This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.mft File: dtS8ie60qcifEAXqrSJ8EyXtFWI.mft (raw, json) Hash identifier: A3K3bJXh2+WL4CnYkZ0vPQLSb+m9S7yWFIluuD0+Ty8= Subject key identifier: A0:E4:4D:B5:4E:0F:34:3D:36:B6:F5:C0:CE:7C:53:BF:1E:97:3D:76 Authority key identifier: 76:D4:BC:89:EE:B4:A9:C8:9F:10:05:EA:AD:22:7C:13:25:ED:15:62 Certificate issuer: /CN=76d4bc89eeb4a9c89f1005eaad227c1325ed1562 Certificate serial: 019AF49C4334C46ACF4A3D73330A938130C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dtS8ie60qcifEAXqrSJ8EyXtFWI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.mft Manifest number: 0A7D Signing time: Sat 06 Dec 2025 17:01:12 +0000 Manifest this update: Sat 06 Dec 2025 17:01:12 +0000 Manifest next update: Sun 07 Dec 2025 17:01:12 +0000 Files and hashes: 1: ZsJKFxXmo7OPgqm-sYXIzxvA6qU.roa (hash: IBfv0VOpf12GHCCld3i7ENCZlrb/HEkRLIfqN7c44Ds=) 2: dtS8ie60qcifEAXqrSJ8EyXtFWI.crl (hash: CqpsF2M4j3tT+tH64+ZW4tsWKrE7klSYJzMKxGRtUyg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.mft rsync://rpki.ripe.net/repository/DEFAULT/dtS8ie60qcifEAXqrSJ8EyXtFWI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:43:34:c4:6a:cf:4a:3d:73:33:0a:93:81:30:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76d4bc89eeb4a9c89f1005eaad227c1325ed1562 Validity Not Before: Dec 6 17:01:12 2025 GMT Not After : Dec 7 17:01:12 2025 GMT Subject: CN=a0e44db54e0f343d36b6f5c0ce7c53bf1e973d76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:27:d6:ff:ab:0d:25:9e:05:14:bb:a8:47:4e: 21:a8:ca:2c:43:f9:26:61:25:46:be:36:ca:9b:7d: bd:7a:e3:51:32:81:03:0d:b7:6f:0b:41:81:9c:f7: 20:ee:34:b3:15:4c:80:b6:58:d6:34:ee:f0:8f:18: e2:e3:7f:29:7b:0a:9b:07:4c:39:37:21:e9:0e:e0: 02:84:21:fd:89:5b:51:2f:15:62:5b:b3:96:d2:fe: 96:a2:e1:bb:7e:9f:78:82:3c:4d:af:5a:43:ef:b4: 00:a9:78:ef:cf:61:72:e9:14:02:0a:28:85:c5:83: cd:8f:e5:e6:9a:85:37:d1:63:dc:ae:6c:31:f1:5e: 07:89:1f:7e:89:ca:7f:68:7c:82:ea:d2:b6:b6:d4: 2d:e3:35:d2:10:d0:00:ac:03:88:53:a4:47:b2:18: c1:5b:a7:71:24:73:79:ee:24:a7:96:06:3c:26:40: ef:c4:27:94:25:c7:ba:36:38:d8:4c:bf:aa:d3:85: 14:ee:f2:4f:76:b2:99:cc:f4:1c:4a:e1:d3:06:d8: bf:76:27:66:03:bb:27:63:b0:03:b3:d9:22:8e:9c: 85:02:2f:e1:24:bd:f8:bb:1b:09:db:19:4c:14:40: d4:8e:d3:30:4a:a0:f7:fe:be:bc:3d:01:f7:3a:0a: c7:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:E4:4D:B5:4E:0F:34:3D:36:B6:F5:C0:CE:7C:53:BF:1E:97:3D:76 X509v3 Authority Key Identifier: