This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.mft File: DVX6KmKDfbmv5EI-TBGelJmyG0M.mft (raw, json) Hash identifier: vfZkuAZG2QxWGcfSTt5pxUEQrtVPEf1uqSGujyNRwt0= Subject key identifier: 93:62:9A:E1:15:53:C4:7F:EB:1B:0E:EA:6F:10:39:7A:31:DE:26:53 Authority key identifier: 0D:55:FA:2A:62:83:7D:B9:AF:E4:42:3E:4C:11:9E:94:99:B2:1B:43 Certificate issuer: /CN=0d55fa2a62837db9afe4423e4c119e9499b21b43 Certificate serial: 019AF20916ECAC946FFB84A74C15FD4C0E92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DVX6KmKDfbmv5EI-TBGelJmyG0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.mft Manifest number: 08CC Signing time: Sat 06 Dec 2025 05:01:13 +0000 Manifest this update: Sat 06 Dec 2025 05:01:13 +0000 Manifest next update: Sun 07 Dec 2025 05:01:13 +0000 Files and hashes: 1: DVX6KmKDfbmv5EI-TBGelJmyG0M.crl (hash: VOt0DZyXMTaDRKb85rT46+UXqaJ51+CA3+vY/WwtgcI=) 2: GXOLHwEFu0p7gKJgkJ5kY6IvzIE.roa (hash: pAl+GrJaPPBbeJpVI3BoizE0NzXiXcJyNH8QYeo2rB0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.mft rsync://rpki.ripe.net/repository/DEFAULT/DVX6KmKDfbmv5EI-TBGelJmyG0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:16:ec:ac:94:6f:fb:84:a7:4c:15:fd:4c:0e:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d55fa2a62837db9afe4423e4c119e9499b21b43 Validity Not Before: Dec 6 05:01:13 2025 GMT Not After : Dec 7 05:01:13 2025 GMT Subject: CN=93629ae11553c47feb1b0eea6f10397a31de2653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:32:02:fd:a2:7d:ac:e1:ea:e4:12:91:15:1f: b7:26:0e:70:e4:ba:47:ca:b3:21:31:4f:f3:e0:dc: 23:71:80:a5:42:3a:f3:34:23:92:66:ad:13:79:e3: f6:65:93:12:ba:3a:f2:36:0b:5d:65:11:b4:e6:13: 58:d6:8c:7d:27:70:14:35:6e:69:6c:b2:59:77:c3: 8f:15:b6:ca:d0:fa:e6:b7:b7:7b:37:f8:4c:e0:87: 28:4c:17:bd:17:7c:c2:95:5b:c0:e4:80:ce:76:c8: 61:87:65:be:d7:df:6b:72:8e:a5:03:a6:27:d1:aa: 8d:c0:64:ca:c7:3e:65:80:b6:b8:cf:74:74:30:34: 8f:64:ed:c4:6f:d6:e5:84:f8:e2:c9:f3:9f:2a:c8: c6:e8:59:02:7c:bc:d2:67:b0:b7:50:45:a0:47:a2: 02:21:7a:7f:b8:64:83:c7:ab:f9:ed:db:e8:48:5b: ed:55:e5:9e:62:a8:59:fe:e1:70:e5:62:02:43:ed: 72:78:07:f4:3b:c3:28:48:2e:fd:64:77:58:23:f8: d9:d3:07:73:8e:46:3e:a3:88:32:d2:a8:f3:8c:a2: 1e:20:2e:1e:ad:b5:19:fb:d9:e6:df:0c:c4:1e:08: 75:6c:c8:29:26:4e:61:ca:77:55:e9:f0:c9:fb:f2: 30:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:62:9A:E1:15:53:C4:7F:EB:1B:0E:EA:6F:10:39:7A:31:DE:26:53 X509v3 Authority Key Identifier: