This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft File: DwJfo1fCCrvxGEJiNGWOYtfccHY.mft (raw, json) Hash identifier: lfkUt+j+fBjWkqvBl1Y0LINFgOextwpAAtRILWU+1rI= Subject key identifier: 88:5C:4D:60:80:41:58:A8:AF:ED:2A:0D:52:19:89:10:8F:36:1F:6B Authority key identifier: 0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76 Certificate issuer: /CN=0f025fa357c20abbf118426234658e62d7dc7076 Certificate serial: 019B1ACDAD25E660CA3C7498A677C27A02DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft Manifest number: 04F9 Signing time: Sun 14 Dec 2025 03:00:45 +0000 Manifest this update: Sun 14 Dec 2025 03:00:45 +0000 Manifest next update: Mon 15 Dec 2025 03:00:45 +0000 Files and hashes: 1: DwJfo1fCCrvxGEJiNGWOYtfccHY.crl (hash: vo4NrRmN5nZ6yZ4TlcKm0GbrWhaWDJ7kSbCX8B8qHqU=) 2: PPz_1wH3hqFDjLC-MrIMRrZJxeQ.roa (hash: ZY1q21nV+Hi/oVRVSMTtHd27zoQ6myzruEINZqqxjKM=) 3: fnisj2MvVqaFaMeYW9lmJ0SCW9o.roa (hash: 6em1xLWv3WGsIAinbV2APlVzvS3mzKB3u+DwFqIP/5Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:cd:ad:25:e6:60:ca:3c:74:98:a6:77:c2:7a:02:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f025fa357c20abbf118426234658e62d7dc7076 Validity Not Before: Dec 14 03:00:45 2025 GMT Not After : Dec 15 03:00:45 2025 GMT Subject: CN=885c4d60804158a8afed2a0d521989108f361f6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d4:e1:ec:25:1f:27:b6:ea:75:7d:b2:92:71: 6a:fb:ea:45:e8:72:17:87:75:d6:ec:fd:60:94:ce: 01:d8:5e:91:70:b1:32:66:e8:1a:fe:58:4b:38:97: ed:aa:cb:4b:5b:cf:99:80:71:93:9b:be:fb:92:fe: 3d:db:f3:c5:d2:7b:1e:55:cf:ea:bf:41:10:9e:8a: 4a:e7:c6:c8:19:cd:f0:06:9b:11:33:3e:cc:a2:c2: e5:54:ae:bc:9d:ed:7f:ea:b5:03:48:c7:98:2f:6a: 3f:6d:69:96:b5:f0:0f:6f:bb:b9:e7:a8:49:9e:d2: 79:1c:54:0d:90:d2:cb:e5:5d:37:b9:6b:96:eb:eb: 47:47:da:b3:40:e8:4b:33:93:33:a7:31:69:c5:1f: dc:71:c2:0c:1f:a0:96:01:d7:78:da:83:77:54:2e: df:18:53:f6:2a:be:07:a5:77:68:d1:d8:9a:30:75: fd:a9:1c:03:84:e9:86:5e:a8:ea:32:6a:69:f9:0f: 0f:72:36:59:ff:4d:4b:a8:08:bc:4f:3d:bc:e6:3b: 5a:4c:b0:55:c6:f0:e3:bd:f2:58:bd:85:63:e9:74: dc:0c:16:36:a6:50:22:5c:56:f6:0f:53:76:e8:b4: 80:06:a5:75:2e:57:ae:e2:47:16:19:e5:51:65:9e: bf:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:5C:4D:60:80:41:58:A8:AF:ED:2A:0D:52:19:89:10:8F:36:1F:6B X509v3 Authority Key Identifier: keyid:0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:83:e9:45:cb:11:88:af:51:e8:5d:22:2e:39:4f:d8:c2:2f: