This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft File: Dw-fBE4rkph410fF_7uArRDj1r0.mft (raw, json) Hash identifier: OJlNqEr4DNXLiMSqjYxKxiLb1Hu+1gcHJCzNz//O9R8= Subject key identifier: 29:23:C2:0E:1D:87:B1:86:07:97:14:6E:7E:91:A2:B2:D9:E3:96:EC Authority key identifier: 0F:0F:9F:04:4E:2B:92:98:78:D7:47:C5:FF:BB:80:AD:10:E3:D6:BD Certificate issuer: /CN=0f0f9f044e2b929878d747c5ffbb80ad10e3d6bd Certificate serial: 019B3A21F7F6B5EE374DA18234C981BC99AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dw-fBE4rkph410fF_7uArRDj1r0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft Manifest number: 0C1F Signing time: Sat 20 Dec 2025 05:01:03 +0000 Manifest this update: Sat 20 Dec 2025 05:01:03 +0000 Manifest next update: Sun 21 Dec 2025 05:01:03 +0000 Files and hashes: 1: Dw-fBE4rkph410fF_7uArRDj1r0.crl (hash: yAv4rjgfYA+7neu8ik+G8DpdaiejibIxOXQv0HDT0C0=) 2: NY6GkITWKlUtVSGSEXVFnWklUFA.roa (hash: bc90pfjZ3z6bn5Sd1cSbU6mDm4LudyLIA08FEeaNBvM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.crl rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft rsync://rpki.ripe.net/repository/DEFAULT/Dw-fBE4rkph410fF_7uArRDj1r0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:f7:f6:b5:ee:37:4d:a1:82:34:c9:81:bc:99:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f0f9f044e2b929878d747c5ffbb80ad10e3d6bd Validity Not Before: Dec 20 05:01:03 2025 GMT Not After : Dec 21 05:01:03 2025 GMT Subject: CN=2923c20e1d87b1860797146e7e91a2b2d9e396ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a9:2a:9f:80:1b:dd:c9:5c:63:c6:3e:a2:15: 1f:8f:80:d4:e0:72:69:cf:9c:bc:6f:ff:b4:4a:f3: 90:41:05:c0:06:de:e3:fd:49:5b:b1:3c:1c:35:4e: 41:1a:22:b2:f4:0b:ea:cd:58:a6:a3:d9:21:4b:b1: e0:b1:d2:e7:4a:5b:9c:16:81:f1:80:7a:5b:63:2f: be:e3:28:bb:5d:cd:ff:23:66:f5:53:72:13:c3:50: 04:2c:a4:65:37:84:17:33:a4:d4:f6:bb:d7:f2:bc: db:d5:57:7a:c6:58:7f:2c:bf:41:cf:53:a7:43:98: 1b:63:55:0d:4f:47:db:20:98:3b:86:97:78:f8:17: a5:9a:18:72:b9:04:35:30:b8:0d:15:a3:cc:3c:f0: ce:95:43:13:a6:28:0e:6b:8f:42:71:18:d3:28:aa: 7f:73:3a:26:ac:3b:a3:ab:64:a4:6b:ee:86:25:db: b5:bd:cb:43:fb:71:5a:7c:51:b8:4d:88:94:48:d2: c0:5a:5e:b7:95:de:58:ad:3a:83:1d:50:18:01:89: 0b:bb:58:61:a2:90:ac:6d:31:c5:e6:ea:10:01:48: 13:ed:12:4c:94:0c:f4:e9:f1:f7:81:bd:06:42:3b: 28:16:91:a2:96:ce:a8:74:93:e5:64:19:a8:77:64: 4e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:23:C2:0E:1D:87:B1:86:07:97:14:6E:7E:91:A2:B2:D9:E3:96:EC X509v3 Authority Key Identifier: