This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft File: Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft (raw, json) Hash identifier: V44hAhfXLCP/c5DYAxVq9jYt488fOiBv3WcqyfTmYYU= Subject key identifier: C3:B4:E0:DF:9B:AC:B3:C4:B1:45:AA:C4:7F:58:F5:72:1C:E6:57:0B Authority key identifier: 0F:0D:94:EE:63:C7:0A:73:36:63:BB:C4:B5:B5:76:DE:60:7E:19:ED Certificate issuer: /CN=0f0d94ee63c70a733663bbc4b5b576de607e19ed Certificate serial: 019AF4658C1D418B0B458F227E84145B1B6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft Manifest number: 0893 Signing time: Sat 06 Dec 2025 16:01:26 +0000 Manifest this update: Sat 06 Dec 2025 16:01:26 +0000 Manifest next update: Sun 07 Dec 2025 16:01:26 +0000 Files and hashes: 1: Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.crl (hash: MQDkVH40LwlJtnTBdZ+7UjLOPYyjeS2r4jjA0HP1iEE=) 2: HNrCdJFr8Rfx0QNo8n5aDjy6J1M.roa (hash: gUK0hPbdwoGfL6nF9RbnOReZ1s6L9tQ32o9aBdmxdu0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft rsync://rpki.ripe.net/repository/DEFAULT/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:8c:1d:41:8b:0b:45:8f:22:7e:84:14:5b:1b:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f0d94ee63c70a733663bbc4b5b576de607e19ed Validity Not Before: Dec 6 16:01:26 2025 GMT Not After : Dec 7 16:01:26 2025 GMT Subject: CN=c3b4e0df9bacb3c4b145aac47f58f5721ce6570b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c1:fc:88:ff:f6:b2:49:47:93:02:74:50:ed: 26:e9:28:4c:06:40:43:6a:d6:6c:73:8b:49:bd:c3: 52:c0:a2:e0:36:dc:43:df:8b:50:01:5c:6b:44:63: e5:2a:fc:d0:ff:d3:f5:ad:85:e5:89:5c:2a:e7:44: 1b:45:70:bd:72:0c:1d:55:14:64:43:41:f7:25:2a: 73:55:08:67:e9:a8:b1:cf:63:49:32:00:cf:90:f7: 3e:92:08:e9:3a:5c:c2:52:72:7f:83:59:c4:d2:64: 7d:37:4c:ec:13:6c:58:27:e7:77:f0:36:99:c3:7f: 9f:6f:db:40:e8:a1:b0:39:17:5c:7c:23:d7:bc:4b: 16:b0:14:a3:5f:f4:4b:81:64:dc:40:84:96:07:7d: 49:ad:7c:57:21:73:9f:c3:65:42:df:9f:bd:14:7f: ca:74:83:da:f0:c8:a0:8f:2c:9c:e5:3a:3c:c8:7b: e8:00:a1:66:d9:84:f9:04:3e:b4:55:cb:06:bb:a5: 12:57:45:30:e4:8d:02:d0:6e:df:6b:5d:88:51:43: f6:a6:b2:da:ba:55:b2:33:72:52:40:0e:41:50:00: 4b:62:ee:ae:3e:e7:ec:97:3b:7c:40:0b:6a:36:71: d6:c2:b8:7d:fc:c6:0f:fa:7b:e7:0f:62:1a:64:5b: 9a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:B4:E0:DF:9B:AC:B3:C4:B1:45:AA:C4:7F:58:F5:72:1C:E6:57:0B X509v3 Authority Key Identifier: keyid:0F:0D:94:EE:63:C7:0A:73:36:63:BB:C4:B5:B5:76:DE:60:7E:19:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:fa:4e:ef:a2:21:71:7d:52:9d:d8:37:7b:82:cd:49:d9:cc: 