This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft File: DHiHWC2D0_CHaCr4eAoySjU854I.mft (raw, json) Hash identifier: rIUDRKD6NxJ1njb2zGFOqXSB7EJFBN2qzBqOR7b85WY= Subject key identifier: B9:00:6A:AC:73:7E:68:E4:0F:2F:61:AF:9D:E7:83:51:20:06:9E:74 Authority key identifier: 0C:78:87:58:2D:83:D3:F0:87:68:2A:F8:78:0A:32:4A:35:3C:E7:82 Certificate issuer: /CN=0c7887582d83d3f087682af8780a324a353ce782 Certificate serial: 019AF1D21748A3986C68E642061F06506486 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft Manifest number: 0348 Signing time: Sat 06 Dec 2025 04:01:08 +0000 Manifest this update: Sat 06 Dec 2025 04:01:08 +0000 Manifest next update: Sun 07 Dec 2025 04:01:08 +0000 Files and hashes: 1: DHiHWC2D0_CHaCr4eAoySjU854I.crl (hash: nIR3SxjfaPcXMWbm16k78FF4woUEweGBwwRHSJvKbew=) 2: NKGpONeNnSpGwNOfgTkqUqFSjcA.roa (hash: WjB4Os9y0GFlUDkg//rucVelf/mCKnH3dM3BpCHYRSs=) 3: _fSVy8gUALSmUPQ-yxN1Q7l_wXM.roa (hash: FrBR6FuZTCnouiuHvCixUxsBalYSZNZhY0D3KcXPGlM=) 4: _rfOVyo7DuPsLTQU__hvST7kgv0.roa (hash: uPbFY4d1NRbHScZUPpEXzuR0hfWtaapZ5VL4DMx2+zU=) 5: iX_xELZoVhjZx2tmfK6PH-R4qfg.roa (hash: 8Md57/s7g7icy63N7gSiYrFS0c7WsDeTkry4vuIPhFc=) 6: ihZ66_FRP1ZEi9NozSdwfCGel-M.roa (hash: wFOQHVX1zMY4YtBKixW4VOsy+9ZxuzYcQZi+JYB6nWA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.crl rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:17:48:a3:98:6c:68:e6:42:06:1f:06:50:64:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c7887582d83d3f087682af8780a324a353ce782 Validity Not Before: Dec 6 04:01:08 2025 GMT Not After : Dec 7 04:01:08 2025 GMT Subject: CN=b9006aac737e68e40f2f61af9de7835120069e74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b9:01:28:41:c5:26:fa:c6:0d:a7:c5:5f:75: 5f:8c:86:29:08:77:93:d6:b0:78:a7:bc:6d:f4:cb: c8:f2:bf:6f:ca:af:09:0b:31:02:53:19:fb:76:8c: 0c:ee:ed:b1:8a:75:50:81:92:b7:a3:e3:bd:8a:d7: 6f:e6:2e:e2:dc:e7:d7:be:6c:d6:85:8e:93:9c:bf: 11:48:1f:95:ba:62:7b:df:7e:95:74:ab:60:93:2e: 61:ee:bf:9d:45:54:18:90:89:5e:b3:1a:fb:36:31: 25:07:ff:48:6a:cc:7a:c8:e2:ac:f8:53:23:46:4c: 29:c3:c0:4c:01:5f:8d:3e:32:1a:3e:5e:ed:52:d8: 24:48:f4:fa:41:ac:18:e0:1c:79:8d:8f:89:be:69: 1c:b3:a6:59:64:d5:cf:b5:3d:fe:66:6d:cd:01:06: 6b:fb:5f:a3:dc:d4:00:13:51:02:4f:3a:40:e1:4c: c4:76:12:f4:ec:11:82:70:e4:2f:69:9f:ae:b2:82: bd:25:6a:b9:cc:13:80:7f:b1:e0:11:4a:ba:0f:54: 8a:a1:f4:ea:50:19:d2:e0:f3:71:ca:18:ea:14:63: 03:f6:06:69:3a:7c:b4:e2:f3:89:33:f1:83:38:47: da:c3:26:95:36:41:c1:22:e5:08:cf:9e:dc:9e:16: 8c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:00:6A:AC:73:7E:68:E4:0F:2F:61:AF:9D:E7:83:51:20:06:9E:74 X509v3 Authority