This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft File: DO-ss3RB3RkYO9HLV9te5VR3p6c.mft (raw, json) Hash identifier: 8IbWvuFCTfByp/JI71KH3y3Llc3A3LNvPMostURQkwE= Subject key identifier: 26:3D:C0:B6:86:C5:C3:84:AF:C4:DE:E2:14:89:2B:5F:0B:18:7F:7B Authority key identifier: 0C:EF:AC:B3:74:41:DD:19:18:3B:D1:CB:57:DB:5E:E5:54:77:A7:A7 Certificate issuer: /CN=0cefacb37441dd19183bd1cb57db5ee55477a7a7 Certificate serial: 019AF164670987CEF616E995916779DD0D55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft Manifest number: 0B20 Signing time: Sat 06 Dec 2025 02:01:20 +0000 Manifest this update: Sat 06 Dec 2025 02:01:20 +0000 Manifest next update: Sun 07 Dec 2025 02:01:20 +0000 Files and hashes: 1: DO-ss3RB3RkYO9HLV9te5VR3p6c.crl (hash: 7uK/xVXDwjBRHxYhYN86MzqVYTchcEdez7aSw83I7pk=) 2: O7YDGlReH1x3D0s7Ygr1Vy16MbI.roa (hash: WAs5UezYMvac542kW/ZhIkgbBXd8gscxgdqz/AR6xPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:67:09:87:ce:f6:16:e9:95:91:67:79:dd:0d:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cefacb37441dd19183bd1cb57db5ee55477a7a7 Validity Not Before: Dec 6 02:01:20 2025 GMT Not After : Dec 7 02:01:20 2025 GMT Subject: CN=263dc0b686c5c384afc4dee214892b5f0b187f7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c2:9d:4c:9b:6e:fc:79:9f:41:51:7b:09:3c: 2b:e6:03:e4:60:84:2d:2a:fb:6b:ad:c0:52:d1:73: 0b:f3:e9:e8:79:03:10:5e:1d:2a:64:53:a0:93:bd: ca:96:e4:e2:16:ae:2c:aa:83:35:57:4d:af:dc:b4: e6:cd:ae:bc:98:2a:75:98:12:1e:5e:6e:dc:91:ea: 34:6e:b9:52:92:c2:bc:0e:49:3f:39:69:7d:82:03: 8c:41:3e:01:fb:4b:0b:2a:8b:2d:7c:bb:ee:24:9c: 16:da:e9:c8:bd:6c:18:68:40:a1:33:5a:eb:fd:0d: e9:99:af:c4:f2:14:58:f6:f0:df:8f:92:bc:e8:c1: 7b:28:03:df:86:04:e4:a7:64:d0:f1:29:bb:bb:7f: c1:9b:e5:00:8a:a1:ab:3c:08:3b:6f:b8:52:c0:25: 84:cb:34:b0:1c:02:ba:d4:b6:ae:7f:00:66:a9:a5: be:45:7d:43:44:df:70:8a:f4:cb:4f:49:15:87:6d: cc:76:74:b8:58:84:7c:21:38:b2:88:0d:c4:f5:86: 19:3c:01:eb:47:97:d6:4e:9a:c6:bc:12:df:6d:35: 20:89:50:0d:77:74:fc:00:a2:19:8c:c2:35:14:6f: b7:cd:3e:7c:26:d9:81:d7:79:3e:64:7b:16:78:f0: 0f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:3D:C0:B6:86:C5:C3:84:AF:C4:DE:E2:14:89:2B:5F:0B:18:7F:7B X509v3 Authority Key Identifier: keyid:0C:EF:AC:B3:74:41:DD:19:18:3B:D1:CB:57:DB:5E:E5:54:77:A7:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:41:92:f7:1f:ff:ea:5f:22:34:5f:94:0e:86:b3:6a:a2:6f: aa:6e:a5:3d:99:97:1b:ab:79:9e:e6:d7:60:f9:f5:91:67:77: 44:cd:67:ba:22:ab:15:d7:90:00:3a:fc:8c:e1:2b:b7:06:a8: 5d:14:aa:71:fa:4f:1f:02:99:4f:7f:c2:d8:49:06:83:35:ba: 2d:8f:5c:83:74:da:16:5b:ad:51:ed:63:db:15:57:d1:1a:58: 4c:ed:28:60:16:e9:97:d6:b9:45:f6:e6:1d:cb:72:e1:87:83: aa:c5:38:24:25:6a:9c:03:4d:2f:a4:b5:fe:c6:23:7b:d0:c9: a6:95:bb:84:f6:63:3b:d5:a7:96:f8:20:97:1d:1a:42:57:fa: 83:5e:49:5a:5a:02:76:ed:e4:0c:cb:64:b1:86:1b:b2:25:11: f5:7e:2c:63:8b:13:31:9e:8e:68:13:d9:8e:66:bc:3c:63:a7: 30:4b:85:92:2e:d1:e9:72:42:d2:c6:47:8d:b8:0b:91:08:ba: 21:03:e4:55:34:e5:5d:b1:15:a6:69:e7:8b:01:3e:ce:c3:78: 57:ed:ec:75:6f:2c:09:9b:b9:f4:b5:04:20:ab:90:b0:13:23: d3:44:d7:dd:ac:36:1d:1a:1f:81:fe:e6:aa:2b:11:a4:c6:ee: 00:9d:4f:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZGcJh872FumVkWd53Q1VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZWZhY2IzNzQ0MWRkMTkxODNiZDFjYjU3ZGI1ZWU1NTQ3 N2E3YTcwHhcNMjUxMjA2MDIwMTIwWhcNMjUxMjA3MDIwMTIwWjAzMTEwLwYDVQQD EygyNjNkYzBiNjg2YzVjMzg0YWZjNGRlZTIxNDg5MmI1ZjBiMTg3ZjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusKdTJtu/HmfQVF7CTwr5gPkYIQt KvtrrcBS0XML8+noeQMQXh0qZFOgk73KluTiFq4sqoM1V02v3LTmza68mCp1mBIe Xm7ckeo0brlSksK8Dkk/OWl9ggOMQT4B+0sLKostfLvuJJwW2unIvWwYaEChM1rr /Q3pma/E8hRY9vDfj5K86MF7KAPfhgTkp2TQ8Sm7u3/Bm+UAiqGrPAg7b7hSwCWE yzSwHAK61LaufwBmqaW+RX1DRN9wivTLT0kVh23MdnS4WIR8ITiyiA3E9YYZPAHr R5fWTprGvBLfbTUgiVANd3T8AKIZjMI1FG+3zT58JtmB13k+ZHsWePAPRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCY9wLaGxcOEr8Te4hSJK18LGH97MB8GA1UdIwQY MBaAFAzvrLN0Qd0ZGDvRy1fbXuVUd6enMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE8tc3MzUkIzUmtZTzlITFY5dGU1VlIzcDZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82M2RhOGEtZGU2Zi00YjEyLWE4NjQt ZTNkZDUyNzk5YmRhLzEvRE8tc3MzUkIzUmtZTzlITFY5dGU1VlIzcDZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82M2RhOGEtZGU2Zi00YjEyLWE4NjQtZTNkZDUyNzk5YmRh LzEvRE8tc3MzUkIzUmtZTzlITFY5dGU1VlIzcDZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg0GS9x// 6l8iNF+UDoazaqJvqm6lPZmXG6t5nubXYPn1kWd3RM1nuiKrFdeQADr8jOErtwao XRSqcfpPHwKZT3/C2EkGgzW6LY9cg3TaFlutUe1j2xVX0RpYTO0oYBbpl9a5Rfbm Hcty4YeDqsU4JCVqnANNL6S1/sYje9DJppW7hPZjO9Wnlvgglx0aQlf6g15JWloC du3kDMtksYYbsiUR9X4sY4sTMZ6OaBPZjma8PGOnMEuFki7R6XJC0sZHjbgLkQi6 IQPkVTTlXbEVpmnniwE+zsN4V+3sdW8sCZu59LUEIKuQsBMj00TX3aw2HRofgf7m qisRpMbuAJ1P/w== -----END CERTIFICATE-----Generated at Sat Dec 6 11:59:44 2025 by rpki-client