This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft File: dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft (raw, json) Hash identifier: KAc0qvFV7OtjK8avjfCEdIqoKC/eYjzvfAHRXTCD5ko= Subject key identifier: FE:4C:FC:45:57:A1:C3:3C:F8:8D:DD:88:3C:EC:74:D0:9B:25:AF:8E Authority key identifier: 74:6C:0E:1A:73:3A:D8:33:BC:BE:50:A8:12:44:8B:F5:E0:99:E9:5F Certificate issuer: /CN=746c0e1a733ad833bcbe50a812448bf5e099e95f Certificate serial: 019AF12ED34EF109711636A7479336587A62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft Manifest number: 0C1C Signing time: Sat 06 Dec 2025 01:02:48 +0000 Manifest this update: Sat 06 Dec 2025 01:02:48 +0000 Manifest next update: Sun 07 Dec 2025 01:02:48 +0000 Files and hashes: 1: EkI17AhjtH4o6y1KK4g_wzf3KNE.roa (hash: Mqae8JvuYfzZf4ghYC7/qSTNS8cE9NEKQ8xHhpacTOs=) 2: dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl (hash: ZQDfSfTJe/J2ERlMelxNbM0u78vmRuL44OPwE32QZTw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:d3:4e:f1:09:71:16:36:a7:47:93:36:58:7a:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746c0e1a733ad833bcbe50a812448bf5e099e95f Validity Not Before: Dec 6 01:02:48 2025 GMT Not After : Dec 7 01:02:48 2025 GMT Subject: CN=fe4cfc4557a1c33cf88ddd883cec74d09b25af8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:95:c9:31:2b:f3:e5:d0:c4:c3:8b:53:c8:85: 33:86:a9:9b:e9:6d:cb:d2:b0:9f:53:e7:c7:01:60: 30:bb:c3:be:fa:e6:96:75:7f:9c:dd:ac:39:16:ea: 39:e0:af:37:13:21:93:e5:d3:df:b7:8c:6c:b1:ad: 3a:c4:02:77:39:6c:5f:f1:29:25:2e:a9:af:30:32: 1e:f4:7d:9d:62:b2:93:6f:ce:66:96:77:15:26:8f: 16:d4:39:04:0e:95:7a:0c:0b:02:6b:df:12:4b:58: 93:a9:3f:23:2e:98:10:1c:c2:9a:30:fb:da:b5:7f: 81:b1:d3:fb:7a:1e:ff:c1:09:1d:c6:88:e0:91:f3: c7:88:46:3a:e1:e5:88:74:09:54:a6:29:87:8a:be: f3:4c:2d:b4:de:f5:e4:44:04:ae:61:f8:7e:a1:2c: 6f:d3:60:1c:39:4e:bf:e8:3d:32:67:52:41:42:5f: 35:b0:87:65:b0:eb:38:27:03:2e:66:4a:91:13:6c: fc:95:be:2a:5c:7f:f0:18:e6:e8:8f:fb:42:38:52: 09:ea:dd:5f:ee:5c:85:9b:3e:09:b2:a8:db:58:e3: cf:b3:38:07:59:8f:c3:2a:92:ba:b0:93:4a:83:49: 9f:d1:ce:0f:29:0b:8d:97:83:56:75:a1:7f:0f:6f: 95:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:4C:FC:45:57:A1:C3:3C:F8:8D:DD:88:3C:EC:74:D0:9B:25:AF:8E X509v3 Authority Key Identifier: keyid:74:6C:0E:1A:73:3A:D8:33:BC:BE:50:A8:12:44:8B:F5:E0:99:E9:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:18:4b:1f:c3:cf:7b:42:21:5d:72:07:e8:26:2e:d3:bf:3b: cb:ad:72:32:5e:8c:ab:d9:4c:ae:37:e0:88:92:57:a6:ae:9b: 27:ba:af:94:ac:7d:44:fc:d8:9e:cd:fe:df:a9:b8:60:ab:4b: 1f:ac:b4:aa:5a:b4:d6:60:b1:2c:c9:f5:4f:18:23:3b:11:e0: ec:b3:28:8f:64:e5:f3:40:b2:56:dd:4f:c4:42:df:3d:96:7c: ec:87:4b:8e:a4:ea:dd:9a:c9:c7:c5:04:86:cc:c4:5a:d6:eb: cf:bf:d7:a2:dc:e0:dd:a5:f5:93:89:da:34:ed:d2:64:d9:91: d5:81:bb:15:d0:a8:20:62:8b:74:bf:51:4e:de:e3:a9:66:78: f9:b3:91:5e:35:43:d9:27:97:03:ac:cd:6f:f0:23:83:5e:e0: ab:df:f1:15:01:5b:02:94:25:88:30:d8:d6:13:72:ad:b4:10: 9a:f6:57:6f:03:4d:eb:26:e3:c8:81:e8:17:da:60:8e:5c:be: 88:3a:21:fb:76:8e:ea:cb:7f:3f:29:be:f0:3f:b3:58:e3:be: 32:42:dd:a0:dc:52:5c:b6:0d:84:0e:ab:36:a3:6b:7f:c2:ba: 79:88:41:21:5a:cd:ac:88:d7:a5:3b:c2:3b:ae:40:d6:f0:90: c2:c0:0c:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLtNO8QlxFjanR5M2WHpiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NmMwZTFhNzMzYWQ4MzNiY2JlNTBhODEyNDQ4YmY1ZTA5 OWU5NWYwHhcNMjUxMjA2MDEwMjQ4WhcNMjUxMjA3MDEwMjQ4WjAzMTEwLwYDVQQD EyhmZTRjZmM0NTU3YTFjMzNjZjg4ZGRkODgzY2VjNzRkMDliMjVhZjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JXJMSvz5dDEw4tTyIUzhqmb6W3L 0rCfU+fHAWAwu8O++uaWdX+c3aw5Fuo54K83EyGT5dPft4xssa06xAJ3OWxf8Skl LqmvMDIe9H2dYrKTb85mlncVJo8W1DkEDpV6DAsCa98SS1iTqT8jLpgQHMKaMPva tX+BsdP7eh7/wQkdxojgkfPHiEY64eWIdAlUpimHir7zTC203vXkRASuYfh+oSxv 02AcOU6/6D0yZ1JBQl81sIdlsOs4JwMuZkqRE2z8lb4qXH/wGOboj/tCOFIJ6t1f 7lyFmz4JsqjbWOPPszgHWY/DKpK6sJNKg0mf0c4PKQuNl4NWdaF/D2+VNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP5M/EVXocM8+I3diDzsdNCbJa+OMB8GA1UdIwQY MBaAFHRsDhpzOtgzvL5QqBJEi/XgmelfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEd3T0duTTYyRE84dmxDb0VrU0w5ZUNaNlY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC82MWVhNDgtM2UzOS00MWU4LWIyMmEt NmM5YTgyNTU4MWNiLzEvZEd3T0duTTYyRE84dmxDb0VrU0w5ZUNaNlY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC82MWVhNDgtM2UzOS00MWU4LWIyMmEtNmM5YTgyNTU4MWNi LzEvZEd3T0duTTYyRE84dmxDb0VrU0w5ZUNaNlY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhRhLH8PP e0IhXXIH6CYu0787y61yMl6Mq9lMrjfgiJJXpq6bJ7qvlKx9RPzYns3+36m4YKtL H6y0qlq01mCxLMn1TxgjOxHg7LMoj2Tl80CyVt1PxELfPZZ87IdLjqTq3ZrJx8UE hszEWtbrz7/Xotzg3aX1k4naNO3SZNmR1YG7FdCoIGKLdL9RTt7jqWZ4+bORXjVD 2SeXA6zNb/Ajg17gq9/xFQFbApQliDDY1hNyrbQQmvZXbwNN6ybjyIHoF9pgjly+ iDoh+3aO6st/Pym+8D+zWOO+MkLdoNxSXLYNhA6rNqNrf8K6eYhBIVrNrIjXpTvC O65A1vCQwsAMqA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:22 2025 by rpki-client