This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft File: DghrZ9iYllO662i40kq56b0Mryo.mft (raw, json) Hash identifier: wFPSHWPcTXdfeL42N5p37knCPEXf42Hfx/m4dZr8GBw= Subject key identifier: 0E:8D:44:7C:C5:E6:C2:14:5E:48:2C:EC:61:A2:F2:F7:1B:DE:5D:2D Authority key identifier: 0E:08:6B:67:D8:98:96:53:BA:EB:68:B8:D2:4A:B9:E9:BD:0C:AF:2A Certificate issuer: /CN=0e086b67d8989653baeb68b8d24ab9e9bd0caf2a Certificate serial: 019AFC55A0595857551FCB7C725A2659B0F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft Manifest number: 11E1 Signing time: Mon 08 Dec 2025 05:01:01 +0000 Manifest this update: Mon 08 Dec 2025 05:01:01 +0000 Manifest next update: Tue 09 Dec 2025 05:01:01 +0000 Files and hashes: 1: DghrZ9iYllO662i40kq56b0Mryo.crl (hash: Convpj85gd7Vuvx4efafGRuBVhvnpVNgcZu5W8r3Cz0=) 2: XKbuE11HMiW-d3-7SHwE1VaECgw.roa (hash: iROyh9ucuOmjws3pOPkYjHDlUGlInLoKUEPjUvuWoZE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:55:a0:59:58:57:55:1f:cb:7c:72:5a:26:59:b0:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e086b67d8989653baeb68b8d24ab9e9bd0caf2a Validity Not Before: Dec 8 05:01:01 2025 GMT Not After : Dec 9 05:01:01 2025 GMT Subject: CN=0e8d447cc5e6c2145e482cec61a2f2f71bde5d2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1d:33:ce:db:b9:97:a5:42:3f:ed:a2:39:d5: c6:6e:89:c6:4c:14:f2:f2:03:62:22:0a:71:d8:45: 4e:6f:44:e1:81:5f:03:57:13:7b:d6:a0:d3:71:ad: ff:5b:b2:78:d7:68:f6:bf:f5:2c:13:c2:fa:1f:3d: 54:1a:28:73:e0:50:4f:96:a0:55:eb:a1:8e:38:87: 3e:44:b7:ce:f8:3a:17:e0:4a:5a:3d:b5:1f:b6:03: 8b:12:8f:46:4e:2c:e0:ab:1e:d4:d1:7c:cc:d8:57: ac:8d:3f:78:e9:9a:34:48:41:65:72:f1:a0:5b:50: 1a:1a:f7:00:92:df:cf:1c:df:fd:c4:c0:b6:4a:38: b3:c3:45:2c:56:4a:7c:e0:a8:90:21:cb:3e:15:24: 13:0a:3c:c2:3a:1f:bf:7c:8c:0a:15:e1:9e:31:a9: 10:06:ed:76:9d:56:13:fb:11:46:70:8f:33:ae:ce: c3:6e:84:e9:3e:56:9e:32:b1:71:71:e2:81:ae:b3: d1:2a:31:95:39:3d:f5:c3:bf:02:d1:70:5e:82:a4: e0:07:e2:15:74:55:55:40:4b:dc:41:64:65:8c:7d: 6d:36:15:64:f4:00:c3:66:1f:13:af:c1:40:ee:48: 57:b0:48:d9:9a:4c:48:d4:26:eb:10:67:fb:22:04: 93:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:8D:44:7C:C5:E6:C2:14:5E:48:2C:EC:61:A2:F2:F7:1B:DE:5D:2D X509v3 Authority Key Identifier: keyid:0E:08:6B:67:D8:98:96:53:BA:EB:68:B8:D2:4A:B9:E9:BD:0C:AF:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:57:1f:8a:d0:5f:8e:ef:a7:ad:2f:63:94:52:b1:ef:62:cc: f6:fd:60:96:78:62:cf:3d:f6:a2:e8:5f:1f:9e:41:21:2b:27: ee:c9:35:75:99:b5:cc:e2:ad:e0:f1:e4:a6:50:e5:17:fb:84: bb:c1:04:14:84:52:5f:9b:3a:03:b3:25:33:e1:19:2c:2c:75: b7:d0:5f:8e:b8:87:17:17:98:2b:2c:be:55:1f:59:24:73:ad: 21:3a:4e:6f:11:09:bf:e7:b4:91:f5:91:41:f4:d2:de:25:0c: 5d:3c:61:21:cc:8c:a4:c4:07:17:8d:6d:13:6f:b8:14:65:e9: 57:c2:69:d4:79:ed:4f:5e:47:0d:45:8a:90:ba:69:42:04:63: 10:94:54:22:bf:9e:55:a1:05:a0:ee:73:25:22:0b:01:9b:35: ff:df:ee:4e:95:4e:be:27:0d:4c:0b:1b:a9:f9:ce:67:30:c0: 9d:09:7e:a5:27:bf:5e:1a:92:78:86:ea:31:78:b6:d6:b2:71: f1:a4:aa:1f:b5:65:3d:5e:b9:77:06:43:8e:f1:b4:48:93:46: e1:29:8e:9e:6d:aa:94:12:83:87:6d:49:a7:68:ac:f8:1d:dd: 5c:3d:ba:c1:50:70:02:c9:60:79:16:0c:b9:f9:91:c3:d9:45: 44:10:2c:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr8VaBZWFdVH8t8clomWbDwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMDg2YjY3ZDg5ODk2NTNiYWViNjhiOGQyNGFiOWU5YmQw Y2FmMmEwHhcNMjUxMjA4MDUwMTAxWhcNMjUxMjA5MDUwMTAxWjAzMTEwLwYDVQQD EygwZThkNDQ3Y2M1ZTZjMjE0NWU0ODJjZWM2MWEyZjJmNzFiZGU1ZDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyB0zztu5l6VCP+2iOdXGbonGTBTy 8gNiIgpx2EVOb0ThgV8DVxN71qDTca3/W7J412j2v/UsE8L6Hz1UGihz4FBPlqBV 66GOOIc+RLfO+DoX4EpaPbUftgOLEo9GTizgqx7U0XzM2FesjT946Zo0SEFlcvGg W1AaGvcAkt/PHN/9xMC2Sjizw0UsVkp84KiQIcs+FSQTCjzCOh+/fIwKFeGeMakQ Bu12nVYT+xFGcI8zrs7DboTpPlaeMrFxceKBrrPRKjGVOT31w78C0XBegqTgB+IV dFVVQEvcQWRljH1tNhVk9ADDZh8Tr8FA7khXsEjZmkxI1CbrEGf7IgST3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA6NRHzF5sIUXkgs7GGi8vcb3l0tMB8GA1UdIwQY MBaAFA4Ia2fYmJZTuutouNJKuem9DK8qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGdoclo5aVlsbE82NjJpNDBrcTU2YjBNcnlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8zNzk2ZmEtYzAyZS00NWY5LWExYTQt NjIyYmI0ODk5ODg3LzEvRGdoclo5aVlsbE82NjJpNDBrcTU2YjBNcnlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8zNzk2ZmEtYzAyZS00NWY5LWExYTQtNjIyYmI0ODk5ODg3 LzEvRGdoclo5aVlsbE82NjJpNDBrcTU2YjBNcnlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnVcfitBf ju+nrS9jlFKx72LM9v1glnhizz32ouhfH55BISsn7sk1dZm1zOKt4PHkplDlF/uE u8EEFIRSX5s6A7MlM+EZLCx1t9BfjriHFxeYKyy+VR9ZJHOtITpObxEJv+e0kfWR QfTS3iUMXTxhIcyMpMQHF41tE2+4FGXpV8Jp1HntT15HDUWKkLppQgRjEJRUIr+e VaEFoO5zJSILAZs1/9/uTpVOvicNTAsbqfnOZzDAnQl+pSe/XhqSeIbqMXi21rJx 8aSqH7VlPV65dwZDjvG0SJNG4SmOnm2qlBKDh21Jp2is+B3dXD26wVBwAslgeRYM ufmRw9lFRBAsSQ== -----END CERTIFICATE-----Generated at Mon Dec 8 11:31:56 2025 by rpki-client