This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/6b39bf-3640-4d2e-b22f-61cd618658c6/1/DhEMl9XysftNNYKIwOpir18gxBo.mft File: DhEMl9XysftNNYKIwOpir18gxBo.mft (raw, json) Hash identifier: JhaoEw/NM9M7UbuN458yaYLZA0uOK80xCz9yv4e9YcE= Subject key identifier: 5A:0C:CB:02:52:AB:E5:F6:B3:2E:87:EE:82:0F:6C:A9:25:82:2A:D1 Authority key identifier: 0E:11:0C:97:D5:F2:B1:FB:4D:35:82:88:C0:EA:62:AF:5F:20:C4:1A Certificate issuer: /CN=0e110c97d5f2b1fb4d358288c0ea62af5f20c41a Certificate serial: 019AF2ADC0E1F60CFAD48DFEF793B52CC921 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DhEMl9XysftNNYKIwOpir18gxBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/6b39bf-3640-4d2e-b22f-61cd618658c6/1/DhEMl9XysftNNYKIwOpir18gxBo.mft Manifest number: 6A Signing time: Sat 06 Dec 2025 08:01:04 +0000 Manifest this update: Sat 06 Dec 2025 08:01:04 +0000 Manifest next update: Sun 07 Dec 2025 08:01:04 +0000 Files and hashes: 1: DhEMl9XysftNNYKIwOpir18gxBo.crl (hash: 2ReVa8Ph+OVRZbK1JFj73kiKvQ9dSSeaiRk5dfT0/54=) 2: LZOyP8r3x8zItBlCJiR2Oe2hLRw.roa (hash: ptlWNHRcQBtj91KkmUUskyC0BtqyIo6TBBD+R2rdU9Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/6b39bf-3640-4d2e-b22f-61cd618658c6/1/DhEMl9XysftNNYKIwOpir18gxBo.crl rsync://rpki.ripe.net/repository/DEFAULT/53/6b39bf-3640-4d2e-b22f-61cd618658c6/1/DhEMl9XysftNNYKIwOpir18gxBo.mft rsync://rpki.ripe.net/repository/DEFAULT/DhEMl9XysftNNYKIwOpir18gxBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:c0:e1:f6:0c:fa:d4:8d:fe:f7:93:b5:2c:c9:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e110c97d5f2b1fb4d358288c0ea62af5f20c41a Validity Not Before: Dec 6 08:01:04 2025 GMT Not After : Dec 7 08:01:04 2025 GMT Subject: CN=5a0ccb0252abe5f6b32e87ee820f6ca925822ad1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:31:10:a4:fa:2d:18:69:76:d0:b7:c7:b1:ee: b1:06:12:93:41:2f:a4:cd:eb:b9:13:e9:76:6b:65: ab:24:9c:c0:93:e0:37:14:f4:ca:5f:02:0d:17:e8: ad:f9:cf:1f:36:86:e8:95:49:69:f7:e0:29:ca:e2: 70:bb:bb:55:c9:d0:ff:77:c6:e4:cd:25:cd:de:c1: 77:e1:17:62:db:85:eb:cf:a0:e4:1a:33:de:59:84: 29:08:a0:0d:3e:be:37:37:6a:8f:96:e5:46:42:53: 96:04:5a:2d:f9:76:ee:04:2f:f1:ea:70:a4:59:54: b9:cd:33:00:f8:58:d3:50:a5:c2:92:ec:d9:67:0f: f8:11:b5:b3:91:13:62:a7:2c:a9:b2:88:db:55:5b: 0c:a1:ce:52:38:47:ab:d0:4a:ff:c8:19:46:20:22: 14:8b:7f:38:0a:bf:96:48:f1:67:5f:71:93:77:c9: 59:46:14:d6:46:29:d8:d2:d3:34:4e:a5:7b:5a:fb: 9e:74:d0:34:7a:12:db:9d:c7:a3:84:f5:62:cc:54: 28:5d:22:f2:70:e5:81:71:aa:72:b2:e9:9d:3e:07: 1b:67:e2:54:a7:a7:f0:5d:f1:20:89:ab:a6:b0:27: e7:01:33:90:ab:5e:6e:3f:dd:bb:08:6e:0d:16:3d: c6:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:0C:CB:02:52:AB:E5:F6:B3:2E:87:EE:82:0F:6C:A9:25:82:2A:D1 X509v3 Authority Key Identifier: keyid:0E:11:0C:97:D5:F2:B1:FB:4D:35:82:88:C0:EA:62:AF:5F:20:C4:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DhEMl9XysftNNYKIwOpir18gxBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6b39bf-3640-4d2e-b22f-61cd618658c6/1/DhEMl9XysftNNYKIwOpir18gxBo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6b39bf-3640-4d2e-b22f-61cd618658c6/1/DhEMl9XysftNNYKIwOpir18gxBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:99:60:75:91:83:a3:76:61:58:f2:eb:7c:b4:d8:48:df:ac: 72:88:7d:ea:cb:05:31:24:d0:1e:f8:8e:96:07:3f:51:3f:c5: 9e:e4:a4:74:5b:72:a6:49:2a:83:2a:c9:c8:8b:40:41:b9:2c: b5:4a:9c:87:cf:74:c2:2c:ba:ca:9a:62:99:f2:c5:b9:6c:ea: 41:36:03:32:47:57:63:ba:c9:92:1c:51:f1:fc:90:7e:30:4e: 4d:44:cf:35:81:64:c5:23:50:33:9d:e0:95:85:d5:0f:5f:3a: 39:f7:36:6e:8b:3b:99:be:6c:c1:0e:00:75:d4:56:24:3c:3a: e8:3d:be:ec:c1:93:5a:cf:aa:be:a9:e0:0a:6d:f8:48:76:38: d4:ef:b5:38:8d:26:73:44:dd:81:6b:65:34:cd:b0:62:ff:2b: 47:da:ee:9b:5c:61:75:a3:36:83:f3:d8:3a:e5:49:92:d0:9b: aa:13:e2:47:ff:3b:0c:8b:73:a7:aa:2c:c9:b2:63:42:68:0a: d4:9f:44:b3:3c:89:39:00:99:95:08:d7:fd:59:ec:bb:bd:c4: 3f:a2:b8:ff:e9:d2:77:dd:52:c1:04:d3:95:23:3f:81:39:b8: 43:69:a6:0b:85:e4:eb:d5:28:4c:3d:50:d3:cf:7d:a6:1d:93: ab:97:97:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrcDh9gz61I3+95O1LMkhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMTEwYzk3ZDVmMmIxZmI0ZDM1ODI4OGMwZWE2MmFmNWYy MGM0MWEwHhcNMjUxMjA2MDgwMTA0WhcNMjUxMjA3MDgwMTA0WjAzMTEwLwYDVQQD Eyg1YTBjY2IwMjUyYWJlNWY2YjMyZTg3ZWU4MjBmNmNhOTI1ODIyYWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zEQpPotGGl20LfHse6xBhKTQS+k zeu5E+l2a2WrJJzAk+A3FPTKXwINF+it+c8fNobolUlp9+ApyuJwu7tVydD/d8bk zSXN3sF34Rdi24Xrz6DkGjPeWYQpCKANPr43N2qPluVGQlOWBFot+XbuBC/x6nCk WVS5zTMA+FjTUKXCkuzZZw/4EbWzkRNipyypsojbVVsMoc5SOEer0Er/yBlGICIU i384Cr+WSPFnX3GTd8lZRhTWRinY0tM0TqV7WvuedNA0ehLbncejhPVizFQoXSLy cOWBcapysumdPgcbZ+JUp6fwXfEgiaumsCfnATOQq15uP927CG4NFj3GZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFoMywJSq+X2sy6H7oIPbKklgirRMB8GA1UdIwQY MBaAFA4RDJfV8rH7TTWCiMDqYq9fIMQaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGhFTWw5WHlzZnROTllLSXdPcGlyMThneEJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My82YjM5YmYtMzY0MC00ZDJlLWIyMmYt NjFjZDYxODY1OGM2LzEvRGhFTWw5WHlzZnROTllLSXdPcGlyMThneEJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My82YjM5YmYtMzY0MC00ZDJlLWIyMmYtNjFjZDYxODY1OGM2 LzEvRGhFTWw5WHlzZnROTllLSXdPcGlyMThneEJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgplgdZGD o3ZhWPLrfLTYSN+scoh96ssFMSTQHviOlgc/UT/FnuSkdFtypkkqgyrJyItAQbks tUqch890wiy6yppimfLFuWzqQTYDMkdXY7rJkhxR8fyQfjBOTUTPNYFkxSNQM53g lYXVD186Ofc2bos7mb5swQ4AddRWJDw66D2+7MGTWs+qvqngCm34SHY41O+1OI0m c0TdgWtlNM2wYv8rR9rum1xhdaM2g/PYOuVJktCbqhPiR/87DItzp6osybJjQmgK 1J9EszyJOQCZlQjX/Vnsu73EP6K4/+nSd91SwQTTlSM/gTm4Q2mmC4Xk69UoTD1Q 0899ph2Tq5eXDw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:38:36 2025 by rpki-client