This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.mft File: DWutPz3QrFVvP3qA0cabn9lk3Ww.mft (raw, json) Hash identifier: vSxs2j5ByzcR0bwtM4aPWpy9mgofyG1jrUlaVwYytqI= Subject key identifier: 19:DD:30:3E:13:9C:14:22:1F:EE:8F:4A:4F:D1:2B:21:B7:4F:65:5D Authority key identifier: 0D:6B:AD:3F:3D:D0:AC:55:6F:3F:7A:80:D1:C6:9B:9F:D9:64:DD:6C Certificate issuer: /CN=0d6bad3f3dd0ac556f3f7a80d1c69b9fd964dd6c Certificate serial: 019AF2092F3FB62BA7A729FAE563953E9DF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWutPz3QrFVvP3qA0cabn9lk3Ww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.mft Manifest number: 115D Signing time: Sat 06 Dec 2025 05:01:19 +0000 Manifest this update: Sat 06 Dec 2025 05:01:19 +0000 Manifest next update: Sun 07 Dec 2025 05:01:19 +0000 Files and hashes: 1: DWutPz3QrFVvP3qA0cabn9lk3Ww.crl (hash: 7jkUxB7K9/wpyfLjrvPvUo3EomcbmYYnfnwgR8p6U80=) 2: clB1f_NiIoBJs06I1N2ua9KcprY.roa (hash: Hc2uBMDIF+2ALpimHYsk+DChTWTq8OrIlMci+ZWtnyA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.crl rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.mft rsync://rpki.ripe.net/repository/DEFAULT/DWutPz3QrFVvP3qA0cabn9lk3Ww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:2f:3f:b6:2b:a7:a7:29:fa:e5:63:95:3e:9d:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d6bad3f3dd0ac556f3f7a80d1c69b9fd964dd6c Validity Not Before: Dec 6 05:01:19 2025 GMT Not After : Dec 7 05:01:19 2025 GMT Subject: CN=19dd303e139c14221fee8f4a4fd12b21b74f655d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fb:a0:5c:1c:e6:91:6b:24:72:b7:6e:83:c3: a6:fd:26:13:c3:be:af:5d:11:84:9d:7d:05:4d:f5: bc:d0:4e:03:bc:94:da:f3:55:5f:6c:36:c1:67:69: 88:d8:cf:d0:ab:91:58:14:7b:de:90:ee:08:fd:90: 7b:56:08:c5:53:66:ed:f4:18:22:e2:90:81:ba:13: 88:fa:96:1e:eb:2f:92:5e:0a:7f:04:1e:68:b9:8b: 20:fb:a9:34:6f:7c:37:8e:97:72:f5:57:74:1b:8b: 6e:27:76:db:7e:65:3f:c5:53:3c:cb:a0:82:33:c1: 87:ef:d2:58:cf:2e:7b:18:eb:36:e1:34:c3:2a:23: 4c:92:87:bc:d1:9b:2b:8e:23:ba:7a:7e:8a:43:78: 63:7d:9c:92:2c:fa:21:90:f8:00:3a:e0:69:f4:4c: 34:08:64:7f:27:d2:2e:49:a4:ad:b7:71:c1:44:d7: 72:38:a0:61:14:ba:2a:14:3a:44:d3:1a:fe:11:a7: 85:70:43:a7:d4:c7:d5:f9:04:ad:3a:9e:8d:f1:c3: 35:6e:e2:bc:a2:d0:be:df:89:99:c2:5e:86:d6:d4: 9a:42:fc:f9:42:a9:33:72:96:f5:3f:a7:36:53:46: d2:38:3f:f4:d0:aa:aa:55:68:4b:1c:fa:f5:67:ad: bc:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:DD:30:3E:13:9C:14:22:1F:EE:8F:4A:4F:D1:2B:21:B7:4F:65:5D X509v3 Authority Key Identifier: