This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft File: dnwXZvu9z_aLvDSjxr5poMigOrk.mft (raw, json) Hash identifier: ipy2Z88cQkwhtOCo1yow5DMoI034WNYj5YtuBB6A2w4= Subject key identifier: 6D:E6:1F:1B:43:89:07:02:9B:2F:16:1E:59:F1:B8:0A:46:F7:40:65 Authority key identifier: 76:7C:17:66:FB:BD:CF:F6:8B:BC:34:A3:C6:BE:69:A0:C8:A0:3A:B9 Certificate issuer: /CN=767c1766fbbdcff68bbc34a3c6be69a0c8a03ab9 Certificate serial: 019B42B720EB36A95F7ECE1490C9F431377F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft Manifest number: 0F85 Signing time: Sun 21 Dec 2025 21:00:56 +0000 Manifest this update: Sun 21 Dec 2025 21:00:56 +0000 Manifest next update: Mon 22 Dec 2025 21:00:56 +0000 Files and hashes: 1: dnwXZvu9z_aLvDSjxr5poMigOrk.crl (hash: qiyTFytyS2tLdAJ9RYfF4Vw5XOChfTs4HNBKH1RyCUA=) 2: ffTvs6YF_hXAEglDFhneoTAWA7Y.roa (hash: McS9n7bcKq8O21qZ8IIp3IHODw/eCLO/50XCpVXjy20=) 3: xnRx0OSK9TIMFxn1VL8fIU-kDPQ.roa (hash: l/e913myQSQUa6e/Y2iqnvi7HmfqzgcIokF4oa8whYM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.crl rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:20:eb:36:a9:5f:7e:ce:14:90:c9:f4:31:37:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767c1766fbbdcff68bbc34a3c6be69a0c8a03ab9 Validity Not Before: Dec 21 21:00:56 2025 GMT Not After : Dec 22 21:00:56 2025 GMT Subject: CN=6de61f1b438907029b2f161e59f1b80a46f74065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ab:af:38:e1:5a:63:c6:9f:1d:3e:3f:c5:18: 45:48:74:cc:5e:10:38:e0:6a:f2:7d:de:4f:0c:34: fe:7d:17:31:13:3c:e8:92:b8:1b:b5:a0:3d:5d:a3: 07:2f:79:3b:eb:dc:2c:39:3f:f9:3e:fe:e9:15:4a: 01:23:26:ac:c2:5b:b4:65:55:bc:c3:db:13:27:4e: 11:81:f3:f7:86:9a:12:26:c3:fb:ba:80:3d:f8:af: a1:0f:eb:27:3d:72:18:f7:60:0d:0d:fc:a1:d5:39: e2:b1:16:ee:41:2a:c4:8a:ce:cd:62:1a:e4:54:db: bf:ac:1d:43:31:e7:7f:50:56:f7:3d:bd:29:fb:eb: 4a:40:8b:b2:cc:ee:29:10:7a:c3:1c:85:d2:f8:84: 01:17:a1:2a:fb:d6:8b:ee:64:9a:a7:31:70:06:da: 61:df:9f:da:a7:0a:3b:ae:87:8c:29:c7:53:f5:20: b5:ce:f8:74:f3:b4:01:e4:93:9f:49:82:55:87:ee: 52:f8:5e:77:f7:5c:89:c7:19:91:c8:07:1f:66:19: 3c:c9:2a:55:e6:f3:26:fa:96:d4:4a:0c:b8:c3:3e: a9:6b:ca:a4:b9:72:41:01:59:86:50:06:a0:b6:5b: f4:5d:28:a4:f1:e4:b5:08:63:05:7d:0d:2b:08:73: ee:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:E6:1F:1B:43:89:07:02:9B:2F:16:1E:59:F1:B8:0A:46:F7:40:65 X509v3 Authority Key Identifier: keyid:76:7C:17:66:FB:BD:CF:F6:8B:BC:34:A3:C6:BE:69:A0:C8:A0:3A:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:47:56:83:4e:cb:0a:17:96:50:34:67:a8:73:93:1d:e4:a8: 