This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/eb8461-ab07-45c7-b9d6-d41a1a084c35/1/DpMafPLalMzUoq_OI_OS1AYdVvk.mft File: DpMafPLalMzUoq_OI_OS1AYdVvk.mft (raw, json) Hash identifier: cDaETH0Ac8PDsNvAycFpazTt6bOqxDDNiSJM8RdspGg= Subject key identifier: B2:34:30:88:B4:AC:B2:AF:37:07:76:F8:D1:26:11:D6:FF:C6:E1:5B Authority key identifier: 0E:93:1A:7C:F2:DA:94:CC:D4:A2:AF:CE:23:F3:92:D4:06:1D:56:F9 Certificate issuer: /CN=0e931a7cf2da94ccd4a2afce23f392d4061d56f9 Certificate serial: 019AF23FCB04836A4A592CF0F47D675E5CDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DpMafPLalMzUoq_OI_OS1AYdVvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/eb8461-ab07-45c7-b9d6-d41a1a084c35/1/DpMafPLalMzUoq_OI_OS1AYdVvk.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 06:00:58 +0000 Manifest this update: Sat 06 Dec 2025 06:00:58 +0000 Manifest next update: Sun 07 Dec 2025 06:00:58 +0000 Files and hashes: 1: DpMafPLalMzUoq_OI_OS1AYdVvk.crl (hash: tIbPsWoN2rgiArr9ycD6OjZaYDWYIxx9MWJvSxoZ/X0=) 2: zrVCLm24sPlxLqzgeyn_JvpDItw.roa (hash: /XNKRA78yIF9Dhp7x0h4gHGlf9HOKwu6T6mJ6i6aMCk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/eb8461-ab07-45c7-b9d6-d41a1a084c35/1/DpMafPLalMzUoq_OI_OS1AYdVvk.crl rsync://rpki.ripe.net/repository/DEFAULT/98/eb8461-ab07-45c7-b9d6-d41a1a084c35/1/DpMafPLalMzUoq_OI_OS1AYdVvk.mft rsync://rpki.ripe.net/repository/DEFAULT/DpMafPLalMzUoq_OI_OS1AYdVvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:cb:04:83:6a:4a:59:2c:f0:f4:7d:67:5e:5c:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e931a7cf2da94ccd4a2afce23f392d4061d56f9 Validity Not Before: Dec 6 06:00:58 2025 GMT Not After : Dec 7 06:00:58 2025 GMT Subject: CN=b2343088b4acb2af370776f8d12611d6ffc6e15b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:86:1d:a7:b6:bb:53:3c:2a:d4:d6:39:60:08: b6:ba:04:40:1b:8a:e1:56:f1:6d:57:b5:3b:15:8b: 5d:a5:58:bc:87:40:cd:7b:73:c2:00:a2:54:21:40: 08:94:92:5a:55:d3:8e:71:fc:60:10:ab:71:ad:ce: 0c:a3:8f:23:68:aa:6f:77:50:de:f9:4b:69:00:fc: 2f:5f:c7:b1:f1:af:04:b7:c3:74:40:04:44:34:f0: 80:ff:f3:01:0a:32:52:2a:83:75:0d:84:fe:9c:ac: d3:d8:9a:a2:96:62:54:43:0e:43:da:a9:38:55:0f: 4b:f8:b2:e0:fa:2a:87:cc:69:df:7f:23:25:01:19: 66:12:4d:f6:0c:ae:da:21:9b:0d:45:ad:c1:e1:ae: 4a:2d:a5:0b:14:8a:4e:19:fb:29:f2:4d:8c:6c:63: 49:ae:60:17:62:3d:b1:27:75:ce:86:d5:b8:e6:bc: d8:30:c1:69:79:e8:6f:c7:cc:6d:3f:74:63:d9:c4: 19:44:7a:8d:64:79:a7:3f:a8:71:cc:d5:79:97:bf: 89:39:14:47:93:6d:8e:4a:bb:f6:8f:0d:58:5f:34: 86:74:39:2e:1e:67:a2:af:f1:16:68:e2:b9:01:1d: 7b:fc:cb:be:01:06:51:de:3e:7f:8e:71:66:80:88: f8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:34:30:88:B4:AC:B2:AF:37:07:76:F8:D1:26:11:D6:FF:C6:E1:5B X509v3 Authority Key Identifier: keyid:0E:93:1A:7C:F2:DA:94:CC:D4:A2:AF:CE:23:F3:92:D4:06:1D:56:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpMafPLalMzUoq_OI_OS1AYdVvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/eb8461-ab07-45c7-b9d6-d41a1a084c35/1/DpMafPLalMzUoq_OI_OS1AYdVvk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/eb8461-ab07-45c7-b9d6-d41a1a084c35/1/DpMafPLalMzUoq_OI_OS1AYdVvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:86:3e:ce:56:f3:13:95:a2:6a:03:fe:e9:8b:54:dc:bd:51: 37:86:39:7b:0f:28:87:ee:9d:63:f6:4c:28:a7:bc:ab:97:0c: d2:6b:f7:12:84:28:49:0d:87:d1:4b:3c:62:e7:e1:0b:f7:2b: e9:22:e6:43:7e:b5:27:ce:01:a4:6b:e9:c6:44:9c:24:43:77: e8:5f:80:b3:c2:d0:00:20:fc:3d:49:93:ad:2b:e0:be:4f:7c: 10:2e:a1:d2:3c:d8:46:7d:d3:76:8b:8b:ca:4b:b6:e2:f6:6b: ac:74:0e:d0:b8:cd:4f:c8:6e:e9:21:01:9e:3a:54:c8:f5:44: 62:ba:0d:38:2b:6c:14:43:74:04:d1:60:eb:6d:ae:c7:06:a5: eb:f1:7a:1b:0d:5e:b8:b5:d7:a2:29:9f:76:b6:7f:db:ec:33: bd:cc:2e:dd:66:d7:d8:37:84:d4:2c:7c:df:f7:5e:da:c0:65: dc:fe:c1:55:72:03:d2:73:42:d6:17:14:b7:3a:39:4b:83:91: 29:1a:dd:64:04:8b:ba:36:55:d8:6d:a5:fa:b9:23:3d:42:85: 9b:df:90:35:92:7a:b3:f8:c2:4b:ab:6b:92:dd:52:5f:5c:46: 02:b0:a2:d1:4b:10:0b:d3:77:47:c3:57:9b:3b:ea:b9:69:76: 50:5c:50:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP8sEg2pKWSzw9H1nXlzaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlOTMxYTdjZjJkYTk0Y2NkNGEyYWZjZTIzZjM5MmQ0MDYx ZDU2ZjkwHhcNMjUxMjA2MDYwMDU4WhcNMjUxMjA3MDYwMDU4WjAzMTEwLwYDVQQD EyhiMjM0MzA4OGI0YWNiMmFmMzcwNzc2ZjhkMTI2MTFkNmZmYzZlMTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4Ydp7a7Uzwq1NY5YAi2ugRAG4rh VvFtV7U7FYtdpVi8h0DNe3PCAKJUIUAIlJJaVdOOcfxgEKtxrc4Mo48jaKpvd1De +UtpAPwvX8ex8a8Et8N0QARENPCA//MBCjJSKoN1DYT+nKzT2JqilmJUQw5D2qk4 VQ9L+LLg+iqHzGnffyMlARlmEk32DK7aIZsNRa3B4a5KLaULFIpOGfsp8k2MbGNJ rmAXYj2xJ3XOhtW45rzYMMFpeehvx8xtP3Rj2cQZRHqNZHmnP6hxzNV5l7+JORRH k22OSrv2jw1YXzSGdDkuHmeir/EWaOK5AR17/Mu+AQZR3j5/jnFmgIj4RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLI0MIi0rLKvNwd2+NEmEdb/xuFbMB8GA1UdIwQY MBaAFA6TGnzy2pTM1KKvziPzktQGHVb5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHBNYWZQTGFsTXpVb3FfT0lfT1MxQVlkVnZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9lYjg0NjEtYWIwNy00NWM3LWI5ZDYt ZDQxYTFhMDg0YzM1LzEvRHBNYWZQTGFsTXpVb3FfT0lfT1MxQVlkVnZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9lYjg0NjEtYWIwNy00NWM3LWI5ZDYtZDQxYTFhMDg0YzM1 LzEvRHBNYWZQTGFsTXpVb3FfT0lfT1MxQVlkVnZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzIY+zlbz E5WiagP+6YtU3L1RN4Y5ew8oh+6dY/ZMKKe8q5cM0mv3EoQoSQ2H0Us8YufhC/cr 6SLmQ361J84BpGvpxkScJEN36F+As8LQACD8PUmTrSvgvk98EC6h0jzYRn3TdouL yku24vZrrHQO0LjNT8hu6SEBnjpUyPVEYroNOCtsFEN0BNFg622uxwal6/F6Gw1e uLXXoimfdrZ/2+wzvcwu3WbX2DeE1Cx83/de2sBl3P7BVXID0nNC1hcUtzo5S4OR KRrdZASLujZV2G2l+rkjPUKFm9+QNZJ6s/jCS6trkt1SX1xGArCi0UsQC9N3R8NX mzvquWl2UFxQIw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:26:59 2025 by rpki-client