This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/66b77e-5a29-47b5-b5a7-007e08b3af8f/1/DmuhOkKdJETI5sfYf-vxnVD-dQo.mft File: DmuhOkKdJETI5sfYf-vxnVD-dQo.mft (raw, json) Hash identifier: 8WNJPIabUZiGQT0CsU1Wrnfp2/T/S6wT9TO25lzDSgQ= Subject key identifier: F9:11:A3:DF:13:0D:25:EB:2E:3C:BF:A4:F8:84:17:E5:F8:C0:42:66 Authority key identifier: 0E:6B:A1:3A:42:9D:24:44:C8:E6:C7:D8:7F:EB:F1:9D:50:FE:75:0A Certificate issuer: /CN=0e6ba13a429d2444c8e6c7d87febf19d50fe750a Certificate serial: 019AF31B378E169FDA55C8BFCF26F089A23E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DmuhOkKdJETI5sfYf-vxnVD-dQo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/66b77e-5a29-47b5-b5a7-007e08b3af8f/1/DmuhOkKdJETI5sfYf-vxnVD-dQo.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 10:00:38 +0000 Manifest this update: Sat 06 Dec 2025 10:00:38 +0000 Manifest next update: Sun 07 Dec 2025 10:00:38 +0000 Files and hashes: 1: DmuhOkKdJETI5sfYf-vxnVD-dQo.crl (hash: wEANVGDrp5V+CUvYCY2LJd+0MQndht8d/USXlW2Op8Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/66b77e-5a29-47b5-b5a7-007e08b3af8f/1/DmuhOkKdJETI5sfYf-vxnVD-dQo.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/66b77e-5a29-47b5-b5a7-007e08b3af8f/1/DmuhOkKdJETI5sfYf-vxnVD-dQo.mft rsync://rpki.ripe.net/repository/DEFAULT/DmuhOkKdJETI5sfYf-vxnVD-dQo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:37:8e:16:9f:da:55:c8:bf:cf:26:f0:89:a2:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e6ba13a429d2444c8e6c7d87febf19d50fe750a Validity Not Before: Dec 6 10:00:38 2025 GMT Not After : Dec 7 10:00:38 2025 GMT Subject: CN=f911a3df130d25eb2e3cbfa4f88417e5f8c04266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:13:94:19:8c:99:3b:2e:12:c2:18:1e:17:ef: 1e:e6:62:f8:95:cc:65:4a:4f:cd:08:32:f3:7e:57: 98:ff:3d:89:c9:7e:1b:00:91:32:e1:5d:bb:b8:c0: 57:f5:7c:b1:d4:05:96:f1:cb:03:46:46:da:8e:ef: bb:c4:7d:c6:16:28:f4:82:08:bf:da:90:7c:4c:8b: 63:9d:1c:72:96:a6:0e:2c:a9:2e:0f:23:55:00:e9: a8:7f:c9:b9:88:9d:9b:b7:07:1f:09:69:7d:21:d7: b2:38:aa:d1:11:8f:92:76:80:f1:84:f2:e0:46:a2: 91:dc:fc:43:ef:6e:5b:f0:b9:55:f9:ee:98:b9:b2: db:65:fa:42:09:13:02:9e:66:8b:88:2e:0e:be:14: 52:88:c4:18:6e:92:08:73:e8:e8:6f:a9:88:b3:2a: 5b:61:ed:8b:6c:52:f4:8a:a3:50:11:b5:29:0b:2a: 5e:71:57:e1:a0:2e:46:91:99:e4:3b:78:50:75:22: ae:62:03:bf:27:31:e0:ab:6c:e4:0f:34:32:ac:70: 53:07:91:47:03:71:5f:5b:f8:18:92:3b:df:06:a3: cc:5e:7c:19:c6:c5:0c:6a:cd:09:95:02:86:3e:68: 7d:e1:39:96:a9:79:6c:98:0b:44:ea:85:3a:4b:11: a7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:11:A3:DF:13:0D:25:EB:2E:3C:BF:A4:F8:84:17:E5:F8:C0:42:66 X509v3 Authority Key Identifier: keyid:0E:6B:A1:3A:42:9D:24:44:C8:E6:C7:D8:7F:EB:F1:9D:50:FE:75:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmuhOkKdJETI5sfYf-vxnVD-dQo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/66b77e-5a29-47b5-b5a7-007e08b3af8f/1/DmuhOkKdJETI5sfYf-vxnVD-dQo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/66b77e-5a29-47b5-b5a7-007e08b3af8f/1/DmuhOkKdJETI5sfYf-vxnVD-dQo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:43:7f:73:df:3f:3e:71:15:9b:2c:c5:76:f3:35:8a:0d:3f: c2:ad:4d:73:a8:9f:ba:5e:8f:44:95:c3:a9:e4:60:6b:5b:2e: 0c:a6:85:f1:3a:03:f2:65:2c:b7:c8:a9:aa:c0:ba:94:c8:43: 8e:ba:0d:e6:26:1c:2c:03:a6:d0:51:2d:f4:09:88:a5:36:1c: dd:a1:26:33:58:c8:13:95:03:6f:da:fe:d8:0e:38:f5:5d:02: ee:f9:63:b0:67:83:52:51:8b:7d:20:c5:cd:83:ba:e6:e9:79: ab:9d:09:0a:b8:58:8a:a9:a3:3d:c8:5d:ff:57:61:3a:ee:ab: 2f:d5:c3:7b:0f:41:55:e0:2f:11:8c:02:4b:4c:c0:8f:89:de: b6:cb:ec:e0:a9:37:74:3f:f7:ed:f7:0e:f6:29:92:9b:86:73: ab:e2:5a:d7:42:27:4d:52:51:6d:87:c5:15:c0:f7:ce:a7:51: db:50:29:41:65:89:05:02:f4:5e:34:06:26:45:43:1e:97:2d: c8:aa:dd:c2:3c:35:d6:ca:5a:d6:81:d9:d5:a0:8d:4c:3d:fb: 92:10:87:05:b0:37:e3:80:3f:9c:87:6c:af:73:5a:0f:0a:70: dc:f2:68:82:b1:10:a3:2f:93:56:4b:1c:22:71:b0:5e:fb:22: 34:a2:77:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGzeOFp/aVci/zybwiaI+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNmJhMTNhNDI5ZDI0NDRjOGU2YzdkODdmZWJmMTlkNTBm ZTc1MGEwHhcNMjUxMjA2MTAwMDM4WhcNMjUxMjA3MTAwMDM4WjAzMTEwLwYDVQQD EyhmOTExYTNkZjEzMGQyNWViMmUzY2JmYTRmODg0MTdlNWY4YzA0MjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxOUGYyZOy4SwhgeF+8e5mL4lcxl Sk/NCDLzfleY/z2JyX4bAJEy4V27uMBX9Xyx1AWW8csDRkbaju+7xH3GFij0ggi/ 2pB8TItjnRxylqYOLKkuDyNVAOmof8m5iJ2btwcfCWl9IdeyOKrREY+SdoDxhPLg RqKR3PxD725b8LlV+e6YubLbZfpCCRMCnmaLiC4OvhRSiMQYbpIIc+job6mIsypb Ye2LbFL0iqNQEbUpCypecVfhoC5GkZnkO3hQdSKuYgO/JzHgq2zkDzQyrHBTB5FH A3FfW/gYkjvfBqPMXnwZxsUMas0JlQKGPmh94TmWqXlsmAtE6oU6SxGnSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPkRo98TDSXrLjy/pPiEF+X4wEJmMB8GA1UdIwQY MBaAFA5roTpCnSREyObH2H/r8Z1Q/nUKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG11aE9rS2RKRVRJNXNmWWYtdnhuVkQtZFFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi82NmI3N2UtNWEyOS00N2I1LWI1YTct MDA3ZTA4YjNhZjhmLzEvRG11aE9rS2RKRVRJNXNmWWYtdnhuVkQtZFFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi82NmI3N2UtNWEyOS00N2I1LWI1YTctMDA3ZTA4YjNhZjhm LzEvRG11aE9rS2RKRVRJNXNmWWYtdnhuVkQtZFFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhUN/c98/ PnEVmyzFdvM1ig0/wq1Nc6iful6PRJXDqeRga1suDKaF8ToD8mUst8ipqsC6lMhD jroN5iYcLAOm0FEt9AmIpTYc3aEmM1jIE5UDb9r+2A449V0C7vljsGeDUlGLfSDF zYO65ul5q50JCrhYiqmjPchd/1dhOu6rL9XDew9BVeAvEYwCS0zAj4netsvs4Kk3 dD/37fcO9imSm4Zzq+Ja10InTVJRbYfFFcD3zqdR21ApQWWJBQL0XjQGJkVDHpct yKrdwjw11spa1oHZ1aCNTD37khCHBbA344A/nIdsr3NaDwpw3PJogrEQoy+TVksc InGwXvsiNKJ3tA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:18:20 2025 by rpki-client