This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/dpnBiQJ-JezFP5i1LqZa5yXSpzA.mft File: dpnBiQJ-JezFP5i1LqZa5yXSpzA.mft (raw, json) Hash identifier: ZwjNA/uiolP55BaIRvSuubCCYiVQu0xzWPpmqEYL7+c= Subject key identifier: D4:8D:5A:44:96:41:70:9B:D8:B1:BE:E2:EE:A8:78:84:98:08:43:FA Authority key identifier: 76:99:C1:89:02:7E:25:EC:C5:3F:98:B5:2E:A6:5A:E7:25:D2:A7:30 Certificate issuer: /CN=7699c189027e25ecc53f98b52ea65ae725d2a730 Certificate serial: 019AF1D1CF406B5C9BAD2487CCE1EBD2AF4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dpnBiQJ-JezFP5i1LqZa5yXSpzA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/dpnBiQJ-JezFP5i1LqZa5yXSpzA.mft Manifest number: 1331 Signing time: Sat 06 Dec 2025 04:00:50 +0000 Manifest this update: Sat 06 Dec 2025 04:00:50 +0000 Manifest next update: Sun 07 Dec 2025 04:00:50 +0000 Files and hashes: 1: AySpplYr1k8EYDvYyZDjEzqH9K4.roa (hash: s1mdUNkG6Ay0RgrGD/89z3j82IecWcvVNMM/xUHeklQ=) 2: K2WHuCG9UOH7aVx9C_lS8WDCTm4.roa (hash: 1HhQUXTsNrF+XYLIkzcFw9sh41szsi9HXt4NDudQ02s=) 3: dpnBiQJ-JezFP5i1LqZa5yXSpzA.crl (hash: V0I1YbyZrvmTAqgu3nEE3hOUBBcJ3qd3nuOptMtXI7M=) 4: ihgaKZRhXXqYYZxiR5z5DfKMcAo.roa (hash: F3cv1Y7tYXZNMkOk4CynP5ia6K663k4g2QoOaTbO8mA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/dpnBiQJ-JezFP5i1LqZa5yXSpzA.crl rsync://rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/dpnBiQJ-JezFP5i1LqZa5yXSpzA.mft rsync://rpki.ripe.net/repository/DEFAULT/dpnBiQJ-JezFP5i1LqZa5yXSpzA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:cf:40:6b:5c:9b:ad:24:87:cc:e1:eb:d2:af:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7699c189027e25ecc53f98b52ea65ae725d2a730 Validity Not Before: Dec 6 04:00:50 2025 GMT Not After : Dec 7 04:00:50 2025 GMT Subject: CN=d48d5a449641709bd8b1bee2eea87884980843fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:7e:c0:43:b7:97:fc:7e:78:59:bd:43:ee:60: c6:78:9a:b6:26:4f:41:cc:fb:22:07:38:57:40:f8: 51:0f:0c:79:e1:73:33:b6:13:9f:8f:81:e5:49:b6: e2:81:4e:2d:e2:46:95:0e:94:59:a2:e9:3e:14:2c: 72:b2:14:08:08:54:1c:8b:37:eb:88:99:65:2c:0d: 34:34:27:33:4f:3b:cd:8a:0a:80:c2:f6:9b:fa:65: 0c:d8:a7:ab:68:51:8d:5e:38:42:79:fa:5b:e6:83: 89:f4:8c:4c:c3:b4:6f:f4:88:d2:fe:9e:93:a1:18: 61:4b:83:b6:8f:75:86:81:bf:dd:93:b4:e8:de:85: b6:2b:0e:7c:b0:44:6b:2d:00:e0:47:a1:e6:4f:df: d2:f3:db:2a:88:08:67:6c:b4:19:d2:53:35:d0:a3: 38:aa:dd:8c:3c:b9:36:9f:4c:0c:4a:54:91:7e:45: d5:74:d2:25:26:76:2d:41:02:e6:a5:c9:45:ba:6b: 25:5b:46:e4:6e:f1:ba:83:5b:17:3d:3b:06:8f:33: 17:84:d8:f1:a2:e3:f7:da:eb:7c:61:72:14:47:ba: 12:0d:f5:31:47:43:7e:e3:9a:95:90:ad:13:71:0b: ad:db:5e:ea:05:ee:2e:9e:d5:42:0d:67:ea:7a:d2: 12:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:8D:5A:44:96:41:70:9B:D8:B1:BE:E2:EE:A8:78:84:98:08:43:FA X509v3 Authority Key Identifier: keyid:76:99:C1:89:02:7E:25:EC:C5:3F:98:B5:2E:A6:5A:E7:25:D2:A7:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpnBiQJ-JezFP5i1LqZa5yXSpzA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/dpnBiQJ-JezFP5i1LqZa5yXSpzA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/dpnBiQJ-JezFP5i1LqZa5yXSpzA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:8a:b8:e2:cd:04:5d:c1:f3:9e:ba:31:e1:73:cc:1e:df:1f: 33:06:ef:45:26:e2:c4:7f:57:e8:8b:db:b1:27:d8:63:29:c1: 8e:ae:a3:83:1d:04:b5:ae:e6:89:17:f2:49:88:63:8a:34:27: 85:45:2e:d5:62:ed:67:99:2c:69:00:f8:65:80:02:cc:7a:a1: 25:cd:97:5b:c6:a0:4d:20:03:d8:58:7d:42:4c:84:8f:b8:5c: 59:42:df:e9:59:98:3f:d5:7e:e5:74:1a:e5:83:3f:f3:86:da: 67:a8:1c:44:92:b6:42:a5:93:73:fd:a7:d6:ab:37:5a:61:2c: ae:59:54:76:d9:df:a4:fb:ad:9c:b3:28:f6:6f:0a:b5:5b:49: db:26:5c:c5:2e:d2:04:97:a3:14:31:5a:5e:7f:2d:df:40:c3: 8e:f2:94:05:84:6e:5f:6a:59:70:4d:78:ff:76:04:90:d0:b4: 0a:86:c6:a9:fe:6e:bd:d1:40:c1:21:9a:e4:a8:e6:d3:ea:c7: ce:7e:73:a7:bd:8b:cb:3e:28:c1:06:53:55:9f:5c:7b:26:55: 73:ff:96:1c:0e:4f:12:a3:23:0b:89:18:cf:e0:c6:9c:ec:a7: 1a:1d:e0:a2:36:cb:7d:6e:46:8a:d3:62:56:51:f0:1e:3b:5e: da:81:5d:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0c9Aa1ybrSSHzOHr0q9LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2OTljMTg5MDI3ZTI1ZWNjNTNmOThiNTJlYTY1YWU3MjVk MmE3MzAwHhcNMjUxMjA2MDQwMDUwWhcNMjUxMjA3MDQwMDUwWjAzMTEwLwYDVQQD EyhkNDhkNWE0NDk2NDE3MDliZDhiMWJlZTJlZWE4Nzg4NDk4MDg0M2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+H7AQ7eX/H54Wb1D7mDGeJq2Jk9B zPsiBzhXQPhRDwx54XMzthOfj4HlSbbigU4t4kaVDpRZouk+FCxyshQICFQcizfr iJllLA00NCczTzvNigqAwvab+mUM2KeraFGNXjhCefpb5oOJ9IxMw7Rv9IjS/p6T oRhhS4O2j3WGgb/dk7To3oW2Kw58sERrLQDgR6HmT9/S89sqiAhnbLQZ0lM10KM4 qt2MPLk2n0wMSlSRfkXVdNIlJnYtQQLmpclFumslW0bkbvG6g1sXPTsGjzMXhNjx ouP32ut8YXIUR7oSDfUxR0N+45qVkK0TcQut217qBe4untVCDWfqetISaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNSNWkSWQXCb2LG+4u6oeISYCEP6MB8GA1UdIwQY MBaAFHaZwYkCfiXsxT+YtS6mWucl0qcwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHBuQmlRSi1KZXpGUDVpMUxxWmE1eVhTcHpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS83MTc1NTUtMzU0Zi00YjM3LThhNmEt MDk0MDQzNjY5MWJkLzEvZHBuQmlRSi1KZXpGUDVpMUxxWmE1eVhTcHpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS83MTc1NTUtMzU0Zi00YjM3LThhNmEtMDk0MDQzNjY5MWJk LzEvZHBuQmlRSi1KZXpGUDVpMUxxWmE1eVhTcHpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANoq44s0E XcHznrox4XPMHt8fMwbvRSbixH9X6IvbsSfYYynBjq6jgx0Eta7miRfySYhjijQn hUUu1WLtZ5ksaQD4ZYACzHqhJc2XW8agTSAD2Fh9QkyEj7hcWULf6VmYP9V+5XQa 5YM/84baZ6gcRJK2QqWTc/2n1qs3WmEsrllUdtnfpPutnLMo9m8KtVtJ2yZcxS7S BJejFDFaXn8t30DDjvKUBYRuX2pZcE14/3YEkNC0CobGqf5uvdFAwSGa5Kjm0+rH zn5zp72Lyz4owQZTVZ9ceyZVc/+WHA5PEqMjC4kYz+DGnOynGh3gojbLfW5GitNi VlHwHjte2oFdEQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:24:21 2025 by rpki-client