This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft File: Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft (raw, json) Hash identifier: tgctf9HA7cXbhgQFsGbayboCrwwrJySgeYfA4SNPtSk= Subject key identifier: 9B:4E:F7:A7:9F:BA:2B:A9:B2:44:F4:54:03:B6:59:8B:58:51:0E:C7 Authority key identifier: 0E:CB:EF:E2:0E:18:86:6B:8A:49:0C:95:EE:45:99:26:43:BE:D6:9D Certificate issuer: /CN=0ecbefe20e18866b8a490c95ee45992643bed69d Certificate serial: 019AF540FC2712FC21FC3BAC3E363E112489 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft Manifest number: 1612 Signing time: Sat 06 Dec 2025 20:01:07 +0000 Manifest this update: Sat 06 Dec 2025 20:01:07 +0000 Manifest next update: Sun 07 Dec 2025 20:01:07 +0000 Files and hashes: 1: Dsvv4g4YhmuKSQyV7kWZJkO-1p0.crl (hash: nQ4eTSafzkLK1OztWy+UX4RfKUZpYkq3t21q/W6ldU0=) 2: JaWvot76MTHHQ4kBFw9C82j2y4o.roa (hash: ixhJz3sDrdmmh9ldkvtB24V24cIIJCj92AgCDmIoozM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.crl rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft rsync://rpki.ripe.net/repository/DEFAULT/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:fc:27:12:fc:21:fc:3b:ac:3e:36:3e:11:24:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ecbefe20e18866b8a490c95ee45992643bed69d Validity Not Before: Dec 6 20:01:07 2025 GMT Not After : Dec 7 20:01:07 2025 GMT Subject: CN=9b4ef7a79fba2ba9b244f45403b6598b58510ec7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:12:ff:1a:13:6a:61:02:75:f4:ac:d2:b6:63: f1:b3:62:54:92:38:de:e0:ef:35:2c:18:b6:e5:fe: 38:2c:a5:87:d0:04:38:23:63:d3:df:ec:b6:2f:4e: 20:03:df:68:e9:66:f1:8f:4e:f7:cb:46:45:67:02: d1:61:59:61:1e:0c:f9:ba:0e:90:61:d4:a3:4e:30: 89:05:b7:6b:36:aa:38:a0:65:a9:6a:64:a6:30:36: 8b:46:0a:e0:20:5b:de:3b:b5:c5:5b:6f:1c:e5:1d: 37:4c:ea:bb:aa:78:5e:e0:e3:c0:61:60:15:04:40: 33:0c:a1:99:42:f8:e9:d1:48:db:1f:43:8d:27:53: e0:c6:f2:54:b4:e0:f2:60:6e:f9:28:47:9f:92:c7: 4f:6d:0e:e3:12:f1:ca:18:33:4f:96:5e:bf:18:2b: 20:5a:87:cf:1d:93:3d:af:3b:31:60:4e:97:8c:85: 12:f6:f0:2a:5b:a1:1c:2d:bd:d7:aa:e0:d3:d2:e3: 6f:ca:d3:08:50:bd:65:0f:34:55:80:58:82:da:1d: 94:ae:1b:5a:fe:ce:5a:ec:a1:56:2c:40:93:50:4d: 59:e6:44:f9:90:48:18:59:3f:d9:52:de:42:90:0a: 48:13:af:fd:f0:f4:9c:68:30:47:80:3a:b3:0d:47: d8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:4E:F7:A7:9F:BA:2B:A9:B2:44:F4:54:03:B6:59:8B:58:51:0E:C7 X509v3 Authority Key Identifier: keyid:0E:CB:EF:E2:0E:18:86:6B:8A:49:0C:95:EE:45:99:26:43:BE:D6:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:0b:28:ae:f9:4f:e7:e8:a4:d9:2b:b1:ea:3f:ff:7c:aa:cd: 