23e74a392e1a85ef2734aadf2eca3d6a36a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:04:50:53:a1:62:47:c4:80:3e:0a:fa:66:d0: 35:b0:7e:fe:cc:3d:71:35:bc:9f:45:9a:16:1c:7f: e6:81:cd:8e:68:1d:37:02:c1:48:01:90:0f:33:41: 4c:79:07:b6:0a:1d:68:4f:80:b9:cd:f5:78:51:d2: 20:74:30:3c:76:78:17:a3:96:65:20:81:3b:9c:ac: 13:fc:47:1d:8c:17:fc:96:12:29:ff:51:e3:b8:33: 76:ce:69:74:12:77:d6:ce:75:06:47:2c:fd:9b:6e: 92:5a:f6:fa:ef:c5:97:04:61:11:e3:44:45:04:c6: a4:cf:81:62:18:df:35:a2:9e:4b:70:fd:3b:16:89: 5e:ad:9d:6d:50:70:51:cb:88:89:a6:c7:87:8d:00: 2b:ad:12:9d:75:12:1d:a5:2d:c6:0a:1e:62:c4:ce: ab:bf:bc:ff:66:c5:6b:2b:3d:ea:6c:b6:06:71:e5: 40:e2:fe:29:32:83:33:2e:a0:9f:5e:ec:be:0a:32: bf:ff:34:cd:a2:f5:00:2a:08:5c:6c:a9:3d:76:20: ee:d5:bc:ce:60:31:a6:2b:c9:ac:55:5b:b1:ee:0d: 77:d9:c3:1d:5a:19:97:64:06:b8:89:4d:62:f5:ac: 85:d8:7c:bf:18:3a:7c:a3:d1:f5:e5:d7:81:ed:ad: 83:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:89:A2:3E:74:A3:92:E1:A8:5E:F2:73:4A:AD:F2:EC:A3:D6:A3:6A X509v3 Authority Key Identifier: keyid:0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:ec:78:51:91:19:f4:7f:8a:56:1d:19:b6:5c:68:d7:48:7b: b1:b5:35:a1:ed:84:ef:b7:ff:30:4a:8f:b5:05:05:69:7f:c6: 6c:1f:29:c9:b9:d9:49:94:65:9e:4e:36:fa:15:f1:f7:82:17: a7:68:bc:0c:5c:7b:6b:05:de:f5:cf:91:39:5e:33:da:bd:3a: b4:cc:23:4c:88:75:a6:ad:1c:64:97:50:f4:c4:15:9f:e6:71: 2c:7b:77:13:76:e9:ae:99:4e:8b:8a:4e:e7:b1:13:5b:77:e0: 57:b1:4f:a2:32:d3:0b:43:ca:bc:0b:9a:7e:b6:bc:43:a5:ab: 19:a8:0a:ad:39:89:06:39:af:dd:b4:a9:7b:31:02:b1:5b:7f: 22:18:7d:e6:23:7e:27:6d:f1:12:03:1e:87:17:f0:a6:40:71: 7d:24:d1:64:08:de:e7:6c:24:92:de:37:68:32:cb:d1:55:b6: be:be:6f:77:d3:69:01:dd:42:07:c6:b3:ee:f7:74:87:f3:e9: ff:d0:49:02:e9:c0:ec:88:4f:40:8b:06:59:e1:c8:13:ad:e5: ab:df:c5:4e:86:38:70:2b:34:f4:e1:06:a0:fe:52:10:7f:21: 08:b2:56:dc:24:55:59:97:c7:e0:26:71:3e:99:cf:53:ea:85: 6b:df:67:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsKSbHPsczI2+iXGAqpM4RGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMGIwZGNiNmFkMGNhODE2ZDJiZDIwNGUxM2YxZWFmMTEw NDI3NGMwHhcNMjUxMjEwMjIwMjQwWhcNMjUxMjExMjIwMjQwWjAzMTEwLwYDVQQD Eyg5Nzg5YTIzZTc0YTM5MmUxYTg1ZWYyNzM0YWFkZjJlY2EzZDZhMzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwRQU6FiR8SAPgr6ZtA1sH7+zD1x NbyfRZoWHH/mgc2OaB03AsFIAZAPM0FMeQe2Ch1oT4C5zfV4UdIgdDA8dngXo5Zl IIE7nKwT/EcdjBf8lhIp/1HjuDN2zml0EnfWznUGRyz9m26SWvb678WXBGER40RF BMakz4FiGN81op5LcP07FolerZ1tUHBRy4iJpseHjQArrRKddRIdpS3GCh5ixM6r v7z/ZsVrKz3qbLYGceVA4v4pMoMzLqCfXuy+CjK//zTNovUAKghcbKk9diDu1bzO YDGmK8msVVux7g132cMdWhmXZAa4iU1i9ayF2Hy/GDp8o9H15deB7a2D0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJeJoj50o5LhqF7yc0qt8uyj1qNqMB8GA1UdIwQY MBaAFA4LDctq0MqBbSvSBOE/Hq8RBCdMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGdzTnkyclF5b0Z0SzlJRTRUOGVyeEVFSjB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9mMTlkMDYtYzdmYS00MGU1LWI4MTMt N2ZlMzk1MWE3MzViLzEvRGdzTnkyclF5b0Z0SzlJRTRUOGVyeEVFSjB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9mMTlkMDYtYzdmYS00MGU1LWI4MTMtN2ZlMzk1MWE3MzVi LzEvRGdzTnkyclF5b0Z0SzlJRTRUOGVyeEVFSjB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK+x4UZEZ 9H+KVh0Ztlxo10h7sbU1oe2E77f/MEqPtQUFaX/GbB8pybnZSZRlnk42+hXx94IX p2i8DFx7awXe9c+ROV4z2r06tMwjTIh1pq0cZJdQ9MQVn+ZxLHt3E3bprplOi4pO 57ETW3fgV7FPojLTC0PKvAuafra8Q6WrGagKrTmJBjmv3bSpezECsVt/Ihh95iN+ J23xEgMehxfwpkBxfSTRZAje52wkkt43aDLL0VW2vr5vd9NpAd1CB8az7vd0h/Pp /9BJAunA7IhPQIsGWeHIE63lq9/FToY4cCs09OEGoP5SEH8hCLJW3CRVWZfH4CZx PpnPU+qFa99nQg== -----END CERTIFICATE-----Generated at Thu Dec 11 07:03:31 2025 by rpki-client