This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft File: DvJQ9m3TDDt1RDCoXVMjbxczG38.mft (raw, json) Hash identifier: bMcE6bU75DsTjR08K9B3vX593yI5lovJZf00USAN+qk= Subject key identifier: C1:FD:8E:B5:42:AB:75:C5:B0:01:90:F1:13:C6:27:36:81:1D:A6:9C Authority key identifier: 0E:F2:50:F6:6D:D3:0C:3B:75:44:30:A8:5D:53:23:6F:17:33:1B:7F Certificate issuer: /CN=0ef250f66dd30c3b754430a85d53236f17331b7f Certificate serial: 019B1203207121C8D5F817E9EE6E4D8CC396 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvJQ9m3TDDt1RDCoXVMjbxczG38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft Manifest number: 0410 Signing time: Fri 12 Dec 2025 10:02:33 +0000 Manifest this update: Fri 12 Dec 2025 10:02:33 +0000 Manifest next update: Sat 13 Dec 2025 10:02:33 +0000 Files and hashes: 1: DvJQ9m3TDDt1RDCoXVMjbxczG38.crl (hash: 0jw9lFHksJ5W727usloEmf2Do5H/f5I2ZF4RsEkZE7E=) 2: wz1d87RRsH1wKxGmJq_DN0PXswY.roa (hash: UbFzX/CxroLQPhe2c4ynViKTu15Zs0MKcqpj4a9goDk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft rsync://rpki.ripe.net/repository/DEFAULT/DvJQ9m3TDDt1RDCoXVMjbxczG38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:03:20:71:21:c8:d5:f8:17:e9:ee:6e:4d:8c:c3:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ef250f66dd30c3b754430a85d53236f17331b7f Validity Not Before: Dec 12 10:02:33 2025 GMT Not After : Dec 13 10:02:33 2025 GMT Subject: CN=c1fd8eb542ab75c5b00190f113c62736811da69c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:fb:eb:d6:c8:db:e2:58:38:a4:9d:eb:d5:21: 93:21:a2:a3:5f:1f:41:dc:fd:f3:e4:e9:61:a8:c7: 5c:51:e1:d4:7b:8a:60:20:f6:af:79:ed:b7:d1:e3: 96:37:b7:bd:2c:79:15:3b:e4:6e:b8:0c:fb:d0:bf: f5:9e:04:3f:45:8c:a9:f0:a3:18:cc:a4:07:3f:5d: 63:8b:4e:c2:05:f0:0a:69:df:00:0d:9c:1d:50:4b: 5d:3c:ec:df:2d:b1:79:af:3c:ea:1f:b7:55:12:95: 6e:7c:ae:3c:57:62:b8:1a:03:27:60:2e:10:5a:af: 88:f1:16:18:1a:e5:c9:c0:dd:9c:80:95:76:0a:ee: b5:00:09:d7:bb:ee:d2:ff:55:5e:b8:98:b8:45:70: 42:87:19:68:39:aa:f7:5a:e3:77:8d:c6:f9:04:7e: 04:6d:f7:be:ea:ec:92:74:fe:9e:c0:ec:c3:93:68: 96:e6:fe:40:f9:8f:42:3c:b6:61:55:07:e7:12:9c: 5b:b0:9c:26:b3:cc:21:19:46:c3:35:2b:71:25:fa: ca:a1:c6:f9:aa:54:ad:e3:5b:ff:88:dd:15:e5:e4: 81:44:2a:8e:f4:dc:4e:90:25:d0:62:5a:89:60:bf: 25:72:7a:f5:b7:b9:90:df:de:06:72:67:b5:39:4b: f1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:FD:8E:B5:42:AB:75:C5:B0:01:90:F1:13:C6:27:36:81:1D:A6:9C X509v3 Authority Key Identifier: