This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft File: dOgVmhbXKz1s37qgltaROf3p0pA.mft (raw, json) Hash identifier: 0Zrl+gvtiZEnFv6YaE4E/1vveV2KFxN5YTqc+f85CwM= Subject key identifier: 6B:3E:AA:85:CF:4A:26:34:01:90:53:34:C3:05:9D:21:FC:79:E5:BB Authority key identifier: 74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90 Certificate issuer: /CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290 Certificate serial: 019B47A63B09520A6928D5AE7A907744D3EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft Manifest number: 082D Signing time: Mon 22 Dec 2025 20:00:35 +0000 Manifest this update: Mon 22 Dec 2025 20:00:35 +0000 Manifest next update: Tue 23 Dec 2025 20:00:35 +0000 Files and hashes: 1: dOgVmhbXKz1s37qgltaROf3p0pA.crl (hash: v7BWXD1skPETaRmDp8V9dRdgVyY1xWEVZL/Russf1dk=) 2: oH2IWQRozN1-75odpKh66sr4uwc.roa (hash: wPfO52+kbkGCq6+uVpP9AwZp/WGjoxj4/guIax27VIU=) 3: y77dBZKkwdBWSaHuC-2LOWhhnDE.roa (hash: Mve9fSJEqTyFEiPK9mxYy3Dvl/+0Q/tVpXlrv6a1VIY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 20:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:a6:3b:09:52:0a:69:28:d5:ae:7a:90:77:44:d3:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290 Validity Not Before: Dec 22 20:00:35 2025 GMT Not After : Dec 23 20:00:35 2025 GMT Subject: CN=6b3eaa85cf4a263401905334c3059d21fc79e5bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:56:5b:e2:76:62:c2:8a:25:b4:7c:cd:61:ad: 96:5c:3f:f4:4b:07:e8:b7:6c:53:0f:30:d9:9d:92: e4:25:01:78:3c:aa:ab:f8:1d:cc:34:08:29:91:9f: 02:06:d9:42:9e:28:fa:45:59:c8:50:42:aa:f5:a2: e3:ed:db:d8:03:42:01:77:0e:52:e7:f3:54:e5:82: 0a:60:44:c8:a0:77:7e:7c:66:0a:54:7d:c5:e3:2e: c6:f6:d7:a1:9c:a8:e6:ed:c6:ef:ab:5f:c5:0a:a0: 57:fa:c3:ec:04:cb:de:3b:31:cf:99:2e:6e:71:ce: bf:dc:0e:c2:52:7e:87:1d:38:58:9b:ae:8d:e0:64: dc:9d:11:39:7e:c7:59:cb:aa:13:ce:a0:5e:7d:50: 35:f0:62:ef:b8:e3:b4:b8:4d:36:ec:1b:8d:1f:26: 4e:36:84:21:c3:56:f2:2c:01:20:a5:8e:d7:2d:77: 62:86:04:46:bf:52:81:60:15:48:95:b4:22:f5:73: 57:c8:bb:6d:38:6f:f6:74:f1:69:41:f0:a7:d9:fc: 3d:c3:a4:27:18:87:a4:ed:0e:07:d7:6c:5e:6f:0a: 75:b7:6e:57:cc:7e:8b:e8:ed:0a:d9:f0:4d:34:64: d3:85:32:63:48:d8:7b:47:46:a2:17:5c:61:1c:f0: d9:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:3E:AA:85:CF:4A:26:34:01:90:53:34:C3:05:9D:21:FC:79:E5:BB X509v3 Authority Key Identifier: keyid:74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:48:5d:f3:e2:ad:82:d0:5b:ed:e5:a9:08:11:62:29:fc:89: 