This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft File: dhwFdTsZvNtTL9x_b0fpfpNboKI.mft (raw, json) Hash identifier: jbfLkKqmouD5oteOsN+Pdprgxu6Vmba4IhIbZz0MyiA= Subject key identifier: 6C:D7:CF:43:73:0B:B3:1D:E0:72:20:FF:91:90:E9:FA:D0:FB:A3:EB Authority key identifier: 76:1C:05:75:3B:19:BC:DB:53:2F:DC:7F:6F:47:E9:7E:93:5B:A0:A2 Certificate issuer: /CN=761c05753b19bcdb532fdc7f6f47e97e935ba0a2 Certificate serial: 019B22506928DCCDAC9020493DE92A015425 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhwFdTsZvNtTL9x_b0fpfpNboKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft Manifest number: 125A Signing time: Mon 15 Dec 2025 14:00:53 +0000 Manifest this update: Mon 15 Dec 2025 14:00:53 +0000 Manifest next update: Tue 16 Dec 2025 14:00:53 +0000 Files and hashes: 1: dhwFdTsZvNtTL9x_b0fpfpNboKI.crl (hash: HbNN72LjsaLvE5LRaAuM39/TrAuvCaRjfwmoZ4rYy1E=) 2: xzA5d-E1vgeb4mwlvmzNBazR01w.roa (hash: ajfP28ApDq4Q5y/sbVJlhsT7w2HrFwDNTtJP+3l1w9U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft rsync://rpki.ripe.net/repository/DEFAULT/dhwFdTsZvNtTL9x_b0fpfpNboKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 14:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:50:69:28:dc:cd:ac:90:20:49:3d:e9:2a:01:54:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=761c05753b19bcdb532fdc7f6f47e97e935ba0a2 Validity Not Before: Dec 15 14:00:53 2025 GMT Not After : Dec 16 14:00:53 2025 GMT Subject: CN=6cd7cf43730bb31de07220ff9190e9fad0fba3eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e3:1f:ca:f3:4e:1c:05:30:dc:d7:93:80:6f: 92:fd:87:46:49:42:28:bf:5e:f7:e8:68:77:97:ff: 83:de:38:91:4b:b5:95:e2:9c:dc:08:0c:40:70:e7: fd:0f:66:ca:b7:45:b6:10:06:46:f4:c0:60:7d:ae: 7d:7a:4c:c1:74:3e:19:5c:62:8a:ab:a7:c1:ab:da: a6:ed:aa:ff:f9:e5:63:e4:8c:d1:88:27:c5:e3:8d: fd:a8:93:8d:c3:be:88:6e:e5:61:1d:e7:f3:88:84: cc:84:db:1b:73:9a:30:9a:27:a1:ea:91:ff:ca:40: e5:74:f3:6a:80:2a:81:29:bc:b4:0d:f8:ee:53:e3: c5:57:b5:35:5d:92:af:81:44:c8:ca:c5:0a:77:40: 95:ce:bd:51:f3:90:10:b1:e9:29:65:fb:24:ce:3c: 71:c6:14:6e:ab:b4:ac:0b:e7:ae:e7:b8:05:ea:63: bd:ef:50:2b:93:b6:ff:65:8d:27:f9:97:a4:b9:a9: 99:f9:11:11:b8:31:99:0a:98:23:15:9c:4e:3d:ca: 9d:13:48:cc:56:3d:80:78:12:ce:81:99:4b:86:b3: 87:e6:46:27:22:a7:ee:5c:0e:23:ec:f3:10:9f:1c: 74:2b:98:36:a6:dd:4e:5e:ef:4f:3d:ee:56:9b:4b: 37:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:D7:CF:43:73:0B:B3:1D:E0:72:20:FF:91:90:E9:FA:D0:FB:A3:EB X509v3 Authority Key Identifier: keyid:76:1C:05:75:3B:19:BC:DB:53:2F:DC:7F:6F:47:E9:7E:93:5B:A0:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhwFdTsZvNtTL9x_b0fpfpNboKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:d1:6d:ed:4b:3e:a9:f8:c2:62:b2:77:f5:4a:a8:3f:a0:b0: b5:6a:70:7a:a4:08:68:f6:33:c4:6d:b1:3c:75:3a:a5:5f:ff: cd:dc:a1:bc:32:93:ad:61:8b:b5:2f:b7:b7:c2:35:2d:14:3d: 6c:8d:08:0a:d7:6b:e8:a3:1e:5f:69:6c:32:10:af:d7:e8:78: 6d:b8:ef:96:16:ea:b5:86:65:7e:36:76:43:89:0b:f9:4a:23: d4:05:df:3b:f1:db:9a:bb:00:dc:e8:e8:e7:74:18:20:d4:db: 1e:3d:8a:7c:82:c7:ff:48:23:ac:f8:37:96:bc:93:31:2f:92: 24:6a:a9:74:00:97:88:03:ea:95:19:9e:df:f1:aa:1c:f9:08: 8f:14:1b:43:46:f2:ff:e1:34:bf:fa:d1:cb:7f:86:4d:f0:1a: c1:64:6f:e6:df:92:8f:ed:f3:07:f8:56:0c:84:85:e7:6e:db: 1c:79:2a:b2:b8:8d:0f:00:bf:1b:4e:6f:09:31:48:89:93:31: 32:da:65:2f:ce:c6:4e:c3:a6:fb:36:81:18:bd:14:2b:dc:70: b9:5a:d0:8d:61:bd:8c:6d:d9:e3:88:74:b0:3e:83:36:a3:46: 15:e6:55:82:61:ab:8c:36:c2:0f:3e:56:6a:f6:37:99:72:31: 56:be:02:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiUGko3M2skCBJPekqAVQlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2MWMwNTc1M2IxOWJjZGI1MzJmZGM3ZjZmNDdlOTdlOTM1 YmEwYTIwHhcNMjUxMjE1MTQwMDUzWhcNMjUxMjE2MTQwMDUzWjAzMTEwLwYDVQQD Eyg2Y2Q3Y2Y0MzczMGJiMzFkZTA3MjIwZmY5MTkwZTlmYWQwZmJhM2ViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuMfyvNOHAUw3NeTgG+S/YdGSUIo v1736Gh3l/+D3jiRS7WV4pzcCAxAcOf9D2bKt0W2EAZG9MBgfa59ekzBdD4ZXGKK q6fBq9qm7ar/+eVj5IzRiCfF4439qJONw76IbuVhHefziITMhNsbc5owmieh6pH/ ykDldPNqgCqBKby0DfjuU+PFV7U1XZKvgUTIysUKd0CVzr1R85AQsekpZfskzjxx xhRuq7SsC+eu57gF6mO971Ark7b/ZY0n+ZekuamZ+RERuDGZCpgjFZxOPcqdE0jM Vj2AeBLOgZlLhrOH5kYnIqfuXA4j7PMQnxx0K5g2pt1OXu9PPe5Wm0s3cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGzXz0NzC7Md4HIg/5GQ6frQ+6PrMB8GA1UdIwQY MBaAFHYcBXU7GbzbUy/cf29H6X6TW6CiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGh3RmRUc1p2TnRUTDl4X2IwZnBmcE5ib0tJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81YmVmYTctODdmZC00NGEyLWIxZjQt M2U4ZjU3NWVkZGZmLzEvZGh3RmRUc1p2TnRUTDl4X2IwZnBmcE5ib0tJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy81YmVmYTctODdmZC00NGEyLWIxZjQtM2U4ZjU3NWVkZGZm LzEvZGh3RmRUc1p2TnRUTDl4X2IwZnBmcE5ib0tJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd9Ft7Us+ qfjCYrJ39UqoP6CwtWpweqQIaPYzxG2xPHU6pV//zdyhvDKTrWGLtS+3t8I1LRQ9 bI0ICtdr6KMeX2lsMhCv1+h4bbjvlhbqtYZlfjZ2Q4kL+Uoj1AXfO/HbmrsA3Ojo 53QYINTbHj2KfILH/0gjrPg3lryTMS+SJGqpdACXiAPqlRme3/GqHPkIjxQbQ0by /+E0v/rRy3+GTfAawWRv5t+Sj+3zB/hWDISF527bHHkqsriNDwC/G05vCTFIiZMx MtplL87GTsOm+zaBGL0UK9xwuVrQjWG9jG3Z44h0sD6DNqNGFeZVgmGrjDbCDz5W avY3mXIxVr4Cqw== -----END CERTIFICATE-----Generated at Mon Dec 15 20:32:17 2025 by rpki-client