This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft File: DWu1npe_Ox78NWnflWxF5HKEmGE.mft (raw, json) Hash identifier: k4cwzOFy0zTfI7GaGuPw9VLi9W3Fy4rXBFkBjw+tRD4= Subject key identifier: 21:69:DF:26:8C:BF:BC:09:D8:3E:CE:5D:94:B7:B0:84:68:D8:D3:EA Authority key identifier: 0D:6B:B5:9E:97:BF:3B:1E:FC:35:69:DF:95:6C:45:E4:72:84:98:61 Certificate issuer: /CN=0d6bb59e97bf3b1efc3569df956c45e472849861 Certificate serial: 019B367BF5C5CA0443B0243F5A0F63749D05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWu1npe_Ox78NWnflWxF5HKEmGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft Manifest number: 0A95 Signing time: Fri 19 Dec 2025 12:00:52 +0000 Manifest this update: Fri 19 Dec 2025 12:00:52 +0000 Manifest next update: Sat 20 Dec 2025 12:00:52 +0000 Files and hashes: 1: DWu1npe_Ox78NWnflWxF5HKEmGE.crl (hash: l2EGQaFs2dqMPkrrenWTNga0yA8slWgwpxK6NGUlqjw=) 2: QGurDva1s4alg8iGu6qVYxbvUlE.roa (hash: eFsT2lU76i8V7l6B+0U5YuaE3bHnUDv4afzG2LbiiJM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft rsync://rpki.ripe.net/repository/DEFAULT/DWu1npe_Ox78NWnflWxF5HKEmGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:7b:f5:c5:ca:04:43:b0:24:3f:5a:0f:63:74:9d:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d6bb59e97bf3b1efc3569df956c45e472849861 Validity Not Before: Dec 19 12:00:52 2025 GMT Not After : Dec 20 12:00:52 2025 GMT Subject: CN=2169df268cbfbc09d83ece5d94b7b08468d8d3ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e9:02:43:fc:1f:35:4f:3d:7b:39:2d:78:ba: 9c:63:99:71:f7:de:0c:e0:1b:49:07:e2:d4:2a:f3: 14:f8:22:99:24:ca:e9:6c:42:50:52:ab:e6:89:75: 52:b3:6a:98:fd:ea:40:d5:bd:77:0c:95:e9:aa:f0: ce:be:5d:7b:51:63:ac:44:65:97:d7:dd:c4:97:e2: 38:8e:e3:91:63:a4:d0:91:34:67:04:79:f9:2a:17: 6e:68:9d:62:a8:96:57:4b:31:88:ae:a4:57:9c:18: 05:06:2c:66:ec:a4:74:a4:16:db:17:c4:d1:93:61: 07:fa:72:95:8b:1b:db:f8:6d:0a:c4:08:d0:20:96: 63:fb:d4:c9:99:e6:6b:13:52:0b:ac:9f:04:ff:80: b3:df:6f:5c:13:e3:b6:56:fd:02:ba:28:89:00:55: 62:54:d7:80:49:79:09:97:c1:09:5a:a8:83:48:9e: 4b:39:e4:e5:16:30:b0:2c:da:25:78:a7:6c:9b:7e: 6c:32:73:2f:a9:16:95:3b:3b:11:8b:7c:63:0e:6a: dc:46:79:52:88:0e:54:d5:83:d2:89:55:e0:1f:1f: 21:05:4b:3c:8e:64:83:ac:eb:f3:e1:f5:f4:94:a9: 6f:e6:7e:09:dc:89:fb:7d:53:27:41:b9:86:53:6b: 9e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:69:DF:26:8C:BF:BC:09:D8:3E:CE:5D:94:B7:B0:84:68:D8:D3:EA X509v3 Authority Key Identifier: keyid:0D:6B:B5:9E:97:BF:3B:1E:FC:35:69:DF:95:6C:45:E4:72:84:98:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWu1npe_Ox78NWnflWxF5HKEmGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:17:cd:31:71:8c:1b:d0:0b:76:d1:95:34:6b:5e:24:c2:31: 