This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.mft File: dvkMwSPQ0gRp05xsNFXzHqYSP04.mft (raw, json) Hash identifier: ZZoiD7DGdruSmx/tEC4KIm4SnsMRQp8WKJuKw2iTrhM= Subject key identifier: 19:FC:5F:C8:AD:3E:45:A2:54:B1:C4:E7:A7:57:4D:2A:F1:40:76:4F Authority key identifier: 76:F9:0C:C1:23:D0:D2:04:69:D3:9C:6C:34:55:F3:1E:A6:12:3F:4E Certificate issuer: /CN=76f90cc123d0d20469d39c6c3455f31ea6123f4e Certificate serial: 019B0E254ECE58D10B2B5D6405A8E8E3AB49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dvkMwSPQ0gRp05xsNFXzHqYSP04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.mft Manifest number: 176F Signing time: Thu 11 Dec 2025 16:01:24 +0000 Manifest this update: Thu 11 Dec 2025 16:01:24 +0000 Manifest next update: Fri 12 Dec 2025 16:01:24 +0000 Files and hashes: 1: dvkMwSPQ0gRp05xsNFXzHqYSP04.crl (hash: JqM18LBdE0mGh5PmPeN7owU8jD6+LRmP/aFDTTKE5Zo=) 2: u3lxxc1lkavM0xc30bqZfpWxvHo.roa (hash: UHLRAbtjmSCDadx2fBrU+RDEoeooREQATwB2er11mzE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.mft rsync://rpki.ripe.net/repository/DEFAULT/dvkMwSPQ0gRp05xsNFXzHqYSP04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:25:4e:ce:58:d1:0b:2b:5d:64:05:a8:e8:e3:ab:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76f90cc123d0d20469d39c6c3455f31ea6123f4e Validity Not Before: Dec 11 16:01:24 2025 GMT Not After : Dec 12 16:01:24 2025 GMT Subject: CN=19fc5fc8ad3e45a254b1c4e7a7574d2af140764f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cf:38:57:dd:9d:1e:91:c0:fd:d0:66:3d:e7: b5:ae:89:f2:5e:7b:7a:ff:b7:7c:06:fb:f8:67:3e: 56:2c:67:0a:d4:58:8e:2c:22:89:d3:d6:c6:e7:48: 28:db:47:6f:8a:7d:ee:7f:46:3b:33:0c:81:ab:e8: e9:26:bb:97:3b:69:68:a2:fd:be:67:fd:f9:67:e1: 14:a2:0b:84:c8:23:12:a5:da:41:b8:35:3f:01:91: 33:e7:cd:ad:0d:1e:70:02:24:1d:07:49:cc:6c:82: 43:95:6b:9e:74:8f:f1:e4:9b:62:19:ae:a3:38:8d: a4:00:54:fd:ff:5e:d3:f5:2d:9a:e7:65:82:b8:1e: fb:5e:c5:2e:ba:d8:0b:12:7d:2a:13:64:cb:78:9b: 3b:2e:9d:c9:b3:11:45:c4:e9:4b:52:7d:33:d3:b7: 36:1b:64:af:cd:8a:2d:a1:9c:55:e1:ee:cf:f9:eb: 0b:60:43:80:44:43:16:f0:e8:5f:84:08:5d:a5:1e: ee:ba:c5:de:00:2e:21:35:cc:cf:45:45:4f:5c:ca: cb:27:86:a9:2a:42:ab:0c:7c:fb:14:9f:49:25:e9: 3d:5c:2d:8d:e5:cd:12:45:2b:87:67:e4:03:ad:4e: 3d:42:86:f0:ea:09:5c:e8:23:10:88:6e:4c:4c:da: 87:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:FC:5F:C8:AD:3E:45:A2:54:B1:C4:E7:A7:57:4D:2A:F1:40:76:4F X509v3 Authority Key Identifier: keyid:76:F9:0C:C1:23:D0:D2:04:69:D3:9C:6C:34:55:F3:1E:A6:12:3F:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dvkMwSPQ0gRp05xsNFXzHqYSP04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:de:e4:d3:19:d0:75:bf:c8:d4:dd:dd:17:a3:89:97:bd:64: 88:cd:fa:ef:c6:e2:c1:3e:a2:2b:76:0a:33:7a:ac:cd:2a:d9: e4:b9:30:08:de:30:78:18:56:d0:42:96:d1:9b:6d:07:cf:67: d8:d1:89:c1:8d:37:df:50:c7:87:36:ba:63:cc:ed:0b:b0:32: 61:be:2a:06:f3:c6:0a:84:4b:bb:1d:a2:0f:e6:e6:56:ca:68: 82:8e:57:79:a9:07:71:1b:fb:53:d9:f8:4f:04:72:01:01:0d: 66:61:7f:e6:25:1c:23:ba:cd:b6:b9:2a:8e:57:13:4b:f0:8d: 9b:0d:7c:8d:cb:96:fc:37:f4:32:99:f4:58:cd:1a:55:e4:50: ce:a6:90:ea:89:dc:d3:ae:2f:7a:c3:c8:85:0f:e7:1e:3b:08: d3:1c:83:89:6d:5e:f6:fa:09:b9:ca:45:d7:82:a5:98:18:43: d2:c2:b9:e4:da:53:33:4a:fa:06:bc:97:37:d7:0a:54:a8:c5: bc:4c:bf:fb:76:af:e0:6d:17:80:07:a2:5d:98:11:6f:69:10: 25:a1:37:41:a6:09:8a:a2:85:68:54:b9:b1:3f:28:74:8a:2b: 68:ac:44:29:fc:7e:03:63:c1:83:7a:5d:e4:cd:8f:69:7d:8e: c6:55:dd:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJU7OWNELK11kBajo46tJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2ZjkwY2MxMjNkMGQyMDQ2OWQzOWM2YzM0NTVmMzFlYTYx MjNmNGUwHhcNMjUxMjExMTYwMTI0WhcNMjUxMjEyMTYwMTI0WjAzMTEwLwYDVQQD EygxOWZjNWZjOGFkM2U0NWEyNTRiMWM0ZTdhNzU3NGQyYWYxNDA3NjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyM84V92dHpHA/dBmPee1ronyXnt6 /7d8Bvv4Zz5WLGcK1FiOLCKJ09bG50go20dvin3uf0Y7MwyBq+jpJruXO2loov2+ Z/35Z+EUoguEyCMSpdpBuDU/AZEz582tDR5wAiQdB0nMbIJDlWuedI/x5JtiGa6j OI2kAFT9/17T9S2a52WCuB77XsUuutgLEn0qE2TLeJs7Lp3JsxFFxOlLUn0z07c2 G2SvzYotoZxV4e7P+esLYEOAREMW8OhfhAhdpR7uusXeAC4hNczPRUVPXMrLJ4ap KkKrDHz7FJ9JJek9XC2N5c0SRSuHZ+QDrU49Qobw6glc6CMQiG5MTNqH1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBn8X8itPkWiVLHE56dXTSrxQHZPMB8GA1UdIwQY MBaAFHb5DMEj0NIEadOcbDRV8x6mEj9OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHZrTXdTUFEwZ1JwMDV4c05GWHpIcVlTUDA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi84MmY5MDEtM2Y0OC00MjlhLTgzNjUt N2FmNTc0OTQxOTM2LzEvZHZrTXdTUFEwZ1JwMDV4c05GWHpIcVlTUDA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi84MmY5MDEtM2Y0OC00MjlhLTgzNjUtN2FmNTc0OTQxOTM2 LzEvZHZrTXdTUFEwZ1JwMDV4c05GWHpIcVlTUDA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAid7k0xnQ db/I1N3dF6OJl71kiM3678biwT6iK3YKM3qszSrZ5LkwCN4weBhW0EKW0ZttB89n 2NGJwY0331DHhza6Y8ztC7AyYb4qBvPGCoRLux2iD+bmVspogo5XeakHcRv7U9n4 TwRyAQENZmF/5iUcI7rNtrkqjlcTS/CNmw18jcuW/Df0Mpn0WM0aVeRQzqaQ6onc 064vesPIhQ/nHjsI0xyDiW1e9voJucpF14KlmBhD0sK55NpTM0r6BryXN9cKVKjF vEy/+3av4G0XgAeiXZgRb2kQJaE3QaYJiqKFaFS5sT8odIoraKxEKfx+A2PBg3pd 5M2PaX2OxlXdtg== -----END CERTIFICATE-----Generated at Fri Dec 12 00:59:17 2025 by rpki-client