This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.mft File: DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.mft (raw, json) Hash identifier: mtUaFUBgjlfmpgi6GDRo9CpIJDFHJHtWmvA3LIFdiTs= Subject key identifier: DD:D7:96:54:C2:79:77:5B:2C:A3:F4:4B:7A:3E:0F:C3:64:1A:00:D4 Authority key identifier: 0E:F4:7D:75:3D:25:28:9F:D9:87:94:97:4A:A0:53:60:10:56:7B:D9 Certificate issuer: /CN=0ef47d753d25289fd98794974aa0536010567bd9 Certificate serial: 019AF3524362B4FE1DE8D433CBBFE6F3C0F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.mft Manifest number: 1710 Signing time: Sat 06 Dec 2025 11:00:45 +0000 Manifest this update: Sat 06 Dec 2025 11:00:45 +0000 Manifest next update: Sun 07 Dec 2025 11:00:45 +0000 Files and hashes: 1: DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.crl (hash: 08mnfLk3uYT9aXXY686AvK06Qb+suHPjgHhPzVIyJpo=) 2: Ep2Tt2fI9ZnXq9dEoGDimlfX8vk.roa (hash: Yxb+HnJ6SVbEvdXrvuy0S0wlJigO7ITirWOkyZwJCfc=) 3: NsbQLlxjRX4R8d6qC52Mg0zJJ8I.roa (hash: 8GOI4hJ7xP6rg0LIYF04KTpO9lNuSPc9P1fdRwgO288=) 4: _Sk86eGU6RbYb2vHgW0Ui6wMfs0.roa (hash: Avs1rLJgkMJRxv1FINcH2aH5zw28kBN1QbSOsvT0vZA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.crl rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.mft rsync://rpki.ripe.net/repository/DEFAULT/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:43:62:b4:fe:1d:e8:d4:33:cb:bf:e6:f3:c0:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ef47d753d25289fd98794974aa0536010567bd9 Validity Not Before: Dec 6 11:00:45 2025 GMT Not After : Dec 7 11:00:45 2025 GMT Subject: CN=ddd79654c279775b2ca3f44b7a3e0fc3641a00d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:39:41:91:f4:47:41:38:d9:a0:a6:28:8a:88: ba:1e:86:ac:7d:e2:fb:37:9d:43:60:12:07:95:62: 83:fa:60:29:c8:0a:b1:ce:fe:2f:7d:f9:3c:24:28: cd:5d:e1:43:2b:d4:73:ab:fc:73:04:10:83:77:be: ee:3c:07:59:c7:39:a5:a2:71:ff:26:2b:31:a3:da: e4:de:30:72:fe:4e:bd:94:a7:da:60:30:8c:6f:0f: 40:51:0f:7d:70:6d:6b:d1:ad:31:20:56:e4:58:49: 85:19:bf:75:a4:b1:2d:55:fd:75:cc:17:de:b9:49: 08:14:2e:7a:c1:74:4c:86:72:7a:48:bd:1b:7f:e6: 1d:ab:d9:c8:6b:9a:0c:3f:2b:f5:7d:bb:d3:29:d0: 39:ca:ff:18:bb:ba:60:1c:15:82:e0:d4:09:5a:94: 60:d7:8e:70:bf:e3:5b:7d:19:e4:d8:41:0a:89:d0: a3:b9:d1:38:30:ba:d0:fa:49:0b:cc:43:26:91:d8: 40:28:51:c2:a2:d2:6d:9b:93:1f:ed:9e:7f:ca:d9: 8d:76:11:3b:b7:6b:d1:db:52:3c:82:2c:f5:bf:2e: a5:12:c5:b6:2c:db:99:93:cd:24:c9:7d:66:ae:08: 34:87:aa:65:95:ee:1b:d0:cd:b0:92:0b:10:fe:d0: df:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D7:96:54:C2:79:77:5B:2C:A3:F4:4B:7A:3E:0F:C3:64:1A:00:D4 X509v3 Authority Key