This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft File: DWu1npe_Ox78NWnflWxF5HKEmGE.mft (raw, json) Hash identifier: Eh9j/yfInXEJrE/a6NDYxZK47WkXZ9O+O5vZ0jKpK9Y= Subject key identifier: EA:92:04:54:32:A6:DA:D4:5E:22:8A:9B:68:52:29:E2:56:7A:E4:E9 Authority key identifier: 0D:6B:B5:9E:97:BF:3B:1E:FC:35:69:DF:95:6C:45:E4:72:84:98:61 Certificate issuer: /CN=0d6bb59e97bf3b1efc3569df956c45e472849861 Certificate serial: 019B0FDBF9D64AAD9FEEBB57CA7BB9231312 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWu1npe_Ox78NWnflWxF5HKEmGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft Manifest number: 0A81 Signing time: Fri 12 Dec 2025 00:00:32 +0000 Manifest this update: Fri 12 Dec 2025 00:00:32 +0000 Manifest next update: Sat 13 Dec 2025 00:00:32 +0000 Files and hashes: 1: DWu1npe_Ox78NWnflWxF5HKEmGE.crl (hash: iVR9GTMvlf8cUiHFFsR1HmqxveeLS4RnvQrGQnEH5fY=) 2: QGurDva1s4alg8iGu6qVYxbvUlE.roa (hash: eFsT2lU76i8V7l6B+0U5YuaE3bHnUDv4afzG2LbiiJM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft rsync://rpki.ripe.net/repository/DEFAULT/DWu1npe_Ox78NWnflWxF5HKEmGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:db:f9:d6:4a:ad:9f:ee:bb:57:ca:7b:b9:23:13:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d6bb59e97bf3b1efc3569df956c45e472849861 Validity Not Before: Dec 12 00:00:32 2025 GMT Not After : Dec 13 00:00:32 2025 GMT Subject: CN=ea92045432a6dad45e228a9b685229e2567ae4e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d2:57:2d:99:c4:61:00:6d:64:4c:56:36:67: b9:3d:0e:ff:26:4b:f6:94:94:70:81:8f:84:af:a0: 44:b2:01:40:7c:b3:1d:cd:99:de:c4:ac:1b:ce:44: 93:7e:6e:c9:96:b5:f3:31:72:08:e7:b3:d4:e4:99: 1d:99:19:9b:e1:93:a0:18:6c:33:33:37:36:31:0a: 0a:96:54:11:79:d7:a4:44:f8:09:0b:6a:e5:14:2c: 98:e1:33:46:01:6b:05:5f:d9:6a:b0:e5:14:ee:cd: f9:97:ea:94:45:34:26:85:a8:21:52:63:9a:5b:f4: 16:23:05:f7:71:f4:4f:39:92:bf:69:d1:7b:bf:0b: 9c:65:9d:07:e5:01:d8:0e:17:33:94:9e:f7:ff:fb: 8b:ca:92:17:97:67:e4:10:f5:6a:ec:1e:01:d5:cb: a3:fb:b2:0f:0d:4a:81:ec:18:fd:3c:1c:c3:55:8c: 5c:64:a2:c4:bc:86:9c:4a:6c:32:f2:91:f3:75:4d: ad:0a:06:b7:32:ad:b6:10:6a:94:6a:77:bd:7c:e9: f5:4e:2e:f7:2b:87:84:d6:c7:b5:1e:40:11:2a:9b: c2:f7:2b:58:d9:65:d5:a9:06:c0:dd:d9:37:8d:2b: af:29:bd:b7:c0:7d:70:ed:86:15:cf:c6:f5:61:93: 85:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:92:04:54:32:A6:DA:D4:5E:22:8A:9B:68:52:29:E2:56:7A:E4:E9 X509v3 Authority Key Identifier: