This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft File: dxvOKaNsveiYrABwfblRQ_hqeSI.mft (raw, json) Hash identifier: 1DH6qJEyuqKBKcU7rIJVj64ZX6dYfEffxSz4b+OiBu8= Subject key identifier: 15:99:F4:EB:5C:16:E4:68:C8:B8:BA:4A:F5:2B:CB:2F:37:10:F3:89 Authority key identifier: 77:1B:CE:29:A3:6C:BD:E8:98:AC:00:70:7D:B9:51:43:F8:6A:79:22 Certificate issuer: /CN=771bce29a36cbde898ac00707db95143f86a7922 Certificate serial: 019AF3F723DE5C85F403FA1503AA8CC17FDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft Manifest number: 0F41 Signing time: Sat 06 Dec 2025 14:00:51 +0000 Manifest this update: Sat 06 Dec 2025 14:00:51 +0000 Manifest next update: Sun 07 Dec 2025 14:00:51 +0000 Files and hashes: 1: Fu0lK4Mcztssv3LosrHSeGC9v5I.roa (hash: u/9ObfX95800lVIP5yQNITdaQtRd2zqHQxCUamlQIjU=) 2: dxvOKaNsveiYrABwfblRQ_hqeSI.crl (hash: gqv+Kgag8KFiUAbJMqWcYvCCx/bsvgHyFnwQrNX46Aw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.crl rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:23:de:5c:85:f4:03:fa:15:03:aa:8c:c1:7f:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=771bce29a36cbde898ac00707db95143f86a7922 Validity Not Before: Dec 6 14:00:51 2025 GMT Not After : Dec 7 14:00:51 2025 GMT Subject: CN=1599f4eb5c16e468c8b8ba4af52bcb2f3710f389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:48:89:e6:c6:dc:a6:61:63:75:81:f9:80:25: 35:64:f9:d2:d0:8f:9a:e3:61:bf:66:0e:ef:e4:a4: 45:b8:5f:e3:91:c8:37:f5:13:cf:1f:06:78:fe:29: 09:d4:91:25:f8:5e:44:14:4b:37:1a:a4:ae:59:37: b5:b0:3d:50:1d:3e:f9:05:cc:4a:02:2b:4a:51:76: 46:6c:12:60:04:52:42:bb:0e:2c:a5:59:77:b7:07: 62:b9:41:9a:45:98:13:a9:fd:29:6b:0c:6a:75:6e: 31:18:5b:a0:9b:5f:a7:f5:f7:66:b1:0b:ce:21:da: 3a:7e:93:2d:bb:5f:84:4a:e0:f4:d4:a2:bd:61:46: 40:70:e5:8a:69:c7:f9:7e:fc:ad:c9:1a:21:b4:29: 54:ca:68:c4:c1:81:79:1d:71:76:54:d4:f2:92:3c: 21:31:ca:78:14:fa:4f:c2:6a:02:fa:b3:14:3a:5f: 45:5d:c1:b7:b2:c9:37:35:77:a9:63:e4:4c:74:5f: 19:7b:27:07:38:e6:4e:70:5e:d3:7d:85:2d:dd:95: 88:02:5a:53:98:42:46:16:bd:1a:76:7d:6e:82:e4: d8:33:6e:44:66:1d:19:64:0c:b6:2f:a3:1e:14:47: 2c:4f:ad:99:51:99:e7:38:d2:a8:5a:14:d1:34:b9: 78:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:99:F4:EB:5C:16:E4:68:C8:B8:BA:4A:F5:2B:CB:2F:37:10:F3:89 X509v3 Authority Key Identifier: keyid:77:1B:CE:29:A3:6C:BD:E8:98:AC:00:70:7D:B9:51:43:F8:6A:79:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:db:87:c5:c2:b2:48:09:f8:bd:f1:cb:87:7e:01:0a:f5:29: 