Identifier: keyid:0E:F4:7D:75:3D:25:28:9F:D9:87:94:97:4A:A0:53:60:10:56:7B:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:f4:27:a4:79:9c:87:0d:65:6a:ba:46:03:32:f4:4a:1f:29: c6:6f:72:e3:bf:05:c8:06:a3:c8:3c:dd:72:80:31:d9:ef:3a: e5:22:d5:59:1e:de:a4:33:d0:a3:60:8b:6f:48:ce:a8:ce:13: 3c:be:f3:6c:e5:59:24:dc:04:e1:db:90:0f:62:c1:72:a6:54: 0b:2c:63:a1:44:3a:7a:6c:09:c7:52:bd:58:ba:e7:97:63:bc: 69:d5:c6:10:c4:db:e1:f0:38:59:91:9f:ac:3c:f2:ad:b6:f1: d8:96:15:2a:29:1c:fd:07:26:a9:8f:57:f2:72:61:6f:6a:57: d2:47:ab:62:7a:65:a1:40:87:94:9c:60:40:b2:53:a0:9a:05: 75:13:8e:33:c3:e4:57:24:1e:ed:7c:35:4b:04:03:41:1f:f2: 64:c1:3e:8f:c6:92:d0:bf:39:81:51:3a:2e:4d:b3:d4:72:10: b7:a9:d6:6f:27:9b:ea:46:77:d7:03:2f:06:ed:ad:55:c0:c3: cd:1c:e7:9f:44:5f:b1:d2:21:1a:76:65:c9:10:2d:53:e1:52: 23:f1:7f:52:80:82:e1:91:3b:78:53:a0:d9:6d:03:ef:ed:3f: 01:49:8a:9b:4e:a2:98:bb:76:d4:f0:ec:c8:92:63:be:3a:93: 5f:c8:2d:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUkNitP4d6NQzy7/m88DzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlZjQ3ZDc1M2QyNTI4OWZkOTg3OTQ5NzRhYTA1MzYwMTA1 NjdiZDkwHhcNMjUxMjA2MTEwMDQ1WhcNMjUxMjA3MTEwMDQ1WjAzMTEwLwYDVQQD EyhkZGQ3OTY1NGMyNzk3NzViMmNhM2Y0NGI3YTNlMGZjMzY0MWEwMGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjlBkfRHQTjZoKYoioi6HoasfeL7 N51DYBIHlWKD+mApyAqxzv4vffk8JCjNXeFDK9Rzq/xzBBCDd77uPAdZxzmlonH/ Jisxo9rk3jBy/k69lKfaYDCMbw9AUQ99cG1r0a0xIFbkWEmFGb91pLEtVf11zBfe uUkIFC56wXRMhnJ6SL0bf+Ydq9nIa5oMPyv1fbvTKdA5yv8Yu7pgHBWC4NQJWpRg 145wv+NbfRnk2EEKidCjudE4MLrQ+kkLzEMmkdhAKFHCotJtm5Mf7Z5/ytmNdhE7 t2vR21I8giz1vy6lEsW2LNuZk80kyX1mrgg0h6plle4b0M2wkgsQ/tDfvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN3XllTCeXdbLKP0S3o+D8NkGgDUMB8GA1UdIwQY MBaAFA70fXU9JSif2YeUl0qgU2AQVnvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHZSOWRUMGxLSl9aaDVTWFNxQlRZQkJXZTlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9kZDhiYzUtODZlZi00MTM1LWJmMWYt YTRjOGQ5ODk1YTQzLzEvRHZSOWRUMGxLSl9aaDVTWFNxQlRZQkJXZTlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9kZDhiYzUtODZlZi00MTM1LWJmMWYtYTRjOGQ5ODk1YTQz LzEvRHZSOWRUMGxLSl9aaDVTWFNxQlRZQkJXZTlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwvQnpHmc hw1larpGAzL0Sh8pxm9y478FyAajyDzdcoAx2e865SLVWR7epDPQo2CLb0jOqM4T PL7zbOVZJNwE4duQD2LBcqZUCyxjoUQ6emwJx1K9WLrnl2O8adXGEMTb4fA4WZGf rDzyrbbx2JYVKikc/QcmqY9X8nJhb2pX0kerYnploUCHlJxgQLJToJoFdROOM8Pk VyQe7Xw1SwQDQR/yZME+j8aS0L85gVE6Lk2z1HIQt6nWbyeb6kZ31wMvBu2tVcDD zRznn0RfsdIhGnZlyRAtU+FSI/F/UoCC4ZE7eFOg2W0D7+0/AUmKm06imLt21PDs yJJjvjqTX8gtwg== -----END CERTIFICATE-----Generated at Sat Dec 6 17:37:10 2025 by rpki-client