This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft File: dpjJmefwST7jZjTokrN8nzv5QH0.mft (raw, json) Hash identifier: e8SV52y/PG0U2Y5a/KDbFVXXmyNYkPCj/FiBsm5X/bQ= Subject key identifier: 54:EC:79:47:8F:DE:E2:DA:89:56:BB:7D:35:83:6F:54:CD:5B:87:F2 Authority key identifier: 76:98:C9:99:E7:F0:49:3E:E3:66:34:E8:92:B3:7C:9F:3B:F9:40:7D Certificate issuer: /CN=7698c999e7f0493ee36634e892b37c9f3bf9407d Certificate serial: 019AF2AD67FFFAD17EC64B36F92F7B77C785 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dpjJmefwST7jZjTokrN8nzv5QH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 08:00:41 +0000 Manifest this update: Sat 06 Dec 2025 08:00:41 +0000 Manifest next update: Sun 07 Dec 2025 08:00:41 +0000 Files and hashes: 1: OevXGO9big2d2JK12PRdEUk2MPE.roa (hash: FmOYT06hQMPm9dCUUJxlovK9qL/uV14wUJ4HLBabvxQ=) 2: dpjJmefwST7jZjTokrN8nzv5QH0.crl (hash: 91FlZV1u7Q/366m+HSZ2MFHlEoBsVu3Ht1fSOGwDwAk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft rsync://rpki.ripe.net/repository/DEFAULT/dpjJmefwST7jZjTokrN8nzv5QH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:67:ff:fa:d1:7e:c6:4b:36:f9:2f:7b:77:c7:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7698c999e7f0493ee36634e892b37c9f3bf9407d Validity Not Before: Dec 6 08:00:41 2025 GMT Not After : Dec 7 08:00:41 2025 GMT Subject: CN=54ec79478fdee2da8956bb7d35836f54cd5b87f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b9:c1:b9:f7:6f:e6:ba:05:33:a0:9c:f7:b4: 86:74:bd:ed:e7:e4:02:82:35:75:a3:b4:db:68:62: b3:86:fb:61:d7:b9:ad:f1:83:fb:42:d0:e4:b2:4d: ab:05:da:c8:5f:c9:9e:e0:a3:01:36:9c:56:56:ab: 86:6d:56:89:8a:6a:b4:0f:85:f4:27:e1:c8:69:21: 35:c2:48:65:79:3c:8b:8f:a7:ae:c8:0c:c8:dc:4d: 93:dc:48:aa:e4:61:d6:52:52:b8:58:03:74:80:26: ae:32:a4:1e:90:86:5c:14:3b:72:b1:f7:c2:9e:3d: 14:40:1a:f2:63:a8:65:88:1e:a0:f3:ba:33:a5:e0: 55:77:ad:79:ac:42:9b:da:ec:74:25:99:62:aa:36: e6:58:a6:0d:4c:02:f4:39:da:3d:17:e4:4c:41:f2: 33:6a:8a:cb:13:56:17:6e:14:74:8f:9e:25:61:d8: 71:02:a0:b6:dd:b3:0a:c2:e5:cd:b0:99:09:d9:ec: ba:11:da:62:7a:7c:10:b1:36:ba:24:81:df:e4:6b: 4d:05:0f:cc:81:90:9e:92:46:17:0d:b8:4e:49:bf: 90:71:f1:4e:29:a7:ab:fc:d7:01:51:4d:fe:88:19: c9:89:a1:9b:79:c4:4f:24:0d:f2:b3:48:28:58:d5: 3a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:EC:79:47:8F:DE:E2:DA:89:56:BB:7D:35:83:6F:54:CD:5B:87:F2 X509v3 Authority Key Identifier: keyid:76:98:C9:99:E7:F0:49:3E:E3:66:34:E8:92:B3:7C:9F:3B:F9:40:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpjJmefwST7jZjTokrN8nzv5QH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/910bd4-7fda-4934-a403-b136fe40df4d/1/dpjJmefwST7jZjTokrN8nzv5QH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:76:5a:3f:1b:06:44:fb:51:8f:76:19:ad:90:fe:fa:7f:aa: