This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/cf720e-4d33-4db1-86e9-fc2ec4bb5967/1/DhcO6FnpH0lz3kpXKxutLzpdGCU.mft File: DhcO6FnpH0lz3kpXKxutLzpdGCU.mft (raw, json) Hash identifier: Td9xSBK0WVHbZCg/XGS6lXs7OrYuIpCFEPJXKqlzxX0= Subject key identifier: 42:13:74:96:BC:1E:76:DB:0D:93:EF:7B:B5:A2:43:E7:37:36:50:C0 Authority key identifier: 0E:17:0E:E8:59:E9:1F:49:73:DE:4A:57:2B:1B:AD:2F:3A:5D:18:25 Certificate issuer: /CN=0e170ee859e91f4973de4a572b1bad2f3a5d1825 Certificate serial: 019AF20977A4E1286ACE72EAAA76F98AD22C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DhcO6FnpH0lz3kpXKxutLzpdGCU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/cf720e-4d33-4db1-86e9-fc2ec4bb5967/1/DhcO6FnpH0lz3kpXKxutLzpdGCU.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 05:01:37 +0000 Manifest this update: Sat 06 Dec 2025 05:01:37 +0000 Manifest next update: Sun 07 Dec 2025 05:01:37 +0000 Files and hashes: 1: DhcO6FnpH0lz3kpXKxutLzpdGCU.crl (hash: xHxJ53DNZaSSw4e+ZlaUi1V2Bk53RATR+H+ftyQq+gM=) 2: ULOFbzP3h9-3w0H4Yx7Si28ClYo.roa (hash: d25VIffAJQDV7vgvStWkaS/C+7kyYqCn7zctEo0yqWU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/cf720e-4d33-4db1-86e9-fc2ec4bb5967/1/DhcO6FnpH0lz3kpXKxutLzpdGCU.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/cf720e-4d33-4db1-86e9-fc2ec4bb5967/1/DhcO6FnpH0lz3kpXKxutLzpdGCU.mft rsync://rpki.ripe.net/repository/DEFAULT/DhcO6FnpH0lz3kpXKxutLzpdGCU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:77:a4:e1:28:6a:ce:72:ea:aa:76:f9:8a:d2:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e170ee859e91f4973de4a572b1bad2f3a5d1825 Validity Not Before: Dec 6 05:01:37 2025 GMT Not After : Dec 7 05:01:37 2025 GMT Subject: CN=42137496bc1e76db0d93ef7bb5a243e7373650c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:26:22:f0:c4:25:ea:8e:3c:62:ed:fc:37:e4: c5:81:fe:e8:ac:23:c0:b8:c4:c4:cc:77:83:24:49: 26:3d:d3:ab:d1:69:db:47:1e:39:46:1f:5b:68:97: a3:a0:9f:82:c8:0d:06:58:8b:d3:4b:4e:7d:f6:0c: e6:fb:21:0d:c4:49:b1:b2:b1:eb:ef:47:d7:b1:23: 8e:7d:c6:24:32:dc:da:52:7b:53:e9:68:38:be:97: 44:2f:84:01:3a:8b:d8:78:b5:cc:64:1c:5c:38:d5: e4:b3:6a:8c:de:d1:26:41:9e:20:a3:f5:f9:77:3f: 7b:37:e8:f2:81:c9:84:4a:dc:27:5e:3b:2b:cc:8a: 2a:03:81:fb:84:9e:54:85:60:ad:25:ad:50:7a:ec: ef:01:f4:14:a8:f8:57:00:73:a8:fd:d1:35:12:1b: 30:e1:3d:0d:fd:f3:9f:a3:6f:3e:8a:88:0d:f0:5d: 6b:72:ca:8a:f2:a4:38:36:ff:b1:74:01:6d:80:18: e2:ac:83:c8:be:bb:b4:d3:df:54:5c:74:ee:ae:cf: ad:94:03:38:e6:fa:cf:8c:b4:e5:5b:54:06:26:65: 0f:08:47:94:87:c2:dd:9b:5f:df:41:26:c5:fe:8a: b6:e9:fa:e0:b8:6d:51:26:49:62:52:76:2b:f1:ef: 57:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:13:74:96:BC:1E:76:DB:0D:93:EF:7B:B5:A2:43:E7:37:36:50:C0 X509v3 Authority Key Identifier: keyid:0E:17:0E:E8:59:E9:1F:49:73:DE:4A:57:2B:1B:AD:2F:3A:5D:18:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DhcO6FnpH0lz3kpXKxutLzpdGCU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cf720e-4d33-4db1-86e9-fc2ec4bb5967/1/DhcO6FnpH0lz3kpXKxutLzpdGCU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/cf720e-4d33-4db1-86e9-fc2ec4bb5967/1/DhcO6FnpH0lz3kpXKxutLzpdGCU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:cf:82:92:a2:cf:36:c9:d9:d1:85:6d:42:60:44:77:38:1e: a6:6a:3a:6c:7b:e1:d3:07:7b:7d:c2:28:57:cf:1e:a6:09:01: 72:12:9a:94:20:d7:b3:f6:89:53:8f:09:bd:f7:68:b3:28:37: 51:40:18:5b:ec:46:6b:14:6f:e9:af:7a:0c:fd:ad:31:d6:86: 81:33:f4:cb:9b:6c:2b:c2:bd:6d:1f:41:2c:df:a3:88:9f:97: 10:6d:59:b1:21:3b:1c:a6:5b:8e:d9:90:33:1b:6a:5a:3c:7b: c7:26:dc:e6:e4:12:80:b7:0a:4f:fe:ee:11:9b:3a:8b:a9:f5: b7:61:ef:f9:b2:2d:0b:9d:ad:1a:a8:d0:e0:f1:0d:30:aa:39: 66:81:87:30:0d:b9:6d:a1:0f:6a:08:20:d6:3e:16:17:43:01: 02:5a:d6:ea:57:8b:a4:73:3b:75:91:0e:1d:50:cc:5b:65:b4: b1:fd:88:b3:ff:e2:a8:9f:fb:25:f8:e1:d7:cc:13:85:c8:1a: b1:01:66:2f:a0:81:05:bb:dc:7c:c8:03:e6:7e:9e:45:d5:e1: 35:99:01:e2:8c:f6:a7:92:f0:90:e3:fc:6f:9b:65:3e:83:cc: ce:95:34:9e:a6:84:9d:db:eb:62:bb:0b:b6:b2:3b:a5:54:67: ec:36:5e:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCXek4ShqznLqqnb5itIsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMTcwZWU4NTllOTFmNDk3M2RlNGE1NzJiMWJhZDJmM2E1 ZDE4MjUwHhcNMjUxMjA2MDUwMTM3WhcNMjUxMjA3MDUwMTM3WjAzMTEwLwYDVQQD Eyg0MjEzNzQ5NmJjMWU3NmRiMGQ5M2VmN2JiNWEyNDNlNzM3MzY1MGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiYi8MQl6o48Yu38N+TFgf7orCPA uMTEzHeDJEkmPdOr0WnbRx45Rh9baJejoJ+CyA0GWIvTS0599gzm+yENxEmxsrHr 70fXsSOOfcYkMtzaUntT6Wg4vpdEL4QBOovYeLXMZBxcONXks2qM3tEmQZ4go/X5 dz97N+jygcmEStwnXjsrzIoqA4H7hJ5UhWCtJa1QeuzvAfQUqPhXAHOo/dE1Ehsw 4T0N/fOfo28+iogN8F1rcsqK8qQ4Nv+xdAFtgBjirIPIvru0099UXHTurs+tlAM4 5vrPjLTlW1QGJmUPCEeUh8Ldm1/fQSbF/oq26frguG1RJkliUnYr8e9XsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEITdJa8HnbbDZPve7WiQ+c3NlDAMB8GA1UdIwQY MBaAFA4XDuhZ6R9Jc95KVysbrS86XRglMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGhjTzZGbnBIMGx6M2twWEt4dXRMenBkR0NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9jZjcyMGUtNGQzMy00ZGIxLTg2ZTkt ZmMyZWM0YmI1OTY3LzEvRGhjTzZGbnBIMGx6M2twWEt4dXRMenBkR0NVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9jZjcyMGUtNGQzMy00ZGIxLTg2ZTktZmMyZWM0YmI1OTY3 LzEvRGhjTzZGbnBIMGx6M2twWEt4dXRMenBkR0NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF8+CkqLP NsnZ0YVtQmBEdzgepmo6bHvh0wd7fcIoV88epgkBchKalCDXs/aJU48Jvfdosyg3 UUAYW+xGaxRv6a96DP2tMdaGgTP0y5tsK8K9bR9BLN+jiJ+XEG1ZsSE7HKZbjtmQ MxtqWjx7xybc5uQSgLcKT/7uEZs6i6n1t2Hv+bItC52tGqjQ4PENMKo5ZoGHMA25 baEPaggg1j4WF0MBAlrW6leLpHM7dZEOHVDMW2W0sf2Is//iqJ/7Jfjh18wThcga sQFmL6CBBbvcfMgD5n6eRdXhNZkB4oz2p5LwkOP8b5tlPoPMzpU0nqaEndvrYrsL trI7pVRn7DZeNA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:53:28 2025 by rpki-client