This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/V4DOZAV5R263qnPBnLdOvt_daCs.mft File: V4DOZAV5R263qnPBnLdOvt_daCs.mft (raw, json) Hash identifier: fnGhIVB+3WMRr1TbP+rKdc4tL/DicwX8LtgP2AaDzjI= Subject key identifier: 43:1B:DE:C6:A9:06:F2:35:39:20:0C:FF:76:0F:56:79:3F:FD:60:3D Authority key identifier: 57:80:CE:64:05:79:47:6E:B7:AA:73:C1:9C:B7:4E:BE:DF:DD:68:2B Certificate issuer: /CN=5780ce640579476eb7aa73c19cb74ebedfdd682b Certificate serial: 019AF27730DB0C9438B6E749B26544748DA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V4DOZAV5R263qnPBnLdOvt_daCs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/V4DOZAV5R263qnPBnLdOvt_daCs.mft Manifest number: 0E95 Signing time: Sat 06 Dec 2025 07:01:28 +0000 Manifest this update: Sat 06 Dec 2025 07:01:28 +0000 Manifest next update: Sun 07 Dec 2025 07:01:28 +0000 Files and hashes: 1: V4DOZAV5R263qnPBnLdOvt_daCs.crl (hash: FXGy921tuVYGWDcv5l1KZCwy78oVoeA6Y9Xa9kFKoDA=) 2: r_tsaMbjHoSCsd17cgTnbS8F0qc.roa (hash: GyoTnn/PfaIn4sRuGe7d5zf2OcCelYM3H/gIy6Qo2Lo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/V4DOZAV5R263qnPBnLdOvt_daCs.crl rsync://rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/V4DOZAV5R263qnPBnLdOvt_daCs.mft rsync://rpki.ripe.net/repository/DEFAULT/V4DOZAV5R263qnPBnLdOvt_daCs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:30:db:0c:94:38:b6:e7:49:b2:65:44:74:8d:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5780ce640579476eb7aa73c19cb74ebedfdd682b Validity Not Before: Dec 6 07:01:28 2025 GMT Not After : Dec 7 07:01:28 2025 GMT Subject: CN=431bdec6a906f23539200cff760f56793ffd603d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:89:8b:fe:1c:9e:7e:df:d5:ba:b5:f4:67:68: 5a:6d:27:77:60:04:76:73:da:44:85:23:bd:81:5f: 67:6e:2d:26:28:19:d4:1d:31:ab:be:d8:49:85:e6: 2c:af:3e:3e:a2:b2:3b:4b:a1:e7:1e:10:ba:26:0f: 64:c0:27:cc:63:c6:3a:b1:61:eb:31:8e:9b:92:f2: 28:30:2e:6b:d0:d1:4e:5b:5d:7e:5b:a8:78:86:7f: dd:a6:fc:37:fc:32:f8:17:ae:6f:b6:77:03:8f:c0: c1:4b:2b:68:58:82:40:07:23:a8:f7:c4:44:ef:23: 1a:df:22:4a:3a:fb:9d:ac:eb:e5:5b:7c:e8:eb:2c: 53:15:e1:dd:3c:55:8d:09:71:0f:92:33:13:ee:e7: 95:23:e2:d5:3e:20:3c:db:df:53:7b:dc:67:6d:d5: 33:b3:24:e7:4d:83:71:d1:bd:dc:07:c3:45:53:aa: a6:d5:cc:ef:35:99:34:f3:49:a3:d7:f6:55:09:75: 51:8c:6a:0f:81:24:63:12:43:06:85:53:c3:e8:b3: b7:99:a2:d6:01:bd:d3:3f:1f:60:06:19:16:12:de: ca:98:12:d3:94:6f:49:f0:42:cc:23:2c:1d:1b:a3: d3:cd:57:bb:a7:25:52:ca:18:b4:4d:e9:9a:6d:02: 46:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:1B:DE:C6:A9:06:F2:35:39:20:0C:FF:76:0F:56:79:3F:FD:60:3D X509v3 Authority Key Identifier: keyid:57:80:CE:64:05:79:47:6E:B7:AA:73:C1:9C:B7:4E:BE:DF:DD:68:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V4DOZAV5R263qnPBnLdOvt_daCs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/V4DOZAV5R263qnPBnLdOvt_daCs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/V4DOZAV5R263qnPBnLdOvt_daCs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:00:d2:65:21:1b:b9:27:96:f9:38:f9:d5:f4:bb:71:07:06: 5c:83:e1:bb:f4:b2:25:3e:73:41:7d:1b:14:30:85:05:2b:0e: c2:8e:b0:9e:05:43:e5:fe:c8:83:47:10:98:92:d8:fb:bd:7f: 6f:70:3d:57:72:da:12:a9:0f:17:da:ec:e4:99:40:8a:f6:99: 47:59:34:e5:ca:85:4a:c2:f2:58:1b:84:82:89:d5:2a:01:19: a2:0a:9f:19:5d:17:7f:d1:c8:be:05:33:fa:de:63:d3:d8:51: de:7b:9d:d3:c9:6a:04:62:26:ed:0a:7f:ab:4b:7c:1a:09:d9: 91:04:00:fd:e4:99:d1:85:9d:32:4e:25:df:2e:0f:2c:11:e9: a6:c0:1f:9e:43:df:35:b6:d4:7b:d4:9a:ac:30:fb:a7:56:bf: 2d:38:e7:17:5d:61:8e:f0:30:30:43:fd:91:6a:91:6c:6e:0f: 3a:6a:d7:49:33:ef:e3:b3:20:eb:f1:85:65:2d:7e:bb:0e:b3: 90:6b:d1:4a:6c:3b:69:28:57:45:51:67:dd:85:ae:37:31:01: 12:99:e8:58:ec:d4:c1:4f:17:1a:66:0c:8c:49:9f:c5:53:27: 9f:7b:64:28:8c:d2:5c:18:cb:65:f2:3b:4f:c7:fb:2c:fa:7b: 47:d0:2b:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydzDbDJQ4tudJsmVEdI2nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3ODBjZTY0MDU3OTQ3NmViN2FhNzNjMTljYjc0ZWJlZGZk ZDY4MmIwHhcNMjUxMjA2MDcwMTI4WhcNMjUxMjA3MDcwMTI4WjAzMTEwLwYDVQQD Eyg0MzFiZGVjNmE5MDZmMjM1MzkyMDBjZmY3NjBmNTY3OTNmZmQ2MDNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4mL/hyeft/VurX0Z2habSd3YAR2 c9pEhSO9gV9nbi0mKBnUHTGrvthJheYsrz4+orI7S6HnHhC6Jg9kwCfMY8Y6sWHr MY6bkvIoMC5r0NFOW11+W6h4hn/dpvw3/DL4F65vtncDj8DBSytoWIJAByOo98RE 7yMa3yJKOvudrOvlW3zo6yxTFeHdPFWNCXEPkjMT7ueVI+LVPiA8299Te9xnbdUz syTnTYNx0b3cB8NFU6qm1czvNZk080mj1/ZVCXVRjGoPgSRjEkMGhVPD6LO3maLW Ab3TPx9gBhkWEt7KmBLTlG9J8ELMIywdG6PTzVe7pyVSyhi0TemabQJGXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEMb3sapBvI1OSAM/3YPVnk//WA9MB8GA1UdIwQY MBaAFFeAzmQFeUdut6pzwZy3Tr7f3WgrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjRET1pBVjVSMjYzcW5QQm5MZE92dF9kYUNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kZDZkYjQtZjUyMy00ZGU2LThiZTYt ZTdlOTcxNWU3ODEzLzEvVjRET1pBVjVSMjYzcW5QQm5MZE92dF9kYUNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9kZDZkYjQtZjUyMy00ZGU2LThiZTYtZTdlOTcxNWU3ODEz LzEvVjRET1pBVjVSMjYzcW5QQm5MZE92dF9kYUNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlADSZSEb uSeW+Tj51fS7cQcGXIPhu/SyJT5zQX0bFDCFBSsOwo6wngVD5f7Ig0cQmJLY+71/ b3A9V3LaEqkPF9rs5JlAivaZR1k05cqFSsLyWBuEgonVKgEZogqfGV0Xf9HIvgUz +t5j09hR3nud08lqBGIm7Qp/q0t8GgnZkQQA/eSZ0YWdMk4l3y4PLBHppsAfnkPf NbbUe9SarDD7p1a/LTjnF11hjvAwMEP9kWqRbG4POmrXSTPv47Mg6/GFZS1+uw6z kGvRSmw7aShXRVFn3YWuNzEBEpnoWOzUwU8XGmYMjEmfxVMnn3tkKIzSXBjLZfI7 T8f7LPp7R9ArUA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:03:26 2025 by rpki-client