2c:99:16:c1:d0:3a:f3:d0:d4:31:a8:6b:9b:2c:34:f0:50:64: 49:71:b4:72:5b:5a:e6:29:eb:fb:c9:09:b0:c9:72:5c:ee:91: 6c:a2:5e:a8:94:5a:4e:c6:25:b8:63:b2:91:4d:ae:8c:44:8f: 3a:2a:3d:fa:82:dc:78:df:72:ee:af:b7:c3:cb:a0:4c:db:bf: 2a:a8:cb:62:3e:48:8b:98:a7:b7:f5:5b:47:6e:bc:94:21:09: d1:bf:d1:9e:47:bd:ea:3a:fc:5c:4e:3e:a3:0d:c4:48:03:61: 77:94:5d:a7:0c:61:c9:b9:ea:bb:c0:7d:90:ea:57:cf:d7:9e: 27:ee:54:43:f1:fb:dc:5a:bf:09:32:18:f6:60:7d:db:2d:c2: c1:0e:19:5d:93:cd:cf:18:ef:06:cc:cd:02:cf:f2:10:76:be: ba:af:ae:37:4f:4e:34:5c:93:2a:60:1e:ab:1f:72:c3:70:a3: a8:48:fc:81:96:3b:a1:6d:3c:64:e9:70:23:ec:9a:6e:c0:4a: af:cc:42:f5:3b:ff:91:0e:35:66:e9:4a:22:6f:a6:d1:e4:19: b1:bb:a5:6d:6f:9d:2b:bd:51:27:09:33:06:72:1e:ba:69:5f: 38:54:54:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCtyDrNqlffs4UkMn0MTd/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2N2MxNzY2ZmJiZGNmZjY4YmJjMzRhM2M2YmU2OWEwYzhh MDNhYjkwHhcNMjUxMjIxMjEwMDU2WhcNMjUxMjIyMjEwMDU2WjAzMTEwLwYDVQQD Eyg2ZGU2MWYxYjQzODkwNzAyOWIyZjE2MWU1OWYxYjgwYTQ2Zjc0MDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzquvOOFaY8afHT4/xRhFSHTMXhA4 4Gryfd5PDDT+fRcxEzzokrgbtaA9XaMHL3k769wsOT/5Pv7pFUoBIyaswlu0ZVW8 w9sTJ04RgfP3hpoSJsP7uoA9+K+hD+snPXIY92ANDfyh1TnisRbuQSrEis7NYhrk VNu/rB1DMed/UFb3Pb0p++tKQIuyzO4pEHrDHIXS+IQBF6Eq+9aL7mSapzFwBtph 35/apwo7roeMKcdT9SC1zvh087QB5JOfSYJVh+5S+F5391yJxxmRyAcfZhk8ySpV 5vMm+pbUSgy4wz6pa8qkuXJBAVmGUAagtlv0XSik8eS1CGMFfQ0rCHPuWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG3mHxtDiQcCmy8WHlnxuApG90BlMB8GA1UdIwQY MBaAFHZ8F2b7vc/2i7w0o8a+aaDIoDq5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG53WFp2dTl6X2FMdkRTanhyNXBvTWlnT3JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84ODQzNTYtN2UyYS00YzJhLThmZjQt MzU2OGUxZDI5ZDRhLzEvZG53WFp2dTl6X2FMdkRTanhyNXBvTWlnT3JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS84ODQzNTYtN2UyYS00YzJhLThmZjQtMzU2OGUxZDI5ZDRh LzEvZG53WFp2dTl6X2FMdkRTanhyNXBvTWlnT3JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhUdWg07L CheWUDRnqHOTHeSoLJkWwdA689DUMahrmyw08FBkSXG0clta5inr+8kJsMlyXO6R bKJeqJRaTsYluGOykU2ujESPOio9+oLceN9y7q+3w8ugTNu/KqjLYj5Ii5int/Vb R268lCEJ0b/Rnke96jr8XE4+ow3ESANhd5Rdpwxhybnqu8B9kOpXz9eeJ+5UQ/H7 3Fq/CTIY9mB92y3CwQ4ZXZPNzxjvBszNAs/yEHa+uq+uN09ONFyTKmAeqx9yw3Cj qEj8gZY7oW08ZOlwI+yabsBKr8xC9Tv/kQ41ZulKIm+m0eQZsbulbW+dK71RJwkz BnIeumlfOFRUXg== -----END CERTIFICATE-----Generated at Mon Dec 22 05:34:39 2025 by rpki-client