This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft File: DOLccfnsGpsngQd_OtKYHEuHKwU.mft (raw, json) Hash identifier: /4BST3psQgjZHkbfh3vzcMcMwj/2wl68TwFU6rziFVg= Subject key identifier: 56:80:3C:BB:12:B5:80:8A:71:5D:3C:85:CB:50:6A:46:35:EA:F4:D0 Authority key identifier: 0C:E2:DC:71:F9:EC:1A:9B:27:81:07:7F:3A:D2:98:1C:4B:87:2B:05 Certificate issuer: /CN=0ce2dc71f9ec1a9b2781077f3ad2981c4b872b05 Certificate serial: 019AF0BF19244EDA898AA1E63046A2C2B97D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft Manifest number: 09EF Signing time: Fri 05 Dec 2025 23:00:46 +0000 Manifest this update: Fri 05 Dec 2025 23:00:46 +0000 Manifest next update: Sat 06 Dec 2025 23:00:46 +0000 Files and hashes: 1: DOLccfnsGpsngQd_OtKYHEuHKwU.crl (hash: HbIx35R4EBHgnyoNe6et39jgOnQ9akx11ZeoXFFccj4=) 2: lbzZ5Xd-Bxx74-HdFugAtLWfqT0.roa (hash: MO8BCssJP9Ug+UVQ/493gxdacSXvZ1bCntr7vQJ6/Y0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.crl rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:19:24:4e:da:89:8a:a1:e6:30:46:a2:c2:b9:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce2dc71f9ec1a9b2781077f3ad2981c4b872b05 Validity Not Before: Dec 5 23:00:46 2025 GMT Not After : Dec 6 23:00:46 2025 GMT Subject: CN=56803cbb12b5808a715d3c85cb506a4635eaf4d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:38:d8:9f:9a:e6:83:b7:fa:48:a5:03:35:42: 46:09:8c:fb:b3:3a:6c:01:0c:38:26:4d:bc:cb:ca: 16:c4:77:1a:5d:0d:34:df:9c:a3:e1:15:2a:c7:30: e1:21:54:eb:66:26:70:be:a8:57:55:11:22:6c:70: 7c:60:0a:1e:c9:63:b6:43:43:7b:ae:9d:ea:d2:f1: aa:15:b3:4f:58:83:d5:46:6a:bd:c1:eb:36:9e:f1: df:a2:4e:f4:97:82:42:fc:ee:19:79:20:75:ec:f9: a0:82:53:e6:9c:e9:ee:91:20:a6:4e:2c:94:f7:c9: 51:29:8e:8d:55:a6:50:e2:d3:70:14:48:c2:5c:80: 79:1d:02:e2:d2:3f:3d:32:4b:c7:ca:e0:15:ec:83: aa:c4:26:c7:a6:7d:c9:9b:ad:b4:06:10:2e:ac:eb: 91:e1:42:a3:a1:73:01:d2:49:e9:eb:d0:aa:61:1c: 5a:ce:e9:5c:ed:cc:e0:45:8f:d0:04:e9:06:94:34: 77:40:25:1b:d3:c1:6a:3e:7e:46:96:7c:dd:b1:d4: a2:c6:54:40:60:6c:57:a9:48:b4:52:0c:23:d7:da: c3:a7:22:d8:e8:1c:89:74:2e:ee:e3:00:a2:45:06: 00:8b:bd:12:77:70:85:ab:1f:b0:27:62:63:29:4b: 27:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:80:3C:BB:12:B5:80:8A:71:5D:3C:85:CB:50:6A:46:35:EA:F4:D0 X509v3 Authority Key Identifier: keyid:0C:E2:DC:71:F9:EC:1A:9B:27:81:07:7F:3A:D2:98:1C:4B:87:2B:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:02:b2:fb:7c:2e:7d:ff:1d:a0:88:f1:a6:27:3a:cb:b2:ea: 