This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft File: Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft (raw, json) Hash identifier: +IupeuFMjP+KOeq+671syMycTaaQrEa4pNxp17beFcQ= Subject key identifier: CF:4B:08:33:62:2C:EE:BC:D8:FE:1D:3D:D5:CF:61:73:E9:8D:99:79 Authority key identifier: 0E:8C:E0:A6:AB:B8:EE:50:D4:4B:3B:AE:42:D4:A2:54:9F:FB:82:40 Certificate issuer: /CN=0e8ce0a6abb8ee50d44b3bae42d4a2549ffb8240 Certificate serial: 019B59778431E1909AC96F4F05A28680996A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dozgpqu47lDUSzuuQtSiVJ_7gkA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft Manifest number: 15D4 Signing time: Fri 26 Dec 2025 07:02:43 +0000 Manifest this update: Fri 26 Dec 2025 07:02:43 +0000 Manifest next update: Sat 27 Dec 2025 07:02:43 +0000 Files and hashes: 1: Dozgpqu47lDUSzuuQtSiVJ_7gkA.crl (hash: OG7e/YdsKJzQlAVgmmp+Pkv/15zxyyk82R5P6ZNdSkU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.crl rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft rsync://rpki.ripe.net/repository/DEFAULT/Dozgpqu47lDUSzuuQtSiVJ_7gkA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:84:31:e1:90:9a:c9:6f:4f:05:a2:86:80:99:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e8ce0a6abb8ee50d44b3bae42d4a2549ffb8240 Validity Not Before: Dec 26 07:02:43 2025 GMT Not After : Dec 27 07:02:43 2025 GMT Subject: CN=cf4b0833622ceebcd8fe1d3dd5cf6173e98d9979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e9:36:18:ea:46:2a:81:fa:94:de:44:7d:fd: 68:e6:5d:43:3f:68:78:a9:d8:f2:17:b7:ab:be:d8: c3:82:ef:df:3d:77:9f:07:0f:c1:45:3c:43:3e:7a: 4b:85:c1:80:13:b4:d6:39:d4:d8:ee:9f:ed:ae:51: e3:37:ca:c5:11:84:42:d7:a0:a0:7a:13:71:c4:6e: 13:4e:de:5a:fc:bc:b9:2f:70:73:e4:b6:88:31:27: 3e:b4:ac:c0:a1:da:94:0b:9f:9c:3b:59:b6:8e:27: 9f:a5:e0:86:ad:9e:1e:ba:53:e7:8f:8c:ba:d5:47: d0:72:63:0a:d1:5b:f1:a5:18:2b:10:78:0b:d9:10: 66:7c:b0:14:0d:85:30:d0:07:f8:50:26:a3:d4:9f: d9:61:55:03:f4:9c:ae:75:42:cf:ad:aa:3d:50:ea: 26:9c:2a:74:73:fb:b2:dd:dd:29:eb:51:bb:0b:57: 3d:43:ee:27:13:9f:a1:93:32:38:2b:eb:e3:36:11: ec:ba:91:eb:83:61:5d:27:b5:3a:85:34:a9:55:d4: 1e:80:fe:ec:95:9a:0f:47:5e:fd:fb:4a:0a:47:25: bd:8d:39:73:fe:1d:46:ed:95:06:40:96:24:64:33: 6a:5b:f1:ef:48:df:4d:e6:5f:f1:1a:6c:79:6f:5f: f2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:4B:08:33:62:2C:EE:BC:D8:FE:1D:3D:D5:CF:61:73:E9:8D:99:79 X509v3 Authority Key Identifier: keyid:0E:8C:E0:A6:AB:B8:EE:50:D4:4B:3B:AE:42:D4:A2:54:9F:FB:82:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dozgpqu47lDUSzuuQtSiVJ_7gkA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:4a:00:f6:d9:a5:3e:92:75:e0:6c:9f:0c:6d:c3:aa:8f:33: 