78:75:c4:20:f6:5e:34:93:9e:d3:dd:d5:6e:53:5c:b7:10:d7: 77:36:d6:42:cf:70:64:a1:c1:aa:97:57:a2:62:77:8e:d0:a6: 9d:9b:1b:29:e2:30:36:49:a9:c8:e9:f5:22:15:9a:f4:92:38: d3:aa:56:ab:c0:f1:bb:16:17:72:14:92:5b:3c:c4:01:b8:cf: 5b:f9:0b:86:81:9e:ab:4b:68:de:33:c5:b5:3b:b6:4c:a9:de: e7:6b:47:ac:d2:8f:c1:a9:94:da:51:ef:c5:2d:b0:f2:f8:bb: e8:b9:4f:38:91:88:77:3d:40:8e:7c:95:c9:27:02:07:90:6e: 60:fb:fc:82:fd:b7:8b:2b:c9:57:b1:b3:25:61:b1:82:ab:56: 2d:e3:37:1b:0d:50:e8:61:35:6b:dd:63:d4:b0:2b:b2:11:e2: ee:de:08:25:51:ef:7b:e4:36:4a:fe:0c:48:16:eb:ae:1c:8b: 13:8b:99:7c:7b:ab:90:b4:94:df:98:8c:1c:e5:36:09:85:94: ff:91:03:59:22:69:ab:a7:79:08:bf:ae:e6:60:cf:c8:ed:0c: f6:5f:d9:57:f2:07:84:5a:fd:63:5a:a5:d3:f8:90:68:37:aa: a9:12:7b:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZYwdQYsLRY8ifoQUWxtvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMGQ5NGVlNjNjNzBhNzMzNjYzYmJjNGI1YjU3NmRlNjA3 ZTE5ZWQwHhcNMjUxMjA2MTYwMTI2WhcNMjUxMjA3MTYwMTI2WjAzMTEwLwYDVQQD EyhjM2I0ZTBkZjliYWNiM2M0YjE0NWFhYzQ3ZjU4ZjU3MjFjZTY1NzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksH8iP/2sklHkwJ0UO0m6ShMBkBD atZsc4tJvcNSwKLgNtxD34tQAVxrRGPlKvzQ/9P1rYXliVwq50QbRXC9cgwdVRRk Q0H3JSpzVQhn6aixz2NJMgDPkPc+kgjpOlzCUnJ/g1nE0mR9N0zsE2xYJ+d38DaZ w3+fb9tA6KGwORdcfCPXvEsWsBSjX/RLgWTcQISWB31JrXxXIXOfw2VC35+9FH/K dIPa8Migjyyc5To8yHvoAKFm2YT5BD60VcsGu6USV0Uw5I0C0G7fa12IUUP2prLa ulWyM3JSQA5BUABLYu6uPufslzt8QAtqNnHWwrh9/MYP+nvnD2IaZFuaEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMO04N+brLPEsUWqxH9Y9XIc5lcLMB8GA1UdIwQY MBaAFA8NlO5jxwpzNmO7xLW1dt5gfhntMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHcyVTdtUEhDbk0yWTd2RXRiVjIzbUItR2UwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC80MzllZjYtNmUzOS00NGU4LThjOWIt OTJkNDE4ZThkOWE1LzEvRHcyVTdtUEhDbk0yWTd2RXRiVjIzbUItR2UwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC80MzllZjYtNmUzOS00NGU4LThjOWItOTJkNDE4ZThkOWE1 LzEvRHcyVTdtUEhDbk0yWTd2RXRiVjIzbUItR2UwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq/pO76Ih cX1Sndg3e4LNSdnMeHXEIPZeNJOe093VblNctxDXdzbWQs9wZKHBqpdXomJ3jtCm nZsbKeIwNkmpyOn1IhWa9JI406pWq8DxuxYXchSSWzzEAbjPW/kLhoGeq0to3jPF tTu2TKne52tHrNKPwamU2lHvxS2w8vi76LlPOJGIdz1AjnyVyScCB5BuYPv8gv23 iyvJV7GzJWGxgqtWLeM3Gw1Q6GE1a91j1LArshHi7t4IJVHve+Q2Sv4MSBbrrhyL E4uZfHurkLSU35iMHOU2CYWU/5EDWSJpq6d5CL+u5mDPyO0M9l/ZV/IHhFr9Y1ql 0/iQaDeqqRJ7/g== -----END CERTIFICATE-----Generated at Sat Dec 6 20:37:09 2025 by rpki-client