This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.mft File: DoVoAb747TroEOfmejH9AStE0ww.mft (raw, json) Hash identifier: QoCf5f5d58l+ZJjJ8r618yTwI9R3xP/MU9/2GLQrQso= Subject key identifier: 82:67:46:54:AB:D1:B1:71:68:69:B4:CF:ED:B7:53:3B:67:26:90:78 Authority key identifier: 0E:85:68:01:BE:F8:ED:3A:E8:10:E7:E6:7A:31:FD:01:2B:44:D3:0C Certificate issuer: /CN=0e856801bef8ed3ae810e7e67a31fd012b44d30c Certificate serial: 019AF50B15AB149F3AD7131369670D8A0C58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DoVoAb747TroEOfmejH9AStE0ww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.mft Manifest number: 16B4 Signing time: Sat 06 Dec 2025 19:02:15 +0000 Manifest this update: Sat 06 Dec 2025 19:02:15 +0000 Manifest next update: Sun 07 Dec 2025 19:02:15 +0000 Files and hashes: 1: DoVoAb747TroEOfmejH9AStE0ww.crl (hash: u0CkCc3IEfU9QNz1LEGbDgpc03vxK7LB9en5pia/ad8=) 2: zD8lanFfCKcjzXb5ZLkO_uI8Eww.roa (hash: FP/b4ehPHpPPt6ISCHNjh4J5r42QMToe0aZbLviIqX8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.crl rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.mft rsync://rpki.ripe.net/repository/DEFAULT/DoVoAb747TroEOfmejH9AStE0ww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:15:ab:14:9f:3a:d7:13:13:69:67:0d:8a:0c:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e856801bef8ed3ae810e7e67a31fd012b44d30c Validity Not Before: Dec 6 19:02:15 2025 GMT Not After : Dec 7 19:02:15 2025 GMT Subject: CN=82674654abd1b1716869b4cfedb7533b67269078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7f:a7:5a:e3:78:5b:cc:42:5f:9c:1d:82:ce: 5f:2f:4e:e5:71:d5:3f:18:f3:9a:c5:d5:5c:15:59: ee:2a:5e:d2:d6:4c:1f:5e:0f:01:0e:0a:9b:61:cd: 28:ba:33:d4:85:a6:12:f9:6a:b0:a0:82:fc:07:72: c2:eb:43:96:b8:8b:8c:50:24:ff:8c:cb:e1:9a:c1: ff:e5:6d:fd:e3:61:61:9f:ec:81:86:d4:89:c9:2b: c0:2e:82:23:b9:ee:47:7b:8c:1a:37:25:ea:56:e6: 42:3f:9c:05:0e:b5:30:2f:2d:85:cc:74:1f:77:ed: 33:07:04:35:10:b8:79:92:e7:cd:fd:a6:04:38:17: 2b:ad:75:fc:c2:65:b3:01:8f:f8:27:68:66:1f:5b: 83:6a:43:7b:73:38:67:33:6c:73:43:74:be:86:4b: d2:e6:02:2a:87:2d:7b:08:97:eb:b6:3e:29:99:3d: 6e:b4:9f:1f:5b:e5:4a:b0:9b:8d:76:d8:6a:90:3f: ad:6b:e6:bd:a7:9d:d9:80:3a:f1:48:34:b8:4b:04: 12:a4:10:61:be:95:d0:e9:e7:de:8a:a1:27:40:0b: 90:ae:32:09:0e:39:b7:c2:c9:1e:c3:5c:a7:87:7c: fc:08:2c:ed:7c:67:4e:2a:f4:4e:51:70:10:5c:8d: ca:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:67:46:54:AB:D1:B1:71:68:69:B4:CF:ED:B7:53:3B:67:26:90:78 X509v3 Authority Key Identifier: keyid:0E:85:68:01:BE:F8:ED:3A:E8:10:E7:E6:7A:31:FD:01:2B:44:D3:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DoVoAb747TroEOfmejH9AStE0ww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/541434-879d-4e55-a47f-190b06dee4dc/1/DoVoAb747TroEOfmejH9AStE0ww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:df:6a:24:10:8c:9a:c7:7a:06:91:8c:a1:41:72:5a:3f:ad: 2b:45:ec:41:16:49:d3:df:02:b4:77:26:f6:44:ec:4d:e6:d4: cc:94:22:31:29:b4:0e:3d:a6:33:fa:c1:77:82:fe:0e:7f:a1: 6c:30:85:f5:d8:f1:ff:d4:53:b8:57:d0:2a:bd:df:8b:96:78: 08:fc:3b:15:61:6e:5f:8d:cf:43:52:cf:86:2c:65:33:68:05: 7d:59:25:3a:aa:b4:86:05:f0:dc:e1:aa:e6:49:04:f8:30:57: 68:88:e3:ab:be:41:6c:e0:25:e3:9c:c0:f9:a5:76:77:c2:09: e0:1e:c9:27:14:e1:59:4a:7b:ab:17:67:66:47:a1:e6:5b:8a: 26:d0:e8:20:00:b4:5f:5c:b7:ea:e4:9a:20:86:3e:f4:e5:86: 15:43:fd:a5:ae:b3:ea:b6:f3:bd:74:3a:32:6a:35:8e:b1:a1: c9:47:71:bc:05:77:39:c0:11:57:b7:23:30:d3:62:20:18:a1: b0:b5:2c:28:56:18:bb:db:c2:4b:22:ce:9e:e9:92:cb:08:8d: 1e:74:97:4f:bf:92:29:f3:d0:ef:6f:e1:00:16:5d:fa:36:02: 4b:be:58:35:a8:a3:4b:09:fc:5c:fd:2f:e0:4b:c1:60:73:ab: cb:e6:b5:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CxWrFJ861xMTaWcNigxYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlODU2ODAxYmVmOGVkM2FlODEwZTdlNjdhMzFmZDAxMmI0 NGQzMGMwHhcNMjUxMjA2MTkwMjE1WhcNMjUxMjA3MTkwMjE1WjAzMTEwLwYDVQQD Eyg4MjY3NDY1NGFiZDFiMTcxNjg2OWI0Y2ZlZGI3NTMzYjY3MjY5MDc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxn+nWuN4W8xCX5wdgs5fL07lcdU/ GPOaxdVcFVnuKl7S1kwfXg8BDgqbYc0oujPUhaYS+WqwoIL8B3LC60OWuIuMUCT/ jMvhmsH/5W3942Fhn+yBhtSJySvALoIjue5He4waNyXqVuZCP5wFDrUwLy2FzHQf d+0zBwQ1ELh5kufN/aYEOBcrrXX8wmWzAY/4J2hmH1uDakN7czhnM2xzQ3S+hkvS 5gIqhy17CJfrtj4pmT1utJ8fW+VKsJuNdthqkD+ta+a9p53ZgDrxSDS4SwQSpBBh vpXQ6efeiqEnQAuQrjIJDjm3wskew1ynh3z8CCztfGdOKvROUXAQXI3KAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIJnRlSr0bFxaGm0z+23UztnJpB4MB8GA1UdIwQY MBaAFA6FaAG++O066BDn5nox/QErRNMMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG9Wb0FiNzQ3VHJvRU9mbWVqSDlBU3RFMHd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC81NDE0MzQtODc5ZC00ZTU1LWE0N2Yt MTkwYjA2ZGVlNGRjLzEvRG9Wb0FiNzQ3VHJvRU9mbWVqSDlBU3RFMHd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC81NDE0MzQtODc5ZC00ZTU1LWE0N2YtMTkwYjA2ZGVlNGRj LzEvRG9Wb0FiNzQ3VHJvRU9mbWVqSDlBU3RFMHd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAot9qJBCM msd6BpGMoUFyWj+tK0XsQRZJ098CtHcm9kTsTebUzJQiMSm0Dj2mM/rBd4L+Dn+h bDCF9djx/9RTuFfQKr3fi5Z4CPw7FWFuX43PQ1LPhixlM2gFfVklOqq0hgXw3OGq 5kkE+DBXaIjjq75BbOAl45zA+aV2d8IJ4B7JJxThWUp7qxdnZkeh5luKJtDoIAC0 X1y36uSaIIY+9OWGFUP9pa6z6rbzvXQ6Mmo1jrGhyUdxvAV3OcARV7cjMNNiIBih sLUsKFYYu9vCSyLOnumSywiNHnSXT7+SKfPQ72/hABZd+jYCS75YNaijSwn8XP0v 4EvBYHOry+a16w== -----END CERTIFICATE-----Generated at Sun Dec 7 04:52:21 2025 by rpki-client