This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft File: Dv0crRIZAnVQiePKgLptfMxLm3E.mft (raw, json) Hash identifier: G3SqmqyDgVf8J3InHHrB/2p7QPOq8zvZ1tjRCA1XStA= Subject key identifier: 8B:A1:FD:11:8C:87:E2:1D:08:10:07:63:AE:C5:86:0C:90:7F:9A:B9 Authority key identifier: 0E:FD:1C:AD:12:19:02:75:50:89:E3:CA:80:BA:6D:7C:CC:4B:9B:71 Certificate issuer: /CN=0efd1cad121902755089e3ca80ba6d7ccc4b9b71 Certificate serial: 019AF23F9F5C3FBCD5B133560F01B1025603 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dv0crRIZAnVQiePKgLptfMxLm3E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft Manifest number: 0D5D Signing time: Sat 06 Dec 2025 06:00:47 +0000 Manifest this update: Sat 06 Dec 2025 06:00:47 +0000 Manifest next update: Sun 07 Dec 2025 06:00:47 +0000 Files and hashes: 1: Dv0crRIZAnVQiePKgLptfMxLm3E.crl (hash: YUmmOANV//CE9mgMQ3J9vjwke/PMp7Lf/i/Smqby41o=) 2: kzypufx1A54QL9RnefA55meWSPM.roa (hash: cK+sc1FxI2UgckK1YuVxFsSFuYcOk8chhmHAVw1PhQ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.crl rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft rsync://rpki.ripe.net/repository/DEFAULT/Dv0crRIZAnVQiePKgLptfMxLm3E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:9f:5c:3f:bc:d5:b1:33:56:0f:01:b1:02:56:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0efd1cad121902755089e3ca80ba6d7ccc4b9b71 Validity Not Before: Dec 6 06:00:47 2025 GMT Not After : Dec 7 06:00:47 2025 GMT Subject: CN=8ba1fd118c87e21d08100763aec5860c907f9ab9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:36:09:18:aa:91:8f:6d:2b:b3:e1:ab:65:92: 08:43:a8:1b:1d:77:99:b5:a0:5c:c6:8f:b2:56:8b: 61:ea:42:91:98:68:0a:ec:ee:01:47:f8:58:b9:92: 47:2a:47:02:be:78:72:88:6e:aa:25:cb:12:91:9e: 01:83:02:ae:c0:32:90:4a:47:43:f6:60:bf:57:be: f2:2d:88:01:8f:13:a9:7c:18:22:fd:76:2c:7b:03: 60:4e:22:25:d3:d9:03:65:ff:ce:92:b9:de:23:13: a6:cf:3d:90:48:a0:1a:fd:65:9b:24:d3:f7:01:f7: f3:f2:36:3e:17:4c:31:c8:14:16:a2:aa:dd:db:fa: 1a:aa:a8:70:7e:20:4a:a8:40:f2:61:28:e4:9b:3d: b6:93:c5:d1:75:8c:09:3c:b8:9f:50:23:e7:0d:cf: 81:c1:d7:10:e8:c2:ef:ff:63:7d:b1:08:1d:f7:1b: b9:80:de:c9:89:16:c7:62:63:fa:57:13:88:27:44: b3:ca:ab:fa:97:f3:fc:93:f5:bc:a5:bf:e2:73:a0: b7:21:37:f3:fb:e9:90:1c:fe:d7:55:a9:77:41:44: 3f:63:e4:d3:22:31:56:0b:3e:51:50:aa:cb:69:0a: 1a:79:07:18:1b:83:c3:d3:a1:c9:3e:71:c5:07:42: 67:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:A1:FD:11:8C:87:E2:1D:08:10:07:63:AE:C5:86:0C:90:7F:9A:B9 X509v3 Authority Key Identifier: keyid:0E:FD:1C:AD:12:19:02:75:50:89:E3:CA:80:BA:6D:7C:CC:4B:9B:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dv0crRIZAnVQiePKgLptfMxLm3E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:d5:b8:6c:89:b4:74:c6:15:10:7a:38:56:b7:27:a4:41:96: 80:1c:ed:e5:fd:0c:51:23:9b:d1:22:05:08:51:e5:df:b4:de: 84:66:3f:b4:be:23:e2:75:8a:33:27:c1:d3:b9:e4:4b:a9:52: cf:4b:c0:d8:88:41:cf:61:65:be:4b:57:d1:25:57:50:12:7c: a6:e2:cb:0b:c8:cd:3b:0e:03:42:28:d1:b1:be:a2:7e:dc:7a: ac:b5:87:9a:a3:d2:e8:c5:72:63:04:05:40:d2:29:39:20:ea: 45:a6:f1:8d:1c:30:bc:98:c1:0b:72:7f:a0:a8:27:86:36:76: 51:31:54:5f:ea:09:dd:c1:ac:4c:3f:bd:bf:c2:93:be:3b:6f: 98:be:91:ea:c7:71:f6:4d:36:33:e2:76:09:69:d4:39:56:2b: 27:4d:17:de:5c:4f:1f:fd:18:4a:58:a6:17:31:b2:18:ac:24: bc:f1:6a:8c:e7:9a:83:ca:3a:66:75:3c:a8:8b:09:89:45:bf: e9:ad:73:21:b8:ac:a2:ed:64:eb:4e:c3:e0:d6:3f:97:b6:c9: 50:77:19:01:9e:90:49:be:42:75:1c:4c:ad:65:ea:38:29:6b: 9f:ce:94:fe:e9:ff:6b:ea:90:e9:a9:d4:bc:c1:bd:29:82:e8: 9f:38:c7:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP59cP7zVsTNWDwGxAlYDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlZmQxY2FkMTIxOTAyNzU1MDg5ZTNjYTgwYmE2ZDdjY2M0 YjliNzEwHhcNMjUxMjA2MDYwMDQ3WhcNMjUxMjA3MDYwMDQ3WjAzMTEwLwYDVQQD Eyg4YmExZmQxMThjODdlMjFkMDgxMDA3NjNhZWM1ODYwYzkwN2Y5YWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzYJGKqRj20rs+GrZZIIQ6gbHXeZ taBcxo+yVoth6kKRmGgK7O4BR/hYuZJHKkcCvnhyiG6qJcsSkZ4BgwKuwDKQSkdD 9mC/V77yLYgBjxOpfBgi/XYsewNgTiIl09kDZf/OkrneIxOmzz2QSKAa/WWbJNP3 Affz8jY+F0wxyBQWoqrd2/oaqqhwfiBKqEDyYSjkmz22k8XRdYwJPLifUCPnDc+B wdcQ6MLv/2N9sQgd9xu5gN7JiRbHYmP6VxOIJ0Szyqv6l/P8k/W8pb/ic6C3ITfz ++mQHP7XVal3QUQ/Y+TTIjFWCz5RUKrLaQoaeQcYG4PD06HJPnHFB0JnIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIuh/RGMh+IdCBAHY67FhgyQf5q5MB8GA1UdIwQY MBaAFA79HK0SGQJ1UInjyoC6bXzMS5txMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHYwY3JSSVpBblZRaWVQS2dMcHRmTXhMbTNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9kZjk5ZDMtNTAyOC00MzYxLWI3OTUt M2FmNGE5NDYzYjc3LzEvRHYwY3JSSVpBblZRaWVQS2dMcHRmTXhMbTNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9kZjk5ZDMtNTAyOC00MzYxLWI3OTUtM2FmNGE5NDYzYjc3 LzEvRHYwY3JSSVpBblZRaWVQS2dMcHRmTXhMbTNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANdW4bIm0 dMYVEHo4VrcnpEGWgBzt5f0MUSOb0SIFCFHl37TehGY/tL4j4nWKMyfB07nkS6lS z0vA2IhBz2FlvktX0SVXUBJ8puLLC8jNOw4DQijRsb6iftx6rLWHmqPS6MVyYwQF QNIpOSDqRabxjRwwvJjBC3J/oKgnhjZ2UTFUX+oJ3cGsTD+9v8KTvjtvmL6R6sdx 9k02M+J2CWnUOVYrJ00X3lxPH/0YSlimFzGyGKwkvPFqjOeag8o6ZnU8qIsJiUW/ 6a1zIbisou1k607D4NY/l7bJUHcZAZ6QSb5CdRxMrWXqOClrn86U/un/a+qQ6anU vMG9KYLonzjHCA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:10:54 2025 by rpki-client