This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/DWE_6YRKY0OerooaoMPKjGC0XUU.mft File: DWE_6YRKY0OerooaoMPKjGC0XUU.mft (raw, json) Hash identifier: J4vCbNjW05bEl3XVTE3hk3RPhREjG2y/yJD6aPvTNVk= Subject key identifier: 5B:EC:80:60:7B:3B:2E:2A:5E:5A:66:D1:DD:93:AF:5B:50:63:E8:5A Authority key identifier: 0D:61:3F:E9:84:4A:63:43:9E:AE:8A:1A:A0:C3:CA:8C:60:B4:5D:45 Certificate issuer: /CN=0d613fe9844a63439eae8a1aa0c3ca8c60b45d45 Certificate serial: 019AF12D2BD6BD9B58A47E14A2D10474D953 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWE_6YRKY0OerooaoMPKjGC0XUU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/DWE_6YRKY0OerooaoMPKjGC0XUU.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 01:01:00 +0000 Manifest this update: Sat 06 Dec 2025 01:01:00 +0000 Manifest next update: Sun 07 Dec 2025 01:01:00 +0000 Files and hashes: 1: DWE_6YRKY0OerooaoMPKjGC0XUU.crl (hash: FNWg8J2d67kxnpMp+f7Z25Z3brNqtSST0tlhYEBA2X4=) 2: cAJwzXdTlj0l08klToV51g3reQE.roa (hash: MNtWLrHXizLnpt8hRaJw3axv6PAJCrUS/ztw7WczF4E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/DWE_6YRKY0OerooaoMPKjGC0XUU.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/DWE_6YRKY0OerooaoMPKjGC0XUU.mft rsync://rpki.ripe.net/repository/DEFAULT/DWE_6YRKY0OerooaoMPKjGC0XUU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:2b:d6:bd:9b:58:a4:7e:14:a2:d1:04:74:d9:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d613fe9844a63439eae8a1aa0c3ca8c60b45d45 Validity Not Before: Dec 6 01:01:00 2025 GMT Not After : Dec 7 01:01:00 2025 GMT Subject: CN=5bec80607b3b2e2a5e5a66d1dd93af5b5063e85a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:88:c6:5f:e0:a5:6c:f4:85:87:3b:0b:46:68: 9e:46:39:6f:83:2c:35:ac:72:df:4f:f5:16:11:a2: 84:2d:3d:07:22:4b:da:77:91:4d:ae:65:60:90:20: f0:b7:03:e6:34:ac:50:c6:7e:cc:7b:39:d8:f2:c8: d0:a5:0b:bb:04:a7:7b:8f:d9:40:72:d2:f5:7c:2d: cf:a6:94:47:ed:a9:7a:51:c5:c3:0d:0a:51:a9:8e: 59:85:40:d7:7e:65:c9:6c:ee:44:7f:6f:06:6e:c0: 1a:cf:6c:cc:27:44:97:d6:e2:cf:19:b9:e6:3b:23: 0c:21:2e:48:ab:59:ac:eb:a6:dc:db:55:5e:6d:1c: a7:89:b9:a5:c8:17:58:c4:b3:42:88:cb:3b:a5:4b: ad:21:d0:c2:63:0e:24:fd:b4:2c:b4:3e:54:0e:32: 9a:a8:8c:24:f1:6a:6f:ee:a4:52:03:d4:ac:ad:f3: a3:39:7e:db:96:8e:db:5f:77:e9:92:43:2c:66:f7: 37:11:ad:d6:de:38:82:88:60:7c:d2:80:b0:3a:ac: a0:15:b8:70:15:2e:33:f6:c6:62:35:e8:ce:ef:40: 41:9a:b9:4b:df:3a:e9:22:9e:77:cd:ad:f1:61:5b: 59:31:55:77:c5:8b:df:a4:12:99:f0:5a:4a:b6:a6: 58:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:EC:80:60:7B:3B:2E:2A:5E:5A:66:D1:DD:93:AF:5B:50:63:E8:5A X509v3 Authority Key Identifier: