This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft File: DwgImqp8KDZUvNpQqTNGTnEnkbA.mft (raw, json) Hash identifier: 6w4usDdJwO22om4Fma0Jmoi5hQoX/QoZtqXYdB7QfSM= Subject key identifier: 41:DC:6C:AA:52:A1:AD:A5:CB:B6:F7:A2:D0:5D:01:28:06:82:91:88 Authority key identifier: 0F:08:08:9A:AA:7C:28:36:54:BC:DA:50:A9:33:46:4E:71:27:91:B0 Certificate issuer: /CN=0f08089aaa7c283654bcda50a933464e712791b0 Certificate serial: 019AF389FCC35A77DF8FB7CCA0A9415E54FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft Manifest number: 1410 Signing time: Sat 06 Dec 2025 12:01:37 +0000 Manifest this update: Sat 06 Dec 2025 12:01:37 +0000 Manifest next update: Sun 07 Dec 2025 12:01:37 +0000 Files and hashes: 1: DwgImqp8KDZUvNpQqTNGTnEnkbA.crl (hash: NzsigueVfxig9nP28+KGhtTndq39OjD6TVjrT0O/+7c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:fc:c3:5a:77:df:8f:b7:cc:a0:a9:41:5e:54:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f08089aaa7c283654bcda50a933464e712791b0 Validity Not Before: Dec 6 12:01:37 2025 GMT Not After : Dec 7 12:01:37 2025 GMT Subject: CN=41dc6caa52a1ada5cbb6f7a2d05d012806829188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f1:2f:d0:8a:21:04:7f:65:f2:7f:30:e0:76: d7:16:47:f7:3e:85:0d:84:53:79:74:5e:31:81:0d: af:16:1d:1b:57:14:e5:24:13:9f:96:8e:a3:da:38: cb:eb:8b:63:d1:26:17:f4:56:52:3f:18:31:a8:3f: 7b:37:ab:fa:b0:24:9a:05:f1:b4:03:40:e6:21:50: 95:f0:21:00:2f:04:ab:b1:52:76:8e:4b:1e:5e:c4: c3:2d:45:2e:da:a9:79:1a:9c:d5:cb:fc:53:a0:77: 7f:71:e0:55:a8:ac:57:13:ca:9b:e2:69:80:5e:5d: 02:e3:18:a1:2a:a1:56:f2:3b:d0:2a:f2:c7:03:8d: 46:3b:a6:04:99:6a:b4:a3:25:52:8c:f9:9a:fa:5e: ff:7e:46:7c:d0:e4:9b:f0:0d:36:e9:aa:f8:9b:25: d3:14:97:71:8e:a0:15:25:b7:b6:42:64:41:99:26: 2c:b0:00:86:ac:5f:a4:92:db:9a:2c:70:d9:2e:47: 1d:0f:c2:9c:a2:b9:31:80:42:8d:5e:f2:24:0c:8a: 93:4b:df:1f:23:c2:74:51:a4:c0:4c:b5:b2:9d:5f: 08:ec:54:37:d8:79:33:20:27:c3:38:28:40:f2:a8: 20:ec:2c:4f:38:4e:8e:8d:35:c7:35:7b:15:3f:a1: f9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:DC:6C:AA:52:A1:AD:A5:CB:B6:F7:A2:D0:5D:01:28:06:82:91:88 X509v3 Authority Key Identifier: keyid:0F:08:08:9A:AA:7C:28:36:54:BC:DA:50:A9:33:46:4E:71:27:91:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:71:0b:1e:b7:8b:3f:0e:52:4d:07:1a:11:6e:ea:d9:76:33: b9:09:8e:72:c8:c9:4a:8d:ce:06:fd:2f:5c:38:07:f1:8b:c6: 