This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft File: DgE0-vunLgYznK3FXV8TuuSCsS0.mft (raw, json) Hash identifier: mJpJmwihXlshi5VdjFSCSaXz8a8jB1WRK+7qPs/oki8= Subject key identifier: E0:D5:E5:CB:D0:BC:6A:3F:43:B4:83:DF:23:F2:B6:90:FD:5F:91:52 Authority key identifier: 0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D Certificate issuer: /CN=0e0134fafba72e06339cadc55d5f13bae482b12d Certificate serial: 019B0E5B9D9BFDDB48EA4F3BD900C1D5FD39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft Manifest number: 1772 Signing time: Thu 11 Dec 2025 17:00:43 +0000 Manifest this update: Thu 11 Dec 2025 17:00:43 +0000 Manifest next update: Fri 12 Dec 2025 17:00:43 +0000 Files and hashes: 1: DgE0-vunLgYznK3FXV8TuuSCsS0.crl (hash: 7PLB66GsxwIoDZZ6wvXu3U9Z4pICRPqEbg6m2cup7PY=) 2: PGpk2qjaEHATBO5WJqpwQvvo-t4.roa (hash: sxUY6k6RZnsEb5wstWgn4/zoH8gCs5vVrsT2wup6jP0=) 3: flUmY1UuhQ4umekHZTdOQbHf_3c.roa (hash: +LH2doQCe/pHrWkfv/54Ur54xmP0ZJEt0aBXtrY/eUQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5b:9d:9b:fd:db:48:ea:4f:3b:d9:00:c1:d5:fd:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e0134fafba72e06339cadc55d5f13bae482b12d Validity Not Before: Dec 11 17:00:43 2025 GMT Not After : Dec 12 17:00:43 2025 GMT Subject: CN=e0d5e5cbd0bc6a3f43b483df23f2b690fd5f9152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e9:f7:6b:96:ed:48:5e:97:e5:7a:cb:c5:f4: a3:af:7e:e7:f5:92:23:c3:fb:bf:46:be:95:3c:ed: fd:2a:e7:56:13:89:f7:37:33:e5:6c:60:76:2a:dc: 25:bd:1a:fd:59:12:aa:7c:af:80:10:de:00:f3:dc: 38:cb:33:2d:90:0b:b5:29:e3:48:50:d3:12:c7:91: f5:f3:a3:c9:aa:29:de:b5:4d:2c:b4:7a:0e:a0:9e: 41:ec:11:35:2f:34:db:7b:21:45:13:09:e5:b1:bd: 59:12:e6:e5:5c:12:71:d4:70:3c:b6:0c:30:bd:02: b5:09:a0:f0:59:1b:6f:70:97:38:6a:dc:bd:3f:46: 88:ed:e3:d3:d7:34:4e:78:5a:56:f0:44:11:fd:e0: 0f:17:2b:d4:50:06:ba:04:8c:7c:65:f4:2a:10:08: cf:ae:dd:fd:f8:37:2d:6f:4b:8b:d8:86:33:61:8e: 37:67:22:bd:d1:5e:21:1b:12:65:b3:e8:fd:dc:30: c7:f3:4e:47:a1:1f:2f:e9:8f:94:16:7d:67:31:e2: 6a:83:96:32:e7:63:0e:e7:d8:20:a4:f5:8a:d3:ac: 32:4b:59:19:e2:92:8d:c4:e2:a0:ba:95:f7:7f:c9: 7b:c1:77:ae:37:ed:28:dc:09:8f:4c:2e:43:53:14: 61:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:D5:E5:CB:D0:BC:6A:3F:43:B4:83:DF:23:F2:B6:90:FD:5F:91:52 X509v3 Authority Key Identifier: keyid:0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:fc:0c:8d:58:ab:4b:34:8c:cc:af:57:2f:28:e0:de:92:57: 