This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft File: DNpch0NU2Dgm5DwlNbduINW2GwU.mft (raw, json) Hash identifier: 9JptQBrD/2Q1MyQFTugEaxZ+H4IbQqi9HlnDW+Z7NKs= Subject key identifier: 98:3B:F4:0D:35:97:E8:64:03:49:C2:6E:F4:EE:62:9E:27:BD:9F:13 Authority key identifier: 0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05 Certificate issuer: /CN=0cda5c874354d83826e43c2535b76e20d5b61b05 Certificate serial: 019B34C48B8405DD28D16A03C4535065D192 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft Manifest number: 178F Signing time: Fri 19 Dec 2025 04:00:54 +0000 Manifest this update: Fri 19 Dec 2025 04:00:54 +0000 Manifest next update: Sat 20 Dec 2025 04:00:54 +0000 Files and hashes: 1: 32CQUiCUfdquX7Jbo_dmPVa4RAU.roa (hash: FAfiLPwl0dHpiVR3Uys5QcBsWLGjmkF+BWAYhU6veIk=) 2: DNpch0NU2Dgm5DwlNbduINW2GwU.crl (hash: MLMYge9nBPr6zNFDQG9k2ZzLJCWdaTElvRBrIgpNLzY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:8b:84:05:dd:28:d1:6a:03:c4:53:50:65:d1:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cda5c874354d83826e43c2535b76e20d5b61b05 Validity Not Before: Dec 19 04:00:54 2025 GMT Not After : Dec 20 04:00:54 2025 GMT Subject: CN=983bf40d3597e8640349c26ef4ee629e27bd9f13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e1:2c:d5:b9:ff:c5:c5:fe:c6:2f:cd:d9:13: 99:1f:23:05:e2:34:c3:32:a3:39:84:cb:70:f2:79: 4b:3d:38:7c:c6:e7:4e:b5:1b:8d:fd:f9:3d:c1:a7: 17:fa:3e:34:70:e5:39:c3:11:05:8a:cb:c7:23:d6: ce:98:d3:c8:e2:69:4b:d9:e8:7f:d8:58:39:5a:57: d5:91:2a:e2:e3:73:7d:37:c1:74:bc:15:4d:e5:b3: 4e:13:fd:8b:9c:34:49:a1:b8:5a:b9:32:f8:10:03: e3:29:3a:ef:bc:74:68:6c:9f:f7:c3:2a:e3:73:6a: cb:da:5c:e0:cc:22:c2:c4:c0:0d:3a:e9:69:dc:35: d7:a7:df:82:b0:fb:1f:de:f2:95:3a:e4:bb:69:c8: 2a:37:93:f8:b6:65:79:38:06:7b:13:4f:39:b2:26: 5e:97:95:71:9d:36:4b:12:66:29:7d:6f:a4:f0:02: 7c:de:56:9d:a7:de:f3:27:15:cf:ec:16:0b:fd:37: 65:64:63:65:af:a6:f1:03:4d:5f:ec:c0:32:1d:0a: b7:bb:f6:db:c0:86:c1:32:af:aa:de:ed:d3:6f:18: 5e:a9:47:2d:5e:78:a1:36:3a:9d:56:b5:f4:84:37: ae:fa:90:f0:8d:6c:0d:f6:14:86:fc:3a:9a:31:9e: 39:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:3B:F4:0D:35:97:E8:64:03:49:C2:6E:F4:EE:62:9E:27:BD:9F:13 X509v3 Authority Key Identifier: keyid:0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:9a:2b:64:39:eb:d9:21:fa:1c:a6:e6:e2:dd:b0:70:d2:38: 09:fe:83:90:01:49:97:ad:ff:f5:6e:ab:27:4b:22:57:24:10: 