This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/6b39bf-3640-4d2e-b22f-61cd618658c6/1/DhEMl9XysftNNYKIwOpir18gxBo.mft File: DhEMl9XysftNNYKIwOpir18gxBo.mft (raw, json) Hash identifier: /6Vjog4YWaabSBBRDepCKgjqAQiRkZ43DSy+O4rXPcY= Subject key identifier: A9:F7:5E:F2:AC:B9:D2:F7:05:ED:DA:34:98:A4:E1:D2:BC:5C:B2:76 Authority key identifier: 0E:11:0C:97:D5:F2:B1:FB:4D:35:82:88:C0:EA:62:AF:5F:20:C4:1A Certificate issuer: /CN=0e110c97d5f2b1fb4d358288c0ea62af5f20c41a Certificate serial: 019B5AF68A20AC1C0CDED22BA885C49770A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DhEMl9XysftNNYKIwOpir18gxBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/6b39bf-3640-4d2e-b22f-61cd618658c6/1/DhEMl9XysftNNYKIwOpir18gxBo.mft Manifest number: A0 Signing time: Fri 26 Dec 2025 14:01:05 +0000 Manifest this update: Fri 26 Dec 2025 14:01:05 +0000 Manifest next update: Sat 27 Dec 2025 14:01:05 +0000 Files and hashes: 1: DhEMl9XysftNNYKIwOpir18gxBo.crl (hash: bsje964ZPx6LV6x10iGpsxFImO+JvKvES9tg2hn8UnM=) 2: LZOyP8r3x8zItBlCJiR2Oe2hLRw.roa (hash: ptlWNHRcQBtj91KkmUUskyC0BtqyIo6TBBD+R2rdU9Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/6b39bf-3640-4d2e-b22f-61cd618658c6/1/DhEMl9XysftNNYKIwOpir18gxBo.crl rsync://rpki.ripe.net/repository/DEFAULT/53/6b39bf-3640-4d2e-b22f-61cd618658c6/1/DhEMl9XysftNNYKIwOpir18gxBo.mft rsync://rpki.ripe.net/repository/DEFAULT/DhEMl9XysftNNYKIwOpir18gxBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:8a:20:ac:1c:0c:de:d2:2b:a8:85:c4:97:70:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e110c97d5f2b1fb4d358288c0ea62af5f20c41a Validity Not Before: Dec 26 14:01:05 2025 GMT Not After : Dec 27 14:01:05 2025 GMT Subject: CN=a9f75ef2acb9d2f705edda3498a4e1d2bc5cb276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a2:a8:e8:e1:89:05:39:cc:40:2b:35:56:6a: 68:f4:90:d2:ae:45:f7:79:99:ba:d7:00:da:3b:88: f8:dd:7e:67:69:2e:6b:df:4d:81:f5:94:3c:28:f4: 20:89:d2:bc:01:cd:e5:2e:98:1b:ba:ff:89:2f:4b: 40:c3:00:ca:2b:f2:6f:be:3a:6c:e2:22:8c:b6:27: a5:ea:99:f9:6c:66:cf:05:d4:0d:e6:2f:7b:7e:cd: 4a:c8:4a:a1:7d:07:ae:07:ee:24:de:42:04:aa:d3: 66:05:37:f5:76:a9:26:27:db:ab:6b:63:36:d2:87: d4:c0:4e:ed:b6:be:9b:98:0a:55:d7:e5:0c:88:50: ca:e5:b5:df:82:b4:d9:2c:02:fd:d8:68:ef:0d:75: 1b:56:86:2e:0a:a2:f2:97:44:74:41:27:ec:ae:b2: 59:ed:37:21:0f:e1:34:74:0c:96:06:ca:a6:1b:05: cf:39:e1:8c:1e:ea:c7:f0:7d:00:6e:27:df:2b:bb: 14:7c:70:67:4e:32:f2:b6:68:33:fc:28:0f:fd:15: 85:1b:48:a4:05:65:c4:81:eb:49:36:ba:1c:58:80: f4:d2:9d:1d:dd:4a:dc:00:05:14:23:3d:d2:07:65: 4f:55:13:88:33:df:5f:8c:68:8b:3c:ff:2b:b2:71: 13:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F7:5E:F2:AC:B9:D2:F7:05:ED:DA:34:98:A4:E1:D2:BC:5C:B2:76 X509v3 Authority Key Identifier: keyid:0E:11:0C:97:D5:F2:B1:FB:4D:35:82:88:C0:EA:62:AF:5F:20:C4:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DhEMl9XysftNNYKIwOpir18gxBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6b39bf-3640-4d2e-b22f-61cd618658c6/1/DhEMl9XysftNNYKIwOpir18gxBo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6b39bf-3640-4d2e-b22f-61cd618658c6/1/DhEMl9XysftNNYKIwOpir18gxBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:0d:08:77:61:24:be:8f:10:ab:09:ac:03:0e:98:cc:68:15: db:81:bc:44:f1:43:5d:5e:05:b9:c1:26:92:0f:2d:45:40:31: ab:38:1c:f1:7b:74:8d:04:26:2a:0a:9e:79:a5:ea:04:19:9f: 59:16:9b:6f:88:60:02:9c:01:3f:91:35:f2:83:66:23:8d:f0: 7e:61:21:9d:06:04:6f:79:d4:aa:dd:e8:0e:57:69:7d:40:d7: b9:06:91:aa:ad:ac:b8:07:9e:be:cb:de:0e:21:69:2f:8a:ef: 4d:41:33:06:02:99:c6:51:ad:db:11:2f:6b:3e:1d:eb:1e:a3: 02:42:f9:e8:a1:d0:37:cb:22:59:d0:12:6b:f8:8d:5d:69:47: a1:bf:7a:9f:5f:5e:4a:11:30:13:97:21:75:f8:36:18:40:06: d5:d2:cf:34:ca:1b:d2:52:18:12:eb:fb:d8:24:e2:28:ef:da: 37:77:d2:11:26:c8:56:a2:69:7f:88:bb:1b:61:f0:25:da:b4: dc:f0:bf:53:88:f8:44:c9:60:66:04:6d:60:8e:4e:82:a6:c3: 0c:53:c9:71:47:00:2a:4f:34:f5:f0:24:f7:db:dc:82:1d:4b: 4e:28:8c:13:a3:50:a8:b0:77:2e:d9:9d:bf:8a:8c:93:83:de: 58:90:0a:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9oogrBwM3tIrqIXEl3ChMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMTEwYzk3ZDVmMmIxZmI0ZDM1ODI4OGMwZWE2MmFmNWYy MGM0MWEwHhcNMjUxMjI2MTQwMTA1WhcNMjUxMjI3MTQwMTA1WjAzMTEwLwYDVQQD EyhhOWY3NWVmMmFjYjlkMmY3MDVlZGRhMzQ5OGE0ZTFkMmJjNWNiMjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKKo6OGJBTnMQCs1Vmpo9JDSrkX3 eZm61wDaO4j43X5naS5r302B9ZQ8KPQgidK8Ac3lLpgbuv+JL0tAwwDKK/Jvvjps 4iKMtiel6pn5bGbPBdQN5i97fs1KyEqhfQeuB+4k3kIEqtNmBTf1dqkmJ9ura2M2 0ofUwE7ttr6bmApV1+UMiFDK5bXfgrTZLAL92GjvDXUbVoYuCqLyl0R0QSfsrrJZ 7TchD+E0dAyWBsqmGwXPOeGMHurH8H0AbiffK7sUfHBnTjLytmgz/CgP/RWFG0ik BWXEgetJNrocWID00p0d3UrcAAUUIz3SB2VPVROIM99fjGiLPP8rsnETxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKn3XvKsudL3Be3aNJik4dK8XLJ2MB8GA1UdIwQY MBaAFA4RDJfV8rH7TTWCiMDqYq9fIMQaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGhFTWw5WHlzZnROTllLSXdPcGlyMThneEJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My82YjM5YmYtMzY0MC00ZDJlLWIyMmYt NjFjZDYxODY1OGM2LzEvRGhFTWw5WHlzZnROTllLSXdPcGlyMThneEJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My82YjM5YmYtMzY0MC00ZDJlLWIyMmYtNjFjZDYxODY1OGM2 LzEvRGhFTWw5WHlzZnROTllLSXdPcGlyMThneEJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARA0Id2Ek vo8QqwmsAw6YzGgV24G8RPFDXV4FucEmkg8tRUAxqzgc8Xt0jQQmKgqeeaXqBBmf WRabb4hgApwBP5E18oNmI43wfmEhnQYEb3nUqt3oDldpfUDXuQaRqq2suAeevsve DiFpL4rvTUEzBgKZxlGt2xEvaz4d6x6jAkL56KHQN8siWdASa/iNXWlHob96n19e ShEwE5chdfg2GEAG1dLPNMob0lIYEuv72CTiKO/aN3fSESbIVqJpf4i7G2HwJdq0 3PC/U4j4RMlgZgRtYI5OgqbDDFPJcUcAKk809fAk99vcgh1LTiiME6NQqLB3Ltmd v4qMk4PeWJAKXA== -----END CERTIFICATE-----Generated at Fri Dec 26 17:41:22 2025 by rpki-client