This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft File: DsOtX_ZbjctHYinxLUV9d2GguXw.mft (raw, json) Hash identifier: 00szbp6Tzm6QN0p74y6woRtshE1WraejpSeG+4lQYpE= Subject key identifier: C4:A1:C6:CE:9A:69:39:39:34:23:C4:E1:69:D6:A2:51:9A:82:63:CB Authority key identifier: 0E:C3:AD:5F:F6:5B:8D:CB:47:62:29:F1:2D:45:7D:77:61:A0:B9:7C Certificate issuer: /CN=0ec3ad5ff65b8dcb476229f12d457d7761a0b97c Certificate serial: 019AF0BF2E3D00EEC5E4665DB48865B855C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft Manifest number: 1761 Signing time: Fri 05 Dec 2025 23:00:52 +0000 Manifest this update: Fri 05 Dec 2025 23:00:52 +0000 Manifest next update: Sat 06 Dec 2025 23:00:52 +0000 Files and hashes: 1: DsOtX_ZbjctHYinxLUV9d2GguXw.crl (hash: zhZsHTGGzVAfS2j+XcYdZTlbO5g0WzmHKZNIvJJ+isQ=) 2: V9zLJ_snXWssBPY1Rmgu3ZTD-rU.roa (hash: hUff0lfnMQTwyppmA7CbM6Vyj9Moq1TvnfUvdLLp36w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:2e:3d:00:ee:c5:e4:66:5d:b4:88:65:b8:55:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ec3ad5ff65b8dcb476229f12d457d7761a0b97c Validity Not Before: Dec 5 23:00:52 2025 GMT Not After : Dec 6 23:00:52 2025 GMT Subject: CN=c4a1c6ce9a6939393423c4e169d6a2519a8263cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9d:6f:b1:62:41:9c:ad:17:ef:a5:5e:23:f7: 79:ea:2c:d6:75:4b:4a:42:7d:80:51:c4:fe:bb:5f: f3:f2:db:6d:24:e2:1f:44:c9:68:1a:cf:d2:9f:2f: dd:09:05:14:be:33:21:b5:ec:2e:af:1a:c1:e5:19: 79:01:98:d5:0c:74:4f:bf:cb:51:c8:0f:fb:52:18: a0:bb:96:a5:09:10:17:6d:2b:3a:38:f1:16:e6:41: d8:a8:93:23:5f:55:5d:e8:9e:cf:b7:93:b4:9b:9b: 2b:c4:d6:ae:1d:d1:56:db:50:80:22:ba:5d:11:d7: 72:2a:e9:99:7e:f4:e8:12:6a:46:fc:14:88:8f:52: b7:09:6a:07:c0:5f:1c:19:a9:cc:11:49:2b:8a:be: 0b:e5:3e:bb:1d:de:54:bf:8d:54:40:22:ef:53:39: d6:d1:e1:68:00:14:cd:68:68:91:99:b6:7a:6f:02: 73:3f:f1:29:a9:cc:70:98:ba:24:61:14:24:df:ae: 44:ed:93:5f:3f:60:45:b4:3e:1f:c8:85:70:3a:a1: 39:fd:07:ab:92:59:b8:7c:98:88:58:23:17:45:fc: be:27:bf:47:41:97:1f:19:b9:03:06:18:27:0a:62: de:9c:8e:cb:a8:22:66:b3:fe:8a:80:97:78:fd:34: 2c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A1:C6:CE:9A:69:39:39:34:23:C4:E1:69:D6:A2:51:9A:82:63:CB X509v3 Authority Key Identifier: keyid:0E:C3:AD:5F:F6:5B:8D:CB:47:62:29:F1:2D:45:7D:77:61:A0:B9:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:79:04:5c:ba:11:50:94:d4:92:6f:1e:9d:61:37:b5:1c:a1: 