33:0e:c2:60:98:62:c7:4b:aa:de:42:06:d5:ab:a4:8a:ef:48: 8e:b8:ed:ab:c6:d2:99:1b:74:f1:b9:b7:4e:77:52:18:81:66: 46:35:55:52:55:d6:53:32:bd:44:70:3b:98:00:d4:5e:1f:a3: 16:d4:a2:d4:df:10:e8:b4:99:71:24:69:ca:28:99:e2:60:0d: 1b:52:8e:f6:60:e5:76:0b:48:76:02:0a:e2:f4:14:d8:31:92: be:06:0c:16:7f:74:ba:aa:ba:44:70:43:9d:a2:cb:15:6f:7c: 90:aa:51:25:fe:3d:54:ae:8e:ee:6f:08:82:f3:7b:0a:5c:64: ec:7e:de:2f:79:b4:b8:ea:55:00:fe:fe:90:14:f0:35:7e:93: 54:52:66:b1:40:93:00:2c:e7:bb:89:2c:2a:a5:95:92:d6:3f: 55:cf:fa:36:55:5f:b1:6f:c4:79:39:ec:bf:dc:aa:e1:6e:20: b7:ca:51:6c:48:89:0d:84:d8:99:49:69:7f:a3:c8:74:44:81: d3:7d:a7:3d:5f:b9:20:8c:30:36:ed:1d:3f:66:1b:67:ff:65: aa:9e:81:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xIuEBd0o0WoDxFNQZdGSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZGE1Yzg3NDM1NGQ4MzgyNmU0M2MyNTM1Yjc2ZTIwZDVi NjFiMDUwHhcNMjUxMjE5MDQwMDU0WhcNMjUxMjIwMDQwMDU0WjAzMTEwLwYDVQQD Eyg5ODNiZjQwZDM1OTdlODY0MDM0OWMyNmVmNGVlNjI5ZTI3YmQ5ZjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuEs1bn/xcX+xi/N2ROZHyMF4jTD MqM5hMtw8nlLPTh8xudOtRuN/fk9wacX+j40cOU5wxEFisvHI9bOmNPI4mlL2eh/ 2Fg5WlfVkSri43N9N8F0vBVN5bNOE/2LnDRJobhauTL4EAPjKTrvvHRobJ/3wyrj c2rL2lzgzCLCxMANOulp3DXXp9+CsPsf3vKVOuS7acgqN5P4tmV5OAZ7E085siZe l5VxnTZLEmYpfW+k8AJ83ladp97zJxXP7BYL/TdlZGNlr6bxA01f7MAyHQq3u/bb wIbBMq+q3u3TbxheqUctXnihNjqdVrX0hDeu+pDwjWwN9hSG/DqaMZ45dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJg79A01l+hkA0nCbvTuYp4nvZ8TMB8GA1UdIwQY MBaAFAzaXIdDVNg4JuQ8JTW3biDVthsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE5wY2gwTlUyRGdtNUR3bE5iZHVJTlcyR3dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi85MjMzMmYtMDNlMC00MTE2LWI2ZjMt YzgyZjQyNGI2ZDBkLzEvRE5wY2gwTlUyRGdtNUR3bE5iZHVJTlcyR3dVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi85MjMzMmYtMDNlMC00MTE2LWI2ZjMtYzgyZjQyNGI2ZDBk LzEvRE5wY2gwTlUyRGdtNUR3bE5iZHVJTlcyR3dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYZorZDnr 2SH6HKbm4t2wcNI4Cf6DkAFJl63/9W6rJ0siVyQQMw7CYJhix0uq3kIG1aukiu9I jrjtq8bSmRt08bm3TndSGIFmRjVVUlXWUzK9RHA7mADUXh+jFtSi1N8Q6LSZcSRp yiiZ4mANG1KO9mDldgtIdgIK4vQU2DGSvgYMFn90uqq6RHBDnaLLFW98kKpRJf49 VK6O7m8IgvN7Clxk7H7eL3m0uOpVAP7+kBTwNX6TVFJmsUCTACznu4ksKqWVktY/ Vc/6NlVfsW/EeTnsv9yq4W4gt8pRbEiJDYTYmUlpf6PIdESB032nPV+5IIwwNu0d P2YbZ/9lqp6BIA== -----END CERTIFICATE-----Generated at Fri Dec 19 08:00:27 2025 by rpki-client