This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft File: dp1cUsMVfllF5mO5LtRALGBhbjs.mft (raw, json) Hash identifier: T+uPdu9e2oxr8m5UGVrdTIdrM1p4om3PaaD0b+BsOZY= Subject key identifier: 87:C2:D2:FB:59:5E:DE:54:41:7F:DF:31:12:21:7E:D5:1A:06:C6:8F Authority key identifier: 76:9D:5C:52:C3:15:7E:59:45:E6:63:B9:2E:D4:40:2C:60:61:6E:3B Certificate issuer: /CN=769d5c52c3157e5945e663b92ed4402c60616e3b Certificate serial: 019AF163D6A5BFE708ECD474065DE8602421 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft Manifest number: 0445 Signing time: Sat 06 Dec 2025 02:00:43 +0000 Manifest this update: Sat 06 Dec 2025 02:00:43 +0000 Manifest next update: Sun 07 Dec 2025 02:00:43 +0000 Files and hashes: 1: 08Xj6P3LiBkWV-XyPE1sfuebHwg.roa (hash: GOb53BquANot8lO8WUgTLWPiXo2ewEYSLTJKkoVM5kk=) 2: dp1cUsMVfllF5mO5LtRALGBhbjs.crl (hash: Ur0bKhFBoE+9OVZ8/a6V3zW4jnNmmjdxDdjnX2DDCDM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.crl rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:d6:a5:bf:e7:08:ec:d4:74:06:5d:e8:60:24:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=769d5c52c3157e5945e663b92ed4402c60616e3b Validity Not Before: Dec 6 02:00:43 2025 GMT Not After : Dec 7 02:00:43 2025 GMT Subject: CN=87c2d2fb595ede54417fdf3112217ed51a06c68f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c5:80:dd:19:5e:00:94:f4:28:38:83:b8:f8: 3d:63:39:63:99:bd:c3:08:16:bc:6d:54:1a:2f:12: 5e:a2:8c:3c:5b:1c:ba:4d:b6:6d:eb:f6:22:ff:60: 63:d8:cb:5b:92:9b:32:63:2f:f9:6d:a1:d0:a4:69: 73:44:e3:00:1d:d3:05:f2:83:48:46:7a:82:a2:80: 31:55:05:df:e2:4c:20:7d:3c:2d:73:66:fb:7d:e1: ed:d9:af:6d:52:e8:0b:2c:b1:4d:08:30:d5:c6:ae: 35:8c:5d:03:ab:ca:cb:25:01:16:3f:e3:d8:b0:5d: 15:d2:06:85:3b:e6:ba:39:42:6f:9b:22:c1:8d:17: 1e:58:2f:27:3c:d2:49:77:c6:15:d3:94:cc:9e:b9: 9e:5e:04:44:30:3b:36:24:a4:b7:37:7c:ce:55:a7: 9e:03:5c:df:6c:75:6a:a1:56:95:95:aa:c9:9c:26: 5b:c1:3e:33:4e:d7:66:e9:aa:28:24:c9:02:8c:b6: bb:e7:d1:a1:c4:25:b5:fd:3a:9f:2b:54:ff:89:5d: c8:d7:d4:03:d0:d7:0d:94:28:e2:8b:89:68:74:cf: 4c:95:6e:d0:ae:47:70:ce:49:be:21:4b:c3:d2:22: 48:25:32:a8:04:fc:45:ad:86:04:db:8b:99:ce:1e: 47:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C2:D2:FB:59:5E:DE:54:41:7F:DF:31:12:21:7E:D5:1A:06:C6:8F X509v3 Authority Key Identifier: keyid:76:9D:5C:52:C3:15:7E:59:45:E6:63:B9:2E:D4:40:2C:60:61:6E:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:5d:0c:7f:72:65:39:0e:5e:14:d9:42:21:4e:01:2d:f9:cc: 