07:7a:03:b4:f1:bd:17:ed:83:ec:0c:a1:7f:be:e2:56:4e:88: 2a:d4:4d:c6:fc:e4:30:d7:f1:90:c3:0f:5f:e4:e7:ac:76:6d: 4f:0d:bf:4f:37:76:ec:ce:47:d0:f8:45:4b:c7:7f:be:9d:09: 29:c1:d0:a6:0e:f8:bc:61:7f:a4:74:d1:73:57:23:c3:2d:65: 74:bd:1f:dc:f5:b9:87:05:eb:51:9a:42:16:41:09:22:f4:44: 89:0a:b5:3a:f9:87:b1:c3:1d:9c:0b:37:44:8b:ce:42:e4:f1: 4e:2e:10:ce:cd:80:70:1b:b5:a0:22:c1:90:4a:75:7d:4e:6e: 11:ee:f8:90:ba:9b:61:08:90:9e:39:6e:54:7f:8f:5f:d6:d0: 38:cc:51:c3:84:27:cf:06:34:05:21:73:f1:71:d0:17:58:80: 13:58:3e:2c:58:60:7c:12:2f:f6:78:e4:74:26:7b:53:be:3f: ec:e2:19:96:29:64:89:90:4f:51:fb:34:8b:cb:10:cd:0c:2f: b6:3c:77:28:08:36:22:1e:a0:dd:fd:0c:49:4d:bb:68:3b:bc: ed:49:4b:a7:01:ef:30:2f:4a:31:8c:91:43:e5:13:da:6e:bb: 12:70:7e:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvy49AO7F5GZdtIhluFXHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlYzNhZDVmZjY1YjhkY2I0NzYyMjlmMTJkNDU3ZDc3NjFh MGI5N2MwHhcNMjUxMjA1MjMwMDUyWhcNMjUxMjA2MjMwMDUyWjAzMTEwLwYDVQQD EyhjNGExYzZjZTlhNjkzOTM5MzQyM2M0ZTE2OWQ2YTI1MTlhODI2M2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsp1vsWJBnK0X76VeI/d56izWdUtK Qn2AUcT+u1/z8tttJOIfRMloGs/Sny/dCQUUvjMhtewurxrB5Rl5AZjVDHRPv8tR yA/7Uhigu5alCRAXbSs6OPEW5kHYqJMjX1Vd6J7Pt5O0m5srxNauHdFW21CAIrpd EddyKumZfvToEmpG/BSIj1K3CWoHwF8cGanMEUkrir4L5T67Hd5Uv41UQCLvUznW 0eFoABTNaGiRmbZ6bwJzP/EpqcxwmLokYRQk365E7ZNfP2BFtD4fyIVwOqE5/Qer klm4fJiIWCMXRfy+J79HQZcfGbkDBhgnCmLenI7LqCJms/6KgJd4/TQsjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMShxs6aaTk5NCPE4WnWolGagmPLMB8GA1UdIwQY MBaAFA7DrV/2W43LR2Ip8S1FfXdhoLl8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHNPdFhfWmJqY3RIWWlueExVVjlkMkdndVh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy81ODlhMTUtOWM1Mi00YTFiLThkMzIt YjhhYWIzMzIzNTI0LzEvRHNPdFhfWmJqY3RIWWlueExVVjlkMkdndVh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy81ODlhMTUtOWM1Mi00YTFiLThkMzItYjhhYWIzMzIzNTI0 LzEvRHNPdFhfWmJqY3RIWWlueExVVjlkMkdndVh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAHkEXLoR UJTUkm8enWE3tRyhB3oDtPG9F+2D7Ayhf77iVk6IKtRNxvzkMNfxkMMPX+TnrHZt Tw2/Tzd27M5H0PhFS8d/vp0JKcHQpg74vGF/pHTRc1cjwy1ldL0f3PW5hwXrUZpC FkEJIvREiQq1OvmHscMdnAs3RIvOQuTxTi4Qzs2AcBu1oCLBkEp1fU5uEe74kLqb YQiQnjluVH+PX9bQOMxRw4QnzwY0BSFz8XHQF1iAE1g+LFhgfBIv9njkdCZ7U74/ 7OIZlilkiZBPUfs0i8sQzQwvtjx3KAg2Ih6g3f0MSU27aDu87UlLpwHvMC9KMYyR Q+UT2m67EnB+eQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:43 2025 by rpki-client