49:00:0c:7f:2d:71:1d:49:0f:0c:bc:79:d2:86:3a:3e:ac:73: 54:0b:8a:ed:e0:c6:db:47:3a:5d:3c:34:3d:be:08:b7:76:d6: 92:3b:e8:0c:36:3f:45:da:72:b2:b4:c4:32:2b:73:55:9d:68: 1a:27:ec:10:bf:ff:23:9c:7f:4d:3c:f8:44:27:fc:79:a5:17: a8:b1:b0:3f:ee:b8:fb:4b:71:4a:71:1a:10:47:64:00:2d:8d: fb:99:f0:d5:50:71:5c:7d:3d:5a:7b:3f:c3:98:e2:1a:ba:0f: 2d:21:20:d4:e2:12:3d:d7:61:4d:b0:90:0b:71:66:82:f8:9f: dd:86:bd:76:3e:2e:f8:5c:75:32:cd:f6:59:24:fc:49:27:78: ea:a0:19:14:29:4d:1e:d1:9a:4e:c8:bd:ff:4f:b7:98:2f:50: 22:b2:35:91:e9:2f:15:10:da:04:7c:43:15:05:3e:f1:ff:db: 19:d4:3a:41:7c:ec:26:13:92:5a:5a:ad:ba:72:d0:73:41:7b: 0b:80:0d:95:4f:90:80:7e:01:82:d8:92:d8:f9:8f:2e:5c:74: bd:34:ad:3f:b8:9f:83:8c:bd:4b:17:fe:0c:7f:49:3b:9c:07: 0b:64:af:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOW52b/dtI6k872QDB1f05MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMDEzNGZhZmJhNzJlMDYzMzljYWRjNTVkNWYxM2JhZTQ4 MmIxMmQwHhcNMjUxMjExMTcwMDQzWhcNMjUxMjEyMTcwMDQzWjAzMTEwLwYDVQQD EyhlMGQ1ZTVjYmQwYmM2YTNmNDNiNDgzZGYyM2YyYjY5MGZkNWY5MTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmen3a5btSF6X5XrLxfSjr37n9ZIj w/u/Rr6VPO39KudWE4n3NzPlbGB2KtwlvRr9WRKqfK+AEN4A89w4yzMtkAu1KeNI UNMSx5H186PJqinetU0stHoOoJ5B7BE1LzTbeyFFEwnlsb1ZEublXBJx1HA8tgww vQK1CaDwWRtvcJc4aty9P0aI7ePT1zROeFpW8EQR/eAPFyvUUAa6BIx8ZfQqEAjP rt39+Dctb0uL2IYzYY43ZyK90V4hGxJls+j93DDH805HoR8v6Y+UFn1nMeJqg5Yy 52MO59ggpPWK06wyS1kZ4pKNxOKgupX3f8l7wXeuN+0o3AmPTC5DUxRhhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFODV5cvQvGo/Q7SD3yPytpD9X5FSMB8GA1UdIwQY MBaAFA4BNPr7py4GM5ytxV1fE7rkgrEtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGdFMC12dW5MZ1l6bkszRlhWOFR1dVNDc1MwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9hODIxZGYtNmI0OS00NDg5LThhNzct ZDEyNDZjYzJjMzRlLzEvRGdFMC12dW5MZ1l6bkszRlhWOFR1dVNDc1MwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9hODIxZGYtNmI0OS00NDg5LThhNzctZDEyNDZjYzJjMzRl LzEvRGdFMC12dW5MZ1l6bkszRlhWOFR1dVNDc1MwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtfwMjVir SzSMzK9XLyjg3pJXSQAMfy1xHUkPDLx50oY6PqxzVAuK7eDG20c6XTw0Pb4It3bW kjvoDDY/RdpysrTEMitzVZ1oGifsEL//I5x/TTz4RCf8eaUXqLGwP+64+0txSnEa EEdkAC2N+5nw1VBxXH09Wns/w5jiGroPLSEg1OISPddhTbCQC3Fmgvif3Ya9dj4u +Fx1Ms32WST8SSd46qAZFClNHtGaTsi9/0+3mC9QIrI1kekvFRDaBHxDFQU+8f/b GdQ6QXzsJhOSWlqtunLQc0F7C4ANlU+QgH4BgtiS2PmPLlx0vTStP7ifg4y9Sxf+ DH9JO5wHC2Sv2A== -----END CERTIFICATE-----Generated at Fri Dec 12 00:20:32 2025 by rpki-client