This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.mft File: DspuBsaCS9G4ERg-Dhf6GUltJhw.mft (raw, json) Hash identifier: 6aK7TiwQmqzWfi+b9/C8bi69v8wY067prl52oVQmsmo= Subject key identifier: FF:57:70:DC:A2:7F:02:21:8C:66:5D:50:EA:00:C7:23:A4:79:FC:36 Authority key identifier: 0E:CA:6E:06:C6:82:4B:D1:B8:11:18:3E:0E:17:FA:19:49:6D:26:1C Certificate issuer: /CN=0eca6e06c6824bd1b811183e0e17fa19496d261c Certificate serial: 019B3AFDBEBE8F8AC12C73631CBB6983A399 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DspuBsaCS9G4ERg-Dhf6GUltJhw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.mft Manifest number: 0F7A Signing time: Sat 20 Dec 2025 09:01:06 +0000 Manifest this update: Sat 20 Dec 2025 09:01:06 +0000 Manifest next update: Sun 21 Dec 2025 09:01:06 +0000 Files and hashes: 1: DspuBsaCS9G4ERg-Dhf6GUltJhw.crl (hash: cB8RhM51gSfTk9OnpYqNbu8DEFiYRQjtfs1aytLy5Wo=) 2: NfxOkyabvxkDjJyXjcgpTv_relY.roa (hash: gFCHNUeKHs4QF0iUA6YO68TkrbI25pBG+SYBY+DhWPg=) 3: x5OcpBtDjdmsNegcpqKRcYGfe4I.roa (hash: tztbQVf1Csx2bxGYr7VD6e2RtMD/c7biQ+Jk1Ftm9xk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.mft rsync://rpki.ripe.net/repository/DEFAULT/DspuBsaCS9G4ERg-Dhf6GUltJhw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:be:be:8f:8a:c1:2c:73:63:1c:bb:69:83:a3:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0eca6e06c6824bd1b811183e0e17fa19496d261c Validity Not Before: Dec 20 09:01:06 2025 GMT Not After : Dec 21 09:01:06 2025 GMT Subject: CN=ff5770dca27f02218c665d50ea00c723a479fc36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:67:c5:45:6a:05:0d:03:de:81:f2:42:b5:08: 32:11:75:18:4e:18:78:13:34:40:2d:a1:65:af:8a: ac:3d:e0:0f:64:db:50:40:eb:38:0c:d5:cb:a3:3b: a1:7a:0c:18:33:36:14:1f:cb:aa:6b:c0:d6:a2:01: 85:f8:e8:18:f0:40:60:8a:bb:ef:f8:5d:f4:6c:cc: d1:a7:0b:a3:19:43:0b:4b:38:d5:85:0e:8c:00:43: 1a:93:e3:b4:2e:7b:fd:d0:27:f9:81:f7:e3:8d:e9: f5:26:00:4c:6a:5c:41:fc:b1:22:43:c3:dc:39:2f: c9:78:6e:0b:07:1b:02:2f:6e:da:5b:f3:21:fc:26: f8:d5:35:a9:20:1b:c2:a8:0d:c5:a2:e2:03:6a:f4: 55:71:3d:1f:ca:77:07:5a:c3:bb:ef:d1:42:c2:ce: 98:7b:d1:47:d0:30:b5:cb:2a:e4:be:6d:aa:98:69: 2b:af:03:cd:21:a7:47:2a:f5:15:85:fa:71:5b:5f: 54:81:c4:41:34:74:bc:f2:9b:5e:8a:5b:2c:46:02: 3a:b0:83:9c:28:e2:22:cb:64:68:57:00:f2:4e:3a: bc:00:48:dc:fd:47:56:15:9b:fe:da:82:44:f2:d5: bf:03:9c:68:b0:7d:f0:69:da:f6:3b:68:24:6d:32: c2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:57:70:DC:A2:7F:02:21:8C:66:5D:50:EA:00:C7:23:A4:79:FC:36 X509v3 Authority Key Identifier: keyid:0E:CA:6E:06:C6:82:4B:D1:B8:11:18:3E:0E:17:FA:19:49:6D:26:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DspuBsaCS9G4ERg-Dhf6GUltJhw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:61:cb:c5:dc:3e:e4:06:27:23:cf:8e:11:89:4d:fb:53:2b: 3f:56:5a:62:20:8a:b4:98:1a:da:f6:d8:8e:84:17:99:27:c3: 3a:05:c9:ee:0f:bb:79:81:b5:c6:15:6b:59:2a:04:86:55:fd: 6f:2d:ae:55:23:b5:79:4b:f8:4e:0d:cd:23:f1:cd:dc:87:f1: 12:5f:e4:08:4f:3d:5c:b3:73:f2:84:bf:6e:a1:23:e0:04:82: 9e:4d:ba:91:40:44:91:62:ad:6a:9d:9e:b6:30:c0:72:2d:22: 54:ac:3f:28:03:71:db:00:d1:d2:00:8f:be:1f:1f:8c:af:72: b4:8a:e5:a0:1e:4b:53:9b:6d:9c:a9:34:1e:01:4c:3e:bc:4a: cd:cb:b6:6f:69:c5:55:b0:48:5b:02:9e:87:3e:a2:d8:0f:d2: 3e:50:42:d9:34:97:bc:7b:0d:6c:17:97:71:da:e8:65:e5:6e: 61:7e:e8:d8:27:9b:28:a1:a2:88:c8:1d:cc:61:ff:f1:ee:79: 85:03:d8:97:e6:d7:e8:02:1c:41:b2:c6:c7:a6:4b:7c:2b:2b: 6f:76:5e:59:06:79:d3:9b:ef:d8:7b:aa:0e:df:7d:0d:49:26: 6c:87:52:77:ce:7f:32:5c:84:19:f2:73:b4:28:91:78:4c:4e: 7e:7f:e0:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/b6+j4rBLHNjHLtpg6OZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlY2E2ZTA2YzY4MjRiZDFiODExMTgzZTBlMTdmYTE5NDk2 ZDI2MWMwHhcNMjUxMjIwMDkwMTA2WhcNMjUxMjIxMDkwMTA2WjAzMTEwLwYDVQQD EyhmZjU3NzBkY2EyN2YwMjIxOGM2NjVkNTBlYTAwYzcyM2E0NzlmYzM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGfFRWoFDQPegfJCtQgyEXUYThh4 EzRALaFlr4qsPeAPZNtQQOs4DNXLozuhegwYMzYUH8uqa8DWogGF+OgY8EBgirvv +F30bMzRpwujGUMLSzjVhQ6MAEMak+O0Lnv90Cf5gffjjen1JgBMalxB/LEiQ8Pc OS/JeG4LBxsCL27aW/Mh/Cb41TWpIBvCqA3FouIDavRVcT0fyncHWsO779FCws6Y e9FH0DC1yyrkvm2qmGkrrwPNIadHKvUVhfpxW19UgcRBNHS88pteilssRgI6sIOc KOIiy2RoVwDyTjq8AEjc/UdWFZv+2oJE8tW/A5xosH3wadr2O2gkbTLC9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP9XcNyifwIhjGZdUOoAxyOkefw2MB8GA1UdIwQY MBaAFA7KbgbGgkvRuBEYPg4X+hlJbSYcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHNwdUJzYUNTOUc0RVJnLURoZjZHVWx0Smh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy85MTM3ZmYtMjA2My00Njc1LThkZTct Y2ZkM2ZmOWZkZjdiLzEvRHNwdUJzYUNTOUc0RVJnLURoZjZHVWx0Smh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy85MTM3ZmYtMjA2My00Njc1LThkZTctY2ZkM2ZmOWZkZjdi LzEvRHNwdUJzYUNTOUc0RVJnLURoZjZHVWx0Smh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkGHLxdw+ 5AYnI8+OEYlN+1MrP1ZaYiCKtJga2vbYjoQXmSfDOgXJ7g+7eYG1xhVrWSoEhlX9 by2uVSO1eUv4Tg3NI/HN3IfxEl/kCE89XLNz8oS/bqEj4ASCnk26kUBEkWKtap2e tjDAci0iVKw/KANx2wDR0gCPvh8fjK9ytIrloB5LU5ttnKk0HgFMPrxKzcu2b2nF VbBIWwKehz6i2A/SPlBC2TSXvHsNbBeXcdroZeVuYX7o2CebKKGiiMgdzGH/8e55 hQPYl+bX6AIcQbLGx6ZLfCsrb3ZeWQZ505vv2HuqDt99DUkmbIdSd85/MlyEGfJz tCiReExOfn/gaQ== -----END CERTIFICATE-----Generated at Sat Dec 20 12:15:33 2025 by rpki-client