0c:35:f8:6e:e1:34:59:a1:38:7e:d8:b6:d7:df:a9:16:76:08: f2:0c:f2:38:ce:09:da:06:9d:cb:19:5b:c5:ef:30:f7:92:06: e4:39:07:48:03:4c:e8:6f:46:12:19:a4:1b:6c:9d:78:74:fd: ae:72:f6:d2:42:1e:b4:fe:6e:c4:06:5d:2d:1d:71:77:5a:53: a0:f4:0c:1a:18:90:64:6d:5a:32:a1:92:2c:94:ab:41:cc:0b: 4e:dd:c6:6b:77:4f:d3:e2:26:ad:b3:c0:8f:28:b2:7a:c9:9c: 7a:2e:37:98:80:b2:af:4c:2e:7e:51:1e:a2:20:54:40:54:d6: c0:cb:4f:46:b1:13:39:8e:c3:9b:02:48:83:72:68:11:8e:be: 06:92:2e:51:42:4c:e4:d8:fa:74:ff:c7:9b:05:2a:7c:48:02: be:36:7d:59:df:93:7c:a8:b5:74:c4:04:a1:1c:7b:1b:eb:1e: 5a:c8:5e:4c:b6:1e:17:96:0f:47:d9:22:7e:4f:2b:b2:a5:3a: 35:4a:17:a0:ff:c4:53:86:25:fb:fb:cb:c6:59:3c:6d:20:e7: ff:58:f7:5c:c3:4e:1c:af:21:28:f2:aa:18:69:c1:42:dd:9e: d6:4b:40:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QPwnEvwh/DusPjY+ESSJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlY2JlZmUyMGUxODg2NmI4YTQ5MGM5NWVlNDU5OTI2NDNi ZWQ2OWQwHhcNMjUxMjA2MjAwMTA3WhcNMjUxMjA3MjAwMTA3WjAzMTEwLwYDVQQD Eyg5YjRlZjdhNzlmYmEyYmE5YjI0NGY0NTQwM2I2NTk4YjU4NTEwZWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+xL/GhNqYQJ19KzStmPxs2JUkjje 4O81LBi25f44LKWH0AQ4I2PT3+y2L04gA99o6Wbxj073y0ZFZwLRYVlhHgz5ug6Q YdSjTjCJBbdrNqo4oGWpamSmMDaLRgrgIFveO7XFW28c5R03TOq7qnhe4OPAYWAV BEAzDKGZQvjp0UjbH0ONJ1PgxvJUtODyYG75KEefksdPbQ7jEvHKGDNPll6/GCsg WofPHZM9rzsxYE6XjIUS9vAqW6EcLb3XquDT0uNvytMIUL1lDzRVgFiC2h2Urhta /s5a7KFWLECTUE1Z5kT5kEgYWT/ZUt5CkApIE6/98PScaDBHgDqzDUfYywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJtO96efuiupskT0VAO2WYtYUQ7HMB8GA1UdIwQY MBaAFA7L7+IOGIZrikkMle5FmSZDvtadMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHN2djRnNFlobXVLU1F5VjdrV1pKa08tMXAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9jNzU1Y2MtNWY5MC00N2Y1LWFkZWMt OTA1ZjI0YzI1OGVlLzEvRHN2djRnNFlobXVLU1F5VjdrV1pKa08tMXAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9jNzU1Y2MtNWY5MC00N2Y1LWFkZWMtOTA1ZjI0YzI1OGVl LzEvRHN2djRnNFlobXVLU1F5VjdrV1pKa08tMXAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEQsorvlP 5+ik2Sux6j//fKrNDDX4buE0WaE4fti219+pFnYI8gzyOM4J2gadyxlbxe8w95IG 5DkHSANM6G9GEhmkG2ydeHT9rnL20kIetP5uxAZdLR1xd1pToPQMGhiQZG1aMqGS LJSrQcwLTt3Ga3dP0+ImrbPAjyiyesmcei43mICyr0wuflEeoiBUQFTWwMtPRrET OY7DmwJIg3JoEY6+BpIuUUJM5Nj6dP/HmwUqfEgCvjZ9Wd+TfKi1dMQEoRx7G+se WsheTLYeF5YPR9kifk8rsqU6NUoXoP/EU4Yl+/vLxlk8bSDn/1j3XMNOHK8hKPKq GGnBQt2e1ktAxQ== -----END CERTIFICATE-----Generated at Sun Dec 7 03:57:13 2025 by rpki-client