This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/DWE_6YRKY0OerooaoMPKjGC0XUU.mft File: DWE_6YRKY0OerooaoMPKjGC0XUU.mft (raw, json) Hash identifier: 8DV/tfaNebV3Z1ETOkPTC2yD6YvNiB/N9DaviIq2TCk= Subject key identifier: 7E:1F:7F:34:DB:22:6F:A8:3D:91:C3:41:AE:1D:39:57:6B:77:CA:C0 Authority key identifier: 0D:61:3F:E9:84:4A:63:43:9E:AE:8A:1A:A0:C3:CA:8C:60:B4:5D:45 Certificate issuer: /CN=0d613fe9844a63439eae8a1aa0c3ca8c60b45d45 Certificate serial: 019B36B44E0BC75AA46F27F9D81BE2CD27BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWE_6YRKY0OerooaoMPKjGC0XUU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/DWE_6YRKY0OerooaoMPKjGC0XUU.mft Manifest number: 1785 Signing time: Fri 19 Dec 2025 13:02:24 +0000 Manifest this update: Fri 19 Dec 2025 13:02:24 +0000 Manifest next update: Sat 20 Dec 2025 13:02:24 +0000 Files and hashes: 1: DWE_6YRKY0OerooaoMPKjGC0XUU.crl (hash: LJ3GHXUjogwEhMPM3sCOK8a5Uz0oJ7CB9ts/4Twv87E=) 2: cAJwzXdTlj0l08klToV51g3reQE.roa (hash: MNtWLrHXizLnpt8hRaJw3axv6PAJCrUS/ztw7WczF4E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/DWE_6YRKY0OerooaoMPKjGC0XUU.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/DWE_6YRKY0OerooaoMPKjGC0XUU.mft rsync://rpki.ripe.net/repository/DEFAULT/DWE_6YRKY0OerooaoMPKjGC0XUU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:02:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b4:4e:0b:c7:5a:a4:6f:27:f9:d8:1b:e2:cd:27:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d613fe9844a63439eae8a1aa0c3ca8c60b45d45 Validity Not Before: Dec 19 13:02:24 2025 GMT Not After : Dec 20 13:02:24 2025 GMT Subject: CN=7e1f7f34db226fa83d91c341ae1d39576b77cac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:6e:98:dd:6b:2d:6b:d8:be:62:10:f8:4c:af: 57:92:72:7d:cd:0f:db:15:de:ea:71:37:bc:c5:2d: 48:35:26:34:d9:f4:36:f9:da:df:5f:bc:8d:a2:fe: 3a:a3:e5:12:5d:39:db:6f:c1:08:4f:63:f9:99:86: c6:4f:c8:1e:17:ff:ef:1d:97:76:70:b9:56:05:a7: af:f3:a5:8d:45:a0:84:94:fa:dd:af:cc:52:9d:30: fa:69:6d:95:21:9c:51:fc:12:36:72:af:72:40:32: 13:56:b6:10:a0:33:14:00:88:76:6f:67:17:09:5a: cb:c4:07:ad:a5:77:6d:e4:11:23:56:da:b7:d9:80: c4:ed:55:96:a9:8f:85:77:1e:a3:45:1b:d3:b9:dc: 51:f9:8d:85:cd:4c:23:c0:56:b5:8b:e5:a0:f1:60: 99:19:4e:5e:78:fc:93:39:8b:13:57:8f:a9:f4:a3: 7f:a7:b5:d0:4c:6c:e4:d4:48:a4:77:64:60:27:6a: 2e:c4:91:81:a1:aa:2a:df:c8:38:ea:14:ea:8f:7d: 51:f8:27:ed:b0:3f:71:2e:21:9e:f7:17:a2:fc:d6: 11:a7:b1:79:2b:8f:c0:ed:21:ba:38:22:6e:c7:94: 46:7f:af:3e:72:8d:45:e2:92:bf:34:3d:7e:18:ae: 56:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:1F:7F:34:DB:22:6F:A8:3D:91:C3:41:AE:1D:39:57:6B:77:CA:C0 X509v3 Authority Key Identifier: keyid:0D:61:3F:E9:84:4A:63:43:9E:AE:8A:1A:A0:C3:CA:8C:60:B4:5D:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWE_6YRKY0OerooaoMPKjGC0XUU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/DWE_6YRKY0OerooaoMPKjGC0XUU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/DWE_6YRKY0OerooaoMPKjGC0XUU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:59:d8:68:84:5a:1a:9f:13:f5:d8:07:0a:6e:cb:92:43:e7: b6:40:08:50:ea:ec:85:72:87:cb:58:bf:c9:df:71:dd:07:10: c8:2c:d4:ae:4c:c2:02:27:de:4d:f1:76:78:46:e3:87:b4:33: 89:91:68:1d:0d:6b:29:38:14:91:b0:b8:cf:d2:dd:15:c5:2a: 8a:24:f1:d9:6b:03:4c:6e:0d:84:5d:c1:3b:db:12:41:59:3e: f2:96:81:66:78:0e:25:4f:0a:20:86:58:62:cd:4e:5b:ba:27: b2:d4:b2:e6:ef:20:c6:8e:2f:a9:09:60:8f:5e:35:fa:e0:d3: 8c:2a:6f:33:cc:7c:d9:20:53:6b:0a:84:fa:40:5f:1a:99:47: 57:3c:1e:dd:7a:18:0d:06:73:bb:75:cc:be:ba:7b:3d:3f:4f: dc:72:3b:f3:f8:f5:b2:7a:8f:a7:fe:bb:dd:34:e2:0c:26:d7: 0c:b8:44:3a:28:cf:a7:8f:d3:e8:0b:39:2f:1b:f9:45:f1:12: ed:e4:5c:04:96:6f:8a:c8:09:e0:69:ec:b4:e8:dc:0a:eb:e6: 9c:a9:0c:e5:7c:eb:5a:0d:62:32:83:cb:00:64:1b:34:2e:8a: 19:3c:21:9f:7d:38:96:23:a7:fe:96:6f:f2:aa:d4:9a:30:f8: 46:02:b1:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2tE4Lx1qkbyf52BvizSe6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNjEzZmU5ODQ0YTYzNDM5ZWFlOGExYWEwYzNjYThjNjBi NDVkNDUwHhcNMjUxMjE5MTMwMjI0WhcNMjUxMjIwMTMwMjI0WjAzMTEwLwYDVQQD Eyg3ZTFmN2YzNGRiMjI2ZmE4M2Q5MWMzNDFhZTFkMzk1NzZiNzdjYWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6G6Y3Wsta9i+YhD4TK9XknJ9zQ/b Fd7qcTe8xS1INSY02fQ2+drfX7yNov46o+USXTnbb8EIT2P5mYbGT8geF//vHZd2 cLlWBaev86WNRaCElPrdr8xSnTD6aW2VIZxR/BI2cq9yQDITVrYQoDMUAIh2b2cX CVrLxAetpXdt5BEjVtq32YDE7VWWqY+Fdx6jRRvTudxR+Y2FzUwjwFa1i+Wg8WCZ GU5eePyTOYsTV4+p9KN/p7XQTGzk1Eikd2RgJ2ouxJGBoaoq38g46hTqj31R+Cft sD9xLiGe9xei/NYRp7F5K4/A7SG6OCJux5RGf68+co1F4pK/ND1+GK5WSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH4ffzTbIm+oPZHDQa4dOVdrd8rAMB8GA1UdIwQY MBaAFA1hP+mESmNDnq6KGqDDyoxgtF1FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFdFXzZZUktZME9lcm9vYW9NUEtqR0MwWFVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8zYzk4NzgtZmMyZi00MGM2LWI0ODIt NGQ3ZjRjYmE3ODY3LzEvRFdFXzZZUktZME9lcm9vYW9NUEtqR0MwWFVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy8zYzk4NzgtZmMyZi00MGM2LWI0ODItNGQ3ZjRjYmE3ODY3 LzEvRFdFXzZZUktZME9lcm9vYW9NUEtqR0MwWFVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD1nYaIRa Gp8T9dgHCm7LkkPntkAIUOrshXKHy1i/yd9x3QcQyCzUrkzCAifeTfF2eEbjh7Qz iZFoHQ1rKTgUkbC4z9LdFcUqiiTx2WsDTG4NhF3BO9sSQVk+8paBZngOJU8KIIZY Ys1OW7onstSy5u8gxo4vqQlgj141+uDTjCpvM8x82SBTawqE+kBfGplHVzwe3XoY DQZzu3XMvrp7PT9P3HI78/j1snqPp/673TTiDCbXDLhEOijPp4/T6As5Lxv5RfES 7eRcBJZvisgJ4GnstOjcCuvmnKkM5XzrWg1iMoPLAGQbNC6KGTwhn304liOn/pZv 8qrUmjD4RgKxnQ== -----END CERTIFICATE-----Generated at Fri Dec 19 22:53:08 2025 by rpki-client