This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft File: DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft (raw, json) Hash identifier: U/qf0igN9DQSd0h1Gp+xZKLLExpSwkeOWUBQdESq8qA= Subject key identifier: E3:CE:54:A7:B2:C1:64:11:52:03:0F:A1:39:0B:71:2B:34:4A:2F:B4 Authority key identifier: 0E:11:7A:3E:0D:0D:05:D4:B0:AB:82:30:80:E7:BF:6C:FD:4B:37:76 Certificate issuer: /CN=0e117a3e0d0d05d4b0ab823080e7bf6cfd4b3776 Certificate serial: 019AF12D24FFAF25BE9028803B1B995306FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft Manifest number: 04A1 Signing time: Sat 06 Dec 2025 01:00:58 +0000 Manifest this update: Sat 06 Dec 2025 01:00:58 +0000 Manifest next update: Sun 07 Dec 2025 01:00:58 +0000 Files and hashes: 1: DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.crl (hash: ILsJSk5JroZ+Jbrsyyz1VF8T5kfS7UzUb4ykDvLkvSw=) 2: WBCctmrLBY9TZchWHVefCJRpgwo.roa (hash: ha4SM2FYKNPb6uYgJ7O/6N/bp7uHsy7szwwtLn89ZkM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft rsync://rpki.ripe.net/repository/DEFAULT/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:24:ff:af:25:be:90:28:80:3b:1b:99:53:06:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e117a3e0d0d05d4b0ab823080e7bf6cfd4b3776 Validity Not Before: Dec 6 01:00:58 2025 GMT Not After : Dec 7 01:00:58 2025 GMT Subject: CN=e3ce54a7b2c1641152030fa1390b712b344a2fb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4d:74:cf:82:4a:87:18:7a:83:66:d7:ce:15: 50:cc:0e:87:af:87:b1:3a:5b:cd:40:5c:35:fa:fe: 84:08:c2:75:9d:6f:4e:ff:0d:30:eb:3c:b9:52:ec: 01:91:93:5c:83:7a:c3:9a:0c:f2:0c:60:7e:ab:21: 38:c8:ac:0f:14:0c:7c:8c:7b:14:33:d2:80:ed:05: 31:22:5d:46:96:7c:b8:9f:04:ad:62:83:77:e8:fe: d3:2e:a0:26:48:65:f5:a3:da:e6:d0:70:c4:14:ae: b8:34:11:ed:00:ec:45:cc:54:95:eb:a1:c1:94:45: fe:3e:80:4e:ae:c0:39:a9:40:c7:61:2b:40:0a:33: 4b:97:5e:01:60:db:55:ff:37:27:3f:59:55:98:3c: 19:f6:df:8e:10:6a:9d:4a:61:3f:bb:08:cc:97:69: 02:f5:25:a5:d5:ad:99:15:a7:a0:b8:eb:de:39:33: ed:f0:6e:06:7b:f8:c8:5f:b3:5e:5a:d1:6e:5b:41: 03:38:38:b8:10:04:f7:8a:ae:96:f5:99:61:ce:e3: d0:5d:2c:60:6a:e3:11:1e:25:92:16:ab:e2:f0:0d: 81:0e:b6:6c:11:9d:8d:07:a3:73:a3:ba:1e:c9:2b: fd:9a:cc:5a:af:be:fe:97:c5:47:7b:02:cb:30:83: 55:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:CE:54:A7:B2:C1:64:11:52:03:0F:A1:39:0B:71:2B:34:4A:2F:B4 X509v3 Authority Key Identifier: keyid:0E:11:7A:3E:0D:0D:05:D4:B0:AB:82:30:80:E7:BF:6C:FD:4B:37:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:8a:60:ac:d9:42:17:fd:76:6a:40:99:68:4b:78:3e:a9:dd: 