This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft File: DwxSlP25wrH3QxZPyWDAB-a_5gE.mft (raw, json) Hash identifier: UGemEPOFbpPZGGomorYZ/ifYP7mY1F9AIbU1j4Zw1M8= Subject key identifier: FD:50:70:CC:C6:63:6C:0F:F1:85:79:12:ED:92:37:00:0B:E6:07:FD Authority key identifier: 0F:0C:52:94:FD:B9:C2:B1:F7:43:16:4F:C9:60:C0:07:E6:BF:E6:01 Certificate issuer: /CN=0f0c5294fdb9c2b1f743164fc960c007e6bfe601 Certificate serial: 019AF31D177DF47FA3340B04B10156A12716 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwxSlP25wrH3QxZPyWDAB-a_5gE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 10:02:41 +0000 Manifest this update: Sat 06 Dec 2025 10:02:41 +0000 Manifest next update: Sun 07 Dec 2025 10:02:41 +0000 Files and hashes: 1: DwxSlP25wrH3QxZPyWDAB-a_5gE.crl (hash: FYYS86HQPcnZ3PeFKoeakwL5i22t1v2V1lDd6jAvKPM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.crl rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft rsync://rpki.ripe.net/repository/DEFAULT/DwxSlP25wrH3QxZPyWDAB-a_5gE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:17:7d:f4:7f:a3:34:0b:04:b1:01:56:a1:27:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f0c5294fdb9c2b1f743164fc960c007e6bfe601 Validity Not Before: Dec 6 10:02:41 2025 GMT Not After : Dec 7 10:02:41 2025 GMT Subject: CN=fd5070ccc6636c0ff1857912ed9237000be607fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:be:03:b8:54:32:ce:89:8c:aa:b6:71:80:5b: d7:51:da:44:87:ce:00:85:65:00:0a:e0:ae:e6:e9: c8:61:69:de:4e:a0:23:1b:da:4e:2c:d3:40:c0:1f: 1d:3b:af:e8:a6:b3:c7:a8:30:0e:5a:8d:99:f7:d2: 5d:34:24:61:5c:05:ec:44:d3:36:e5:b0:65:9a:89: 64:eb:7b:21:35:3b:c1:a7:fa:3c:d5:31:38:c8:c9: 5c:c9:55:e2:5e:05:91:3e:be:7f:40:72:fa:f3:cc: 69:74:6a:e4:66:ca:03:a8:4a:29:a5:ec:67:89:d4: 68:9c:01:95:bd:04:f4:2d:7b:7f:fb:11:a0:b2:b7: ff:4f:f1:80:ae:5b:78:62:bb:08:07:44:85:dc:7b: 44:0e:7e:26:22:91:16:02:84:c8:45:c5:e0:fd:fb: 1b:e2:35:0a:d8:93:b1:66:17:0a:b6:26:ce:0a:7f: dc:36:08:95:ca:95:1c:03:98:d6:55:04:17:44:c8: 59:13:e7:47:9b:d2:64:69:03:d6:16:a1:3f:b3:59: 81:b1:be:40:c8:38:8e:51:39:bd:70:7e:7a:2b:f2: 62:49:92:33:79:85:9e:8f:d2:77:ae:c5:d3:3a:58: f9:1c:45:2f:61:dd:48:51:4f:f3:53:a2:2f:2b:c3: 39:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:50:70:CC:C6:63:6C:0F:F1:85:79:12:ED:92:37:00:0B:E6:07:FD X509v3 Authority Key Identifier: keyid:0F:0C:52:94:FD:B9:C2:B1:F7:43:16:4F:C9:60:C0:07:E6:BF:E6:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwxSlP25wrH3QxZPyWDAB-a_5gE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:21:92:59:da:fa:a4:2e:ed:0b:18:08:25:2b:21:0d:c7:7b: 