59:1a:c3:63:90:fb:a3:78:b6:40:05:42:42:c1:09:4d:78:9f: 4c:b6:0e:19:e6:b7:79:e6:63:fc:25:41:2d:6f:e0:c1:90:79: 3f:44:78:c4:d8:ce:f4:5c:90:94:fc:16:7f:91:44:c8:29:1e: 45:b4:84:78:d1:ca:23:a6:d1:89:18:02:d2:c2:f5:7d:de:b0: e9:66:1d:7c:4e:dd:ac:d0:09:d2:74:68:b3:01:da:68:10:05: 1f:8b:38:f9:a0:22:42:fa:d0:de:50:22:b6:5b:8b:4b:2e:7e: a2:a5:4d:17:3c:00:8a:9a:1b:db:2e:07:ca:ec:e7:33:e0:29: 11:25:47:75:20:f6:55:ce:64:53:f5:c4:9b:a4:ec:0f:dd:62: b5:4d:a2:97:8a:3f:e8:98:84:0e:63:03:10:ce:95:9b:cc:5e: fb:eb:41:8c:6b:e5:85:95:70:ec:7a:e6:ed:69:c6:6e:9b:d7: 15:1a:ad:86:ed:5e:82:ea:16:3f:99:c6:15:e1:e3:b3:5b:22: a7:ec:88:0a:94:c7:5b:6f:2e:01:3c:d7:e9:6d:29:80:ab:76: e1:30:0f:19:14:38:97:7f:a8:a4:f9:42:4e:d9:7b:e1:98:78: 6f:c9:03:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZd4Qx4ZCayW9PBaKGgJlqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlOGNlMGE2YWJiOGVlNTBkNDRiM2JhZTQyZDRhMjU0OWZm YjgyNDAwHhcNMjUxMjI2MDcwMjQzWhcNMjUxMjI3MDcwMjQzWjAzMTEwLwYDVQQD EyhjZjRiMDgzMzYyMmNlZWJjZDhmZTFkM2RkNWNmNjE3M2U5OGQ5OTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+k2GOpGKoH6lN5Eff1o5l1DP2h4 qdjyF7ervtjDgu/fPXefBw/BRTxDPnpLhcGAE7TWOdTY7p/trlHjN8rFEYRC16Cg ehNxxG4TTt5a/Ly5L3Bz5LaIMSc+tKzAodqUC5+cO1m2jiefpeCGrZ4eulPnj4y6 1UfQcmMK0VvxpRgrEHgL2RBmfLAUDYUw0Af4UCaj1J/ZYVUD9JyudULPrao9UOom nCp0c/uy3d0p61G7C1c9Q+4nE5+hkzI4K+vjNhHsupHrg2FdJ7U6hTSpVdQegP7s lZoPR179+0oKRyW9jTlz/h1G7ZUGQJYkZDNqW/HvSN9N5l/xGmx5b1/y7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM9LCDNiLO682P4dPdXPYXPpjZl5MB8GA1UdIwQY MBaAFA6M4KaruO5Q1Es7rkLUolSf+4JAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG96Z3BxdTQ3bERVU3p1dVF0U2lWSl83Z2tBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi85ZjIwNzctZGY0Zi00OTdlLThlOTAt YzQ5OTc1NWEyNjg5LzEvRG96Z3BxdTQ3bERVU3p1dVF0U2lWSl83Z2tBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi85ZjIwNzctZGY0Zi00OTdlLThlOTAtYzQ5OTc1NWEyNjg5 LzEvRG96Z3BxdTQ3bERVU3p1dVF0U2lWSl83Z2tBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjEoA9tml PpJ14GyfDG3Dqo8zWRrDY5D7o3i2QAVCQsEJTXifTLYOGea3eeZj/CVBLW/gwZB5 P0R4xNjO9FyQlPwWf5FEyCkeRbSEeNHKI6bRiRgC0sL1fd6w6WYdfE7drNAJ0nRo swHaaBAFH4s4+aAiQvrQ3lAitluLSy5+oqVNFzwAipob2y4HyuznM+ApESVHdSD2 Vc5kU/XEm6TsD91itU2il4o/6JiEDmMDEM6Vm8xe++tBjGvlhZVw7Hrm7WnGbpvX FRqthu1eguoWP5nGFeHjs1sip+yICpTHW28uATzX6W0pgKt24TAPGRQ4l3+opPlC Ttl74Zh4b8kDOw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:02:26 2025 by rpki-client