This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft File: dOgVmhbXKz1s37qgltaROf3p0pA.mft (raw, json) Hash identifier: wDIiunsOIHZZypr9Dwda9q7NIRMloapd3WygiT6PzLA= Subject key identifier: 55:E1:FA:6E:6D:16:9B:52:53:AD:2D:7A:5B:FA:BF:84:B5:D4:54:1B Authority key identifier: 74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90 Certificate issuer: /CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290 Certificate serial: 019AFC55457CB33692078C55B5EC7FE5FC73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft Manifest number: 0806 Signing time: Mon 08 Dec 2025 05:00:38 +0000 Manifest this update: Mon 08 Dec 2025 05:00:38 +0000 Manifest next update: Tue 09 Dec 2025 05:00:38 +0000 Files and hashes: 1: dOgVmhbXKz1s37qgltaROf3p0pA.crl (hash: y7mk6rZ8KHSTiluC2UMBCN300A9/GG5vObx4xvI/G40=) 2: oH2IWQRozN1-75odpKh66sr4uwc.roa (hash: wPfO52+kbkGCq6+uVpP9AwZp/WGjoxj4/guIax27VIU=) 3: y77dBZKkwdBWSaHuC-2LOWhhnDE.roa (hash: Mve9fSJEqTyFEiPK9mxYy3Dvl/+0Q/tVpXlrv6a1VIY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:55:45:7c:b3:36:92:07:8c:55:b5:ec:7f:e5:fc:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74e8159a16d72b3d6cdfbaa096d69139fde9d290 Validity Not Before: Dec 8 05:00:38 2025 GMT Not After : Dec 9 05:00:38 2025 GMT Subject: CN=55e1fa6e6d169b5253ad2d7a5bfabf84b5d4541b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a4:65:46:16:a0:aa:62:2d:15:61:f1:15:14: 48:a5:83:bf:86:11:b9:ec:64:48:1c:37:db:04:19: 66:9f:e1:97:c6:d4:e8:25:1a:69:40:a8:36:c9:f1: 50:06:f9:a3:d6:5f:70:54:43:e0:0f:50:1e:58:a8: 86:95:7b:36:f3:3b:82:b0:d3:08:57:27:63:cd:ca: 29:81:23:53:d3:bd:ac:93:5d:cb:7d:4d:99:33:90: 71:be:85:f7:c2:f0:27:97:88:f7:10:26:12:bc:55: f4:c1:b2:05:68:73:38:10:39:0a:aa:46:e7:73:d5: 8f:3f:42:f0:b1:d0:45:05:fe:82:66:2d:d0:23:20: 5c:c1:83:a0:e7:d4:9c:f9:e9:d0:e5:90:22:75:7f: 67:e0:47:9c:0e:f1:69:f1:75:68:fe:fb:d6:5b:27: ab:42:27:c2:62:ac:57:68:29:a4:03:28:e7:11:ed: 3b:a4:e8:08:11:dd:64:87:fc:09:d7:a5:94:f0:f9: a7:9b:2b:fd:64:0e:62:15:79:71:6f:1f:63:3d:bb: 62:2e:89:d6:bc:b5:d7:e1:b8:21:b9:41:fc:13:7a: cb:bf:1f:4c:78:3c:a5:1f:c3:e2:8f:b6:e9:cf:d8: fb:7d:7c:4a:54:ab:23:50:af:80:67:78:ab:f5:b5: dc:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:E1:FA:6E:6D:16:9B:52:53:AD:2D:7A:5B:FA:BF:84:B5:D4:54:1B X509v3 Authority Key Identifier: keyid:74:E8:15:9A:16:D7:2B:3D:6C:DF:BA:A0:96:D6:91:39:FD:E9:D2:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOgVmhbXKz1s37qgltaROf3p0pA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/9be0a7-41b3-48a5-8a38-84cbc85a2343/1/dOgVmhbXKz1s37qgltaROf3p0pA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:ad:be:e4:34:76:6e:7b:f1:00:8a:75:ad:94:fe:f5:3e:0f: bc:e7:bf:87:e2:88:5b:f3:43:28:b5:f5:79:5d:7d:0b:72:4b: 3a:7a:94:7f:2a:f9:1e:92:68:48:bc:48:85:ba:6b:97:04:a0: 17:d9:9e:36:51:26:50:d7:c1:80:11:49:5e:84:92:20:5a:45: 08:48:d2:ca:d9:c7:92:77:c4:6a:3c:6e:8c:81:d7:4a:bf:34: 34:33:84:35:8c:3b:e9:5f:a2:ad:1c:d2:1e:a2:f2:39:54:5e: 1c:28:7b:f0:6f:9c:93:9f:14:1e:29:d8:b9:7c:ff:c7:7a:50: fe:52:ed:46:c5:e9:18:7f:28:0c:ee:cd:c1:eb:5b:ca:3f:1e: 68:b1:a9:89:ca:f2:a7:70:8d:94:31:17:b5:06:68:d3:13:8b: a3:e0:d8:59:bf:95:9a:aa:46:f5:ca:ed:0a:b2:41:bc:bd:22: 7c:cc:41:c7:ef:b7:0c:5e:9c:20:b8:01:71:f7:24:93:27:1e: 8f:f3:98:ec:95:f8:c1:eb:8f:87:9f:9b:1c:3b:5c:3d:76:47: 58:3e:ac:f7:ec:e8:9c:de:e4:26:f2:7d:00:fa:a0:97:f3:90: df:94:53:cc:af:eb:c1:f9:b8:29:e7:3c:e7:9a:02:fc:f4:3a: 8e:86:cf:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr8VUV8szaSB4xVtex/5fxzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZTgxNTlhMTZkNzJiM2Q2Y2RmYmFhMDk2ZDY5MTM5ZmRl OWQyOTAwHhcNMjUxMjA4MDUwMDM4WhcNMjUxMjA5MDUwMDM4WjAzMTEwLwYDVQQD Eyg1NWUxZmE2ZTZkMTY5YjUyNTNhZDJkN2E1YmZhYmY4NGI1ZDQ1NDFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaRlRhagqmItFWHxFRRIpYO/hhG5 7GRIHDfbBBlmn+GXxtToJRppQKg2yfFQBvmj1l9wVEPgD1AeWKiGlXs28zuCsNMI VydjzcopgSNT072sk13LfU2ZM5BxvoX3wvAnl4j3ECYSvFX0wbIFaHM4EDkKqkbn c9WPP0LwsdBFBf6CZi3QIyBcwYOg59Sc+enQ5ZAidX9n4EecDvFp8XVo/vvWWyer QifCYqxXaCmkAyjnEe07pOgIEd1kh/wJ16WU8Pmnmyv9ZA5iFXlxbx9jPbtiLonW vLXX4bghuUH8E3rLvx9MeDylH8Pij7bpz9j7fXxKVKsjUK+AZ3ir9bXckwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFXh+m5tFptSU60telv6v4S11FQbMB8GA1UdIwQY MBaAFHToFZoW1ys9bN+6oJbWkTn96dKQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE9nVm1oYlhLejFzMzdxZ2x0YVJPZjNwMHBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS85YmUwYTctNDFiMy00OGE1LThhMzgt ODRjYmM4NWEyMzQzLzEvZE9nVm1oYlhLejFzMzdxZ2x0YVJPZjNwMHBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS85YmUwYTctNDFiMy00OGE1LThhMzgtODRjYmM4NWEyMzQz LzEvZE9nVm1oYlhLejFzMzdxZ2x0YVJPZjNwMHBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcK2+5DR2 bnvxAIp1rZT+9T4PvOe/h+KIW/NDKLX1eV19C3JLOnqUfyr5HpJoSLxIhbprlwSg F9meNlEmUNfBgBFJXoSSIFpFCEjSytnHknfEajxujIHXSr80NDOENYw76V+irRzS HqLyOVReHCh78G+ck58UHinYuXz/x3pQ/lLtRsXpGH8oDO7Nwetbyj8eaLGpicry p3CNlDEXtQZo0xOLo+DYWb+VmqpG9crtCrJBvL0ifMxBx++3DF6cILgBcfckkyce j/OY7JX4weuPh5+bHDtcPXZHWD6s9+zonN7kJvJ9APqgl/OQ35RTzK/rwfm4Kec8 55oC/PQ6jobPyQ== -----END CERTIFICATE-----Generated at Mon Dec 8 07:42:40 2025 by rpki-client