This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft File: DNpch0NU2Dgm5DwlNbduINW2GwU.mft (raw, json) Hash identifier: FsMJhLa9GdiG975Aq0Jc4tWO2TOsySElCNdfxBCmT/4= Subject key identifier: AE:FE:CF:E8:3B:68:AC:F5:D5:A3:A0:11:65:91:21:EF:E1:87:26:47 Authority key identifier: 0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05 Certificate issuer: /CN=0cda5c874354d83826e43c2535b76e20d5b61b05 Certificate serial: 019B1201972B757318BB22AF3ABF4C37C46A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft Manifest number: 177D Signing time: Fri 12 Dec 2025 10:00:52 +0000 Manifest this update: Fri 12 Dec 2025 10:00:52 +0000 Manifest next update: Sat 13 Dec 2025 10:00:52 +0000 Files and hashes: 1: 32CQUiCUfdquX7Jbo_dmPVa4RAU.roa (hash: FAfiLPwl0dHpiVR3Uys5QcBsWLGjmkF+BWAYhU6veIk=) 2: DNpch0NU2Dgm5DwlNbduINW2GwU.crl (hash: ACo/VVmClk9KNFxvmo6J0uLu7r0GotPSuJc5M4KQjgA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:01:97:2b:75:73:18:bb:22:af:3a:bf:4c:37:c4:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cda5c874354d83826e43c2535b76e20d5b61b05 Validity Not Before: Dec 12 10:00:52 2025 GMT Not After : Dec 13 10:00:52 2025 GMT Subject: CN=aefecfe83b68acf5d5a3a011659121efe1872647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a3:5b:86:b5:22:cd:36:f4:84:b9:66:24:f9: eb:b1:0a:f3:45:b7:37:89:46:80:50:ad:4a:5c:f1: 53:b4:61:84:6b:0d:c3:c7:e3:8d:cd:47:57:d0:a8: e4:88:81:49:37:a5:88:75:67:f0:4f:65:bd:2f:41: 40:c4:9e:b8:32:a4:1a:60:07:88:2c:55:7e:c3:a3: c8:4b:d0:be:54:b7:ba:0d:c4:10:fa:1f:3c:9c:42: 71:1b:3e:6a:13:3c:4b:61:5d:6a:40:95:41:e3:24: 50:34:77:7a:96:2b:ce:eb:00:9c:17:f0:c2:00:03: 29:49:9a:b8:ed:ab:66:62:7a:c4:32:52:5f:3e:43: a9:e6:e6:2f:65:7d:70:b9:a0:96:08:f1:03:31:d9: 7f:8f:f9:d5:3b:00:52:b6:c3:dd:f9:c2:ee:c5:20: cf:7c:8f:6f:2a:79:0f:5c:8b:7a:b7:37:22:b1:62: d1:db:57:ab:d0:9e:55:43:95:7c:aa:a7:44:1c:c2: 80:41:c0:2e:c7:e5:29:4f:9c:a0:ca:10:07:80:34: c2:0b:b5:37:b2:ff:0e:fd:25:dd:87:53:f2:c7:95: e6:ea:42:f2:30:cb:2e:1e:08:61:04:2e:62:ed:b8: 34:21:5e:dc:32:e7:fb:00:91:c1:d6:27:ca:2e:2b: 56:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:FE:CF:E8:3B:68:AC:F5:D5:A3:A0:11:65:91:21:EF:E1:87:26:47 X509v3 Authority Key Identifier: keyid:0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:aa:04:1d:58:e2:3b:f5:f6:fa:d3:68:26:67:9a:f1:74:7d: 4f:47:7e:5f:42:99:75:26:3a:a3:10:9e:0d:98:67:b2:56:2e: d1:35:f2:55:24:df:58:84:fc:83:11:1f:5c:8d:10:b3:8d:a8: 66:4a:2a:6d:50:4f:87:7d:10:8b:1e:2e:0b:e1:0f:12:e4:4b: 70:2d:e0:8b:61:4d:c8:1a:8c:68:ab:78:a2:57:d3:18:9c:16: 66:0a:6d:ba:d9:34:a4:bc:c9:86:d5:07:53:e1:ca:6e:e6:4d: 6a:f9:5f:38:20:62:27:8c:22:f0:f0:fd:cd:4f:31:9c:51:eb: 46:fa:c5:03:0e:0b:93:d5:69:63:34:10:36:39:b4:68:fe:f9: 89:86:95:70:f7:c1:ee:2c:21:79:6b:75:f6:68:1f:de:b3:58: ec:64:fa:45:d3:df:4b:1c:f7:66:58:3b:04:1b:bb:64:c0:bd: 49:ca:73:38:5a:bf:ef:0e:82:a8:fa:fd:3f:85:db:29:09:e5: ae:2e:63:c1:e9:ba:35:8a:fb:eb:b4:5c:6f:33:9f:6b:6f:b9: 84:47:62:6b:3f:72:9b:99:bf:c0:be:92:32:44:51:c2:22:f9: dc:ff:74:90:a3:58:34:84:7a:f3:a1:8a:c8:b6:fc:bf:91:32: e6:e5:db:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSAZcrdXMYuyKvOr9MN8RqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZGE1Yzg3NDM1NGQ4MzgyNmU0M2MyNTM1Yjc2ZTIwZDVi NjFiMDUwHhcNMjUxMjEyMTAwMDUyWhcNMjUxMjEzMTAwMDUyWjAzMTEwLwYDVQQD EyhhZWZlY2ZlODNiNjhhY2Y1ZDVhM2EwMTE2NTkxMjFlZmUxODcyNjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaNbhrUizTb0hLlmJPnrsQrzRbc3 iUaAUK1KXPFTtGGEaw3Dx+ONzUdX0KjkiIFJN6WIdWfwT2W9L0FAxJ64MqQaYAeI LFV+w6PIS9C+VLe6DcQQ+h88nEJxGz5qEzxLYV1qQJVB4yRQNHd6livO6wCcF/DC AAMpSZq47atmYnrEMlJfPkOp5uYvZX1wuaCWCPEDMdl/j/nVOwBStsPd+cLuxSDP fI9vKnkPXIt6tzcisWLR21er0J5VQ5V8qqdEHMKAQcAux+UpT5ygyhAHgDTCC7U3 sv8O/SXdh1Pyx5Xm6kLyMMsuHghhBC5i7bg0IV7cMuf7AJHB1ifKLitWgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK7+z+g7aKz11aOgEWWRIe/hhyZHMB8GA1UdIwQY MBaAFAzaXIdDVNg4JuQ8JTW3biDVthsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE5wY2gwTlUyRGdtNUR3bE5iZHVJTlcyR3dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi85MjMzMmYtMDNlMC00MTE2LWI2ZjMt YzgyZjQyNGI2ZDBkLzEvRE5wY2gwTlUyRGdtNUR3bE5iZHVJTlcyR3dVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi85MjMzMmYtMDNlMC00MTE2LWI2ZjMtYzgyZjQyNGI2ZDBk LzEvRE5wY2gwTlUyRGdtNUR3bE5iZHVJTlcyR3dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMKoEHVji O/X2+tNoJmea8XR9T0d+X0KZdSY6oxCeDZhnslYu0TXyVSTfWIT8gxEfXI0Qs42o ZkoqbVBPh30Qix4uC+EPEuRLcC3gi2FNyBqMaKt4olfTGJwWZgptutk0pLzJhtUH U+HKbuZNavlfOCBiJ4wi8PD9zU8xnFHrRvrFAw4Lk9VpYzQQNjm0aP75iYaVcPfB 7iwheWt19mgf3rNY7GT6RdPfSxz3Zlg7BBu7ZMC9ScpzOFq/7w6CqPr9P4XbKQnl ri5jwem6NYr767RcbzOfa2+5hEdiaz9ym5m/wL6SMkRRwiL53P90kKNYNIR686GK yLb8v5Ey5uXbkA== -----END CERTIFICATE-----Generated at Fri Dec 12 16:51:58 2025 by rpki-client