This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/DNwH_ab01Vt8gYLJKaPErDwKgv0.mft File: DNwH_ab01Vt8gYLJKaPErDwKgv0.mft (raw, json) Hash identifier: +bAoHmrzQmIEF2xl9ecL27ziLXWUtXz28nZVhqcL1Pw= Subject key identifier: BF:A2:FE:3B:1E:BD:41:DE:67:25:CA:DA:17:41:D8:61:41:01:94:DE Authority key identifier: 0C:DC:07:FD:A6:F4:D5:5B:7C:81:82:C9:29:A3:C4:AC:3C:0A:82:FD Certificate issuer: /CN=0cdc07fda6f4d55b7c8182c929a3c4ac3c0a82fd Certificate serial: 019AF276526EEFF0A29E91AEF7786A37D356 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNwH_ab01Vt8gYLJKaPErDwKgv0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/DNwH_ab01Vt8gYLJKaPErDwKgv0.mft Manifest number: 1494 Signing time: Sat 06 Dec 2025 07:00:31 +0000 Manifest this update: Sat 06 Dec 2025 07:00:31 +0000 Manifest next update: Sun 07 Dec 2025 07:00:31 +0000 Files and hashes: 1: DNwH_ab01Vt8gYLJKaPErDwKgv0.crl (hash: 3aWVk9ZlD7PB5WY7EBuITcDVwbLsNro7l0x8h9vNZJE=) 2: p1mXcIQxL77L_jQGXA_KIyns_RU.roa (hash: z0OqGXTq8kuCQJixhA0eSGU0mlbhHaHOLMCmElSbQgI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/DNwH_ab01Vt8gYLJKaPErDwKgv0.crl rsync://rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/DNwH_ab01Vt8gYLJKaPErDwKgv0.mft rsync://rpki.ripe.net/repository/DEFAULT/DNwH_ab01Vt8gYLJKaPErDwKgv0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:52:6e:ef:f0:a2:9e:91:ae:f7:78:6a:37:d3:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cdc07fda6f4d55b7c8182c929a3c4ac3c0a82fd Validity Not Before: Dec 6 07:00:31 2025 GMT Not After : Dec 7 07:00:31 2025 GMT Subject: CN=bfa2fe3b1ebd41de6725cada1741d861410194de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0b:58:80:83:09:b2:81:0b:77:39:c4:94:28: e8:bf:07:c1:dd:27:ab:04:73:ff:ab:00:e5:33:b1: 3f:e9:be:be:53:1e:85:13:b8:ca:78:d2:e3:b0:11: 9b:32:5d:91:10:6a:a3:7d:dc:19:8e:85:98:ea:01: 56:b6:e9:b7:8b:44:84:97:26:5d:0a:5a:5e:88:91: 29:7b:62:48:7c:ad:12:d9:4c:0e:4d:6c:91:31:d4: 09:87:33:68:1c:89:b8:7e:1b:00:e5:e4:f5:e2:1d: 54:13:c2:16:51:05:0c:7c:e8:1b:57:be:fe:53:4b: 8f:08:7f:c5:e1:28:5a:41:66:c3:5a:b1:0b:13:29: 5f:47:aa:36:cc:64:58:d1:a3:07:fc:a0:6e:b9:84: df:02:a6:b5:42:22:aa:08:5f:a8:89:d6:c5:3e:aa: 3f:08:eb:ff:eb:8f:aa:14:d0:44:20:41:05:e3:39: 7f:36:a3:f4:44:b9:36:6e:da:3e:7b:a9:62:d4:0b: 92:6f:e1:39:99:ad:2f:12:16:ab:e8:03:b0:35:4d: 2d:b6:3c:ce:a9:d6:f6:ce:a3:24:13:49:2c:49:7b: 84:bf:a5:23:c1:8e:57:f9:98:3e:46:dd:54:b0:8e: 4f:e1:c4:ff:b6:c3:4b:9f:c3:97:11:40:50:ff:a2: cd:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:A2:FE:3B:1E:BD:41:DE:67:25:CA:DA:17:41:D8:61:41:01:94:DE X509v3 Authority Key Identifier: keyid:0C:DC:07:FD:A6:F4:D5:5B:7C:81:82:C9:29:A3:C4:AC:3C:0A:82:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNwH_ab01Vt8gYLJKaPErDwKgv0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/DNwH_ab01Vt8gYLJKaPErDwKgv0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/DNwH_ab01Vt8gYLJKaPErDwKgv0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:92:76:e8:e4:19:39:17:c1:c7:e8:da:b3:1f:95:f8:ae:04: 8d:98:43:fe:e1:e1:c2:56:7c:c8:bc:ae:c6:ef:eb:1e:cf:ee: e3:68:6b:65:c2:e2:13:0a:d4:17:aa:07:52:8b:d5:3b:5a:30: 93:42:07:ce:ad:02:bb:d5:2c:fd:15:c4:15:4f:04:93:8c:1a: 78:66:1c:62:65:a9:07:07:7b:76:3b:2a:65:ae:46:c2:9b:0e: f8:d5:28:e3:df:39:ec:16:d5:f4:13:4f:74:8c:96:0e:6f:36: 9a:40:0d:d3:a8:63:98:54:dc:31:f0:21:84:ec:e9:31:d8:3d: 1b:8b:1a:22:81:fd:06:40:0f:7a:bb:b5:3c:09:2e:d5:82:fc: d9:d4:82:67:c2:f5:1c:45:f7:c4:ea:d1:2f:59:cb:9b:0a:9e: 48:76:19:7e:db:4f:83:f1:ed:d1:98:6b:d3:03:97:32:e2:6b: 02:32:cf:bc:a4:4b:a2:ac:e1:db:48:18:47:dd:20:23:d7:70: ed:cd:1e:b4:25:d1:48:9d:0b:3a:fa:df:4e:fd:53:f8:29:d2: 66:c6:53:0d:8b:41:a9:0e:ae:59:2f:e0:a7:00:bc:37:f0:65: 24:e5:eb:2c:33:a5:df:d7:bf:ed:30:c0:ec:8a:46:7d:47:88: fa:9d:50:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydlJu7/CinpGu93hqN9NWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZGMwN2ZkYTZmNGQ1NWI3YzgxODJjOTI5YTNjNGFjM2Mw YTgyZmQwHhcNMjUxMjA2MDcwMDMxWhcNMjUxMjA3MDcwMDMxWjAzMTEwLwYDVQQD EyhiZmEyZmUzYjFlYmQ0MWRlNjcyNWNhZGExNzQxZDg2MTQxMDE5NGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugtYgIMJsoELdznElCjovwfB3Ser BHP/qwDlM7E/6b6+Ux6FE7jKeNLjsBGbMl2REGqjfdwZjoWY6gFWtum3i0SElyZd ClpeiJEpe2JIfK0S2UwOTWyRMdQJhzNoHIm4fhsA5eT14h1UE8IWUQUMfOgbV77+ U0uPCH/F4ShaQWbDWrELEylfR6o2zGRY0aMH/KBuuYTfAqa1QiKqCF+oidbFPqo/ COv/64+qFNBEIEEF4zl/NqP0RLk2bto+e6li1AuSb+E5ma0vEhar6AOwNU0ttjzO qdb2zqMkE0ksSXuEv6UjwY5X+Zg+Rt1UsI5P4cT/tsNLn8OXEUBQ/6LNQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL+i/jsevUHeZyXK2hdB2GFBAZTeMB8GA1UdIwQY MBaAFAzcB/2m9NVbfIGCySmjxKw8CoL9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE53SF9hYjAxVnQ4Z1lMSkthUEVyRHdLZ3YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9mZjEwNzgtZDE5Ni00NmE1LWE3NDEt ZWQzMWU0M2YxZTA4LzEvRE53SF9hYjAxVnQ4Z1lMSkthUEVyRHdLZ3YwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9mZjEwNzgtZDE5Ni00NmE1LWE3NDEtZWQzMWU0M2YxZTA4 LzEvRE53SF9hYjAxVnQ4Z1lMSkthUEVyRHdLZ3YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiZJ26OQZ ORfBx+jasx+V+K4EjZhD/uHhwlZ8yLyuxu/rHs/u42hrZcLiEwrUF6oHUovVO1ow k0IHzq0Cu9Us/RXEFU8Ek4waeGYcYmWpBwd7djsqZa5GwpsO+NUo49857BbV9BNP dIyWDm82mkAN06hjmFTcMfAhhOzpMdg9G4saIoH9BkAPeru1PAku1YL82dSCZ8L1 HEX3xOrRL1nLmwqeSHYZfttPg/Ht0Zhr0wOXMuJrAjLPvKRLoqzh20gYR90gI9dw 7c0etCXRSJ0LOvrfTv1T+CnSZsZTDYtBqQ6uWS/gpwC8N/BlJOXrLDOl39e/7TDA 7IpGfUeI+p1QPQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:14:17 2025 by rpki-client