This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft File: Dw-fBE4rkph410fF_7uArRDj1r0.mft (raw, json) Hash identifier: iTzJRG6qktqwgeunPt6OxZgUkuZbAZldal9kBFxU/yk= Subject key identifier: 28:AF:4E:4E:66:5D:62:28:DF:DB:B7:40:93:9F:3A:2F:76:47:35:D0 Authority key identifier: 0F:0F:9F:04:4E:2B:92:98:78:D7:47:C5:FF:BB:80:AD:10:E3:D6:BD Certificate issuer: /CN=0f0f9f044e2b929878d747c5ffbb80ad10e3d6bd Certificate serial: 019AF49C402611C85A74B7DF3C37E6BE6102 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dw-fBE4rkph410fF_7uArRDj1r0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft Manifest number: 0BFB Signing time: Sat 06 Dec 2025 17:01:11 +0000 Manifest this update: Sat 06 Dec 2025 17:01:11 +0000 Manifest next update: Sun 07 Dec 2025 17:01:11 +0000 Files and hashes: 1: Dw-fBE4rkph410fF_7uArRDj1r0.crl (hash: iUsjQD9Na3B+gaP8R1Bj+VEjXNMH6EmcyId2zSBD9i8=) 2: NY6GkITWKlUtVSGSEXVFnWklUFA.roa (hash: bc90pfjZ3z6bn5Sd1cSbU6mDm4LudyLIA08FEeaNBvM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.crl rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft rsync://rpki.ripe.net/repository/DEFAULT/Dw-fBE4rkph410fF_7uArRDj1r0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:40:26:11:c8:5a:74:b7:df:3c:37:e6:be:61:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f0f9f044e2b929878d747c5ffbb80ad10e3d6bd Validity Not Before: Dec 6 17:01:11 2025 GMT Not After : Dec 7 17:01:11 2025 GMT Subject: CN=28af4e4e665d6228dfdbb740939f3a2f764735d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b0:3c:4d:73:df:ff:45:3f:e8:a8:b4:a1:78: d8:88:24:18:e6:83:7b:ec:80:39:a2:20:17:f2:a8: 5a:cc:63:51:28:31:a6:53:1c:0c:5c:f9:0b:8e:14: 7d:af:60:a8:db:6e:8d:d4:a9:0f:42:41:25:3b:3f: 2c:36:b1:8b:57:31:71:a0:d6:28:39:7b:7c:b9:19: 47:c9:e4:55:29:99:1a:6a:79:a8:17:b7:b6:dd:fe: 1c:91:dc:be:15:e0:d2:49:bf:e9:af:0f:05:b4:3c: a7:ef:dc:14:d7:ca:61:e2:eb:2b:66:36:80:98:e6: 67:e1:53:be:a5:22:10:0b:fb:3f:ae:99:15:8a:b4: df:75:b5:e3:9c:a3:19:de:19:a0:b0:f3:43:1c:90: 8e:fc:7d:3a:46:94:26:9d:c6:9f:14:8c:15:54:e5: c7:ff:29:20:bf:79:35:4f:0c:d4:05:19:aa:23:25: 3d:75:ad:e7:3d:e7:15:67:67:9a:60:26:27:03:00: 6d:ab:d9:67:cf:76:b4:14:06:7e:36:06:c0:b2:22: 8b:9d:f3:ef:83:4e:0c:43:07:8a:98:06:05:d9:e7: 94:80:4f:4d:e7:8a:0a:fa:fa:74:34:17:2f:a0:6a: 5b:a5:60:94:83:13:b3:53:67:b5:e6:27:b6:c2:6a: 97:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:AF:4E:4E:66:5D:62:28:DF:DB:B7:40:93:9F:3A:2F:76:47:35:D0 X509v3 Authority Key Identifier: keyid:0F:0F:9F:04:4E:2B:92:98:78:D7:47:C5:FF:BB:80:AD:10:E3:D6:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dw-fBE4rkph410fF_7uArRDj1r0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:1d:c0:fc:b9:4f:89:61:52:e6:bd:80:c4:de:3f:61:0b:61: c0:22:80:ba:86:b8:30:05:ee:e7:7a:67:da:55:e5:7b:c2:2d: ca:13:0f:61:46:3b:e3:03:bc:bc:8d:3e:05:d2:16:0f:01:31: 0d:64:1a:5b:c3:30:c9:55:75:c0:1c:52:02:ea:18:c4:74:80: ce:23:ce:37:e1:4f:00:46:c1:bc:0a:29:4c:78:e5:70:ab:82: 7e:a0:1c:11:74:e6:10:8c:8e:b4:e9:1b:4d:9a:b3:1f:e0:79: 09:e4:62:ed:41:46:6c:c5:7b:e6:da:86:c6:3f:3e:e9:e8:5b: d5:b2:ac:1b:d6:83:ed:49:3e:b4:ba:6d:3f:4b:3f:78:8b:20: 39:2f:1e:d1:1f:f5:bb:15:f6:48:4e:b7:dc:97:7a:d2:6a:cd: e6:c1:a3:e3:f1:e5:7b:c1:f4:46:e8:b7:a8:31:14:05:fc:60: 9f:9f:c6:7b:33:32:98:6c:11:62:ea:71:d5:a9:40:c5:89:8d: 3c:76:c6:9e:1b:cc:ab:11:64:cd:cb:7c:19:94:ef:75:93:a2: e6:71:42:e2:e2:69:5d:68:67:94:d8:6e:7d:aa:f1:b0:bd:aa: 6e:17:c4:24:8b:aa:0e:3e:ab:a2:36:80:10:f5:6e:32:72:13: 71:a6:50:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nEAmEchadLffPDfmvmECMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMGY5ZjA0NGUyYjkyOTg3OGQ3NDdjNWZmYmI4MGFkMTBl M2Q2YmQwHhcNMjUxMjA2MTcwMTExWhcNMjUxMjA3MTcwMTExWjAzMTEwLwYDVQQD EygyOGFmNGU0ZTY2NWQ2MjI4ZGZkYmI3NDA5MzlmM2EyZjc2NDczNWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorA8TXPf/0U/6Ki0oXjYiCQY5oN7 7IA5oiAX8qhazGNRKDGmUxwMXPkLjhR9r2Co226N1KkPQkElOz8sNrGLVzFxoNYo OXt8uRlHyeRVKZkaanmoF7e23f4ckdy+FeDSSb/prw8FtDyn79wU18ph4usrZjaA mOZn4VO+pSIQC/s/rpkVirTfdbXjnKMZ3hmgsPNDHJCO/H06RpQmncafFIwVVOXH /ykgv3k1TwzUBRmqIyU9da3nPecVZ2eaYCYnAwBtq9lnz3a0FAZ+NgbAsiKLnfPv g04MQweKmAYF2eeUgE9N54oK+vp0NBcvoGpbpWCUgxOzU2e15ie2wmqXYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCivTk5mXWIo39u3QJOfOi92RzXQMB8GA1UdIwQY MBaAFA8PnwROK5KYeNdHxf+7gK0Q49a9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHctZkJFNHJrcGg0MTBmRl83dUFyUkRqMXIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85M2Q0NjAtMzY4Yy00NmQ3LThlN2Et Y2RiZDNiNmNlNzc3LzEvRHctZkJFNHJrcGg0MTBmRl83dUFyUkRqMXIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS85M2Q0NjAtMzY4Yy00NmQ3LThlN2EtY2RiZDNiNmNlNzc3 LzEvRHctZkJFNHJrcGg0MTBmRl83dUFyUkRqMXIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARh3A/LlP iWFS5r2AxN4/YQthwCKAuoa4MAXu53pn2lXle8ItyhMPYUY74wO8vI0+BdIWDwEx DWQaW8MwyVV1wBxSAuoYxHSAziPON+FPAEbBvAopTHjlcKuCfqAcEXTmEIyOtOkb TZqzH+B5CeRi7UFGbMV75tqGxj8+6ehb1bKsG9aD7Uk+tLptP0s/eIsgOS8e0R/1 uxX2SE633Jd60mrN5sGj4/Hle8H0Rui3qDEUBfxgn5/GezMymGwRYupx1alAxYmN PHbGnhvMqxFkzct8GZTvdZOi5nFC4uJpXWhnlNhufarxsL2qbhfEJIuqDj6rojaA EPVuMnITcaZQtA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:11:42 2025 by rpki-client