This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft File: DX08coAiI1d4gNOPBIyBiRImQDs.mft (raw, json) Hash identifier: 1eK5pfGLqQ9JBo4itDyfc0B1AnuvghbVfvlLaFMpvnk= Subject key identifier: EB:C5:11:31:09:77:F4:D2:9E:A8:6F:83:55:54:F5:EA:C0:ED:A5:5A Authority key identifier: 0D:7D:3C:72:80:22:23:57:78:80:D3:8F:04:8C:81:89:12:26:40:3B Certificate issuer: /CN=0d7d3c72802223577880d38f048c81891226403b Certificate serial: 019AF12E748F51CDCB820B01F3EADCB73285 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX08coAiI1d4gNOPBIyBiRImQDs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft Manifest number: 0BC2 Signing time: Sat 06 Dec 2025 01:02:24 +0000 Manifest this update: Sat 06 Dec 2025 01:02:24 +0000 Manifest next update: Sun 07 Dec 2025 01:02:24 +0000 Files and hashes: 1: DX08coAiI1d4gNOPBIyBiRImQDs.crl (hash: UKJjcudA+AzvPIgTNovIagIYnnGpDiXxgTKngtB1kYM=) 2: oeUHXPRVWNrr1QJirrKSZQy6zrU.roa (hash: SxbvFYL3nEPIvag7xzWrtYfbRcEggJtZoR9CvV7aWPA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.crl rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft rsync://rpki.ripe.net/repository/DEFAULT/DX08coAiI1d4gNOPBIyBiRImQDs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:74:8f:51:cd:cb:82:0b:01:f3:ea:dc:b7:32:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d7d3c72802223577880d38f048c81891226403b Validity Not Before: Dec 6 01:02:24 2025 GMT Not After : Dec 7 01:02:24 2025 GMT Subject: CN=ebc511310977f4d29ea86f835554f5eac0eda55a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3d:6e:88:80:71:01:02:33:29:ef:24:60:cb: 3a:60:0e:7e:cf:3b:ed:59:04:41:fb:70:53:74:7c: 49:fc:bb:bc:8c:92:15:d3:18:51:a8:a9:2c:c2:18: 5a:f9:f5:cf:87:80:79:78:d9:f7:4b:48:7c:6a:d4: 8d:2f:8f:c9:90:b1:fe:6e:f0:9c:ca:9a:c0:a9:21: 6f:bd:e9:d1:77:4c:04:78:7d:36:9e:cc:a6:cb:60: 59:fe:1c:ea:76:b6:6b:5c:9b:2b:94:0c:66:62:e3: 82:69:d5:05:3b:3f:18:ee:15:01:08:dc:c0:ce:d0: e1:e9:ee:53:28:02:3f:e6:e8:03:7f:9b:48:13:d4: 54:40:f5:b8:7c:99:83:51:4d:a2:4d:f3:88:80:78: da:78:13:73:07:a5:f2:49:d1:af:10:b2:ad:c2:aa: c5:bb:48:67:4e:a3:05:74:2d:6c:6e:50:f0:26:36: aa:6c:ca:af:c0:34:71:0c:91:d4:3e:c7:71:44:7b: 3d:7c:cd:2a:4d:47:81:ec:77:a7:bc:30:10:ab:e5: b7:c0:2c:d8:91:55:76:7f:95:a8:f7:a3:bd:3b:dd: aa:4e:17:b3:69:73:26:eb:80:b5:42:03:51:d4:c9: 9e:c6:4d:87:fe:65:dc:3f:77:7c:e0:4b:9c:65:85: 52:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:C5:11:31:09:77:F4:D2:9E:A8:6F:83:55:54:F5:EA:C0:ED:A5:5A X509v3 Authority Key Identifier: keyid:0D:7D:3C:72:80:22:23:57:78:80:D3:8F:04:8C:81:89:12:26:40:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX08coAiI1d4gNOPBIyBiRImQDs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:77:11:ac:61:ac:ef:48:1c:20:5b:b8:e7:de:5f:73:a7:8f: 9a:2e:cf:46:2f:95:0e:a9:73:91:dc:53:bf:13:e7:0a:9d:77: 23:05:fd:5e:b7:8b:41:85:ff:d5:f8:ae:73:2d:ca:24:fc:28: 88:36:d3:7e:63:68:5b:0a:2f:d9:d5:8a:20:95:30:f8:a7:15: 95:97:2d:eb:99:ad:db:88:ea:de:71:d7:00:d6:42:b8:3c:76: 3c:da:c0:80:9f:7a:39:52:09:ff:4c:8c:04:d6:df:17:b2:f8: 8c:e9:60:9e:c2:23:11:52:52:ba:5a:ac:d5:b8:bf:51:81:ad: dd:ed:00:da:03:6b:93:af:ec:0d:ab:79:25:73:da:8b:60:b1: 7a:09:3f:d5:d5:dd:ad:76:c6:cc:c6:d1:08:ac:3f:e7:93:d8: 83:02:3c:6b:41:19:c5:60:63:7e:13:44:d3:44:6c:4e:0f:44: c0:b7:43:d3:89:c2:73:35:81:87:25:ae:7f:84:62:bb:b4:4e: 9e:a3:c2:c7:6b:44:59:88:80:e7:5b:81:21:df:2c:37:00:da: db:78:2c:ce:01:95:b8:75:84:1e:5c:05:0a:c7:29:fb:33:84: 32:01:13:23:68:4a:99:d5:b7:ed:0c:cf:ee:a4:59:75:d7:5a: b1:23:bf:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLnSPUc3LggsB8+rctzKFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkN2QzYzcyODAyMjIzNTc3ODgwZDM4ZjA0OGM4MTg5MTIy NjQwM2IwHhcNMjUxMjA2MDEwMjI0WhcNMjUxMjA3MDEwMjI0WjAzMTEwLwYDVQQD EyhlYmM1MTEzMTA5NzdmNGQyOWVhODZmODM1NTU0ZjVlYWMwZWRhNTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsD1uiIBxAQIzKe8kYMs6YA5+zzvt WQRB+3BTdHxJ/Lu8jJIV0xhRqKkswhha+fXPh4B5eNn3S0h8atSNL4/JkLH+bvCc yprAqSFvvenRd0wEeH02nsymy2BZ/hzqdrZrXJsrlAxmYuOCadUFOz8Y7hUBCNzA ztDh6e5TKAI/5ugDf5tIE9RUQPW4fJmDUU2iTfOIgHjaeBNzB6XySdGvELKtwqrF u0hnTqMFdC1sblDwJjaqbMqvwDRxDJHUPsdxRHs9fM0qTUeB7HenvDAQq+W3wCzY kVV2f5Wo96O9O92qThezaXMm64C1QgNR1Mmexk2H/mXcP3d84EucZYVSQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOvFETEJd/TSnqhvg1VU9erA7aVaMB8GA1UdIwQY MBaAFA19PHKAIiNXeIDTjwSMgYkSJkA7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFgwOGNvQWlJMWQ0Z05PUEJJeUJpUkltUURzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi80MGU2NTUtYTJhYy00MjUyLTk0Mzct ODY0ZmRiYzc5NzcwLzEvRFgwOGNvQWlJMWQ0Z05PUEJJeUJpUkltUURzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi80MGU2NTUtYTJhYy00MjUyLTk0MzctODY0ZmRiYzc5Nzcw LzEvRFgwOGNvQWlJMWQ0Z05PUEJJeUJpUkltUURzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuXcRrGGs 70gcIFu4595fc6ePmi7PRi+VDqlzkdxTvxPnCp13IwX9XreLQYX/1fiucy3KJPwo iDbTfmNoWwov2dWKIJUw+KcVlZct65mt24jq3nHXANZCuDx2PNrAgJ96OVIJ/0yM BNbfF7L4jOlgnsIjEVJSulqs1bi/UYGt3e0A2gNrk6/sDat5JXPai2Cxegk/1dXd rXbGzMbRCKw/55PYgwI8a0EZxWBjfhNE00RsTg9EwLdD04nCczWBhyWuf4Riu7RO nqPCx2tEWYiA51uBId8sNwDa23gszgGVuHWEHlwFCscp+zOEMgETI2hKmdW37QzP 7qRZdddasSO/Hg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:28:57 2025 by rpki-client