This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.mft File: dpoO0TWR1LhMp5qOtXciYHZlGhQ.mft (raw, json) Hash identifier: FIRaGEZpXJIS9+ot3fR9VtYk5ET5uI6Xb6/DnDsXihA= Subject key identifier: AC:AD:9E:04:D5:BF:03:81:AF:4B:3E:5F:C3:F1:B5:66:AD:70:D6:AC Authority key identifier: 76:9A:0E:D1:35:91:D4:B8:4C:A7:9A:8E:B5:77:22:60:76:65:1A:14 Certificate issuer: /CN=769a0ed13591d4b84ca79a8eb577226076651a14 Certificate serial: 019AF31B711DE44297B0B2939229C58918EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dpoO0TWR1LhMp5qOtXciYHZlGhQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.mft Manifest number: 0B70 Signing time: Sat 06 Dec 2025 10:00:53 +0000 Manifest this update: Sat 06 Dec 2025 10:00:53 +0000 Manifest next update: Sun 07 Dec 2025 10:00:53 +0000 Files and hashes: 1: dpoO0TWR1LhMp5qOtXciYHZlGhQ.crl (hash: UM7iPn46qjUQrlViA/CrTwU0fxB63mcmsc5iInDHwq0=) 2: r2xenfWR41SW-pcJkK2n6k9oW9c.roa (hash: 9h5yss6Wot3H0ZXysamwxUCIRFlANswYmfwPee5G6HI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.crl rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.mft rsync://rpki.ripe.net/repository/DEFAULT/dpoO0TWR1LhMp5qOtXciYHZlGhQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:71:1d:e4:42:97:b0:b2:93:92:29:c5:89:18:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=769a0ed13591d4b84ca79a8eb577226076651a14 Validity Not Before: Dec 6 10:00:53 2025 GMT Not After : Dec 7 10:00:53 2025 GMT Subject: CN=acad9e04d5bf0381af4b3e5fc3f1b566ad70d6ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b5:d8:d6:33:bb:69:d5:1e:62:2f:6a:97:fc: 33:ce:40:8d:e1:fa:d4:98:6c:08:31:0f:e7:44:c8: e2:bd:bd:c5:e2:b4:b3:4e:b4:3c:2a:3f:49:a6:6c: e4:ed:7c:34:09:41:64:23:95:ed:30:29:a2:48:fd: 40:81:89:4b:8e:db:b0:b2:a3:b3:53:e9:34:eb:16: b1:48:8d:fd:46:b9:cf:79:3a:b0:bd:d6:d2:04:72: 07:84:6f:bf:79:e1:d7:2c:3e:8d:6f:3c:f5:99:bf: 44:1f:0a:89:7f:a5:4e:50:df:17:5f:20:68:92:dd: 89:19:05:ce:e6:0f:14:35:32:8b:2c:fd:1f:bf:fb: 1a:86:51:32:3b:27:6e:22:06:a7:03:ea:65:1e:31: db:64:b5:77:46:1e:18:18:e0:5a:a7:28:e1:29:a6: 1c:29:b7:9a:bd:7a:2b:74:b6:23:c6:fd:8f:b3:14: b3:e9:b4:ee:da:86:ba:4f:2c:5d:55:ba:70:45:c4: dc:f5:a7:42:6c:51:36:69:e9:34:e1:f9:07:78:22: 13:29:c6:f3:eb:b0:f1:43:b0:12:7e:12:1a:54:f5: 59:64:c9:62:6f:be:22:c1:2c:cf:76:6c:c7:a8:18: 1f:b5:02:52:3a:fb:4c:5d:b5:cb:6d:a3:e7:89:24: ec:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:AD:9E:04:D5:BF:03:81:AF:4B:3E:5F:C3:F1:B5:66:AD:70:D6:AC X509v3 Authority Key Identifier: keyid:76:9A:0E:D1:35:91:D4:B8:4C:A7:9A:8E:B5:77:22:60:76:65:1A:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpoO0TWR1LhMp5qOtXciYHZlGhQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:b5:0b:6e:f2:2f:ad:cd:48:ef:c6:b8:91:19:e7:d7:a3:f7: 08:9a:70:2a:7b:b5:5f:91:18:7e:f1:91:ee:85:db:5c:db:0f: 3d:fe:bf:2f:34:24:fc:5b:e9:c9:04:85:15:17:8e:9f:46:9f: 5a:64:4b:94:37:88:94:52:2d:ca:98:06:b7:67:8a:f9:d1:f4: ca:10:e0:af:de:6b:d1:03:d8:ac:41:4d:54:a4:7e:4f:f5:dd: fe:27:03:8e:4a:4e:82:bf:ad:53:b2:8d:09:c7:92:41:e2:64: 23:a9:3d:99:d9:c8:9c:20:09:93:74:88:3d:53:a1:4d:e3:f0: b4:91:ff:a8:61:42:6b:a8:65:bf:f0:5b:ef:16:f6:aa:b8:2b: 7f:ea:cc:f0:7d:23:3f:8e:79:d4:71:50:22:96:bf:d2:c9:38: c8:51:f8:b3:93:79:d2:29:93:1e:89:f6:6d:58:8c:3d:6f:59: cc:56:65:80:ee:15:2a:70:3f:8f:68:fe:8a:1a:3b:98:ee:a1: 6c:41:40:1d:b9:f3:b4:be:6a:4a:30:95:75:51:e0:53:e8:34: b1:ed:7b:bd:f7:16:9d:78:a0:c7:a5:a3:46:ee:77:a9:1f:8e: dc:25:8b:d0:2b:92:cc:a7:da:3f:74:74:00:27:d2:7d:97:ee: d1:8d:12:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG3Ed5EKXsLKTkinFiRjsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2OWEwZWQxMzU5MWQ0Yjg0Y2E3OWE4ZWI1NzcyMjYwNzY2 NTFhMTQwHhcNMjUxMjA2MTAwMDUzWhcNMjUxMjA3MTAwMDUzWjAzMTEwLwYDVQQD EyhhY2FkOWUwNGQ1YmYwMzgxYWY0YjNlNWZjM2YxYjU2NmFkNzBkNmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLXY1jO7adUeYi9ql/wzzkCN4frU mGwIMQ/nRMjivb3F4rSzTrQ8Kj9Jpmzk7Xw0CUFkI5XtMCmiSP1AgYlLjtuwsqOz U+k06xaxSI39RrnPeTqwvdbSBHIHhG+/eeHXLD6Nbzz1mb9EHwqJf6VOUN8XXyBo kt2JGQXO5g8UNTKLLP0fv/sahlEyOyduIganA+plHjHbZLV3Rh4YGOBapyjhKaYc KbeavXordLYjxv2PsxSz6bTu2oa6TyxdVbpwRcTc9adCbFE2aek04fkHeCITKcbz 67DxQ7ASfhIaVPVZZMlib74iwSzPdmzHqBgftQJSOvtMXbXLbaPniSTsfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKytngTVvwOBr0s+X8PxtWatcNasMB8GA1UdIwQY MBaAFHaaDtE1kdS4TKeajrV3ImB2ZRoUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHBvTzBUV1IxTGhNcDVxT3RYY2lZSFpsR2hRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni82OGMwMDgtNjlkMy00MzZmLWFkMzMt MmRiZTc4NTQyMmY4LzEvZHBvTzBUV1IxTGhNcDVxT3RYY2lZSFpsR2hRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni82OGMwMDgtNjlkMy00MzZmLWFkMzMtMmRiZTc4NTQyMmY4 LzEvZHBvTzBUV1IxTGhNcDVxT3RYY2lZSFpsR2hRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgbULbvIv rc1I78a4kRnn16P3CJpwKnu1X5EYfvGR7oXbXNsPPf6/LzQk/FvpyQSFFReOn0af WmRLlDeIlFItypgGt2eK+dH0yhDgr95r0QPYrEFNVKR+T/Xd/icDjkpOgr+tU7KN CceSQeJkI6k9mdnInCAJk3SIPVOhTePwtJH/qGFCa6hlv/Bb7xb2qrgrf+rM8H0j P4551HFQIpa/0sk4yFH4s5N50imTHon2bViMPW9ZzFZlgO4VKnA/j2j+iho7mO6h bEFAHbnztL5qSjCVdVHgU+g0se17vfcWnXigx6WjRu53qR+O3CWL0CuSzKfaP3R0 ACfSfZfu0Y0Scg== -----END CERTIFICATE-----Generated at Sat Dec 6 17:30:24 2025 by rpki-client