4d:8f:cc:2d:d9:6c:88:3d:a4:ef:9a:9b:44:3f:8f:27:66:8a: 55:a3:61:45:c9:01:c2:03:ca:f5:e7:5c:27:10:cb:40:51:66: b5:d2:07:55:e6:e1:31:dc:50:c5:f9:19:02:d9:ba:c7:2d:09: 8c:a2:32:83:62:e0:0f:ad:d6:58:82:62:e1:53:14:a8:db:8a: b9:a8:a9:66:6c:95:48:85:7f:f3:b1:dd:0e:14:e5:1c:d5:2e: 2a:72:00:71:27:84:ab:b7:e5:8c:d7:42:21:c4:36:00:f6:d8: 62:4a:ac:04:e1:3b:a5:51:fa:77:0c:20:79:d1:b8:84:85:4f: b6:79:2e:68:4e:49:0f:59:59:79:d6:a8:6e:69:c6:9b:03:a2: 47:b1:8e:32:77:0d:97:0c:af:95:79:82:28:ce:87:43:af:b7: 13:a0:d8:bd:50:a8:93:0f:29:eb:07:da:eb:82:39:4a:29:27: 8b:7a:8b:5e:bb:7a:10:ee:0c:4d:11:35:b8:3a:76:0f:ad:1b: 03:ba:48:d7:44:98:26:5e:58:18:08:02:1e:77:93:56:63:92: 94:d5:e7:3b:c7:a6:e3:61:c8:6f:1e:af:f2:2e:30:4a:b3:12: 5f:46:b9:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY9alv+cI7NR0Bl3oYCQhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2OWQ1YzUyYzMxNTdlNTk0NWU2NjNiOTJlZDQ0MDJjNjA2 MTZlM2IwHhcNMjUxMjA2MDIwMDQzWhcNMjUxMjA3MDIwMDQzWjAzMTEwLwYDVQQD Eyg4N2MyZDJmYjU5NWVkZTU0NDE3ZmRmMzExMjIxN2VkNTFhMDZjNjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sWA3RleAJT0KDiDuPg9Yzljmb3D CBa8bVQaLxJeoow8Wxy6TbZt6/Yi/2Bj2MtbkpsyYy/5baHQpGlzROMAHdMF8oNI RnqCooAxVQXf4kwgfTwtc2b7feHt2a9tUugLLLFNCDDVxq41jF0Dq8rLJQEWP+PY sF0V0gaFO+a6OUJvmyLBjRceWC8nPNJJd8YV05TMnrmeXgREMDs2JKS3N3zOVaee A1zfbHVqoVaVlarJnCZbwT4zTtdm6aooJMkCjLa759GhxCW1/TqfK1T/iV3I19QD 0NcNlCjii4lodM9MlW7Qrkdwzkm+IUvD0iJIJTKoBPxFrYYE24uZzh5HUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIfC0vtZXt5UQX/fMRIhftUaBsaPMB8GA1UdIwQY MBaAFHadXFLDFX5ZReZjuS7UQCxgYW47MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHAxY1VzTVZmbGxGNW1PNUx0UkFMR0JoYmpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jYzY2YjItMTI2Ny00NTE2LWEzOWYt Mzc2YjQ5ZDUyZDdlLzEvZHAxY1VzTVZmbGxGNW1PNUx0UkFMR0JoYmpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9jYzY2YjItMTI2Ny00NTE2LWEzOWYtMzc2YjQ5ZDUyZDdl LzEvZHAxY1VzTVZmbGxGNW1PNUx0UkFMR0JoYmpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb10Mf3Jl OQ5eFNlCIU4BLfnMTY/MLdlsiD2k75qbRD+PJ2aKVaNhRckBwgPK9edcJxDLQFFm tdIHVebhMdxQxfkZAtm6xy0JjKIyg2LgD63WWIJi4VMUqNuKuaipZmyVSIV/87Hd DhTlHNUuKnIAcSeEq7fljNdCIcQ2APbYYkqsBOE7pVH6dwwgedG4hIVPtnkuaE5J D1lZedaobmnGmwOiR7GOMncNlwyvlXmCKM6HQ6+3E6DYvVCokw8p6wfa64I5Sikn i3qLXrt6EO4MTRE1uDp2D60bA7pI10SYJl5YGAgCHneTVmOSlNXnO8em42HIbx6v 8i4wSrMSX0a5uA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:09:36 2025 by rpki-client