This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.mft File: DkOg3wWaUlGkALWh8TIboA0xINI.mft (raw, json) Hash identifier: FO88Hn1sRw4mjmLrKqsVMx+WDVzutC7zgTxZINxQj1g= Subject key identifier: A9:D7:B2:B2:7B:A7:76:8B:D5:41:32:8C:D2:0C:CE:F9:22:6B:B8:13 Authority key identifier: 0E:43:A0:DF:05:9A:52:51:A4:00:B5:A1:F1:32:1B:A0:0D:31:20:D2 Certificate issuer: /CN=0e43a0df059a5251a400b5a1f1321ba00d3120d2 Certificate serial: 019AF7D495DCC1452D02C37CEE6F8908028E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkOg3wWaUlGkALWh8TIboA0xINI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.mft Manifest number: 1766 Signing time: Sun 07 Dec 2025 08:01:35 +0000 Manifest this update: Sun 07 Dec 2025 08:01:35 +0000 Manifest next update: Mon 08 Dec 2025 08:01:35 +0000 Files and hashes: 1: DkOg3wWaUlGkALWh8TIboA0xINI.crl (hash: e1NLM7kWpxBHXWRjYulJAPdSwtpTTVkZHHPIKAQSkkg=) 2: meyQlZ2V2fFm7jP19tS1SnwZU8o.roa (hash: Rjzn7WIqlB0uqbC7++KFiY3Pm+Td1rmouk6fxkElj30=) 3: u8p2k1kowabt5V010HcHbUdny4A.roa (hash: +zIIZMzEVP0HgE88S7aeA3JokmowyYpTKNzs1+R3c2M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.crl rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.mft rsync://rpki.ripe.net/repository/DEFAULT/DkOg3wWaUlGkALWh8TIboA0xINI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:d4:95:dc:c1:45:2d:02:c3:7c:ee:6f:89:08:02:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e43a0df059a5251a400b5a1f1321ba00d3120d2 Validity Not Before: Dec 7 08:01:35 2025 GMT Not After : Dec 8 08:01:35 2025 GMT Subject: CN=a9d7b2b27ba7768bd541328cd20ccef9226bb813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:39:a9:71:26:88:24:f4:6b:98:d5:eb:9b:c1: cd:6e:91:8f:0f:c1:8d:14:cc:c3:99:e2:42:c8:f3: 49:88:83:98:df:5f:a1:f9:90:66:f4:27:75:68:d9: d6:75:cd:ea:1d:8e:a0:02:32:b6:8d:3b:42:f6:e1: e6:4b:92:aa:73:d0:5a:7f:5f:33:32:5e:b2:42:46: 99:0a:96:06:5d:c6:5e:23:47:5e:0b:12:e8:fe:f2: d7:79:89:fe:39:67:7f:93:ae:ba:7e:d2:22:e8:69: fe:59:ea:d9:26:76:57:f0:6a:74:c5:1c:a4:1f:be: 0b:a5:c1:c5:0d:c8:84:05:dd:9a:4e:fd:a5:f2:70: a1:cf:e0:6d:16:c3:4c:6c:ec:96:c2:43:0f:68:17: d1:13:a2:c9:19:0e:e9:d1:27:20:88:0a:43:4d:66: 06:37:61:e3:9a:22:7c:73:68:b4:d0:46:f6:4d:ab: 6e:0b:01:ff:17:9b:69:3d:74:fe:b1:98:c7:4b:bb: a4:5f:96:c4:98:9c:32:aa:06:b0:31:20:a5:dc:e0: 31:01:39:74:68:84:26:50:f1:24:44:40:cb:0e:40: 36:b1:21:89:84:38:ee:b8:22:c8:74:76:9c:f7:eb: 20:1d:d2:21:5a:a6:44:07:6d:93:10:3f:ea:28:6b: 9e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D7:B2:B2:7B:A7:76:8B:D5:41:32:8C:D2:0C:CE:F9:22:6B:B8:13 X509v3 Authority Key Identifier: keyid:0E:43:A0:DF:05:9A:52:51:A4:00:B5:A1:F1:32:1B:A0:0D:31:20:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkOg3wWaUlGkALWh8TIboA0xINI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:7f:72:82:4d:97:dc:81:4f:99:c5:f0:bc:a0:e5:2d:61:d1: 80:2f:55:bc:6b:89:bb:f3:7f:97:38:e6:e6:52:8e:78:68:c4: 05:04:50:9c:01:4c:8a:ef:34:a5:bf:9a:f8:d7:91:98:cd:53: 90:07:51:68:7e:d2:7c:74:fb:ad:24:71:83:79:f0:21:72:bc: 89:06:0f:1c:5d:5d:32:02:1e:01:d1:52:98:da:d0:cc:77:2e: bc:c5:17:5a:ef:d7:a0:d7:5d:47:5e:d7:01:c3:08:d0:9a:73: 75:a0:41:47:b7:e1:5d:29:c9:af:45:ca:65:89:37:b4:ed:36: fc:ab:60:b2:5b:8f:91:af:e2:95:04:53:5a:de:a5:fd:a7:26: 66:6e:fe:69:bf:c1:f5:13:38:3a:3e:2e:ec:47:50:f5:77:3e: 78:12:b4:09:cb:b9:57:68:dd:a1:c3:2e:30:3c:d6:79:55:ac: 19:9d:8f:60:d7:4f:71:f7:ba:f2:89:d5:e4:d2:d0:ed:5d:28: 52:20:5d:4d:f1:7c:ae:b5:f9:a0:46:b3:c0:91:18:fd:4e:fd: 1e:db:22:fa:6c:20:c0:9a:37:ab:d5:7f:bf:18:24:e0:c1:9e: 50:f0:77:6d:de:45:79:2f:a9:b6:3b:92:fe:fd:c5:29:48:8d: ec:15:78:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr31JXcwUUtAsN87m+JCAKOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNDNhMGRmMDU5YTUyNTFhNDAwYjVhMWYxMzIxYmEwMGQz MTIwZDIwHhcNMjUxMjA3MDgwMTM1WhcNMjUxMjA4MDgwMTM1WjAzMTEwLwYDVQQD EyhhOWQ3YjJiMjdiYTc3NjhiZDU0MTMyOGNkMjBjY2VmOTIyNmJiODEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zmpcSaIJPRrmNXrm8HNbpGPD8GN FMzDmeJCyPNJiIOY31+h+ZBm9Cd1aNnWdc3qHY6gAjK2jTtC9uHmS5Kqc9Baf18z Ml6yQkaZCpYGXcZeI0deCxLo/vLXeYn+OWd/k666ftIi6Gn+WerZJnZX8Gp0xRyk H74LpcHFDciEBd2aTv2l8nChz+BtFsNMbOyWwkMPaBfRE6LJGQ7p0ScgiApDTWYG N2HjmiJ8c2i00Eb2TatuCwH/F5tpPXT+sZjHS7ukX5bEmJwyqgawMSCl3OAxATl0 aIQmUPEkREDLDkA2sSGJhDjuuCLIdHac9+sgHdIhWqZEB22TED/qKGueSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKnXsrJ7p3aL1UEyjNIMzvkia7gTMB8GA1UdIwQY MBaAFA5DoN8FmlJRpAC1ofEyG6ANMSDSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGtPZzN3V2FVbEdrQUxXaDhUSWJvQTB4SU5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wYmIzM2ItNjhmNy00NzQ4LTg0YWMt MDA0ZmU0MzNjN2M4LzEvRGtPZzN3V2FVbEdrQUxXaDhUSWJvQTB4SU5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8wYmIzM2ItNjhmNy00NzQ4LTg0YWMtMDA0ZmU0MzNjN2M4 LzEvRGtPZzN3V2FVbEdrQUxXaDhUSWJvQTB4SU5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkX9ygk2X 3IFPmcXwvKDlLWHRgC9VvGuJu/N/lzjm5lKOeGjEBQRQnAFMiu80pb+a+NeRmM1T kAdRaH7SfHT7rSRxg3nwIXK8iQYPHF1dMgIeAdFSmNrQzHcuvMUXWu/XoNddR17X AcMI0JpzdaBBR7fhXSnJr0XKZYk3tO02/KtgsluPka/ilQRTWt6l/acmZm7+ab/B 9RM4Oj4u7EdQ9Xc+eBK0Ccu5V2jdocMuMDzWeVWsGZ2PYNdPcfe68onV5NLQ7V0o UiBdTfF8rrX5oEazwJEY/U79Htsi+mwgwJo3q9V/vxgk4MGeUPB3bd5FeS+ptjuS /v3FKUiN7BV4BQ== -----END CERTIFICATE-----Generated at Sun Dec 7 10:06:15 2025 by rpki-client