keyid:0D:6B:AD:3F:3D:D0:AC:55:6F:3F:7A:80:D1:C6:9B:9F:D9:64:DD:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWutPz3QrFVvP3qA0cabn9lk3Ww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:33:48:1b:59:f1:1f:79:4a:53:d6:96:a6:11:c7:9f:2f:7a: d7:28:35:83:47:32:cd:17:8d:ff:7c:8d:99:04:50:7d:a1:02: ad:47:d9:0d:de:19:5b:17:4a:73:b7:cd:1e:d3:23:82:29:7e: 6e:de:74:ed:19:89:00:58:40:a5:5a:5b:2e:9e:aa:73:77:7b: 39:4c:3a:23:f1:a2:47:0f:93:7e:9b:c0:69:9a:6d:ac:2c:a1: cd:2f:1f:bb:9e:4d:aa:98:9c:0d:b6:60:36:5b:d2:f7:d6:07: 00:81:5e:86:b4:63:60:bd:b8:09:4f:83:ca:64:d9:cd:b8:73: fb:01:46:7f:c9:54:7b:1c:5c:6b:c7:af:9a:3f:ba:f5:e3:84: 7b:c2:49:fd:46:6e:07:c4:91:f8:26:0b:99:3c:f5:40:23:be: a2:55:39:a3:25:6b:49:5d:05:b8:1a:ec:b5:d6:6c:2b:30:13: c7:4a:ff:ce:a6:fd:5d:63:77:8e:4f:07:27:24:b7:64:fc:a2: 57:50:ed:95:9b:22:4a:b6:95:b6:0e:0b:a3:e9:92:f0:74:7b: 3d:4a:a6:b3:9e:8a:ae:b9:e7:14:c0:23:9d:61:e6:32:2f:31: 65:a3:1a:27:11:8d:23:1e:74:90:ca:82:61:41:55:02:67:9e: 84:72:2a:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCS8/tiunpyn65WOVPp3zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNmJhZDNmM2RkMGFjNTU2ZjNmN2E4MGQxYzY5YjlmZDk2 NGRkNmMwHhcNMjUxMjA2MDUwMTE5WhcNMjUxMjA3MDUwMTE5WjAzMTEwLwYDVQQD EygxOWRkMzAzZTEzOWMxNDIyMWZlZThmNGE0ZmQxMmIyMWI3NGY2NTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfugXBzmkWskcrdug8Om/SYTw76v XRGEnX0FTfW80E4DvJTa81VfbDbBZ2mI2M/Qq5FYFHvekO4I/ZB7VgjFU2bt9Bgi 4pCBuhOI+pYe6y+SXgp/BB5ouYsg+6k0b3w3jpdy9Vd0G4tuJ3bbfmU/xVM8y6CC M8GH79JYzy57GOs24TTDKiNMkoe80ZsrjiO6en6KQ3hjfZySLPohkPgAOuBp9Ew0 CGR/J9IuSaStt3HBRNdyOKBhFLoqFDpE0xr+EaeFcEOn1MfV+QStOp6N8cM1buK8 otC+34mZwl6G1tSaQvz5Qqkzcpb1P6c2U0bSOD/00KqqVWhLHPr1Z628uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBndMD4TnBQiH+6PSk/RKyG3T2VdMB8GA1UdIwQY MBaAFA1rrT890KxVbz96gNHGm5/ZZN1sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFd1dFB6M1FyRlZ2UDNxQTBjYWJuOWxrM1d3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9hY2E3MzYtNDA4OC00ODBiLWFmNWYt ODliNmMyMTlkOTBiLzEvRFd1dFB6M1FyRlZ2UDNxQTBjYWJuOWxrM1d3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9hY2E3MzYtNDA4OC00ODBiLWFmNWYtODliNmMyMTlkOTBi LzEvRFd1dFB6M1FyRlZ2UDNxQTBjYWJuOWxrM1d3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATDNIG1nx H3lKU9aWphHHny961yg1g0cyzReN/3yNmQRQfaECrUfZDd4ZWxdKc7fNHtMjgil+ bt507RmJAFhApVpbLp6qc3d7OUw6I/GiRw+TfpvAaZptrCyhzS8fu55NqpicDbZg NlvS99YHAIFehrRjYL24CU+DymTZzbhz+wFGf8lUexxca8evmj+69eOEe8JJ/UZu B8SR+CYLmTz1QCO+olU5oyVrSV0FuBrstdZsKzATx0r/zqb9XWN3jk8HJyS3ZPyi V1DtlZsiSraVtg4Lo+mS8HR7PUqms56KrrnnFMAjnWHmMi8xZaMaJxGNIx50kMqC YUFVAmeehHIqNw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:31:28 2025 by rpki-client