83:2d:39:9e:26:8f:92:e2:d8:04:6a:0a:88:0e:73:86:f7:03: 44:b5:36:b6:23:3c:a3:9e:10:2f:22:01:20:d2:80:46:6a:c7: 95:23:70:f2:60:8d:96:cf:a7:8e:d8:0b:f8:c6:57:23:c0:32: a0:8c:b0:c0:c3:59:7a:59:9e:4f:2e:7a:97:b9:da:31:33:ca: 36:4f:f0:96:b5:37:e0:6c:85:59:07:e0:18:c9:e4:a5:93:72: 52:2a:36:b3:6d:a4:bf:9f:e5:b1:a6:15:85:91:f3:49:7d:f0: f7:50:9b:b4:20:de:de:57:1a:17:c6:f6:3c:09:e9:06:76:05: 88:dc:b7:8b:86:95:e1:d7:22:40:e6:3a:73:b8:69:94:8a:bd: a2:d3:3d:b7:f2:25:c8:92:b7:d9:ab:26:26:24:72:33:39:01: bf:b4:3a:f8:8a:f5:a8:a4:fb:95:91:0d:a0:31:ad:41:94:90: de:a9:3b:e2:69:53:50:92:5f:57:b7:4e:52:94:d0:3c:0d:3c: a4:31:ce:60:06:29:9f:84:54:14:fb:01:30:f8:4c:54:5f:a4: 2b:01:1f:af:6f:de:2b:15:1c:c1:3c:ed:0e:49:1f:15:f1:fe: 0a:2a:5c:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLST/ryW+kCiAOxuZUwb7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMTE3YTNlMGQwZDA1ZDRiMGFiODIzMDgwZTdiZjZjZmQ0 YjM3NzYwHhcNMjUxMjA2MDEwMDU4WhcNMjUxMjA3MDEwMDU4WjAzMTEwLwYDVQQD EyhlM2NlNTRhN2IyYzE2NDExNTIwMzBmYTEzOTBiNzEyYjM0NGEyZmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvE10z4JKhxh6g2bXzhVQzA6Hr4ex OlvNQFw1+v6ECMJ1nW9O/w0w6zy5UuwBkZNcg3rDmgzyDGB+qyE4yKwPFAx8jHsU M9KA7QUxIl1Glny4nwStYoN36P7TLqAmSGX1o9rm0HDEFK64NBHtAOxFzFSV66HB lEX+PoBOrsA5qUDHYStACjNLl14BYNtV/zcnP1lVmDwZ9t+OEGqdSmE/uwjMl2kC 9SWl1a2ZFaeguOveOTPt8G4Ge/jIX7NeWtFuW0EDODi4EAT3iq6W9ZlhzuPQXSxg auMRHiWSFqvi8A2BDrZsEZ2NB6Nzo7oeySv9msxar77+l8VHewLLMINV/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOPOVKeywWQRUgMPoTkLcSs0Si+0MB8GA1UdIwQY MBaAFA4Rej4NDQXUsKuCMIDnv2z9Szd2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGhGNlBnME5CZFN3cTRJd2dPZV9iUDFMTjNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8xNDIyZmEtZTgyYi00YzBiLWIyM2It ZDg0NzVmMTg0NjRlLzEvRGhGNlBnME5CZFN3cTRJd2dPZV9iUDFMTjNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS8xNDIyZmEtZTgyYi00YzBiLWIyM2ItZDg0NzVmMTg0NjRl LzEvRGhGNlBnME5CZFN3cTRJd2dPZV9iUDFMTjNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc4pgrNlC F/12akCZaEt4Pqndgy05niaPkuLYBGoKiA5zhvcDRLU2tiM8o54QLyIBINKARmrH lSNw8mCNls+njtgL+MZXI8AyoIywwMNZelmeTy56l7naMTPKNk/wlrU34GyFWQfg GMnkpZNyUio2s22kv5/lsaYVhZHzSX3w91CbtCDe3lcaF8b2PAnpBnYFiNy3i4aV 4dciQOY6c7hplIq9otM9t/IlyJK32asmJiRyMzkBv7Q6+Ir1qKT7lZENoDGtQZSQ 3qk74mlTUJJfV7dOUpTQPA08pDHOYAYpn4RUFPsBMPhMVF+kKwEfr2/eKxUcwTzt DkkfFfH+CipcIw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:23:19 2025 by rpki-client