This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft File: dnwXZvu9z_aLvDSjxr5poMigOrk.mft (raw, json) Hash identifier: fg3dNlXMFFURbQ8jAM41AiQ+3RKVUDuEV04hBXjWsWg= Subject key identifier: 0A:6A:4E:10:F3:E7:06:E7:9F:A1:38:9A:6C:A8:E2:C0:9F:9E:35:EF Authority key identifier: 76:7C:17:66:FB:BD:CF:F6:8B:BC:34:A3:C6:BE:69:A0:C8:A0:3A:B9 Certificate issuer: /CN=767c1766fbbdcff68bbc34a3c6be69a0c8a03ab9 Certificate serial: 019AF38930230B79FDEEE9DFC2514CBF0E29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft Manifest number: 0F5C Signing time: Sat 06 Dec 2025 12:00:45 +0000 Manifest this update: Sat 06 Dec 2025 12:00:45 +0000 Manifest next update: Sun 07 Dec 2025 12:00:45 +0000 Files and hashes: 1: dnwXZvu9z_aLvDSjxr5poMigOrk.crl (hash: GNym6eNWmiTZGz+YUqvMZCviLPHfbiKH6woATr65pTM=) 2: ffTvs6YF_hXAEglDFhneoTAWA7Y.roa (hash: McS9n7bcKq8O21qZ8IIp3IHODw/eCLO/50XCpVXjy20=) 3: xnRx0OSK9TIMFxn1VL8fIU-kDPQ.roa (hash: l/e913myQSQUa6e/Y2iqnvi7HmfqzgcIokF4oa8whYM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.crl rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:30:23:0b:79:fd:ee:e9:df:c2:51:4c:bf:0e:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767c1766fbbdcff68bbc34a3c6be69a0c8a03ab9 Validity Not Before: Dec 6 12:00:45 2025 GMT Not After : Dec 7 12:00:45 2025 GMT Subject: CN=0a6a4e10f3e706e79fa1389a6ca8e2c09f9e35ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cc:0a:3b:dd:42:46:14:5e:e5:0e:30:ad:fb: 5b:55:b8:b4:01:28:46:ed:28:21:6a:ad:a3:fe:7a: 29:57:80:09:ec:b4:a7:92:fe:ee:8d:64:9a:3a:21: 19:5e:ff:37:b0:7c:14:94:bd:b8:84:e2:44:3d:8e: e6:3c:31:7f:50:9f:f4:59:d1:14:cc:04:c5:2a:a7: e8:f3:f1:c5:cb:0b:e5:9d:7d:c1:ba:b4:6d:f3:90: db:7d:94:dc:55:3b:63:a1:85:72:82:2b:c4:89:76: 83:c1:57:4a:4b:c9:3a:6f:69:de:e9:47:61:14:bd: 65:39:dc:fb:31:61:b2:bb:88:1e:51:35:00:62:f1: 91:22:6b:ec:13:5b:12:e8:5d:7f:91:1b:b4:5f:83: 3c:a8:31:51:e1:66:3a:2f:81:fd:3b:cf:82:b9:10: 54:3c:29:1e:28:51:d0:66:cb:ca:5f:de:f5:ae:23: 18:a1:3a:3f:b7:b3:d0:7a:97:c9:61:8a:0c:02:a2: cc:1d:b2:80:fd:fa:e6:5f:3b:b2:77:ac:ac:ae:05: a3:c2:b8:b9:b0:73:d2:72:be:54:54:d5:44:a8:a7: 16:f6:27:16:3b:47:a7:1d:5b:3e:72:14:5e:a1:a5: 09:4f:37:95:44:95:67:3e:30:81:ec:30:c3:9a:b3: 3a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:6A:4E:10:F3:E7:06:E7:9F:A1:38:9A:6C:A8:E2:C0:9F:9E:35:EF X509v3 Authority Key Identifier: keyid:76:7C:17:66:FB:BD:CF:F6:8B:BC:34:A3:C6:BE:69:A0:C8:A0:3A:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:c6:b6:91:ec:d3:f8:f8:fc:7f:eb:57:d6:2e:a8:61:18:0c: e3:b4:52:7a:81:e5:cc:e4:08:93:b4:62:f3:f6:90:44:1a:e0: b2:16:92:2f:b0:d8:9c:e7:05:44:a3:b9:f7:dc:04:34:2c:3f: 8f:32:0e:29:ef:30:17:41:9b:5c:00:e7:21:a7:07:5d:9a:93: e4:35:14:8a:de:e4:40:16:0f:a9:ec:ac:0d:c8:44:1f:2e:d0: ff:9b:6e:cf:11:ef:51:c6:be:08:52:b8:7b:b1:c5:ad:8b:f4: 3f:1a:61:fc:7e:3d:06:0b:25:f7:99:93:5c:f5:bf:47:bb:dc: 89:1e:76:d1:04:69:86:5e:82:73:3a:d1:e6:2a:00:65:e9:67: 57:fe:e4:39:0c:69:0f:3b:e7:17:01:d8:00:bb:87:c8:e1:2e: f8:eb:dd:dd:5b:2a:ca:54:30:b6:d4:42:b3:72:cc:7c:e6:6c: 8d:9c:82:b4:f5:d2:c5:13:25:d2:f3:c8:d3:7e:72:fe:cd:38: 96:29:ad:7a:e3:24:00:f8:f9:5e:21:10:f2:05:f5:b1:8f:82: 59:92:6f:99:b4:1d:87:88:47:0d:46:61:a0:06:9c:30:c6:73: 6c:eb:94:3f:6d:05:79:0a:db:7a:25:4f:34:8d:4a:4f:7a:a1: 60:d1:8b:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziTAjC3n97unfwlFMvw4pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2N2MxNzY2ZmJiZGNmZjY4YmJjMzRhM2M2YmU2OWEwYzhh MDNhYjkwHhcNMjUxMjA2MTIwMDQ1WhcNMjUxMjA3MTIwMDQ1WjAzMTEwLwYDVQQD EygwYTZhNGUxMGYzZTcwNmU3OWZhMTM4OWE2Y2E4ZTJjMDlmOWUzNWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwswKO91CRhRe5Q4wrftbVbi0AShG 7Sghaq2j/nopV4AJ7LSnkv7ujWSaOiEZXv83sHwUlL24hOJEPY7mPDF/UJ/0WdEU zATFKqfo8/HFywvlnX3BurRt85DbfZTcVTtjoYVygivEiXaDwVdKS8k6b2ne6Udh FL1lOdz7MWGyu4geUTUAYvGRImvsE1sS6F1/kRu0X4M8qDFR4WY6L4H9O8+CuRBU PCkeKFHQZsvKX971riMYoTo/t7PQepfJYYoMAqLMHbKA/frmXzuyd6ysrgWjwri5 sHPScr5UVNVEqKcW9icWO0enHVs+chReoaUJTzeVRJVnPjCB7DDDmrM6wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFApqThDz5wbnn6E4mmyo4sCfnjXvMB8GA1UdIwQY MBaAFHZ8F2b7vc/2i7w0o8a+aaDIoDq5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG53WFp2dTl6X2FMdkRTanhyNXBvTWlnT3JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84ODQzNTYtN2UyYS00YzJhLThmZjQt MzU2OGUxZDI5ZDRhLzEvZG53WFp2dTl6X2FMdkRTanhyNXBvTWlnT3JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS84ODQzNTYtN2UyYS00YzJhLThmZjQtMzU2OGUxZDI5ZDRh LzEvZG53WFp2dTl6X2FMdkRTanhyNXBvTWlnT3JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARMa2kezT +Pj8f+tX1i6oYRgM47RSeoHlzOQIk7Ri8/aQRBrgshaSL7DYnOcFRKO599wENCw/ jzIOKe8wF0GbXADnIacHXZqT5DUUit7kQBYPqeysDchEHy7Q/5tuzxHvUca+CFK4 e7HFrYv0Pxph/H49Bgsl95mTXPW/R7vciR520QRphl6CczrR5ioAZelnV/7kOQxp DzvnFwHYALuHyOEu+Ovd3VsqylQwttRCs3LMfOZsjZyCtPXSxRMl0vPI035y/s04 limteuMkAPj5XiEQ8gX1sY+CWZJvmbQdh4hHDUZhoAacMMZzbOuUP20FeQrbeiVP NI1KT3qhYNGLcA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:09:37 2025 by rpki-client