c1:bd:f7:8e:bb:24:ff:58:f0:5c:93:ec:99:2f:62:ff:67:b2: 57:f5:f2:d6:91:b7:af:47:54:04:d5:c4:3f:cd:7e:1c:16:0d: 5d:a0:0a:de:d1:25:72:d2:44:61:8e:a2:c0:a0:3d:0f:6a:bf: da:d3:2c:7e:e3:96:58:e0:82:8a:fa:71:b8:a3:f9:42:48:45: 3c:71:5d:a6:34:5c:8c:77:32:ba:ba:44:86:eb:aa:13:03:c3: 6d:8f:b4:26:64:a2:aa:41:31:eb:c4:a4:69:a4:e4:9d:db:05: cc:09:9d:bf:9a:e6:47:96:09:f1:38:f0:f7:a1:59:f8:ec:27: 0a:42:30:43:75:84:55:e7:c4:3a:05:86:2e:ae:39:90:bb:18: 75:1d:68:19:c5:64:1d:cc:af:ea:34:88:41:d9:84:0c:d9:5e: 65:62:8e:50:8f:98:fa:a9:40:bd:99:8d:ed:00:3b:73:11:4e: 43:98:13:ca:e7:e3:be:e7:5d:3f:6a:88:2a:65:27:73:44:d9: 17:e9:35:84:46:f4:f7:bd:60:18:cb:c6:5d:eb:84:8d:4b:db: 17:fb:78:92:24:a2:ad:a8:76:5d:a0:8f:7b:f3:28:f3:8e:c7: b4:40:62:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrWf/+tF+xks2+S97d8eFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2OThjOTk5ZTdmMDQ5M2VlMzY2MzRlODkyYjM3YzlmM2Jm OTQwN2QwHhcNMjUxMjA2MDgwMDQxWhcNMjUxMjA3MDgwMDQxWjAzMTEwLwYDVQQD Eyg1NGVjNzk0NzhmZGVlMmRhODk1NmJiN2QzNTgzNmY1NGNkNWI4N2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbnBufdv5roFM6Cc97SGdL3t5+QC gjV1o7TbaGKzhvth17mt8YP7QtDksk2rBdrIX8me4KMBNpxWVquGbVaJimq0D4X0 J+HIaSE1wkhleTyLj6euyAzI3E2T3Eiq5GHWUlK4WAN0gCauMqQekIZcFDtysffC nj0UQBryY6hliB6g87ozpeBVd615rEKb2ux0JZliqjbmWKYNTAL0Odo9F+RMQfIz aorLE1YXbhR0j54lYdhxAqC23bMKwuXNsJkJ2ey6EdpienwQsTa6JIHf5GtNBQ/M gZCekkYXDbhOSb+QcfFOKaer/NcBUU3+iBnJiaGbecRPJA3ys0goWNU6zQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFTseUeP3uLaiVa7fTWDb1TNW4fyMB8GA1UdIwQY MBaAFHaYyZnn8Ek+42Y06JKzfJ87+UB9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHBqSm1lZndTVDdqWmpUb2tyTjhuenY1UUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC85MTBiZDQtN2ZkYS00OTM0LWE0MDMt YjEzNmZlNDBkZjRkLzEvZHBqSm1lZndTVDdqWmpUb2tyTjhuenY1UUgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC85MTBiZDQtN2ZkYS00OTM0LWE0MDMtYjEzNmZlNDBkZjRk LzEvZHBqSm1lZndTVDdqWmpUb2tyTjhuenY1UUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMHZaPxsG RPtRj3YZrZD++n+qwb33jrsk/1jwXJPsmS9i/2eyV/Xy1pG3r0dUBNXEP81+HBYN XaAK3tElctJEYY6iwKA9D2q/2tMsfuOWWOCCivpxuKP5QkhFPHFdpjRcjHcyurpE huuqEwPDbY+0JmSiqkEx68SkaaTkndsFzAmdv5rmR5YJ8Tjw96FZ+OwnCkIwQ3WE VefEOgWGLq45kLsYdR1oGcVkHcyv6jSIQdmEDNleZWKOUI+Y+qlAvZmN7QA7cxFO Q5gTyufjvuddP2qIKmUnc0TZF+k1hEb0971gGMvGXeuEjUvbF/t4kiSirah2XaCP e/Mo847HtEBijQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:50:34 2025 by rpki-client