This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft File: DWb-4PMIhlf7_SOngt9Xec-ROmM.mft (raw, json) Hash identifier: 0/dafzjT2+4TfdYmzAVALz23vd/QT8ByT+xkc6XotoE= Subject key identifier: 76:FC:A7:D5:BD:24:10:C6:6A:D6:E9:2D:E8:8F:80:2F:2D:30:66:F2 Authority key identifier: 0D:66:FE:E0:F3:08:86:57:FB:FD:23:A7:82:DF:57:79:CF:91:3A:63 Certificate issuer: /CN=0d66fee0f3088657fbfd23a782df5779cf913a63 Certificate serial: 019B19BBBA18906265ABBE2F8C9821DE9938 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWb-4PMIhlf7_SOngt9Xec-ROmM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft Manifest number: 1036 Signing time: Sat 13 Dec 2025 22:01:31 +0000 Manifest this update: Sat 13 Dec 2025 22:01:31 +0000 Manifest next update: Sun 14 Dec 2025 22:01:31 +0000 Files and hashes: 1: DWb-4PMIhlf7_SOngt9Xec-ROmM.crl (hash: thvx2rve+o17TYk61cQDZ2uoAW/1UkhNqfvWvcXeRWs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft rsync://rpki.ripe.net/repository/DEFAULT/DWb-4PMIhlf7_SOngt9Xec-ROmM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bb:ba:18:90:62:65:ab:be:2f:8c:98:21:de:99:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d66fee0f3088657fbfd23a782df5779cf913a63 Validity Not Before: Dec 13 22:01:31 2025 GMT Not After : Dec 14 22:01:31 2025 GMT Subject: CN=76fca7d5bd2410c66ad6e92de88f802f2d3066f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1a:94:7a:8e:21:f7:6c:72:4e:e7:1b:36:fd: 77:dc:9d:12:30:16:0e:72:2f:29:35:50:20:d7:8a: e3:11:b7:07:9a:f7:ad:2d:d6:3f:bd:b8:ff:01:ef: 32:c3:09:ce:0b:9e:c8:ae:98:24:54:55:59:81:ad: a1:62:0f:23:08:70:b6:99:cb:69:f5:6a:f9:c3:53: 76:24:d6:3e:e9:58:85:8e:49:fe:cd:eb:77:ba:89: 9b:ca:37:04:7f:b4:29:ce:0e:15:1f:81:8d:a2:08: 98:e3:59:26:d7:3d:de:c8:21:56:9e:87:f6:08:14: 38:82:f0:35:71:be:74:f4:08:46:5b:86:36:49:a7: 9a:97:be:2b:77:c3:f6:5a:2a:29:db:0f:1a:c3:f4: db:89:fc:0e:c4:9d:90:c8:e9:d2:e4:ec:02:fd:25: 2d:bc:38:97:e0:eb:f9:f4:1c:90:f5:2f:cd:86:49: 4e:f0:34:2c:c4:45:17:0c:24:ed:ca:2f:65:d8:8f: 25:fe:18:1a:cf:72:39:0a:eb:45:e8:67:af:58:23: c1:9a:d0:82:79:fe:3e:14:d9:0c:fd:35:96:74:ad: 30:8d:30:01:ee:df:a6:7a:3f:e8:98:d3:a0:9f:ec: 21:c3:55:20:36:f3:c8:6a:eb:d5:f9:6a:3e:9e:56: 7c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:FC:A7:D5:BD:24:10:C6:6A:D6:E9:2D:E8:8F:80:2F:2D:30:66:F2 X509v3 Authority Key Identifier: keyid:0D:66:FE:E0:F3:08:86:57:FB:FD:23:A7:82:DF:57:79:CF:91:3A:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWb-4PMIhlf7_SOngt9Xec-ROmM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:74:0e:fa:51:f1:1e:5e:76:50:fb:28:6c:0f:e8:11:35:86: c5:5b:cc:77:8d:d2:16:42:ec:cb:ee:0e:4a:5b:8c:a2:57:70: c8:f3:58:39:64:77:67:fb:23:5a:0c:35:cc:83:19:92:01:1b: 7a:b8:df:b9:e5:f0:33:09:30:e7:26:2d:f6:2f:c6:ce:88:c1: 36:d2:01:ca:79:24:ef:e6:97:53:fc:f3:f5:4c:1c:70:9d:29: 2c:8d:a5:ec:83:b2:c3:df:8f:4b:9f:29:c2:26:12:4c:e2:86: a1:bf:0d:76:18:14:dc:25:27:79:94:7a:0a:8a:83:f8:50:a1: 01:06:7f:8f:ce:00:48:4f:70:46:5e:1b:d9:8a:fb:58:b0:e9: 63:cb:2b:70:35:af:37:ae:3e:94:6a:92:54:f2:e3:98:a0:73: 95:73:13:c3:a9:9a:8e:a1:2d:70:a3:1c:58:5e:21:83:c8:f7: 5f:9f:df:7c:cb:f1:8f:c3:2f:e2:08:c7:7b:35:32:28:c7:d3: 2e:7c:ab:68:83:bd:ac:11:6f:00:df:7d:d5:5b:ef:a9:15:09: bf:64:a5:4a:33:15:1b:cc:04:64:b5:7e:c2:4b:0f:08:d6:ef: f7:46:a3:b8:5c:ab:69:9f:ef:f1:29:f0:9e:e5:3e:b8:14:6f: 3f:7e:68:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZu7oYkGJlq74vjJgh3pk4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNjZmZWUwZjMwODg2NTdmYmZkMjNhNzgyZGY1Nzc5Y2Y5 MTNhNjMwHhcNMjUxMjEzMjIwMTMxWhcNMjUxMjE0MjIwMTMxWjAzMTEwLwYDVQQD Eyg3NmZjYTdkNWJkMjQxMGM2NmFkNmU5MmRlODhmODAyZjJkMzA2NmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxqUeo4h92xyTucbNv133J0SMBYO ci8pNVAg14rjEbcHmvetLdY/vbj/Ae8ywwnOC57IrpgkVFVZga2hYg8jCHC2mctp 9Wr5w1N2JNY+6ViFjkn+zet3uombyjcEf7Qpzg4VH4GNogiY41km1z3eyCFWnof2 CBQ4gvA1cb509AhGW4Y2Saeal74rd8P2Wiop2w8aw/TbifwOxJ2QyOnS5OwC/SUt vDiX4Ov59ByQ9S/NhklO8DQsxEUXDCTtyi9l2I8l/hgaz3I5CutF6GevWCPBmtCC ef4+FNkM/TWWdK0wjTAB7t+mej/omNOgn+whw1UgNvPIauvV+Wo+nlZ8TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHb8p9W9JBDGatbpLeiPgC8tMGbyMB8GA1UdIwQY MBaAFA1m/uDzCIZX+/0jp4LfV3nPkTpjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFdiLTRQTUlobGY3X1NPbmd0OVhlYy1ST21NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9jYzc2YjQtZTcxMS00NGE1LWI4MjMt OGU2ZWZmMTZhNmY4LzEvRFdiLTRQTUlobGY3X1NPbmd0OVhlYy1ST21NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy9jYzc2YjQtZTcxMS00NGE1LWI4MjMtOGU2ZWZmMTZhNmY4 LzEvRFdiLTRQTUlobGY3X1NPbmd0OVhlYy1ST21NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWHQO+lHx Hl52UPsobA/oETWGxVvMd43SFkLsy+4OSluMoldwyPNYOWR3Z/sjWgw1zIMZkgEb erjfueXwMwkw5yYt9i/GzojBNtIBynkk7+aXU/zz9UwccJ0pLI2l7IOyw9+PS58p wiYSTOKGob8NdhgU3CUneZR6CoqD+FChAQZ/j84ASE9wRl4b2Yr7WLDpY8srcDWv N64+lGqSVPLjmKBzlXMTw6majqEtcKMcWF4hg8j3X5/ffMvxj8Mv4gjHezUyKMfT LnyraIO9rBFvAN991VvvqRUJv2SlSjMVG8wEZLV+wksPCNbv90ajuFyraZ/v8Snw nuU+uBRvP35ohQ== -----END CERTIFICATE-----Generated at Sun Dec 14 03:28:57 2025 by rpki-client