This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.mft File: DpgibNz3QdzIpCplmos94hmBiPk.mft (raw, json) Hash identifier: mxTTM2CBt7sFLa6WhXTy3ey734ZCTDhvtcZiLcYbORg= Subject key identifier: 17:CB:6D:6F:8C:A6:E6:FF:91:64:F4:11:99:87:29:23:CE:E5:7F:1B Authority key identifier: 0E:98:22:6C:DC:F7:41:DC:C8:A4:2A:65:9A:8B:3D:E2:19:81:88:F9 Certificate issuer: /CN=0e98226cdcf741dcc8a42a659a8b3de2198188f9 Certificate serial: 019B35A0513B407161F5766E2B232271A106 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DpgibNz3QdzIpCplmos94hmBiPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.mft Manifest number: 1488 Signing time: Fri 19 Dec 2025 08:00:57 +0000 Manifest this update: Fri 19 Dec 2025 08:00:57 +0000 Manifest next update: Sat 20 Dec 2025 08:00:57 +0000 Files and hashes: 1: C9YabYyYTwF76KS0OdJKS7svqe8.roa (hash: OaSH1c1TCgLCLOEvTQ5fN3rE7i93/Zx2eO7IyYukR98=) 2: DpgibNz3QdzIpCplmos94hmBiPk.crl (hash: AmEQlZox/iBkM+hzQdBiAvgM+Bzh4V9OZFaqQyRD9Ac=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.crl rsync://rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.mft rsync://rpki.ripe.net/repository/DEFAULT/DpgibNz3QdzIpCplmos94hmBiPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:51:3b:40:71:61:f5:76:6e:2b:23:22:71:a1:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e98226cdcf741dcc8a42a659a8b3de2198188f9 Validity Not Before: Dec 19 08:00:57 2025 GMT Not After : Dec 20 08:00:57 2025 GMT Subject: CN=17cb6d6f8ca6e6ff9164f41199872923cee57f1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:45:a0:8f:1b:11:c7:d8:9d:4f:9e:46:d2:8e: df:1b:b9:2d:cf:aa:55:33:f5:3e:83:be:51:a5:3f: d5:6f:c8:66:ad:7c:7e:24:ee:00:65:1f:c9:31:30: f2:dc:cd:e6:55:e7:ac:2b:2f:0c:f0:a3:55:d6:a9: b5:f6:5e:70:df:26:20:bb:c5:e8:69:73:4b:80:a9: f3:6f:2e:4f:8b:0e:10:59:a0:ba:6b:d7:ea:5c:0c: 08:75:d9:e1:2b:e2:7a:d5:b0:7c:21:bb:44:15:4e: cb:f1:67:26:e9:6c:8d:09:50:ad:b0:ca:74:1e:d2: bb:dd:15:96:5a:4e:c1:34:d2:39:45:98:56:37:c1: a2:11:18:11:70:cb:21:d1:5f:3c:2c:90:67:cc:5c: 35:db:a7:86:c1:00:93:00:37:52:4e:7a:0a:54:e8: 96:fc:37:59:e9:53:60:32:cd:32:c3:e4:c4:54:f1: f2:3d:64:af:cc:ac:db:86:9b:28:28:05:6d:1c:db: ba:ca:e5:3f:a3:52:ad:5c:06:4e:05:1c:94:fb:0c: 6a:d8:ac:48:50:fa:6d:7a:90:51:da:9c:c2:4a:8c: f5:55:6a:e5:4a:bb:98:36:60:43:12:6c:eb:91:0d: f7:9d:48:b5:b4:23:6f:b9:1f:5a:ac:bc:4a:f6:3b: f7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:CB:6D:6F:8C:A6:E6:FF:91:64:F4:11:99:87:29:23:CE:E5:7F:1B X509v3 Authority Key Identifier: keyid:0E:98:22:6C:DC:F7:41:DC:C8:A4:2A:65:9A:8B:3D:E2:19:81:88:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpgibNz3QdzIpCplmos94hmBiPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:90:d8:ed:05:3b:9a:66:b9:59:29:3a:7e:84:92:b3:56:5b: cf:0d:7a:c8:82:fb:07:65:d1:75:66:31:f9:47:23:4e:78:41: 86:fb:8b:3a:42:58:00:a1:63:bd:78:07:51:b3:65:aa:4d:b1: d1:19:05:b0:c5:0d:4e:89:82:08:80:ca:05:0b:5d:d4:af:87: 63:31:fb:87:5a:ca:84:51:3c:0d:5c:07:54:33:08:2a:7d:82: 0a:45:93:d4:9c:98:69:0b:fb:65:9b:43:8e:41:70:85:ee:2e: 3e:6e:d8:75:ba:1e:a8:7d:d1:7a:52:8f:0e:62:76:61:23:73: ed:12:ef:04:01:29:df:76:be:53:e8:49:10:b3:d6:6a:0f:10: 33:f6:5c:34:e7:bb:11:62:5d:1b:58:9c:5f:3f:99:5f:51:da: cf:1e:76:00:a1:76:43:74:6e:97:be:d1:64:54:34:7f:36:6f: b2:1f:dc:20:4f:c5:67:5c:1b:b2:65:6b:ac:ab:60:e6:41:ba: 65:cd:b5:a4:e8:a4:30:fe:bf:88:63:a0:8c:00:b2:f2:f0:d2: 28:a8:d2:c5:09:15:d9:68:6e:0f:c2:8f:5a:83:a4:2d:9a:ea: 9c:36:e7:94:a4:51:b3:6d:96:2f:f3:ec:2a:c3:3c:66:54:98: 68:fb:6a:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oFE7QHFh9XZuKyMicaEGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlOTgyMjZjZGNmNzQxZGNjOGE0MmE2NTlhOGIzZGUyMTk4 MTg4ZjkwHhcNMjUxMjE5MDgwMDU3WhcNMjUxMjIwMDgwMDU3WjAzMTEwLwYDVQQD EygxN2NiNmQ2ZjhjYTZlNmZmOTE2NGY0MTE5OTg3MjkyM2NlZTU3ZjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0WgjxsRx9idT55G0o7fG7ktz6pV M/U+g75RpT/Vb8hmrXx+JO4AZR/JMTDy3M3mVeesKy8M8KNV1qm19l5w3yYgu8Xo aXNLgKnzby5Piw4QWaC6a9fqXAwIddnhK+J61bB8IbtEFU7L8Wcm6WyNCVCtsMp0 HtK73RWWWk7BNNI5RZhWN8GiERgRcMsh0V88LJBnzFw126eGwQCTADdSTnoKVOiW /DdZ6VNgMs0yw+TEVPHyPWSvzKzbhpsoKAVtHNu6yuU/o1KtXAZOBRyU+wxq2KxI UPptepBR2pzCSoz1VWrlSruYNmBDEmzrkQ33nUi1tCNvuR9arLxK9jv3BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBfLbW+Mpub/kWT0EZmHKSPO5X8bMB8GA1UdIwQY MBaAFA6YImzc90HcyKQqZZqLPeIZgYj5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHBnaWJOejNRZHpJcENwbG1vczk0aG1CaVBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS83OTAyNGQtNWI0NS00ZWY0LWI1Mjgt ZTljN2I1NTA2ZTU1LzEvRHBnaWJOejNRZHpJcENwbG1vczk0aG1CaVBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS83OTAyNGQtNWI0NS00ZWY0LWI1MjgtZTljN2I1NTA2ZTU1 LzEvRHBnaWJOejNRZHpJcENwbG1vczk0aG1CaVBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlpDY7QU7 mma5WSk6foSSs1Zbzw16yIL7B2XRdWYx+UcjTnhBhvuLOkJYAKFjvXgHUbNlqk2x 0RkFsMUNTomCCIDKBQtd1K+HYzH7h1rKhFE8DVwHVDMIKn2CCkWT1JyYaQv7ZZtD jkFwhe4uPm7YdboeqH3RelKPDmJ2YSNz7RLvBAEp33a+U+hJELPWag8QM/ZcNOe7 EWJdG1icXz+ZX1Hazx52AKF2Q3Rul77RZFQ0fzZvsh/cIE/FZ1wbsmVrrKtg5kG6 Zc21pOikMP6/iGOgjACy8vDSKKjSxQkV2WhuD8KPWoOkLZrqnDbnlKRRs22WL/Ps KsM8ZlSYaPtqxg== -----END CERTIFICATE-----Generated at Fri Dec 19 14:53:09 2025 by rpki-client