Key Identifier: keyid:0C:78:87:58:2D:83:D3:F0:87:68:2A:F8:78:0A:32:4A:35:3C:E7:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:d8:9f:01:1c:ee:de:15:18:1d:f1:d4:e5:a1:d0:7e:ac:1c: fe:a6:f8:e6:e8:d2:81:ad:6b:89:15:8b:10:d3:66:f1:ae:63: fb:e6:3a:34:aa:57:52:88:41:83:31:19:f0:60:1c:36:54:52: de:dc:52:87:ee:d5:0a:1e:be:9c:bd:e8:ba:cc:45:9f:13:44: 7a:5b:14:47:bd:cd:83:71:c4:c9:50:0e:c0:5a:c6:08:7f:34: 12:0d:dc:10:61:ff:14:7b:51:b5:df:87:02:d9:1d:a2:88:f7: 9a:d3:6c:1f:fd:a7:ce:17:c5:42:85:cf:2b:9b:65:8b:cf:4a: 6d:5e:e5:64:50:bc:30:a9:fa:19:c9:b4:12:93:f8:61:b1:ed: 58:26:c9:93:33:f0:42:b5:3e:03:e6:4b:a5:6d:33:32:6d:f5: 3f:7d:ee:13:d9:cc:e4:23:8f:29:be:38:e9:d3:e6:08:08:04: c3:37:ec:f2:fc:bb:e9:54:a0:87:70:86:39:da:16:d4:92:06: 2f:dc:58:b2:33:21:9b:d4:35:90:eb:fb:bb:49:4d:74:67:ae: 8a:d4:6f:43:ac:ef:4d:17:b0:99:62:b2:21:32:7c:67:45:92: 5a:22:91:d2:5c:d8:48:c6:52:a7:22:39:c9:3f:ee:52:b5:dd: 0e:f9:ca:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0hdIo5hsaOZCBh8GUGSGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNzg4NzU4MmQ4M2QzZjA4NzY4MmFmODc4MGEzMjRhMzUz Y2U3ODIwHhcNMjUxMjA2MDQwMTA4WhcNMjUxMjA3MDQwMTA4WjAzMTEwLwYDVQQD EyhiOTAwNmFhYzczN2U2OGU0MGYyZjYxYWY5ZGU3ODM1MTIwMDY5ZTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurkBKEHFJvrGDafFX3VfjIYpCHeT 1rB4p7xt9MvI8r9vyq8JCzECUxn7dowM7u2xinVQgZK3o+O9itdv5i7i3OfXvmzW hY6TnL8RSB+VumJ7336VdKtgky5h7r+dRVQYkIlesxr7NjElB/9Iasx6yOKs+FMj Rkwpw8BMAV+NPjIaPl7tUtgkSPT6QawY4Bx5jY+Jvmkcs6ZZZNXPtT3+Zm3NAQZr +1+j3NQAE1ECTzpA4UzEdhL07BGCcOQvaZ+usoK9JWq5zBOAf7HgEUq6D1SKofTq UBnS4PNxyhjqFGMD9gZpOny04vOJM/GDOEfawyaVNkHBIuUIz57cnhaMfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLkAaqxzfmjkDy9hr53ng1EgBp50MB8GA1UdIwQY MBaAFAx4h1gtg9Pwh2gq+HgKMko1POeCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREhpSFdDMkQwX0NIYUNyNGVBb3lTalU4NTRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9iZmY0OGYtMGEzMC00NzhkLWIyZGIt YWQ0YTFkYTM5M2ExLzEvREhpSFdDMkQwX0NIYUNyNGVBb3lTalU4NTRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9iZmY0OGYtMGEzMC00NzhkLWIyZGItYWQ0YTFkYTM5M2Ex LzEvREhpSFdDMkQwX0NIYUNyNGVBb3lTalU4NTRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG9ifARzu 3hUYHfHU5aHQfqwc/qb45ujSga1riRWLENNm8a5j++Y6NKpXUohBgzEZ8GAcNlRS 3txSh+7VCh6+nL3ousxFnxNEelsUR73Ng3HEyVAOwFrGCH80Eg3cEGH/FHtRtd+H Atkdooj3mtNsH/2nzhfFQoXPK5tli89KbV7lZFC8MKn6Gcm0EpP4YbHtWCbJkzPw QrU+A+ZLpW0zMm31P33uE9nM5COPKb446dPmCAgEwzfs8vy76VSgh3CGOdoW1JIG L9xYsjMhm9Q1kOv7u0lNdGeuitRvQ6zvTRewmWKyITJ8Z0WSWiKR0lzYSMZSpyI5 yT/uUrXdDvnKkw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:10:54 2025 by rpki-client