keyid:0D:55:FA:2A:62:83:7D:B9:AF:E4:42:3E:4C:11:9E:94:99:B2:1B:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DVX6KmKDfbmv5EI-TBGelJmyG0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:b9:e7:ba:03:14:be:5c:d8:c9:6c:58:ae:b5:03:df:6d:4f: 68:88:78:e0:ab:50:0a:60:5f:84:87:c7:4e:b1:94:03:f4:4e: 94:1e:32:ff:7a:c7:76:a4:a0:1d:11:f7:c4:8d:fb:24:4f:a2: 1e:2c:74:4c:e2:51:b8:01:9a:42:f0:46:81:5d:37:36:74:86: b4:f5:e2:0c:55:2f:77:7a:90:b5:ed:8a:e3:d8:15:cf:50:f4: b1:ee:c7:78:94:0f:94:eb:48:91:28:76:fa:59:15:d8:ec:c4: cb:0a:c2:3a:18:38:41:b7:8d:41:37:1b:bb:7b:10:cc:8e:03: 64:8e:c6:cd:32:af:d8:35:b8:9f:55:fc:90:b2:f7:a8:bc:e4: bf:4f:dd:85:ca:40:36:76:48:de:0f:3d:87:91:2d:6a:8f:5c: 55:30:08:ef:38:ed:70:8e:51:e0:89:ea:47:bc:5e:5e:5d:a6: 0d:c2:7f:5a:08:81:b9:91:bd:5d:c8:b3:c9:73:ab:5f:5f:4d: 58:4c:2a:b7:4e:50:e8:42:c0:22:a1:2e:55:72:ce:1f:98:b3: 28:1e:30:c1:d3:7b:9b:d8:1d:3d:b6:33:cd:a1:5f:27:26:f9: a3:3c:c6:f0:d2:11:39:26:51:5f:7e:d1:0b:80:52:eb:c4:c9: 32:fc:4a:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCRbsrJRv+4SnTBX9TA6SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNTVmYTJhNjI4MzdkYjlhZmU0NDIzZTRjMTE5ZTk0OTli MjFiNDMwHhcNMjUxMjA2MDUwMTEzWhcNMjUxMjA3MDUwMTEzWjAzMTEwLwYDVQQD Eyg5MzYyOWFlMTE1NTNjNDdmZWIxYjBlZWE2ZjEwMzk3YTMxZGUyNjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzIC/aJ9rOHq5BKRFR+3Jg5w5LpH yrMhMU/z4NwjcYClQjrzNCOSZq0TeeP2ZZMSujryNgtdZRG05hNY1ox9J3AUNW5p bLJZd8OPFbbK0Prmt7d7N/hM4IcoTBe9F3zClVvA5IDOdshhh2W+199rco6lA6Yn 0aqNwGTKxz5lgLa4z3R0MDSPZO3Eb9blhPjiyfOfKsjG6FkCfLzSZ7C3UEWgR6IC IXp/uGSDx6v57dvoSFvtVeWeYqhZ/uFw5WICQ+1yeAf0O8MoSC79ZHdYI/jZ0wdz jkY+o4gy0qjzjKIeIC4erbUZ+9nm3wzEHgh1bMgpJk5hyndV6fDJ+/IwfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJNimuEVU8R/6xsO6m8QOXox3iZTMB8GA1UdIwQY MBaAFA1V+ipig325r+RCPkwRnpSZshtDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFZYNkttS0RmYm12NUVJLVRCR2VsSm15RzBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9lNjk5YTMtNGQzNy00OTFhLWI0NjMt ZWYzNmEzMjE3NDlhLzEvRFZYNkttS0RmYm12NUVJLVRCR2VsSm15RzBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC9lNjk5YTMtNGQzNy00OTFhLWI0NjMtZWYzNmEzMjE3NDlh LzEvRFZYNkttS0RmYm12NUVJLVRCR2VsSm15RzBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARrnnugMU vlzYyWxYrrUD321PaIh44KtQCmBfhIfHTrGUA/ROlB4y/3rHdqSgHRH3xI37JE+i Hix0TOJRuAGaQvBGgV03NnSGtPXiDFUvd3qQte2K49gVz1D0se7HeJQPlOtIkSh2 +lkV2OzEywrCOhg4QbeNQTcbu3sQzI4DZI7GzTKv2DW4n1X8kLL3qLzkv0/dhcpA NnZI3g89h5Etao9cVTAI7zjtcI5R4InqR7xeXl2mDcJ/WgiBuZG9XcizyXOrX19N WEwqt05Q6ELAIqEuVXLOH5izKB4wwdN7m9gdPbYzzaFfJyb5ozzG8NIROSZRX37R C4BS68TJMvxK0g== -----END CERTIFICATE-----Generated at Sat Dec 6 15:27:46 2025 by rpki-client