keyid:76:D4:BC:89:EE:B4:A9:C8:9F:10:05:EA:AD:22:7C:13:25:ED:15:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dtS8ie60qcifEAXqrSJ8EyXtFWI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:f8:ac:e8:8b:56:da:79:ec:4c:f2:3f:00:26:11:54:2f:a9: de:08:ac:ed:2e:7e:da:cd:66:b0:4f:c2:80:c3:73:86:47:86: 8e:2d:81:79:b2:24:2d:9f:b2:ce:66:10:96:8e:1f:6c:11:00: 51:91:73:3c:de:e5:e1:e5:1c:a1:6f:c1:3f:d5:c9:c5:08:25: 66:68:1b:53:62:ea:fc:89:fc:72:61:f6:f4:fd:8d:aa:dd:5c: 66:3d:35:2a:76:d1:b9:a7:ca:bb:93:dc:9d:97:43:ca:43:24: 3b:41:84:32:64:31:e6:48:bb:d9:f0:94:8c:2f:8f:16:05:56: 97:27:28:bd:b6:6c:48:65:38:f2:ed:93:08:a0:57:3c:fe:5f: ad:ea:21:7d:97:9e:62:af:47:73:c9:ef:ac:5e:e3:6e:73:df: 5c:d8:25:19:92:ea:33:9f:47:91:6f:a1:b2:25:cf:a4:84:6e: 2f:2a:f3:79:38:c0:56:73:b1:fb:d6:34:41:df:1d:f0:e4:35: 94:00:bd:65:7d:8b:19:91:2e:87:65:ae:de:24:3f:b5:72:08: 2c:59:c9:07:c9:74:a6:36:6a:69:97:82:82:b4:f8:a3:8f:f5: 2e:dc:d1:9c:98:cb:0f:cf:54:45:1f:09:2d:4e:1f:0f:11:98: c5:39:2d:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nEM0xGrPSj1zMwqTgTDJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2ZDRiYzg5ZWViNGE5Yzg5ZjEwMDVlYWFkMjI3YzEzMjVl ZDE1NjIwHhcNMjUxMjA2MTcwMTEyWhcNMjUxMjA3MTcwMTEyWjAzMTEwLwYDVQQD EyhhMGU0NGRiNTRlMGYzNDNkMzZiNmY1YzBjZTdjNTNiZjFlOTczZDc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCfW/6sNJZ4FFLuoR04hqMosQ/km YSVGvjbKm329euNRMoEDDbdvC0GBnPcg7jSzFUyAtljWNO7wjxji438pewqbB0w5 NyHpDuAChCH9iVtRLxViW7OW0v6WouG7fp94gjxNr1pD77QAqXjvz2Fy6RQCCiiF xYPNj+XmmoU30WPcrmwx8V4HiR9+icp/aHyC6tK2ttQt4zXSENAArAOIU6RHshjB W6dxJHN57iSnlgY8JkDvxCeUJce6NjjYTL+q04UU7vJPdrKZzPQcSuHTBti/didm A7snY7ADs9kijpyFAi/hJL34uxsJ2xlMFEDUjtMwSqD3/r68PQH3OgrH4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKDkTbVODzQ9Nrb1wM58U78elz12MB8GA1UdIwQY MBaAFHbUvInutKnInxAF6q0ifBMl7RViMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHRTOGllNjBxY2lmRUFYcXJTSjhFeVh0RldJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mYjM2NzMtNzQxOS00OWQ4LWI2ZjYt MDkxZjdmOWI5NzYxLzEvZHRTOGllNjBxY2lmRUFYcXJTSjhFeVh0RldJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9mYjM2NzMtNzQxOS00OWQ4LWI2ZjYtMDkxZjdmOWI5NzYx LzEvZHRTOGllNjBxY2lmRUFYcXJTSjhFeVh0RldJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk/is6ItW 2nnsTPI/ACYRVC+p3gis7S5+2s1msE/CgMNzhkeGji2BebIkLZ+yzmYQlo4fbBEA UZFzPN7l4eUcoW/BP9XJxQglZmgbU2Lq/In8cmH29P2Nqt1cZj01KnbRuafKu5Pc nZdDykMkO0GEMmQx5ki72fCUjC+PFgVWlycovbZsSGU48u2TCKBXPP5freohfZee Yq9Hc8nvrF7jbnPfXNglGZLqM59HkW+hsiXPpIRuLyrzeTjAVnOx+9Y0Qd8d8OQ1 lAC9ZX2LGZEuh2Wu3iQ/tXIILFnJB8l0pjZqaZeCgrT4o4/1LtzRnJjLD89URR8J LU4fDxGYxTktFA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:28:45 2025 by rpki-client