keyid:0F:0F:9F:04:4E:2B:92:98:78:D7:47:C5:FF:BB:80:AD:10:E3:D6:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dw-fBE4rkph410fF_7uArRDj1r0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:99:6a:21:e3:96:4c:0b:c8:73:11:b6:4a:ae:f6:67:be:2f: ed:01:2d:bd:f9:c5:d4:a4:49:c2:4a:1f:2f:5a:e8:14:22:a4: f9:fe:fc:4f:7e:88:04:0a:f6:f0:6b:79:c8:3b:b4:1f:97:96: ea:8a:2e:25:7a:21:70:14:03:02:17:9a:10:93:d9:2c:c0:98: 5c:27:dc:5d:cc:e3:33:24:ed:93:0f:fc:fc:40:1a:07:1e:d7: 71:05:f5:b4:c3:4e:23:8f:05:c6:27:39:bf:d3:9f:1b:32:e4: b9:c1:b3:e6:22:4f:11:a1:88:9a:ee:8d:2a:cf:87:c6:a6:50: e9:13:e1:64:29:72:19:24:04:73:dc:ab:94:3c:25:f2:71:7f: c4:83:94:09:7a:98:f4:53:9b:1e:9d:37:53:7e:18:9f:ed:ce: 9c:d9:4d:3a:b3:8a:bd:1c:2c:98:92:a4:85:c1:6e:8e:5e:c9: 63:53:3b:9b:91:6a:48:f7:69:43:29:07:a6:89:db:c8:93:87: ad:3c:70:09:c2:c5:91:b4:b3:56:9c:c4:f0:7e:c3:d5:cd:0a: ab:23:75:65:28:18:c0:be:16:ad:c9:7e:5b:b0:38:11:56:55: 20:fb:9d:9c:b2:d9:7c:f0:8e:e5:e1:75:47:53:e3:fc:a1:a6: e0:90:52:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6Iff2te43TaGCNMmBvJmvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMGY5ZjA0NGUyYjkyOTg3OGQ3NDdjNWZmYmI4MGFkMTBl M2Q2YmQwHhcNMjUxMjIwMDUwMTAzWhcNMjUxMjIxMDUwMTAzWjAzMTEwLwYDVQQD EygyOTIzYzIwZTFkODdiMTg2MDc5NzE0NmU3ZTkxYTJiMmQ5ZTM5NmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqkqn4Ab3clcY8Y+ohUfj4DU4HJp z5y8b/+0SvOQQQXABt7j/UlbsTwcNU5BGiKy9AvqzVimo9khS7HgsdLnSlucFoHx gHpbYy++4yi7Xc3/I2b1U3ITw1AELKRlN4QXM6TU9rvX8rzb1Vd6xlh/LL9Bz1On Q5gbY1UNT0fbIJg7hpd4+BelmhhyuQQ1MLgNFaPMPPDOlUMTpigOa49CcRjTKKp/ czomrDujq2Ska+6GJdu1vctD+3FafFG4TYiUSNLAWl63ld5YrTqDHVAYAYkLu1hh opCsbTHF5uoQAUgT7RJMlAz06fH3gb0GQjsoFpGils6odJPlZBmod2ROmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCkjwg4dh7GGB5cUbn6RorLZ45bsMB8GA1UdIwQY MBaAFA8PnwROK5KYeNdHxf+7gK0Q49a9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHctZkJFNHJrcGg0MTBmRl83dUFyUkRqMXIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85M2Q0NjAtMzY4Yy00NmQ3LThlN2Et Y2RiZDNiNmNlNzc3LzEvRHctZkJFNHJrcGg0MTBmRl83dUFyUkRqMXIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS85M2Q0NjAtMzY4Yy00NmQ3LThlN2EtY2RiZDNiNmNlNzc3 LzEvRHctZkJFNHJrcGg0MTBmRl83dUFyUkRqMXIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATJlqIeOW TAvIcxG2Sq72Z74v7QEtvfnF1KRJwkofL1roFCKk+f78T36IBAr28Gt5yDu0H5eW 6oouJXohcBQDAheaEJPZLMCYXCfcXczjMyTtkw/8/EAaBx7XcQX1tMNOI48Fxic5 v9OfGzLkucGz5iJPEaGImu6NKs+HxqZQ6RPhZClyGSQEc9yrlDwl8nF/xIOUCXqY 9FObHp03U34Yn+3OnNlNOrOKvRwsmJKkhcFujl7JY1M7m5FqSPdpQykHponbyJOH rTxwCcLFkbSzVpzE8H7D1c0KqyN1ZSgYwL4Wrcl+W7A4EVZVIPudnLLZfPCO5eF1 R1Pj/KGm4JBSWQ== -----END CERTIFICATE-----Generated at Sat Dec 20 09:13:32 2025 by rpki-client