a2:fb:61:20:11:48:e8:71:fd:d6:75:72:40:d4:84:7f:70:fd: b4:57:5d:df:34:56:b2:41:f4:fb:1b:af:d9:b4:a9:1f:bc:24: 50:6d:7a:c0:62:f6:17:49:13:09:be:c1:7b:27:f2:69:63:3c: 67:9f:69:8d:72:d5:90:32:f1:c0:84:38:6c:f5:3d:2d:a2:fe: 34:e5:9e:44:96:ae:5e:ff:18:c0:0f:5f:ba:17:f6:5a:5b:8b: 67:b5:92:ee:a6:eb:e3:0d:5d:5f:c1:64:da:5f:7f:57:ec:8b: ca:af:0d:ed:f8:95:8b:b4:7a:d5:24:42:46:a3:95:b5:20:9e: 49:a1:1d:1e:a5:c7:f7:e0:59:1f:d1:1b:ec:65:93:c1:3c:f5: ed:23:db:bb:94:ac:4b:7a:34:6c:f4:6c:bd:c9:e1:19:64:94: 3b:55:64:f4:55:86:a8:6d:c2:6e:2c:51:f1:3c:98:31:ed:fe: ce:e7:8c:d1:f0:dc:f5:bb:37:b2:8c:af:73:ff:e9:ab:5a:0e: 46:c4:29:9d:e1:db:db:3a:05:54:1f:d8:4d:11:ee:4c:c8:09: df:68:7d:4b:a0:47:e2:2d:ee:91:07:32:4f:92:80:54:9b:00: 32:96:31:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaza0l5mDKPHSYpnfCegLaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMDI1ZmEzNTdjMjBhYmJmMTE4NDI2MjM0NjU4ZTYyZDdk YzcwNzYwHhcNMjUxMjE0MDMwMDQ1WhcNMjUxMjE1MDMwMDQ1WjAzMTEwLwYDVQQD Eyg4ODVjNGQ2MDgwNDE1OGE4YWZlZDJhMGQ1MjE5ODkxMDhmMzYxZjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldTh7CUfJ7bqdX2yknFq++pF6HIX h3XW7P1glM4B2F6RcLEyZuga/lhLOJftqstLW8+ZgHGTm777kv492/PF0nseVc/q v0EQnopK58bIGc3wBpsRMz7MosLlVK68ne1/6rUDSMeYL2o/bWmWtfAPb7u556hJ ntJ5HFQNkNLL5V03uWuW6+tHR9qzQOhLM5MzpzFpxR/cccIMH6CWAdd42oN3VC7f GFP2Kr4HpXdo0diaMHX9qRwDhOmGXqjqMmpp+Q8PcjZZ/01LqAi8Tz285jtaTLBV xvDjvfJYvYVj6XTcDBY2plAiXFb2D1N26LSABqV1Lleu4kcWGeVRZZ6/bwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIhcTWCAQVior+0qDVIZiRCPNh9rMB8GA1UdIwQY MBaAFA8CX6NXwgq78RhCYjRljmLX3HB2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHdKZm8xZkNDcnZ4R0VKaU5HV09ZdGZjY0hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xMTRhMTAtOGVmNy00OTAzLTk2M2Ut ZDRkNTlhMDk1YzdmLzEvRHdKZm8xZkNDcnZ4R0VKaU5HV09ZdGZjY0hZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8xMTRhMTAtOGVmNy00OTAzLTk2M2UtZDRkNTlhMDk1Yzdm LzEvRHdKZm8xZkNDcnZ4R0VKaU5HV09ZdGZjY0hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjYPpRcsR iK9R6F0iLjlP2MIvovthIBFI6HH91nVyQNSEf3D9tFdd3zRWskH0+xuv2bSpH7wk UG16wGL2F0kTCb7BeyfyaWM8Z59pjXLVkDLxwIQ4bPU9LaL+NOWeRJauXv8YwA9f uhf2WluLZ7WS7qbr4w1dX8Fk2l9/V+yLyq8N7fiVi7R61SRCRqOVtSCeSaEdHqXH 9+BZH9Eb7GWTwTz17SPbu5SsS3o0bPRsvcnhGWSUO1Vk9FWGqG3CbixR8TyYMe3+ zueM0fDc9bs3soyvc//pq1oORsQpneHb2zoFVB/YTRHuTMgJ32h9S6BH4i3ukQcy T5KAVJsAMpYx7Q== -----END CERTIFICATE-----Generated at Sun Dec 14 07:48:52 2025 by rpki-client