1a:73:c2:1c:05:6b:64:ad:8c:8c:41:7e:10:6b:9e:7a:9e:14: 94:9f:02:b1:76:62:37:3f:07:13:63:19:66:7f:61:74:81:21: d9:ab:a9:69:79:c6:d2:94:e2:ea:df:8b:20:81:73:92:d4:6d: f1:9e:18:6f:c5:12:ef:ef:18:56:95:86:38:0a:14:87:5f:a5: 27:84:ec:e2:d2:7f:70:70:8a:04:af:ab:8d:2b:ba:2c:64:98: 6b:10:ad:af:30:15:9a:ed:1d:7e:00:be:6c:63:f3:2a:dc:0e: aa:cd:5d:7a:52:b9:8c:bf:f9:86:cc:90:01:39:53:a5:55:7c: cf:f6:5e:dd:1f:00:e7:61:77:72:69:7a:1b:20:12:26:7e:82: 1d:0d:0e:ae:b2:c1:07:51:54:8e:3e:22:c2:93:49:d3:2c:31: 32:50:44:23:68:05:fa:09:58:be:90:59:c1:cb:f1:35:48:ff: 7b:23:1d:b6:81:2f:1e:b4:84:58:36:ef:f0:a5:e2:06:a4:4f: fb:3c:99:fb:00:2c:d0:42:3b:7d:8c:9c:a2:02:2f:f3:b8:94: b4:8e:9b:07:2d:3e:38:9d:8f:28:d3:9e:d5:89:7d:58:03:e7: bb:c6:85:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHpjsJUgppKNWuepB3RNPrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZTgxNTlhMTZkNzJiM2Q2Y2RmYmFhMDk2ZDY5MTM5ZmRl OWQyOTAwHhcNMjUxMjIyMjAwMDM1WhcNMjUxMjIzMjAwMDM1WjAzMTEwLwYDVQQD Eyg2YjNlYWE4NWNmNGEyNjM0MDE5MDUzMzRjMzA1OWQyMWZjNzllNWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlZb4nZiwooltHzNYa2WXD/0Swfo t2xTDzDZnZLkJQF4PKqr+B3MNAgpkZ8CBtlCnij6RVnIUEKq9aLj7dvYA0IBdw5S 5/NU5YIKYETIoHd+fGYKVH3F4y7G9tehnKjm7cbvq1/FCqBX+sPsBMveOzHPmS5u cc6/3A7CUn6HHThYm66N4GTcnRE5fsdZy6oTzqBefVA18GLvuOO0uE027BuNHyZO NoQhw1byLAEgpY7XLXdihgRGv1KBYBVIlbQi9XNXyLttOG/2dPFpQfCn2fw9w6Qn GIek7Q4H12xebwp1t25XzH6L6O0K2fBNNGTThTJjSNh7R0aiF1xhHPDZFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGs+qoXPSiY0AZBTNMMFnSH8eeW7MB8GA1UdIwQY MBaAFHToFZoW1ys9bN+6oJbWkTn96dKQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE9nVm1oYlhLejFzMzdxZ2x0YVJPZjNwMHBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS85YmUwYTctNDFiMy00OGE1LThhMzgt ODRjYmM4NWEyMzQzLzEvZE9nVm1oYlhLejFzMzdxZ2x0YVJPZjNwMHBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS85YmUwYTctNDFiMy00OGE1LThhMzgtODRjYmM4NWEyMzQz LzEvZE9nVm1oYlhLejFzMzdxZ2x0YVJPZjNwMHBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgkhd8+Kt gtBb7eWpCBFiKfyJGnPCHAVrZK2MjEF+EGueep4UlJ8CsXZiNz8HE2MZZn9hdIEh 2aupaXnG0pTi6t+LIIFzktRt8Z4Yb8US7+8YVpWGOAoUh1+lJ4Ts4tJ/cHCKBK+r jSu6LGSYaxCtrzAVmu0dfgC+bGPzKtwOqs1delK5jL/5hsyQATlTpVV8z/Ze3R8A 52F3cml6GyASJn6CHQ0OrrLBB1FUjj4iwpNJ0ywxMlBEI2gF+glYvpBZwcvxNUj/ eyMdtoEvHrSEWDbv8KXiBqRP+zyZ+wAs0EI7fYycogIv87iUtI6bBy0+OJ2PKNOe 1Yl9WAPnu8aFwg== -----END CERTIFICATE-----Generated at Tue Dec 23 04:13:45 2025 by rpki-client