keyid:0D:6B:B5:9E:97:BF:3B:1E:FC:35:69:DF:95:6C:45:E4:72:84:98:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWu1npe_Ox78NWnflWxF5HKEmGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:cd:72:93:cc:eb:99:58:f9:e1:1b:d2:18:68:a8:18:7b:26: e1:f3:81:73:f4:7d:33:f1:32:d7:24:e7:15:92:66:d7:8f:51: 70:cf:3e:ba:25:e0:0a:d5:e1:99:64:36:bb:a5:de:7f:8b:3e: 3b:76:b8:18:1d:ac:b0:14:d8:41:05:88:54:d6:bc:1d:57:31: 85:02:20:b6:e8:1e:d7:e6:72:9d:8a:40:44:86:79:13:a7:8b: e6:d7:96:d0:ee:4e:60:d4:67:19:5f:bc:9f:43:b3:29:14:8e: 4f:d0:0c:0e:3b:61:6a:f2:57:2d:03:a4:94:94:e8:4e:2c:56: 84:8a:51:78:7e:fe:3e:95:e0:b0:91:95:e0:98:64:20:5c:08: 4c:b8:6e:50:70:f2:a9:05:08:4e:2a:45:31:fe:88:d9:6d:ca: cd:45:61:24:cc:fe:73:d8:08:e1:ca:c9:36:62:19:53:d8:f4: 96:b7:f9:7b:38:d6:90:b6:3f:90:86:f5:a7:fb:5c:80:07:c3: 55:fd:df:c7:63:56:7c:d2:69:22:72:63:11:d4:f1:c2:47:12: 53:a2:f4:07:15:4e:84:35:5c:3f:01:1b:1e:6d:3f:2e:bb:8d: 06:3e:9e:ab:cd:f5:ec:cc:85:74:21:c5:06:a8:47:15:d5:de: 2b:fe:a8:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsP2/nWSq2f7rtXynu5IxMSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNmJiNTllOTdiZjNiMWVmYzM1NjlkZjk1NmM0NWU0NzI4 NDk4NjEwHhcNMjUxMjEyMDAwMDMyWhcNMjUxMjEzMDAwMDMyWjAzMTEwLwYDVQQD EyhlYTkyMDQ1NDMyYTZkYWQ0NWUyMjhhOWI2ODUyMjllMjU2N2FlNGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9JXLZnEYQBtZExWNme5PQ7/Jkv2 lJRwgY+Er6BEsgFAfLMdzZnexKwbzkSTfm7JlrXzMXII57PU5JkdmRmb4ZOgGGwz Mzc2MQoKllQRedekRPgJC2rlFCyY4TNGAWsFX9lqsOUU7s35l+qURTQmhaghUmOa W/QWIwX3cfRPOZK/adF7vwucZZ0H5QHYDhczlJ73//uLypIXl2fkEPVq7B4B1cuj +7IPDUqB7Bj9PBzDVYxcZKLEvIacSmwy8pHzdU2tCga3Mq22EGqUane9fOn1Ti73 K4eE1se1HkARKpvC9ytY2WXVqQbA3dk3jSuvKb23wH1w7YYVz8b1YZOFHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOqSBFQyptrUXiKKm2hSKeJWeuTpMB8GA1UdIwQY MBaAFA1rtZ6Xvzse/DVp35VsReRyhJhhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFd1MW5wZV9PeDc4TlduZmxXeEY1SEtFbUdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZDNkZTQtNzZhNS00OTQxLWI2MjYt ZTk1NGUxNmFiMjdkLzEvRFd1MW5wZV9PeDc4TlduZmxXeEY1SEtFbUdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85ZDNkZTQtNzZhNS00OTQxLWI2MjYtZTk1NGUxNmFiMjdk LzEvRFd1MW5wZV9PeDc4TlduZmxXeEY1SEtFbUdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXs1yk8zr mVj54RvSGGioGHsm4fOBc/R9M/Ey1yTnFZJm149RcM8+uiXgCtXhmWQ2u6Xef4s+ O3a4GB2ssBTYQQWIVNa8HVcxhQIgtuge1+ZynYpARIZ5E6eL5teW0O5OYNRnGV+8 n0OzKRSOT9AMDjthavJXLQOklJToTixWhIpReH7+PpXgsJGV4JhkIFwITLhuUHDy qQUITipFMf6I2W3KzUVhJMz+c9gI4crJNmIZU9j0lrf5ezjWkLY/kIb1p/tcgAfD Vf3fx2NWfNJpInJjEdTxwkcSU6L0BxVOhDVcPwEbHm0/LruNBj6eq8317MyFdCHF BqhHFdXeK/6otA== -----END CERTIFICATE-----Generated at Fri Dec 12 08:26:53 2025 by rpki-client