This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.mft File: DpXDrONm20G83CVsXVs75JCk92E.mft (raw, json) Hash identifier: DHOTnQ/5aNcTOpJXlyVQqKRinm3BC0meuf8Ff1CybB0= Subject key identifier: 13:CC:CD:BA:E8:1F:16:00:42:62:94:2D:23:31:90:38:B7:1F:BF:83 Authority key identifier: 0E:95:C3:AC:E3:66:DB:41:BC:DC:25:6C:5D:5B:3B:E4:90:A4:F7:61 Certificate issuer: /CN=0e95c3ace366db41bcdc256c5d5b3be490a4f761 Certificate serial: 019AF12DAA0C18F1E8DD55CA7BA44434EADD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DpXDrONm20G83CVsXVs75JCk92E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.mft Manifest number: 0BB9 Signing time: Sat 06 Dec 2025 01:01:32 +0000 Manifest this update: Sat 06 Dec 2025 01:01:32 +0000 Manifest next update: Sun 07 Dec 2025 01:01:32 +0000 Files and hashes: 1: 1ILl-_jBl8vTjilNwWyLb_6kN84.roa (hash: ecF4kJW8L9z29VWA5l2Xp4iuCOJ3lYvBbDFUMxXyKfo=) 2: DpXDrONm20G83CVsXVs75JCk92E.crl (hash: C1CE8ngI4hcHXECKt8foat44HyXUJ8ISnAVEirDoDxc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.crl rsync://rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.mft rsync://rpki.ripe.net/repository/DEFAULT/DpXDrONm20G83CVsXVs75JCk92E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:aa:0c:18:f1:e8:dd:55:ca:7b:a4:44:34:ea:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e95c3ace366db41bcdc256c5d5b3be490a4f761 Validity Not Before: Dec 6 01:01:32 2025 GMT Not After : Dec 7 01:01:32 2025 GMT Subject: CN=13cccdbae81f16004262942d23319038b71fbf83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c3:e1:85:fe:55:ab:41:43:f9:8f:b8:e6:cd: 10:2d:73:a2:75:9c:dc:e0:d8:7b:c3:34:75:df:22: 84:51:01:e6:19:10:21:c7:72:8f:2e:bc:04:40:dd: 80:14:8e:0d:fa:cf:88:e0:0b:01:18:5f:e5:02:dd: ad:c6:d3:23:55:f8:70:3f:b9:8b:14:92:b0:27:12: 65:b1:de:b6:fa:43:28:3f:d3:e1:38:18:10:6b:7c: 56:e9:ef:fb:05:fe:a4:0c:cf:64:1a:6f:8b:f7:21: ab:75:d2:a1:c4:92:b5:7a:63:4c:9b:31:45:3b:b4: cb:97:73:79:6e:c7:0b:20:48:33:eb:81:38:ca:3c: 46:c7:69:c0:8b:eb:4b:65:6f:56:b6:37:f6:d3:8d: 0c:d6:9b:a3:6d:1a:10:eb:a5:8f:68:af:fa:33:b6: 0f:63:8a:d1:29:e0:86:a8:55:ee:3d:e3:2e:ad:52: bd:90:04:57:b8:d8:0c:3e:f6:dc:64:9c:aa:c0:6f: 2e:03:45:30:70:14:ac:05:bd:1c:1b:22:3b:39:e0: ef:f9:5c:f1:ed:59:5c:4e:4b:45:16:67:a5:49:71: 19:56:60:4f:50:cd:f3:9c:69:1f:11:38:43:22:40: 5e:0a:04:0d:82:cd:e0:69:fe:10:ce:59:db:71:ab: ab:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:CC:CD:BA:E8:1F:16:00:42:62:94:2D:23:31:90:38:B7:1F:BF:83 X509v3 Authority Key Identifier: keyid:0E:95:C3:AC:E3:66:DB:41:BC:DC:25:6C:5D:5B:3B:E4:90:A4:F7:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpXDrONm20G83CVsXVs75JCk92E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1cd907-44d2-46b1-8bec-f53e51c0974f/1/DpXDrONm20G83CVsXVs75JCk92E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:8b:13:ab:8f:30:ae:71:09:1a:33:0a:ac:fd:d2:9e:8d:fe: 0c:9c:84:62:bc:e2:a0:b0:f9:83:84:5b:9e:ab:1c:eb:10:d8: ac:d4:85:4c:1a:4f:62:8f:99:19:d7:4a:fa:8b:e0:66:4d:c6: 82:d1:77:ea:6a:16:e9:8a:9b:be:26:bc:5f:a7:b0:cd:23:15: ff:b4:2f:c5:aa:92:ec:cb:77:28:fa:92:02:20:57:9e:86:8e: 6b:f7:62:04:20:74:05:9e:97:44:39:df:d3:67:d0:60:7c:88: 1d:59:09:94:9f:43:1d:d8:a1:67:20:a2:e8:af:12:ae:75:d4: 04:6d:fc:5b:38:a3:0c:de:76:26:bc:b0:6c:21:1d:19:47:c7: e4:fa:1b:40:f5:2e:27:3d:1f:2c:a2:c3:49:e3:e3:81:b9:ab: 55:75:02:9d:77:ed:b2:3d:ac:56:87:66:bb:9f:62:b9:3b:e9: 0e:2a:8d:d1:52:7e:39:d7:9e:37:9d:c1:f3:75:ed:1f:4a:71: 38:75:42:a8:0c:f6:5a:b9:48:3f:58:9d:67:bb:e5:dd:c9:d5: 99:96:9e:cc:c5:05:6f:93:cf:bf:6d:39:f9:a0:f9:39:04:48: 9e:3f:94:57:f5:2f:13:af:a5:e5:f6:9f:14:1e:37:63:5c:c5: 4a:f1:02:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLaoMGPHo3VXKe6RENOrdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlOTVjM2FjZTM2NmRiNDFiY2RjMjU2YzVkNWIzYmU0OTBh NGY3NjEwHhcNMjUxMjA2MDEwMTMyWhcNMjUxMjA3MDEwMTMyWjAzMTEwLwYDVQQD EygxM2NjY2RiYWU4MWYxNjAwNDI2Mjk0MmQyMzMxOTAzOGI3MWZiZjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucPhhf5Vq0FD+Y+45s0QLXOidZzc 4Nh7wzR13yKEUQHmGRAhx3KPLrwEQN2AFI4N+s+I4AsBGF/lAt2txtMjVfhwP7mL FJKwJxJlsd62+kMoP9PhOBgQa3xW6e/7Bf6kDM9kGm+L9yGrddKhxJK1emNMmzFF O7TLl3N5bscLIEgz64E4yjxGx2nAi+tLZW9Wtjf2040M1pujbRoQ66WPaK/6M7YP Y4rRKeCGqFXuPeMurVK9kARXuNgMPvbcZJyqwG8uA0UwcBSsBb0cGyI7OeDv+Vzx 7VlcTktFFmelSXEZVmBPUM3znGkfEThDIkBeCgQNgs3gaf4QzlnbcaurEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBPMzbroHxYAQmKULSMxkDi3H7+DMB8GA1UdIwQY MBaAFA6Vw6zjZttBvNwlbF1bO+SQpPdhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHBYRHJPTm0yMEc4M0NWc1hWczc1SkNrOTJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8xY2Q5MDctNDRkMi00NmIxLThiZWMt ZjUzZTUxYzA5NzRmLzEvRHBYRHJPTm0yMEc4M0NWc1hWczc1SkNrOTJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8xY2Q5MDctNDRkMi00NmIxLThiZWMtZjUzZTUxYzA5NzRm LzEvRHBYRHJPTm0yMEc4M0NWc1hWczc1SkNrOTJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcIsTq48w rnEJGjMKrP3Sno3+DJyEYrzioLD5g4Rbnqsc6xDYrNSFTBpPYo+ZGddK+ovgZk3G gtF36moW6Yqbvia8X6ewzSMV/7QvxaqS7Mt3KPqSAiBXnoaOa/diBCB0BZ6XRDnf 02fQYHyIHVkJlJ9DHdihZyCi6K8SrnXUBG38WzijDN52JrywbCEdGUfH5PobQPUu Jz0fLKLDSePjgbmrVXUCnXftsj2sVodmu59iuTvpDiqN0VJ+OdeeN53B83XtH0px OHVCqAz2WrlIP1idZ7vl3cnVmZaezMUFb5PPv205+aD5OQRInj+UV/UvE6+l5faf FB43Y1zFSvEChQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:12 2025 by rpki-client