This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft File: Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft (raw, json) Hash identifier: Gc44bIlcU5Xjd+Iakk0Fg/cPJsdUZpTYlr6H6ZkfRiE= Subject key identifier: 30:C6:96:86:06:F2:B9:40:EC:36:0D:FB:8C:A5:7C:45:9A:17:53:99 Authority key identifier: 0E:8C:E0:A6:AB:B8:EE:50:D4:4B:3B:AE:42:D4:A2:54:9F:FB:82:40 Certificate issuer: /CN=0e8ce0a6abb8ee50d44b3bae42d4a2549ffb8240 Certificate serial: 019AF31D68F38FA85C8CB8F2F6D08556CC98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dozgpqu47lDUSzuuQtSiVJ_7gkA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft Manifest number: 159F Signing time: Sat 06 Dec 2025 10:03:02 +0000 Manifest this update: Sat 06 Dec 2025 10:03:02 +0000 Manifest next update: Sun 07 Dec 2025 10:03:02 +0000 Files and hashes: 1: Dozgpqu47lDUSzuuQtSiVJ_7gkA.crl (hash: RxxvkI8Q2Dt6pZfhjjY+duDVHNITsMdx4CQzJgjDxGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.crl rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft rsync://rpki.ripe.net/repository/DEFAULT/Dozgpqu47lDUSzuuQtSiVJ_7gkA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:68:f3:8f:a8:5c:8c:b8:f2:f6:d0:85:56:cc:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e8ce0a6abb8ee50d44b3bae42d4a2549ffb8240 Validity Not Before: Dec 6 10:03:02 2025 GMT Not After : Dec 7 10:03:02 2025 GMT Subject: CN=30c6968606f2b940ec360dfb8ca57c459a175399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:49:44:bf:bf:f3:ed:92:f4:50:60:70:45:56: 8c:59:3e:7a:e9:5b:34:44:89:f1:da:8c:11:81:0e: 54:7e:1c:93:9a:7b:e0:7a:fb:1d:25:97:6d:49:01: 36:9c:1e:20:f5:9e:22:d1:89:ab:ea:39:90:21:95: 8a:e0:06:60:bf:75:dc:74:5d:32:5c:ff:2f:34:29: 62:61:2a:ca:e5:90:28:80:0e:24:30:49:bb:68:2e: c9:60:82:57:f8:b0:38:a3:94:ca:4b:3c:06:4b:b0: b7:1c:1a:dc:33:06:ec:33:01:e6:83:93:67:20:da: d0:a6:9b:6c:6d:73:b3:65:bf:ad:2c:71:9d:1b:a2: 08:ab:81:45:8a:a0:e1:ff:12:42:66:c4:d7:80:66: 41:36:fe:8b:cf:9c:f6:32:13:67:8c:e8:ec:fb:06: a0:b1:03:5f:35:00:bd:4b:6e:d8:6c:fd:29:5d:ca: 89:91:72:32:d1:44:9e:4c:23:0e:27:d5:4c:77:c5: 9a:a6:a8:17:6a:01:b0:18:10:9d:9f:e7:f8:d8:2d: 7d:85:3d:65:55:b0:9a:00:86:24:15:23:b2:dd:b6: a5:8b:3d:5b:1e:bf:f6:93:d8:2b:14:f7:4c:d0:1e: 3e:78:2c:db:3e:cc:9b:53:87:f8:ed:2b:9c:63:c1: 4d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:C6:96:86:06:F2:B9:40:EC:36:0D:FB:8C:A5:7C:45:9A:17:53:99 X509v3 Authority Key Identifier: keyid:0E:8C:E0:A6:AB:B8:EE:50:D4:4B:3B:AE:42:D4:A2:54:9F:FB:82:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dozgpqu47lDUSzuuQtSiVJ_7gkA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:48:73:17:08:8d:85:d5:cb:66:d3:0d:a1:52:d3:fd:00:14: 