keyid:0E:F2:50:F6:6D:D3:0C:3B:75:44:30:A8:5D:53:23:6F:17:33:1B:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvJQ9m3TDDt1RDCoXVMjbxczG38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:5b:00:75:2a:7e:d7:ba:2a:37:ff:33:93:c0:67:44:bd:b4: 6e:54:a8:2c:17:57:2f:d7:e2:ce:39:50:49:50:fe:6c:2b:28: 68:0d:d1:a6:42:37:b5:b4:89:38:b8:6f:f6:bd:98:c8:19:6b: a0:db:82:d4:98:dd:b0:d7:97:15:c4:8f:98:57:a5:69:97:81: 54:f9:48:03:a8:8e:4d:2d:12:5c:d6:63:b3:37:cc:c1:22:14: 8c:f4:59:c9:9b:dd:04:5d:a3:6c:ea:c5:48:4f:80:50:6e:78: 6e:37:49:a8:e4:a7:f4:24:0e:94:e5:ab:cf:fe:5a:61:ef:82: 1f:96:e6:c2:0b:bf:68:de:77:75:67:a8:58:08:7e:6c:e5:ac: d2:ec:50:db:32:15:35:36:8f:09:af:96:c2:3f:44:9e:b0:be: 3a:10:68:30:fa:0b:9c:30:2a:fd:40:b8:49:bc:a9:30:61:50: 14:04:65:52:11:2d:03:b8:06:1b:38:52:22:8a:2d:91:de:3b: d4:f7:02:bf:34:5e:24:57:ce:d6:3e:4a:cd:7a:70:b5:bd:92: 0c:16:ae:ec:6d:9c:25:fe:b0:f1:db:c1:f4:97:73:bc:cd:a5: f2:7f:d0:6c:24:d3:13:a8:03:14:26:03:1f:55:75:e7:e5:34: 2b:db:6d:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSAyBxIcjV+Bfp7m5NjMOWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlZjI1MGY2NmRkMzBjM2I3NTQ0MzBhODVkNTMyMzZmMTcz MzFiN2YwHhcNMjUxMjEyMTAwMjMzWhcNMjUxMjEzMTAwMjMzWjAzMTEwLwYDVQQD EyhjMWZkOGViNTQyYWI3NWM1YjAwMTkwZjExM2M2MjczNjgxMWRhNjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvvr1sjb4lg4pJ3r1SGTIaKjXx9B 3P3z5OlhqMdcUeHUe4pgIPavee230eOWN7e9LHkVO+RuuAz70L/1ngQ/RYyp8KMY zKQHP11ji07CBfAKad8ADZwdUEtdPOzfLbF5rzzqH7dVEpVufK48V2K4GgMnYC4Q Wq+I8RYYGuXJwN2cgJV2Cu61AAnXu+7S/1VeuJi4RXBChxloOar3WuN3jcb5BH4E bfe+6uySdP6ewOzDk2iW5v5A+Y9CPLZhVQfnEpxbsJwms8whGUbDNStxJfrKocb5 qlSt41v/iN0V5eSBRCqO9NxOkCXQYlqJYL8lcnr1t7mQ394Gcme1OUvxtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMH9jrVCq3XFsAGQ8RPGJzaBHaacMB8GA1UdIwQY MBaAFA7yUPZt0ww7dUQwqF1TI28XMxt/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHZKUTltM1RERHQxUkRDb1hWTWpieGN6RzM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85OTlkZDMtODhmNy00MmMyLWFmZjUt ODFkNWFhYzAzNDk2LzEvRHZKUTltM1RERHQxUkRDb1hWTWpieGN6RzM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy85OTlkZDMtODhmNy00MmMyLWFmZjUtODFkNWFhYzAzNDk2 LzEvRHZKUTltM1RERHQxUkRDb1hWTWpieGN6RzM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcVsAdSp+ 17oqN/8zk8BnRL20blSoLBdXL9fizjlQSVD+bCsoaA3RpkI3tbSJOLhv9r2YyBlr oNuC1JjdsNeXFcSPmFelaZeBVPlIA6iOTS0SXNZjszfMwSIUjPRZyZvdBF2jbOrF SE+AUG54bjdJqOSn9CQOlOWrz/5aYe+CH5bmwgu/aN53dWeoWAh+bOWs0uxQ2zIV NTaPCa+Wwj9EnrC+OhBoMPoLnDAq/UC4SbypMGFQFARlUhEtA7gGGzhSIootkd47 1PcCvzReJFfO1j5KzXpwtb2SDBau7G2cJf6w8dvB9JdzvM2l8n/QbCTTE6gDFCYD H1V15+U0K9tt7w== -----END CERTIFICATE-----Generated at Fri Dec 12 14:40:59 2025 by rpki-client