9e:41:cf:ee:90:39:ad:0c:4e:b6:2d:fb:06:73:2e:b9:ff:8c: 81:c2:38:45:cc:81:dc:72:af:e9:7d:42:ed:70:7a:56:98:69: b6:bc:50:5b:ce:38:e3:8c:40:09:a0:a7:6b:2c:75:6b:20:42: cf:37:8c:c4:7d:0e:0e:83:ae:4b:c2:a6:2b:d7:d6:3d:0c:ea: f8:43:91:6b:9e:35:31:23:78:6a:bb:ef:1e:f0:70:7a:f9:42: 2d:72:0c:cd:0c:5b:dc:fa:d9:ed:00:4d:6d:39:93:5e:f5:5d: 1e:6f:9f:a0:04:7a:b5:5b:b1:9d:d0:ec:19:82:d5:bb:f5:c3: 26:2d:8b:88:61:e6:40:a4:8f:ff:a9:f5:12:f4:39:94:72:0a: 23:e1:1d:2a:02:6e:45:74:47:bc:15:a4:f4:43:f9:52:7f:17: c6:5d:e4:cd:68:00:af:34:79:c4:73:00:17:6d:82:4a:8f:b5: 9c:f8:13:99:0f:24:6e:39:b6:07:5b:6c:ad:19:b6:50:bd:3f: 26:f6:a6:45:05:19:bd:61:fc:59:83:39:46:ca:94:42:90:4c: ab:ee:84:33:76:fb:87:00:fd:da:f6:4b:16:1a:9f:8a:48:6c: f4:4e:01:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2e/XFygRDsCQ/Wg9jdJ0FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNmJiNTllOTdiZjNiMWVmYzM1NjlkZjk1NmM0NWU0NzI4 NDk4NjEwHhcNMjUxMjE5MTIwMDUyWhcNMjUxMjIwMTIwMDUyWjAzMTEwLwYDVQQD EygyMTY5ZGYyNjhjYmZiYzA5ZDgzZWNlNWQ5NGI3YjA4NDY4ZDhkM2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OkCQ/wfNU89ezkteLqcY5lx994M 4BtJB+LUKvMU+CKZJMrpbEJQUqvmiXVSs2qY/epA1b13DJXpqvDOvl17UWOsRGWX 193El+I4juORY6TQkTRnBHn5KhduaJ1iqJZXSzGIrqRXnBgFBixm7KR0pBbbF8TR k2EH+nKVixvb+G0KxAjQIJZj+9TJmeZrE1ILrJ8E/4Cz329cE+O2Vv0CuiiJAFVi VNeASXkJl8EJWqiDSJ5LOeTlFjCwLNoleKdsm35sMnMvqRaVOzsRi3xjDmrcRnlS iA5U1YPSiVXgHx8hBUs8jmSDrOvz4fX0lKlv5n4J3In7fVMnQbmGU2ueSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCFp3yaMv7wJ2D7OXZS3sIRo2NPqMB8GA1UdIwQY MBaAFA1rtZ6Xvzse/DVp35VsReRyhJhhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFd1MW5wZV9PeDc4TlduZmxXeEY1SEtFbUdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZDNkZTQtNzZhNS00OTQxLWI2MjYt ZTk1NGUxNmFiMjdkLzEvRFd1MW5wZV9PeDc4TlduZmxXeEY1SEtFbUdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85ZDNkZTQtNzZhNS00OTQxLWI2MjYtZTk1NGUxNmFiMjdk LzEvRFd1MW5wZV9PeDc4TlduZmxXeEY1SEtFbUdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIhfNMXGM G9ALdtGVNGteJMIxnkHP7pA5rQxOti37BnMuuf+MgcI4RcyB3HKv6X1C7XB6Vphp trxQW84444xACaCnayx1ayBCzzeMxH0ODoOuS8KmK9fWPQzq+EORa541MSN4arvv HvBwevlCLXIMzQxb3PrZ7QBNbTmTXvVdHm+foAR6tVuxndDsGYLVu/XDJi2LiGHm QKSP/6n1EvQ5lHIKI+EdKgJuRXRHvBWk9EP5Un8Xxl3kzWgArzR5xHMAF22CSo+1 nPgTmQ8kbjm2B1tsrRm2UL0/JvamRQUZvWH8WYM5RsqUQpBMq+6EM3b7hwD92vZL Fhqfikhs9E4Bvg== -----END CERTIFICATE-----Generated at Fri Dec 19 14:35:32 2025 by rpki-client