71:01:dd:4b:d1:c3:d1:d3:7c:7b:c3:0b:aa:9f:d1:2d:c3:ad: d7:9a:c6:44:dd:04:37:f0:1a:7d:5c:05:f1:04:20:58:d5:e0: 64:2c:54:30:74:92:13:56:f6:6e:47:98:70:bf:fd:93:40:4a: e2:62:55:bb:2e:51:c3:51:5e:10:34:13:3a:ee:f2:3f:e2:f1: 7b:2b:47:93:6a:2f:23:ce:ce:b7:17:48:7c:8c:17:21:85:8a: 7d:1e:9e:b4:b7:51:53:47:36:4f:05:08:23:b2:22:65:50:05: 38:d8:ba:9f:1f:72:87:cb:b1:1e:40:73:63:1b:c3:61:7d:01: ad:f3:e3:4b:2e:64:40:e6:13:eb:3e:83:10:2b:b5:57:bf:79: 9f:4e:53:a6:e2:2e:04:f2:f3:51:98:22:43:a0:d4:67:26:a8: 04:89:fd:19:4d:c9:a0:26:c9:bf:49:4f:57:00:62:a2:17:f3: f8:9d:a6:34:26:25:09:a7:05:43:e8:28:c1:2a:3f:2a:f0:0a: 45:a2:13:cc:95:31:63:0a:3e:38:3c:be:66:65:7b:65:d9:4a: 8f:b5:f1:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzifzDWnffj7fMoKlBXlT8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMDgwODlhYWE3YzI4MzY1NGJjZGE1MGE5MzM0NjRlNzEy NzkxYjAwHhcNMjUxMjA2MTIwMTM3WhcNMjUxMjA3MTIwMTM3WjAzMTEwLwYDVQQD Eyg0MWRjNmNhYTUyYTFhZGE1Y2JiNmY3YTJkMDVkMDEyODA2ODI5MTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvEv0IohBH9l8n8w4HbXFkf3PoUN hFN5dF4xgQ2vFh0bVxTlJBOflo6j2jjL64tj0SYX9FZSPxgxqD97N6v6sCSaBfG0 A0DmIVCV8CEALwSrsVJ2jkseXsTDLUUu2ql5GpzVy/xToHd/ceBVqKxXE8qb4mmA Xl0C4xihKqFW8jvQKvLHA41GO6YEmWq0oyVSjPma+l7/fkZ80OSb8A026ar4myXT FJdxjqAVJbe2QmRBmSYssACGrF+kktuaLHDZLkcdD8KcorkxgEKNXvIkDIqTS98f I8J0UaTATLWynV8I7FQ32HkzICfDOChA8qgg7CxPOE6OjTXHNXsVP6H5BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEHcbKpSoa2ly7b3otBdASgGgpGIMB8GA1UdIwQY MBaAFA8ICJqqfCg2VLzaUKkzRk5xJ5GwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHdnSW1xcDhLRFpVdk5wUXFUTkdUbkVua2JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9jYTc4MDktYTdhOC00OGJjLTg0ZTgt NjMwNDIzMmJlYzNjLzEvRHdnSW1xcDhLRFpVdk5wUXFUTkdUbkVua2JBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9jYTc4MDktYTdhOC00OGJjLTg0ZTgtNjMwNDIzMmJlYzNj LzEvRHdnSW1xcDhLRFpVdk5wUXFUTkdUbkVua2JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAnELHreL Pw5STQcaEW7q2XYzuQmOcsjJSo3OBv0vXDgH8YvGcQHdS9HD0dN8e8MLqp/RLcOt 15rGRN0EN/AafVwF8QQgWNXgZCxUMHSSE1b2bkeYcL/9k0BK4mJVuy5Rw1FeEDQT Ou7yP+LxeytHk2ovI87OtxdIfIwXIYWKfR6etLdRU0c2TwUII7IiZVAFONi6nx9y h8uxHkBzYxvDYX0BrfPjSy5kQOYT6z6DECu1V795n05TpuIuBPLzUZgiQ6DUZyao BIn9GU3JoCbJv0lPVwBiohfz+J2mNCYlCacFQ+gowSo/KvAKRaITzJUxYwo+ODy+ ZmV7ZdlKj7XxIg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:55:50 2025 by rpki-client