14:d6:1a:7d:48:d8:f9:6a:84:d0:d3:76:b5:04:7e:77:34:82: c1:28:1f:05:27:e8:a7:95:71:dd:77:2d:3e:2f:fb:e4:fd:9c: 22:81:e4:76:4a:aa:3e:0a:48:9b:22:f8:e5:c2:4d:c2:4d:72: 98:af:b4:d5:37:ad:32:7d:f4:81:18:8d:ce:bd:34:b2:1a:89: 01:9b:0f:84:84:b1:ad:08:6b:70:b1:23:b5:05:c0:dd:66:80: 46:e5:81:34:35:cb:b2:c8:6d:a9:e3:8e:59:a2:65:94:5c:2d: 74:da:d8:39:e7:70:2a:c5:19:a9:fb:cc:48:c1:6e:6b:0b:4a: d0:53:80:f3:f2:db:4f:ca:a8:7b:4d:4e:97:3b:1d:db:f8:65: 9b:55:7b:29:f7:94:09:83:b4:f7:c8:ff:44:50:2c:6c:fe:6b: a9:3d:47:e6:fe:a8:9c:43:d6:75:31:28:1e:16:41:3e:bf:71: 5c:f9:3f:d2:8d:7f:2a:7b:20:ef:e4:41:24:51:6f:86:ab:0f: e4:61:59:c6:ff:58:85:c8:56:8c:8d:b5:dd:a6:76:ab:e5:9a: 68:3c:ee:33:bf:f4:08:3e:aa:c5:57:7f:49:88:a6:fa:9b:e0: 6f:a7:35:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHRd99H+jNAsEsQFWoScWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMGM1Mjk0ZmRiOWMyYjFmNzQzMTY0ZmM5NjBjMDA3ZTZi ZmU2MDEwHhcNMjUxMjA2MTAwMjQxWhcNMjUxMjA3MTAwMjQxWjAzMTEwLwYDVQQD EyhmZDUwNzBjY2M2NjM2YzBmZjE4NTc5MTJlZDkyMzcwMDBiZTYwN2ZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk74DuFQyzomMqrZxgFvXUdpEh84A hWUACuCu5unIYWneTqAjG9pOLNNAwB8dO6/oprPHqDAOWo2Z99JdNCRhXAXsRNM2 5bBlmolk63shNTvBp/o81TE4yMlcyVXiXgWRPr5/QHL688xpdGrkZsoDqEoppexn idRonAGVvQT0LXt/+xGgsrf/T/GArlt4YrsIB0SF3HtEDn4mIpEWAoTIRcXg/fsb 4jUK2JOxZhcKtibOCn/cNgiVypUcA5jWVQQXRMhZE+dHm9JkaQPWFqE/s1mBsb5A yDiOUTm9cH56K/JiSZIzeYWej9J3rsXTOlj5HEUvYd1IUU/zU6IvK8M5cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP1QcMzGY2wP8YV5Eu2SNwAL5gf9MB8GA1UdIwQY MBaAFA8MUpT9ucKx90MWT8lgwAfmv+YBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHd4U2xQMjV3ckgzUXhaUHlXREFCLWFfNWdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC84YzkxOGUtM2FhZi00YWE2LThjNGQt MjRlZDQwYzlmMzg5LzEvRHd4U2xQMjV3ckgzUXhaUHlXREFCLWFfNWdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC84YzkxOGUtM2FhZi00YWE2LThjNGQtMjRlZDQwYzlmMzg5 LzEvRHd4U2xQMjV3ckgzUXhaUHlXREFCLWFfNWdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPCGSWdr6 pC7tCxgIJSshDcd7FNYafUjY+WqE0NN2tQR+dzSCwSgfBSfop5Vx3XctPi/75P2c IoHkdkqqPgpImyL45cJNwk1ymK+01TetMn30gRiNzr00shqJAZsPhISxrQhrcLEj tQXA3WaARuWBNDXLsshtqeOOWaJllFwtdNrYOedwKsUZqfvMSMFuawtK0FOA8/Lb T8qoe01Olzsd2/hlm1V7KfeUCYO098j/RFAsbP5rqT1H5v6onEPWdTEoHhZBPr9x XPk/0o1/Knsg7+RBJFFvhqsP5GFZxv9YhchWjI213aZ2q+WaaDzuM7/0CD6qxVd/ SYim+pvgb6c11w== -----END CERTIFICATE-----Generated at Sat Dec 6 11:55:01 2025 by rpki-client