4b:4f:e0:1b:ba:4b:21:aa:78:44:f8:27:d6:62:66:45:01:44: e0:87:05:ae:ec:7d:61:0e:87:01:de:3c:96:a3:b3:8b:b2:71: f9:c2:89:99:8c:b6:8e:b2:33:15:c2:34:41:13:3f:97:14:04: 72:69:9a:97:d6:9c:50:ef:2b:39:5a:ff:81:b0:df:77:df:58: b0:c0:d0:8a:bc:59:bf:de:98:22:7b:d5:b6:43:92:82:28:80: 61:12:4d:04:82:81:52:63:46:a3:55:0c:3d:6f:4f:c1:4e:f2: 04:9b:26:4c:24:92:4b:18:24:92:0b:db:8b:7f:66:a9:bf:43: bb:16:35:fb:e3:07:60:fc:38:5f:c1:09:18:d6:2d:34:1c:d1: f1:91:9c:38:38:7f:57:9d:7a:6f:48:5b:9a:91:b7:c7:5a:a2: 98:9d:bf:71:f4:dd:e6:4d:c6:c6:1b:1d:e2:d1:a0:b9:f3:aa: 0b:fe:88:6f:cb:3d:83:bc:a3:3f:10:46:3d:fc:53:42:fb:7a: 96:4b:27:38:ca:ee:49:72:8b:70:f0:dd:5a:3e:a3:a4:2e:03: 71:df:31:5a:e9:45:6f:c6:f9:a5:24:55:a4:bb:53:31:c2:c1: 14:38:84:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHWjzj6hcjLjy9tCFVsyYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlOGNlMGE2YWJiOGVlNTBkNDRiM2JhZTQyZDRhMjU0OWZm YjgyNDAwHhcNMjUxMjA2MTAwMzAyWhcNMjUxMjA3MTAwMzAyWjAzMTEwLwYDVQQD EygzMGM2OTY4NjA2ZjJiOTQwZWMzNjBkZmI4Y2E1N2M0NTlhMTc1Mzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0lEv7/z7ZL0UGBwRVaMWT566Vs0 RInx2owRgQ5UfhyTmnvgevsdJZdtSQE2nB4g9Z4i0Ymr6jmQIZWK4AZgv3XcdF0y XP8vNCliYSrK5ZAogA4kMEm7aC7JYIJX+LA4o5TKSzwGS7C3HBrcMwbsMwHmg5Nn INrQpptsbXOzZb+tLHGdG6IIq4FFiqDh/xJCZsTXgGZBNv6Lz5z2MhNnjOjs+wag sQNfNQC9S27YbP0pXcqJkXIy0USeTCMOJ9VMd8WapqgXagGwGBCdn+f42C19hT1l VbCaAIYkFSOy3baliz1bHr/2k9grFPdM0B4+eCzbPsybU4f47SucY8FNKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDDGloYG8rlA7DYN+4ylfEWaF1OZMB8GA1UdIwQY MBaAFA6M4KaruO5Q1Es7rkLUolSf+4JAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG96Z3BxdTQ3bERVU3p1dVF0U2lWSl83Z2tBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi85ZjIwNzctZGY0Zi00OTdlLThlOTAt YzQ5OTc1NWEyNjg5LzEvRG96Z3BxdTQ3bERVU3p1dVF0U2lWSl83Z2tBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi85ZjIwNzctZGY0Zi00OTdlLThlOTAtYzQ5OTc1NWEyNjg5 LzEvRG96Z3BxdTQ3bERVU3p1dVF0U2lWSl83Z2tBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMUhzFwiN hdXLZtMNoVLT/QAUS0/gG7pLIap4RPgn1mJmRQFE4IcFrux9YQ6HAd48lqOzi7Jx +cKJmYy2jrIzFcI0QRM/lxQEcmmal9acUO8rOVr/gbDfd99YsMDQirxZv96YInvV tkOSgiiAYRJNBIKBUmNGo1UMPW9PwU7yBJsmTCSSSxgkkgvbi39mqb9DuxY1++MH YPw4X8EJGNYtNBzR8ZGcODh/V516b0hbmpG3x1qimJ2/cfTd5k3Gxhsd4tGgufOq C/6Ib8s9g7yjPxBGPfxTQvt6lksnOMruSXKLcPDdWj6jpC4Dcd8xWulFb8b5pSRV pLtTMcLBFDiEYg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:49:00 2025 by rpki-client