This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.mft File: DW-RpSFkBJQiOeaW5lzy03IU5K8.mft (raw, json) Hash identifier: V06jMLw7oPT9bkyXOoNHYsFNEHC2/XroWBj5bwMJHvw= Subject key identifier: BA:B0:9B:5B:E2:7C:E9:7A:54:C0:6A:C7:93:6F:FD:82:B5:BE:CA:CC Authority key identifier: 0D:6F:91:A5:21:64:04:94:22:39:E6:96:E6:5C:F2:D3:72:14:E4:AF Certificate issuer: /CN=0d6f91a5216404942239e696e65cf2d37214e4af Certificate serial: 019B277773EAC4466ECD3DD536811C2C6154 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DW-RpSFkBJQiOeaW5lzy03IU5K8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.mft Manifest number: 0D67 Signing time: Tue 16 Dec 2025 14:01:38 +0000 Manifest this update: Tue 16 Dec 2025 14:01:38 +0000 Manifest next update: Wed 17 Dec 2025 14:01:38 +0000 Files and hashes: 1: DW-RpSFkBJQiOeaW5lzy03IU5K8.crl (hash: uZqeI73s3K9YH4V1pR3AlR9zsqrMZWoaWR77OBQf9PM=) 2: OH-wToKKpcLXZiKSEV9kWfR3r9E.roa (hash: +uO0A8wLAnAMRWqRTo4QJmUxBjNPBXZGwGTwpjPRQZs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.mft rsync://rpki.ripe.net/repository/DEFAULT/DW-RpSFkBJQiOeaW5lzy03IU5K8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:77:73:ea:c4:46:6e:cd:3d:d5:36:81:1c:2c:61:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d6f91a5216404942239e696e65cf2d37214e4af Validity Not Before: Dec 16 14:01:38 2025 GMT Not After : Dec 17 14:01:38 2025 GMT Subject: CN=bab09b5be27ce97a54c06ac7936ffd82b5becacc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f4:f8:7f:b6:b1:6e:55:b5:44:d2:93:28:b1: e8:cb:83:93:bd:e4:0e:9e:5d:12:24:2a:28:6e:0b: 21:80:5a:68:7d:5c:6a:20:23:4d:b1:75:9d:6a:2c: b1:fe:87:fe:25:53:ee:20:d6:45:c6:ab:4b:a6:4c: 02:5e:82:67:30:fa:14:59:0e:61:b1:41:cd:da:91: 93:73:81:03:e2:c8:57:15:ef:8c:94:7e:b3:86:af: 89:bc:fa:c4:d4:c4:7f:13:25:db:0d:be:4e:61:7c: dd:30:67:49:de:d1:e3:5e:2f:62:5e:f2:c6:39:20: 76:86:3e:c2:48:b4:6b:8c:84:63:8a:db:2c:c5:7d: b3:a4:2b:f8:b6:77:f5:0d:50:84:be:ca:fd:82:c6: 27:b1:2c:66:89:28:25:a6:d2:a7:65:06:a2:f2:0a: 75:f5:5c:0a:0b:89:dd:60:21:99:4c:67:19:35:21: b4:c7:97:24:19:2e:9a:21:3f:ec:2d:63:15:71:85: 3f:a0:1d:a2:0d:3d:7e:5b:47:83:c9:82:4c:4f:6c: 31:8c:e3:7d:4a:47:5b:a0:31:e2:6b:27:7b:6d:44: 7f:6a:c7:00:60:ca:50:b0:3d:c5:7d:5b:56:10:7f: a0:e5:b4:aa:b8:c8:f6:2e:b1:1e:82:c1:23:33:2d: 4b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:B0:9B:5B:E2:7C:E9:7A:54:C0:6A:C7:93:6F:FD:82:B5:BE:CA:CC X509v3 Authority Key Identifier: keyid:0D:6F:91:A5:21:64:04:94:22:39:E6:96:E6:5C:F2:D3:72:14:E4:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DW-RpSFkBJQiOeaW5lzy03IU5K8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:63:ed:f9:0c:b0:a2:60:66:6c:d5:cb:0c:e3:31:4e:53:e6: 81:55:14:6a:24:20:8d:41:9f:29:4e:e0:99:2f:fd:df:b7:9f: 91:61:43:f4:1d:5a:d0:c9:67:9c:65:4f:3e:fb:d6:7b:3d:13: a7:94:29:fe:a7:9f:09:08:0c:10:01:15:ac:75:a8:64:db:28: 9d:a3:d6:b7:17:83:c6:1b:31:4c:fb:b5:ac:0c:80:71:eb:2f: 75:ec:48:13:c1:07:89:da:23:25:46:5b:c2:e5:31:9e:6a:c5: 72:89:5b:2e:b3:77:43:fb:1b:cb:1b:26:d8:63:df:f5:e3:fd: 8d:c0:ba:22:62:7d:27:7e:65:f1:64:9a:c5:dd:df:ef:3e:95: 65:81:ce:36:5e:16:e2:2f:6d:64:99:0c:d7:2c:0b:7c:04:73: 3f:03:40:11:18:d2:09:39:bc:bf:bb:d0:92:39:87:78:54:a8: 8c:1b:90:78:37:af:af:96:94:d6:97:3b:42:29:d1:aa:2d:80: 61:0c:ab:0b:a8:94:6d:5d:e3:b5:22:c1:13:00:7f:3f:66:84: 53:a8:da:8f:89:63:58:73:14:aa:e6:9b:65:f4:c6:a4:41:89: 75:cb:3e:70:d2:b7:2f:12:a8:40:63:53:0f:2e:3d:83:a0:9d: 1a:54:59:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnd3PqxEZuzT3VNoEcLGFUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNmY5MWE1MjE2NDA0OTQyMjM5ZTY5NmU2NWNmMmQzNzIx NGU0YWYwHhcNMjUxMjE2MTQwMTM4WhcNMjUxMjE3MTQwMTM4WjAzMTEwLwYDVQQD EyhiYWIwOWI1YmUyN2NlOTdhNTRjMDZhYzc5MzZmZmQ4MmI1YmVjYWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfT4f7axblW1RNKTKLHoy4OTveQO nl0SJCoobgshgFpofVxqICNNsXWdaiyx/of+JVPuINZFxqtLpkwCXoJnMPoUWQ5h sUHN2pGTc4ED4shXFe+MlH6zhq+JvPrE1MR/EyXbDb5OYXzdMGdJ3tHjXi9iXvLG OSB2hj7CSLRrjIRjitssxX2zpCv4tnf1DVCEvsr9gsYnsSxmiSglptKnZQai8gp1 9VwKC4ndYCGZTGcZNSG0x5ckGS6aIT/sLWMVcYU/oB2iDT1+W0eDyYJMT2wxjON9 SkdboDHiayd7bUR/ascAYMpQsD3FfVtWEH+g5bSquMj2LrEegsEjMy1LQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLqwm1vifOl6VMBqx5Nv/YK1vsrMMB8GA1UdIwQY MBaAFA1vkaUhZASUIjnmluZc8tNyFOSvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFctUnBTRmtCSlFpT2VhVzVsenkwM0lVNUs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9jMTI2OTUtODllMS00NDgyLTk0ZTUt YzQ3ZWFiMTdlOTNhLzEvRFctUnBTRmtCSlFpT2VhVzVsenkwM0lVNUs4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9jMTI2OTUtODllMS00NDgyLTk0ZTUtYzQ3ZWFiMTdlOTNh LzEvRFctUnBTRmtCSlFpT2VhVzVsenkwM0lVNUs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm2Pt+Qyw omBmbNXLDOMxTlPmgVUUaiQgjUGfKU7gmS/937efkWFD9B1a0MlnnGVPPvvWez0T p5Qp/qefCQgMEAEVrHWoZNsonaPWtxeDxhsxTPu1rAyAcesvdexIE8EHidojJUZb wuUxnmrFcolbLrN3Q/sbyxsm2GPf9eP9jcC6ImJ9J35l8WSaxd3f7z6VZYHONl4W 4i9tZJkM1ywLfARzPwNAERjSCTm8v7vQkjmHeFSojBuQeDevr5aU1pc7QinRqi2A YQyrC6iUbV3jtSLBEwB/P2aEU6jaj4ljWHMUquabZfTGpEGJdcs+cNK3LxKoQGNT Dy49g6CdGlRZnA== -----END CERTIFICATE-----Generated at Tue Dec 16 21:01:49 2025 by rpki-client