This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/eb8461-ab07-45c7-b9d6-d41a1a084c35/1/DpMafPLalMzUoq_OI_OS1AYdVvk.mft File: DpMafPLalMzUoq_OI_OS1AYdVvk.mft (raw, json) Hash identifier: a+wAdb7p4f6ed58NnATwhuPtkbmUNFOi4xBY6PuBi68= Subject key identifier: 69:83:7A:22:02:21:3A:B4:A1:BB:6D:DB:9A:A7:2A:2F:CF:D2:31:41 Authority key identifier: 0E:93:1A:7C:F2:DA:94:CC:D4:A2:AF:CE:23:F3:92:D4:06:1D:56:F9 Certificate issuer: /CN=0e931a7cf2da94ccd4a2afce23f392d4061d56f9 Certificate serial: 019B0F37752097740D2C7F6FA1360702BC1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DpMafPLalMzUoq_OI_OS1AYdVvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/eb8461-ab07-45c7-b9d6-d41a1a084c35/1/DpMafPLalMzUoq_OI_OS1AYdVvk.mft Manifest number: 1772 Signing time: Thu 11 Dec 2025 21:00:51 +0000 Manifest this update: Thu 11 Dec 2025 21:00:51 +0000 Manifest next update: Fri 12 Dec 2025 21:00:51 +0000 Files and hashes: 1: DpMafPLalMzUoq_OI_OS1AYdVvk.crl (hash: +8PrSKvcKrQ31yQtmFlVQs0XaEXegea141gOfO29WyE=) 2: zrVCLm24sPlxLqzgeyn_JvpDItw.roa (hash: /XNKRA78yIF9Dhp7x0h4gHGlf9HOKwu6T6mJ6i6aMCk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/eb8461-ab07-45c7-b9d6-d41a1a084c35/1/DpMafPLalMzUoq_OI_OS1AYdVvk.crl rsync://rpki.ripe.net/repository/DEFAULT/98/eb8461-ab07-45c7-b9d6-d41a1a084c35/1/DpMafPLalMzUoq_OI_OS1AYdVvk.mft rsync://rpki.ripe.net/repository/DEFAULT/DpMafPLalMzUoq_OI_OS1AYdVvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 21:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:75:20:97:74:0d:2c:7f:6f:a1:36:07:02:bc:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e931a7cf2da94ccd4a2afce23f392d4061d56f9 Validity Not Before: Dec 11 21:00:51 2025 GMT Not After : Dec 12 21:00:51 2025 GMT Subject: CN=69837a2202213ab4a1bb6ddb9aa72a2fcfd23141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:af:60:65:9d:ad:96:78:5f:de:5d:97:aa:75: cd:3b:83:da:1e:cb:a9:64:7b:8e:14:b5:12:df:9d: 92:f9:e0:36:59:ca:21:d5:e9:62:c8:ff:7d:a2:ab: fa:d5:f6:f3:dd:69:ca:db:4c:0b:68:c8:c5:de:73: 5c:cb:6b:19:b9:db:9c:58:a6:93:d2:6c:60:41:fe: 5d:93:00:4d:b9:c5:d6:f1:fa:96:ad:87:2f:95:80: 62:d0:13:43:55:be:e1:9c:87:92:d4:4d:88:f5:55: 7f:62:62:55:a7:0d:3d:72:08:60:62:80:2a:b3:86: 7b:fa:2a:10:02:9d:7b:98:c7:cd:3e:b0:92:a8:a8: 9e:a3:ea:2b:c3:32:b9:bd:1f:aa:5d:34:30:3d:52: 58:b1:b7:2a:09:6c:7b:60:b4:21:40:76:91:26:13: b9:d1:16:94:32:76:c1:f7:0d:d0:9e:0e:09:56:2e: c0:ab:c6:b2:72:9b:90:06:d7:3b:07:ad:b8:ad:23: ee:b6:ae:f9:98:ac:cb:70:db:7b:c1:89:4f:6b:15: 3d:2d:19:d4:0a:a2:d4:31:30:02:d0:ea:90:aa:b9: 5b:0c:25:a5:47:96:85:4e:23:65:b5:2c:0c:0d:86: 7f:bf:8f:9d:c4:ff:2e:df:ab:fc:21:a3:eb:09:06: 64:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:83:7A:22:02:21:3A:B4:A1:BB:6D:DB:9A:A7:2A:2F:CF:D2:31:41 X509v3 Authority Key Identifier: keyid:0E:93:1A:7C:F2:DA:94:CC:D4:A2:AF:CE:23:F3:92:D4:06:1D:56:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpMafPLalMzUoq_OI_OS1AYdVvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/eb8461-ab07-45c7-b9d6-d41a1a084c35/1/DpMafPLalMzUoq_OI_OS1AYdVvk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/eb8461-ab07-45c7-b9d6-d41a1a084c35/1/DpMafPLalMzUoq_OI_OS1AYdVvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e1:d1:58:24:27:0e:a0:92:f9:5f:8b:bf:9e:55:0c:6c:eb:e5: e9:e1:b4:88:09:f6:23:98:7c:48:f9:77:03:53:92:f3:5e:84: 91:12:67:8b:a4:9c:b5:30:90:a9:35:6b:e1:5c:af:65:85:55: ab:72:58:d0:2f:3c:d1:b0:2a:3d:de:e4:e3:72:cb:04:38:30: 24:2e:43:aa:c9:f1:c7:00:2a:5e:a1:58:91:e6:a3:81:38:85: fb:f3:49:c1:bd:54:14:a9:b3:11:a9:a1:19:29:5b:45:52:68: 42:f4:65:19:a6:da:c3:45:c2:67:0a:fa:d1:df:dc:56:9a:2b: f0:97:50:7a:a6:98:08:b6:79:6d:2b:f6:93:bc:dd:d1:09:f4: 37:03:9a:c5:e3:4d:be:88:64:4f:1a:87:5a:a4:db:dd:0f:37: 4f:3f:49:59:83:92:07:74:ab:11:39:ef:20:22:cd:fc:dc:0d: 4c:d1:dc:a5:0e:fa:b9:ba:e7:26:37:1a:81:b5:f4:a7:48:0f: 9a:59:26:b5:17:31:3d:e3:95:37:51:26:70:63:b6:b8:aa:a6: a5:8d:a6:a8:8d:11:8c:7d:43:e6:47:68:bf:2a:d6:ff:a3:62: a2:49:21:05:d2:49:7e:d2:06:b9:40:d0:8a:9f:01:cf:b5:ad: e5:ad:4a:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN3Ugl3QNLH9voTYHArwaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlOTMxYTdjZjJkYTk0Y2NkNGEyYWZjZTIzZjM5MmQ0MDYx ZDU2ZjkwHhcNMjUxMjExMjEwMDUxWhcNMjUxMjEyMjEwMDUxWjAzMTEwLwYDVQQD Eyg2OTgzN2EyMjAyMjEzYWI0YTFiYjZkZGI5YWE3MmEyZmNmZDIzMTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj69gZZ2tlnhf3l2XqnXNO4PaHsup ZHuOFLUS352S+eA2Wcoh1eliyP99oqv61fbz3WnK20wLaMjF3nNcy2sZuducWKaT 0mxgQf5dkwBNucXW8fqWrYcvlYBi0BNDVb7hnIeS1E2I9VV/YmJVpw09cghgYoAq s4Z7+ioQAp17mMfNPrCSqKieo+orwzK5vR+qXTQwPVJYsbcqCWx7YLQhQHaRJhO5 0RaUMnbB9w3Qng4JVi7Aq8aycpuQBtc7B624rSPutq75mKzLcNt7wYlPaxU9LRnU CqLUMTAC0OqQqrlbDCWlR5aFTiNltSwMDYZ/v4+dxP8u36v8IaPrCQZkqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGmDeiICITq0obtt25qnKi/P0jFBMB8GA1UdIwQY MBaAFA6TGnzy2pTM1KKvziPzktQGHVb5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHBNYWZQTGFsTXpVb3FfT0lfT1MxQVlkVnZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9lYjg0NjEtYWIwNy00NWM3LWI5ZDYt ZDQxYTFhMDg0YzM1LzEvRHBNYWZQTGFsTXpVb3FfT0lfT1MxQVlkVnZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9lYjg0NjEtYWIwNy00NWM3LWI5ZDYtZDQxYTFhMDg0YzM1 LzEvRHBNYWZQTGFsTXpVb3FfT0lfT1MxQVlkVnZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4dFYJCcO oJL5X4u/nlUMbOvl6eG0iAn2I5h8SPl3A1OS816EkRJni6SctTCQqTVr4VyvZYVV q3JY0C880bAqPd7k43LLBDgwJC5DqsnxxwAqXqFYkeajgTiF+/NJwb1UFKmzEamh GSlbRVJoQvRlGabaw0XCZwr60d/cVpor8JdQeqaYCLZ5bSv2k7zd0Qn0NwOaxeNN vohkTxqHWqTb3Q83Tz9JWYOSB3SrETnvICLN/NwNTNHcpQ76ubrnJjcagbX0p0gP mlkmtRcxPeOVN1EmcGO2uKqmpY2mqI0RjH1D5kdovyrW/6NiokkhBdJJftIGuUDQ ip8Bz7Wt5a1KqQ== -----END CERTIFICATE-----Generated at Fri Dec 12 05:20:20 2025 by rpki-client