This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft File: DaPL8eDoVupMU7WrroZZTsmTOYI.mft (raw, json) Hash identifier: 94ZilGp6uLX44r01bOlMX56dKyWL+o23nWfliMZn8tI= Subject key identifier: 5B:4B:2D:5D:B0:82:F2:4B:0B:89:FE:82:63:38:D8:73:E5:3F:C6:D9 Authority key identifier: 0D:A3:CB:F1:E0:E8:56:EA:4C:53:B5:AB:AE:86:59:4E:C9:93:39:82 Certificate issuer: /CN=0da3cbf1e0e856ea4c53b5abae86594ec9933982 Certificate serial: 019B2EFA20B2DB6B4C31B7D8E5B0A1DA7319 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DaPL8eDoVupMU7WrroZZTsmTOYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft Manifest number: 0EB2 Signing time: Thu 18 Dec 2025 01:01:42 +0000 Manifest this update: Thu 18 Dec 2025 01:01:42 +0000 Manifest next update: Fri 19 Dec 2025 01:01:42 +0000 Files and hashes: 1: DaPL8eDoVupMU7WrroZZTsmTOYI.crl (hash: x14QaH3xNfTw9pSRym0bUl5akFTu/Y48/0+KWPVcESg=) 2: MNtx-M1QVv5z_3qcN6vxhaOotfc.roa (hash: px53xNqq/MugnV+199J7ZDHhE5FdBcLFsMKgKSEziic=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.crl rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft rsync://rpki.ripe.net/repository/DEFAULT/DaPL8eDoVupMU7WrroZZTsmTOYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:20:b2:db:6b:4c:31:b7:d8:e5:b0:a1:da:73:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0da3cbf1e0e856ea4c53b5abae86594ec9933982 Validity Not Before: Dec 18 01:01:42 2025 GMT Not After : Dec 19 01:01:42 2025 GMT Subject: CN=5b4b2d5db082f24b0b89fe826338d873e53fc6d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b0:94:59:10:38:2b:91:a4:79:90:78:0e:b3: 85:c4:68:7d:55:cf:b1:e5:bf:9e:96:d5:42:14:b4: d3:12:da:df:43:e6:f5:75:9d:b3:e1:45:55:4a:e2: 39:3b:de:db:21:5b:4f:2b:b8:ce:ad:1c:96:78:96: 63:fb:b0:10:49:63:6a:7e:c9:a3:f8:2b:a6:6f:6a: 71:be:87:74:6d:28:31:82:70:88:a9:97:db:83:97: a6:0e:d8:da:65:20:d2:48:df:69:11:c2:d7:a7:be: 11:30:39:2d:1e:55:d9:8a:3c:4a:e9:e6:32:44:c5: 5f:ab:16:00:25:28:43:e4:0d:3e:36:22:aa:17:36: 5e:76:3a:61:f2:b8:5f:6e:41:ff:e1:d8:c1:7f:bc: 0c:99:e4:82:5d:40:3c:22:5b:62:61:1b:49:f1:83: d3:e9:1c:42:2f:55:95:d9:26:3b:a0:33:1f:70:70: 36:c3:61:8f:82:fa:e8:6a:cc:37:cb:3a:6a:b3:01: 5d:6f:66:90:9e:ea:ff:42:cb:a4:6f:83:e5:9c:51: 95:1e:fb:7c:b1:ad:13:4d:33:be:c3:63:a2:3a:b7: c5:f4:23:98:28:7c:16:48:7b:60:f4:d3:cd:02:87: 40:e8:6f:5d:72:33:3d:c4:f2:a6:b7:2a:a9:57:e6: 00:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:4B:2D:5D:B0:82:F2:4B:0B:89:FE:82:63:38:D8:73:E5:3F:C6:D9 X509v3 Authority Key Identifier: keyid:0D:A3:CB:F1:E0:E8:56:EA:4C:53:B5:AB:AE:86:59:4E:C9:93:39:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DaPL8eDoVupMU7WrroZZTsmTOYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:f0:93:c0:b4:84:89:85:f5:4a:f6:a1:a9:e0:49:0e:3e:e8: 73:5c:d0:0b:46:0f:2d:51:89:c6:b9:a5:d2:75:3d:60:0d:9a: ae:70:0d:4b:ac:99:2f:a3:9c:45:ad:c5:da:ed:62:57:bb:cc: c2:c9:79:a2:f9:49:ec:7c:71:a6:c1:89:60:ec:fd:ab:97:fc: 9b:6c:c4:c1:2b:b9:c8:d0:23:8b:fe:4f:63:a6:df:d4:97:e3: 24:45:a0:9a:05:d4:3a:a7:00:e0:ba:5a:d1:34:1f:14:f1:4b: f8:77:f8:3d:ef:56:de:7b:f0:a2:87:22:46:7c:23:88:17:3c: c0:d1:af:1a:e1:04:3b:c8:fa:fa:5a:0a:b4:58:82:9b:b3:72: e1:9b:ce:63:c0:c1:ef:b2:05:1a:fe:80:8b:0c:6f:a3:5e:52: e2:07:3c:0d:69:c1:e6:19:22:ba:47:f5:c8:a3:4e:da:7a:c4: 16:bd:19:43:ec:d3:48:ff:78:0e:a9:cf:1e:5b:f7:28:5e:8e: 15:ca:76:c4:00:6f:72:3e:d8:d7:50:52:f5:b5:61:e9:67:39: 02:02:af:3d:b4:43:7f:6c:47:6a:e5:68:c4:e1:64:f2:e9:f8: e7:2d:08:36:ab:39:4a:4e:39:ab:9c:49:0b:f7:d7:45:15:f7: d7:a4:1e:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+iCy22tMMbfY5bCh2nMZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYTNjYmYxZTBlODU2ZWE0YzUzYjVhYmFlODY1OTRlYzk5 MzM5ODIwHhcNMjUxMjE4MDEwMTQyWhcNMjUxMjE5MDEwMTQyWjAzMTEwLwYDVQQD Eyg1YjRiMmQ1ZGIwODJmMjRiMGI4OWZlODI2MzM4ZDg3M2U1M2ZjNmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbCUWRA4K5GkeZB4DrOFxGh9Vc+x 5b+eltVCFLTTEtrfQ+b1dZ2z4UVVSuI5O97bIVtPK7jOrRyWeJZj+7AQSWNqfsmj +Cumb2pxvod0bSgxgnCIqZfbg5emDtjaZSDSSN9pEcLXp74RMDktHlXZijxK6eYy RMVfqxYAJShD5A0+NiKqFzZedjph8rhfbkH/4djBf7wMmeSCXUA8IltiYRtJ8YPT 6RxCL1WV2SY7oDMfcHA2w2GPgvroasw3yzpqswFdb2aQnur/Qsukb4PlnFGVHvt8 sa0TTTO+w2OiOrfF9COYKHwWSHtg9NPNAodA6G9dcjM9xPKmtyqpV+YADwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFtLLV2wgvJLC4n+gmM42HPlP8bZMB8GA1UdIwQY MBaAFA2jy/Hg6FbqTFO1q66GWU7JkzmCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGFQTDhlRG9WdXBNVTdXcnJvWlpUc21UT1lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC81Mzc0MWUtOTM5Mi00ZDE5LTk5ZDIt Y2VkMjk2NTBhMjgwLzEvRGFQTDhlRG9WdXBNVTdXcnJvWlpUc21UT1lJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC81Mzc0MWUtOTM5Mi00ZDE5LTk5ZDItY2VkMjk2NTBhMjgw LzEvRGFQTDhlRG9WdXBNVTdXcnJvWlpUc21UT1lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASPCTwLSE iYX1SvahqeBJDj7oc1zQC0YPLVGJxrml0nU9YA2arnANS6yZL6OcRa3F2u1iV7vM wsl5ovlJ7HxxpsGJYOz9q5f8m2zEwSu5yNAji/5PY6bf1JfjJEWgmgXUOqcA4Lpa 0TQfFPFL+Hf4Pe9W3nvwoociRnwjiBc8wNGvGuEEO8j6+loKtFiCm7Ny4ZvOY8DB 77IFGv6Aiwxvo15S4gc8DWnB5hkiukf1yKNO2nrEFr0ZQ+zTSP94DqnPHlv3KF6O Fcp2xABvcj7Y11BS9bVh6Wc5AgKvPbRDf2xHauVoxOFk8un45y0INqs5Sk45q5xJ C/fXRRX316QeAw== -----END CERTIFICATE-----Generated at Thu Dec 18 08:03:46 2025 by rpki-client