This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft File: dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft (raw, json) Hash identifier: lxuyUHhD9Vh/gTRC0WcC/QLAIzZJtFn4Oone4S+JR3g= Subject key identifier: 45:DB:84:8C:57:E4:B3:E5:73:3D:AF:1B:C5:C5:6B:CB:F2:47:A5:9D Authority key identifier: 75:51:B0:2D:55:D3:50:5F:B9:F9:71:9F:BD:0B:52:31:6F:F6:C1:03 Certificate issuer: /CN=7551b02d55d3505fb9f9719fbd0b52316ff6c103 Certificate serial: 019AF389B368D4522490F2C0EBD52C852994 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVGwLVXTUF-5-XGfvQtSMW_2wQM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 12:01:19 +0000 Manifest this update: Sat 06 Dec 2025 12:01:19 +0000 Manifest next update: Sun 07 Dec 2025 12:01:19 +0000 Files and hashes: 1: asFNeSBZiInH59YAo8NnFAX0FVI.roa (hash: tWyj3lezAQYJJjmIcLo2JYfuhhBH90r26AXTVK2x0kY=) 2: dVGwLVXTUF-5-XGfvQtSMW_2wQM.crl (hash: So+I5dbXAKDHFnuqzKdNI2jVDfiNEJccsrFywyflR6U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.crl rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft rsync://rpki.ripe.net/repository/DEFAULT/dVGwLVXTUF-5-XGfvQtSMW_2wQM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:b3:68:d4:52:24:90:f2:c0:eb:d5:2c:85:29:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7551b02d55d3505fb9f9719fbd0b52316ff6c103 Validity Not Before: Dec 6 12:01:19 2025 GMT Not After : Dec 7 12:01:19 2025 GMT Subject: CN=45db848c57e4b3e5733daf1bc5c56bcbf247a59d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:46:d3:57:ed:12:fc:0b:66:30:26:e5:fa:6b: 37:66:b3:08:1d:61:4b:91:ff:e0:56:5f:d9:cc:2c: 38:ac:59:56:ba:43:1f:dc:83:90:8d:04:59:2b:27: aa:0f:2d:ea:85:17:0c:9b:f3:54:5b:fc:79:05:29: 20:2b:00:23:ae:39:f5:33:a0:2f:ba:1f:4b:cb:e9: ff:1f:9d:0d:e0:25:03:c4:d6:84:a3:e7:83:d3:b3: f0:67:02:a3:63:88:90:63:f0:b4:2b:f7:aa:f4:49: f9:04:a3:fa:a9:62:1c:e8:2a:f6:8c:f8:60:b6:f1: 60:09:bb:30:5e:70:d2:45:c1:84:4f:f2:e5:75:6d: 2a:c3:bf:80:5f:63:48:ce:85:72:17:5b:c7:5e:b7: 59:6f:7a:06:34:c0:3a:44:c5:4f:52:20:30:78:d6: 7c:de:ee:90:ac:91:1d:3d:a4:81:ee:71:9e:ce:67: 72:05:21:01:a2:f3:66:b7:a5:6b:fe:f2:d8:18:ec: 8a:b7:09:03:a3:0f:14:dc:fc:4d:d9:ff:d5:ce:b2: 33:0e:7e:9a:3b:75:10:ea:6d:1b:24:f0:9b:2d:95: 92:c5:bf:b9:14:16:5d:bb:14:23:fc:82:20:74:3c: 96:9f:db:21:84:b4:73:6f:cc:25:0c:09:12:97:40: 10:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:DB:84:8C:57:E4:B3:E5:73:3D:AF:1B:C5:C5:6B:CB:F2:47:A5:9D X509v3 Authority Key Identifier: keyid:75:51:B0:2D:55:D3:50:5F:B9:F9:71:9F:BD:0B:52:31:6F:F6:C1:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVGwLVXTUF-5-XGfvQtSMW_2wQM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:d4:8b:6b:78:51:a3:9a:5b:69:8c:db:9b:d1:36:2f:e8:d2: 46:5c:8f:18:ff:14:b3:c1:6a:f2:f1:24:7d:45:8f:ba:27:bf: 26:c3:e9:60:eb:c4:0e:a7:c2:77:46:5f:19:49:d2:60:c4:b6: 49:e5:d3:53:9b:a6:ad:25:f9:72:16:08:3a:95:fd:a4:ee:c7: f8:ce:44:07:d5:18:37:2c:fd:6c:d0:65:9a:f6:22:1e:f7:29: fa:ac:41:33:43:a4:d9:a4:c6:7c:0c:c5:8c:9d:59:b6:09:09: 91:2f:0a:bd:c7:14:e0:82:19:14:80:5d:ba:63:64:10:f6:c0: 2b:e3:7f:63:b7:c7:fd:18:f8:86:1b:cd:90:4d:0d:1d:16:4c: 92:90:5f:55:92:d7:77:da:f2:3f:be:f6:6d:e4:a4:33:b0:2c: ce:78:8c:67:31:e6:0f:92:df:64:e5:24:e7:b6:58:04:e0:2c: 5f:a0:bf:3d:46:e9:c3:29:90:77:6e:b0:db:af:2e:d5:98:af: 06:22:9d:95:2a:56:80:9c:91:ef:04:aa:ab:75:ea:cc:49:9d: 07:46:96:ab:64:78:e5:ff:54:f3:02:2d:f5:e7:03:7d:c5:bf: e9:a8:9d:57:70:76:76:db:d2:76:22:09:72:52:07:23:3d:fb: 8a:03:1f:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzibNo1FIkkPLA69UshSmUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1NTFiMDJkNTVkMzUwNWZiOWY5NzE5ZmJkMGI1MjMxNmZm NmMxMDMwHhcNMjUxMjA2MTIwMTE5WhcNMjUxMjA3MTIwMTE5WjAzMTEwLwYDVQQD Eyg0NWRiODQ4YzU3ZTRiM2U1NzMzZGFmMWJjNWM1NmJjYmYyNDdhNTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUbTV+0S/AtmMCbl+ms3ZrMIHWFL kf/gVl/ZzCw4rFlWukMf3IOQjQRZKyeqDy3qhRcMm/NUW/x5BSkgKwAjrjn1M6Av uh9Ly+n/H50N4CUDxNaEo+eD07PwZwKjY4iQY/C0K/eq9En5BKP6qWIc6Cr2jPhg tvFgCbswXnDSRcGET/LldW0qw7+AX2NIzoVyF1vHXrdZb3oGNMA6RMVPUiAweNZ8 3u6QrJEdPaSB7nGezmdyBSEBovNmt6Vr/vLYGOyKtwkDow8U3PxN2f/VzrIzDn6a O3UQ6m0bJPCbLZWSxb+5FBZduxQj/IIgdDyWn9shhLRzb8wlDAkSl0AQHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEXbhIxX5LPlcz2vG8XFa8vyR6WdMB8GA1UdIwQY MBaAFHVRsC1V01Bfuflxn70LUjFv9sEDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFZHd0xWWFRVRi01LVhHZnZRdFNNV18yd1FNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xMzZiNDMtM2I3Ni00YjE3LWEzNjYt ODRiN2Y2ODhiYTMwLzEvZFZHd0xWWFRVRi01LVhHZnZRdFNNV18yd1FNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xMzZiNDMtM2I3Ni00YjE3LWEzNjYtODRiN2Y2ODhiYTMw LzEvZFZHd0xWWFRVRi01LVhHZnZRdFNNV18yd1FNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAetSLa3hR o5pbaYzbm9E2L+jSRlyPGP8Us8Fq8vEkfUWPuie/JsPpYOvEDqfCd0ZfGUnSYMS2 SeXTU5umrSX5chYIOpX9pO7H+M5EB9UYNyz9bNBlmvYiHvcp+qxBM0Ok2aTGfAzF jJ1ZtgkJkS8KvccU4IIZFIBdumNkEPbAK+N/Y7fH/Rj4hhvNkE0NHRZMkpBfVZLX d9ryP772beSkM7AszniMZzHmD5LfZOUk57ZYBOAsX6C/PUbpwymQd26w268u1Ziv BiKdlSpWgJyR7wSqq3XqzEmdB0aWq2R45f9U8wIt9ecDfcW/6aidV3B2dtvSdiIJ clIHIz37igMfIA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:37:27 2025 by rpki-client