1a:2a:18:0a:07:c3:0b:64:78:70:d9:f3:dd:82:1c:14:2e:6a: 2c:94:dd:11:fc:97:f8:c4:81:12:11:1f:2e:56:4e:b0:7a:81: 95:c5:7c:f2:a9:19:08:0e:ee:71:dc:c2:5a:ca:1e:bc:e6:e9: 13:af:5f:bc:e9:4b:22:fd:df:be:c9:86:1c:81:64:20:90:e9: fd:25:85:94:17:92:39:73:b2:f8:ed:95:b7:b1:e0:48:01:10: ea:64:73:76:52:19:f1:ae:6c:22:6d:3f:36:ad:a6:4d:88:a1: ec:12:e6:ba:45:37:be:ba:63:05:98:f6:d7:ed:20:45:ff:81: dc:a4:72:87:da:6e:22:fa:8f:05:9b:9d:9f:a0:6c:bb:13:cb: 4f:d8:ae:53:cd:f8:8c:18:ad:50:c5:05:59:f6:af:d0:22:e3: 4c:a0:75:0e:66:7d:3d:0e:67:1c:17:17:94:52:ad:da:2c:51: 89:c7:4f:28:ff:d1:1a:c0:ed:f6:78:ac:fc:38:a8:4f:b1:db: a0:84:36:e7:60:24:63:2b:d1:7c:17:e3:04:4a:a6:90:93:f2: 09:c4:6e:ae:5e:cd:77:ef:b4:85:f8:c7:e6:e2:3f:64:ee:b1: 30:ed:38:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9yPeXIX0A/oVA6qMwX/aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MWJjZTI5YTM2Y2JkZTg5OGFjMDA3MDdkYjk1MTQzZjg2 YTc5MjIwHhcNMjUxMjA2MTQwMDUxWhcNMjUxMjA3MTQwMDUxWjAzMTEwLwYDVQQD EygxNTk5ZjRlYjVjMTZlNDY4YzhiOGJhNGFmNTJiY2IyZjM3MTBmMzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30iJ5sbcpmFjdYH5gCU1ZPnS0I+a 42G/Zg7v5KRFuF/jkcg39RPPHwZ4/ikJ1JEl+F5EFEs3GqSuWTe1sD1QHT75BcxK AitKUXZGbBJgBFJCuw4spVl3twdiuUGaRZgTqf0pawxqdW4xGFugm1+n9fdmsQvO Ido6fpMtu1+ESuD01KK9YUZAcOWKacf5fvytyRohtClUymjEwYF5HXF2VNTykjwh Mcp4FPpPwmoC+rMUOl9FXcG3ssk3NXepY+RMdF8ZeycHOOZOcF7TfYUt3ZWIAlpT mEJGFr0adn1uguTYM25EZh0ZZAy2L6MeFEcsT62ZUZnnONKoWhTRNLl4WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBWZ9OtcFuRoyLi6SvUryy83EPOJMB8GA1UdIwQY MBaAFHcbzimjbL3omKwAcH25UUP4ankiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHh2T0thTnN2ZWlZckFCd2ZibFJRX2hxZVNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9kZDZlYTctYmRiOC00N2MzLTk2NGYt MmFmOTE3ODM4MmZiLzEvZHh2T0thTnN2ZWlZckFCd2ZibFJRX2hxZVNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9kZDZlYTctYmRiOC00N2MzLTk2NGYtMmFmOTE3ODM4MmZi LzEvZHh2T0thTnN2ZWlZckFCd2ZibFJRX2hxZVNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkNuHxcKy SAn4vfHLh34BCvUpGioYCgfDC2R4cNnz3YIcFC5qLJTdEfyX+MSBEhEfLlZOsHqB lcV88qkZCA7ucdzCWsoevObpE69fvOlLIv3fvsmGHIFkIJDp/SWFlBeSOXOy+O2V t7HgSAEQ6mRzdlIZ8a5sIm0/Nq2mTYih7BLmukU3vrpjBZj21+0gRf+B3KRyh9pu IvqPBZudn6BsuxPLT9iuU834jBitUMUFWfav0CLjTKB1DmZ9PQ5nHBcXlFKt2ixR icdPKP/RGsDt9nis/DioT7HboIQ252AkYyvRfBfjBEqmkJPyCcRurl7Nd++0hfjH 5uI/ZO6xMO04zw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:55:13 2025 by rpki-client