75:8f:2a:48:af:6c:73:5e:a5:ae:b6:32:7c:18:a9:35:c2:dd: 8e:92:e3:a0:53:5f:ca:26:d6:13:ba:2b:2d:d0:37:eb:1f:12: 38:94:60:39:c0:92:be:c5:dc:8e:f8:eb:f4:d5:4d:cb:2e:11: 19:c6:11:83:17:f4:a3:06:58:bc:3b:2b:f9:83:93:59:44:25: 91:8f:be:75:8f:a6:6b:2d:ec:cd:10:96:5b:45:2e:3c:80:9b: 0a:05:0d:9b:cf:fa:ba:37:74:39:ad:c5:f9:42:ca:2b:15:c6: c6:c5:30:ff:41:9c:31:4e:81:2a:3d:08:65:16:73:54:b5:5d: a6:03:c8:48:d5:04:3f:2c:dd:49:01:03:c7:42:21:76:8a:28: a5:0d:25:0c:9e:56:c3:ba:00:aa:e6:02:ce:cf:cb:b9:9b:ab: f2:74:69:c0:7d:d9:a3:85:5a:00:c4:d4:88:02:31:d2:d9:88: bc:25:e5:e1:48:de:4c:2d:3c:ca:6f:2b:ab:ff:36:56:d7:3f: 48:6e:04:f7:68:bc:df:55:c5:a8:a9:21:b4:24:4d:52:ae:91: c7:7d:19:94:60:0c:b8:06:47:01:31:d6:48:ec:54:ef:ac:ed: 64:7d:b4:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvxkkTtqJiqHmMEaiwrl9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTJkYzcxZjllYzFhOWIyNzgxMDc3ZjNhZDI5ODFjNGI4 NzJiMDUwHhcNMjUxMjA1MjMwMDQ2WhcNMjUxMjA2MjMwMDQ2WjAzMTEwLwYDVQQD Eyg1NjgwM2NiYjEyYjU4MDhhNzE1ZDNjODVjYjUwNmE0NjM1ZWFmNGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zjYn5rmg7f6SKUDNUJGCYz7szps AQw4Jk28y8oWxHcaXQ0035yj4RUqxzDhIVTrZiZwvqhXVREibHB8YAoeyWO2Q0N7 rp3q0vGqFbNPWIPVRmq9wes2nvHfok70l4JC/O4ZeSB17PmgglPmnOnukSCmTiyU 98lRKY6NVaZQ4tNwFEjCXIB5HQLi0j89MkvHyuAV7IOqxCbHpn3Jm620BhAurOuR 4UKjoXMB0knp69CqYRxazulc7czgRY/QBOkGlDR3QCUb08FqPn5GlnzdsdSixlRA YGxXqUi0Ugwj19rDpyLY6ByJdC7u4wCiRQYAi70Sd3CFqx+wJ2JjKUsn6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFaAPLsStYCKcV08hctQakY16vTQMB8GA1UdIwQY MBaAFAzi3HH57BqbJ4EHfzrSmBxLhysFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9MY2NmbnNHcHNuZ1FkX090S1lIRXVIS3dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9kYTY2YmItMTc0Zi00OTE4LTlhM2Et YmE0ZmJkOGQ1ZDhlLzEvRE9MY2NmbnNHcHNuZ1FkX090S1lIRXVIS3dVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9kYTY2YmItMTc0Zi00OTE4LTlhM2EtYmE0ZmJkOGQ1ZDhl LzEvRE9MY2NmbnNHcHNuZ1FkX090S1lIRXVIS3dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXgKy+3wu ff8doIjxpic6y7LqdY8qSK9sc16lrrYyfBipNcLdjpLjoFNfyibWE7orLdA36x8S OJRgOcCSvsXcjvjr9NVNyy4RGcYRgxf0owZYvDsr+YOTWUQlkY++dY+may3szRCW W0UuPICbCgUNm8/6ujd0Oa3F+ULKKxXGxsUw/0GcMU6BKj0IZRZzVLVdpgPISNUE PyzdSQEDx0IhdooopQ0lDJ5Ww7oAquYCzs/LuZur8nRpwH3Zo4VaAMTUiAIx0tmI vCXl4UjeTC08ym8rq/82Vtc/SG4E92i831XFqKkhtCRNUq6Rx30ZlGAMuAZHATHW SOxU76ztZH20Mw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:15:39 2025 by rpki-client