This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft File: DaPL8eDoVupMU7WrroZZTsmTOYI.mft (raw, json) Hash identifier: 4uweMdAzElRhb7deg6Nr2281K/3acOC3Z29HDMvcg50= Subject key identifier: 3A:FF:72:6A:E2:E5:4A:62:9A:27:3A:CE:0B:18:99:3F:AC:4F:22:85 Authority key identifier: 0D:A3:CB:F1:E0:E8:56:EA:4C:53:B5:AB:AE:86:59:4E:C9:93:39:82 Certificate issuer: /CN=0da3cbf1e0e856ea4c53b5abae86594ec9933982 Certificate serial: 019AF12E26A924F59D0E47EC70F7114CDA5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DaPL8eDoVupMU7WrroZZTsmTOYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft Manifest number: 0E92 Signing time: Sat 06 Dec 2025 01:02:04 +0000 Manifest this update: Sat 06 Dec 2025 01:02:04 +0000 Manifest next update: Sun 07 Dec 2025 01:02:04 +0000 Files and hashes: 1: DaPL8eDoVupMU7WrroZZTsmTOYI.crl (hash: CneWUK527v/DQRbc7JeVRojgJHYrwzO1vSYq0BiXNRc=) 2: MNtx-M1QVv5z_3qcN6vxhaOotfc.roa (hash: px53xNqq/MugnV+199J7ZDHhE5FdBcLFsMKgKSEziic=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.crl rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft rsync://rpki.ripe.net/repository/DEFAULT/DaPL8eDoVupMU7WrroZZTsmTOYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:26:a9:24:f5:9d:0e:47:ec:70:f7:11:4c:da:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0da3cbf1e0e856ea4c53b5abae86594ec9933982 Validity Not Before: Dec 6 01:02:04 2025 GMT Not After : Dec 7 01:02:04 2025 GMT Subject: CN=3aff726ae2e54a629a273ace0b18993fac4f2285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:05:19:25:4a:60:e4:ec:d8:f7:6e:56:ad:7d: ec:57:5c:27:24:77:d4:75:7e:00:8b:d2:20:8b:7f: ca:67:4f:3b:1b:c2:1e:09:dc:e8:fc:9e:e8:c3:fe: 8d:99:db:c1:a7:97:97:be:f7:28:2e:13:0f:84:0f: 54:90:da:c9:85:c0:38:c1:01:c6:45:91:dc:89:96: 44:dd:f5:f5:40:b8:4a:f0:e9:36:e0:d9:52:63:11: 62:2e:46:bd:d4:ca:35:af:5b:7e:64:34:f0:c7:08: 33:9c:3f:57:92:31:3c:26:16:0e:54:a4:4a:3e:9d: c8:4d:4a:e5:f6:9e:f3:b1:a7:77:80:23:3b:d7:18: d5:26:4c:c3:5d:e7:3d:77:0c:78:f9:01:b4:aa:22: f1:7a:57:1a:4c:87:60:0d:2e:36:b9:3d:7f:76:e6: 02:96:f0:17:56:39:11:c4:f9:fe:aa:39:76:dc:5f: ff:59:85:96:06:42:0e:77:7a:89:24:bc:04:95:43: 16:75:b4:1e:05:85:29:d7:ef:12:32:97:98:f6:7e: 3c:d1:67:10:85:20:fe:e6:e2:88:b1:1f:2a:e6:bb: 92:1b:12:e6:2c:eb:92:76:e3:c6:7f:4f:aa:3e:48: 79:0b:46:5e:2c:27:76:77:66:b6:f9:da:fe:4b:01: a6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:FF:72:6A:E2:E5:4A:62:9A:27:3A:CE:0B:18:99:3F:AC:4F:22:85 X509v3 Authority Key Identifier: keyid:0D:A3:CB:F1:E0:E8:56:EA:4C:53:B5:AB:AE:86:59:4E:C9:93:39:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DaPL8eDoVupMU7WrroZZTsmTOYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/53741e-9392-4d19-99d2-ced29650a280/1/DaPL8eDoVupMU7WrroZZTsmTOYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:94:d1:0d:ce:a0:3d:7e:6a:1d:f9:f4:91:38:09:49:b1:d5: b7:d0:20:9c:09:cf:73:45:5f:da:bf:ff:93:92:74:4b:17:9e: c6:9b:11:3b:11:3c:99:6a:93:eb:d6:99:18:ac:7f:e1:1b:5e: 73:17:37:9f:b3:f9:01:fd:56:80:9d:63:da:ba:64:53:44:23: d9:36:72:03:72:18:03:24:d3:c6:2a:54:ee:d6:00:0f:93:3f: 4d:7b:dd:f1:3c:a3:5d:cf:3a:05:58:f5:91:f7:df:15:c2:83: e0:27:de:19:ef:ba:88:e1:e9:ed:e1:fc:98:eb:88:8b:56:fb: 1d:0e:81:39:b9:76:ea:5b:85:29:4b:f5:a1:29:b8:2e:52:c8: b7:17:f0:17:8b:da:3f:f2:a9:ac:86:a9:11:4c:27:d7:af:37: 2c:98:25:86:85:fc:84:48:76:f8:84:92:1a:0e:a8:ed:4d:0e: 7d:d0:38:18:dc:0e:f9:97:5c:1f:9d:16:89:45:53:a8:1a:9f: 18:05:9e:32:d0:1e:5f:cd:da:d1:94:be:de:75:b6:d7:2c:fa: ff:dd:1c:f4:3d:3c:32:b2:06:e8:e9:e6:a5:52:de:09:ed:fe: 27:de:b2:d8:e0:e8:21:3e:d7:bf:a9:1a:be:1c:28:21:3e:3b: ac:8d:ce:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLiapJPWdDkfscPcRTNpfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYTNjYmYxZTBlODU2ZWE0YzUzYjVhYmFlODY1OTRlYzk5 MzM5ODIwHhcNMjUxMjA2MDEwMjA0WhcNMjUxMjA3MDEwMjA0WjAzMTEwLwYDVQQD EygzYWZmNzI2YWUyZTU0YTYyOWEyNzNhY2UwYjE4OTkzZmFjNGYyMjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAUZJUpg5OzY925WrX3sV1wnJHfU dX4Ai9Igi3/KZ087G8IeCdzo/J7ow/6NmdvBp5eXvvcoLhMPhA9UkNrJhcA4wQHG RZHciZZE3fX1QLhK8Ok24NlSYxFiLka91Mo1r1t+ZDTwxwgznD9XkjE8JhYOVKRK Pp3ITUrl9p7zsad3gCM71xjVJkzDXec9dwx4+QG0qiLxelcaTIdgDS42uT1/duYC lvAXVjkRxPn+qjl23F//WYWWBkIOd3qJJLwElUMWdbQeBYUp1+8SMpeY9n480WcQ hSD+5uKIsR8q5ruSGxLmLOuSduPGf0+qPkh5C0ZeLCd2d2a2+dr+SwGmbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDr/cmri5Upimic6zgsYmT+sTyKFMB8GA1UdIwQY MBaAFA2jy/Hg6FbqTFO1q66GWU7JkzmCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGFQTDhlRG9WdXBNVTdXcnJvWlpUc21UT1lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC81Mzc0MWUtOTM5Mi00ZDE5LTk5ZDIt Y2VkMjk2NTBhMjgwLzEvRGFQTDhlRG9WdXBNVTdXcnJvWlpUc21UT1lJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC81Mzc0MWUtOTM5Mi00ZDE5LTk5ZDItY2VkMjk2NTBhMjgw LzEvRGFQTDhlRG9WdXBNVTdXcnJvWlpUc21UT1lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX5TRDc6g PX5qHfn0kTgJSbHVt9AgnAnPc0Vf2r//k5J0SxeexpsROxE8mWqT69aZGKx/4Rte cxc3n7P5Af1WgJ1j2rpkU0Qj2TZyA3IYAyTTxipU7tYAD5M/TXvd8TyjXc86BVj1 kfffFcKD4CfeGe+6iOHp7eH8mOuIi1b7HQ6BObl26luFKUv1oSm4LlLItxfwF4va P/KprIapEUwn1683LJglhoX8hEh2+ISSGg6o7U0OfdA4GNwO+ZdcH50WiUVTqBqf GAWeMtAeX83a0ZS+3nW21yz6/90c9D08MrIG6OnmpVLeCe3+J96y2ODoIT7Xv6ka vhwoIT47rI3Oqg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:40:49 2025 by rpki-client