keyid:0D:61:3F:E9:84:4A:63:43:9E:AE:8A:1A:A0:C3:CA:8C:60:B4:5D:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWE_6YRKY0OerooaoMPKjGC0XUU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/DWE_6YRKY0OerooaoMPKjGC0XUU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/DWE_6YRKY0OerooaoMPKjGC0XUU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:5e:b7:33:f0:ce:86:4a:74:14:b7:0f:ff:88:5c:1e:a7:59: 4e:87:97:39:a4:61:14:da:37:d2:40:fd:35:32:15:94:12:e2: ee:2e:28:39:d3:bc:32:a3:fa:62:ab:10:24:6c:0e:45:32:3f: 66:3e:ae:c1:7b:44:79:1c:0a:fa:72:c3:95:8f:63:17:a2:e5: 7b:10:fb:fb:1b:1d:e4:7a:c5:45:56:23:a2:00:3f:89:03:1f: 0e:b0:20:80:da:9d:bc:fc:60:43:52:1b:1a:dd:4d:32:b1:ab: c7:02:d1:fb:34:c0:c3:19:a1:b1:17:79:a8:53:61:de:a9:71: 35:7b:f0:11:a6:38:8d:15:04:32:68:1d:0a:88:fc:5f:79:6f: bc:9e:18:cc:a2:65:de:fc:83:b4:45:c5:f9:26:4b:70:8c:62: 29:27:c8:c5:a2:22:47:37:14:b5:5e:bf:4e:ac:10:8f:9a:0b: 19:55:ef:fa:87:0d:80:03:a2:5a:ae:5c:c4:f6:c2:b4:27:7e: 65:ed:84:20:11:51:f4:5f:13:22:65:ac:8a:df:84:f7:3d:17: 4f:24:b6:4a:ee:6c:b1:92:fa:c6:65:42:dc:4d:ec:1b:13:6a: 2d:58:54:f5:de:1c:b7:44:09:e0:1a:c2:94:96:de:9d:6b:37: aa:07:57:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLSvWvZtYpH4UotEEdNlTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNjEzZmU5ODQ0YTYzNDM5ZWFlOGExYWEwYzNjYThjNjBi NDVkNDUwHhcNMjUxMjA2MDEwMTAwWhcNMjUxMjA3MDEwMTAwWjAzMTEwLwYDVQQD Eyg1YmVjODA2MDdiM2IyZTJhNWU1YTY2ZDFkZDkzYWY1YjUwNjNlODVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA74jGX+ClbPSFhzsLRmieRjlvgyw1 rHLfT/UWEaKELT0HIkvad5FNrmVgkCDwtwPmNKxQxn7MeznY8sjQpQu7BKd7j9lA ctL1fC3PppRH7al6UcXDDQpRqY5ZhUDXfmXJbO5Ef28GbsAaz2zMJ0SX1uLPGbnm OyMMIS5Iq1ms66bc21VebRynibmlyBdYxLNCiMs7pUutIdDCYw4k/bQstD5UDjKa qIwk8Wpv7qRSA9SsrfOjOX7blo7bX3fpkkMsZvc3Ea3W3jiCiGB80oCwOqygFbhw FS4z9sZiNejO70BBmrlL3zrpIp53za3xYVtZMVV3xYvfpBKZ8FpKtqZYHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFvsgGB7Oy4qXlpm0d2Tr1tQY+haMB8GA1UdIwQY MBaAFA1hP+mESmNDnq6KGqDDyoxgtF1FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFdFXzZZUktZME9lcm9vYW9NUEtqR0MwWFVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8zYzk4NzgtZmMyZi00MGM2LWI0ODIt NGQ3ZjRjYmE3ODY3LzEvRFdFXzZZUktZME9lcm9vYW9NUEtqR0MwWFVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy8zYzk4NzgtZmMyZi00MGM2LWI0ODItNGQ3ZjRjYmE3ODY3 LzEvRFdFXzZZUktZME9lcm9vYW9NUEtqR0MwWFVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIF63M/DO hkp0FLcP/4hcHqdZToeXOaRhFNo30kD9NTIVlBLi7i4oOdO8MqP6YqsQJGwORTI/ Zj6uwXtEeRwK+nLDlY9jF6LlexD7+xsd5HrFRVYjogA/iQMfDrAggNqdvPxgQ1Ib Gt1NMrGrxwLR+zTAwxmhsRd5qFNh3qlxNXvwEaY4jRUEMmgdCoj8X3lvvJ4YzKJl 3vyDtEXF+SZLcIxiKSfIxaIiRzcUtV6/TqwQj5oLGVXv+ocNgAOiWq5cxPbCtCd+ Ze2EIBFR9F8TImWsit+E9z0XTyS2Su5ssZL6xmVC3E3sGxNqLVhU9d4ct0QJ4BrC lJbenWs3qgdXeQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:15:12 2025 by rpki-client