This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft File: DsodW91QNE_174hKZg6C66g7wNs.mft (raw, json) Hash identifier: +Vfk1uvEr9agtX0XBokOtavCnURUyaWxN1JJY0wI2Ro= Subject key identifier: 50:04:68:C7:39:B9:66:6A:33:35:2E:9E:5C:D6:A3:4F:A2:C5:57:0D Authority key identifier: 0E:CA:1D:5B:DD:50:34:4F:F5:EF:88:4A:66:0E:82:EB:A8:3B:C0:DB Certificate issuer: /CN=0eca1d5bdd50344ff5ef884a660e82eba83bc0db Certificate serial: 019AF50B671281B832A40F222ED170055AE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DsodW91QNE_174hKZg6C66g7wNs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 19:02:36 +0000 Manifest this update: Sat 06 Dec 2025 19:02:36 +0000 Manifest next update: Sun 07 Dec 2025 19:02:36 +0000 Files and hashes: 1: 4PWYJzFLE2aK2EnppYvU-q2XFOY.roa (hash: f33gLiliUjw9+UyIBB1FbTny80dDA5WlmPfCkJepk4k=) 2: DsodW91QNE_174hKZg6C66g7wNs.crl (hash: MXLKqm4rXv+7DJxmagYRA4hXwRCefefYbp2GseQmq28=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft rsync://rpki.ripe.net/repository/DEFAULT/DsodW91QNE_174hKZg6C66g7wNs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:67:12:81:b8:32:a4:0f:22:2e:d1:70:05:5a:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0eca1d5bdd50344ff5ef884a660e82eba83bc0db Validity Not Before: Dec 6 19:02:36 2025 GMT Not After : Dec 7 19:02:36 2025 GMT Subject: CN=500468c739b9666a33352e9e5cd6a34fa2c5570d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:67:a7:0c:8f:eb:94:23:8a:02:41:43:d6:38: 7c:69:35:5b:24:8f:3c:0e:2d:54:08:ac:ef:e6:d3: 9d:4c:38:d0:75:68:70:60:9f:12:e1:b6:ac:d8:f7: ba:9a:4b:b9:2b:33:05:38:5d:92:59:46:1d:11:d4: 73:c9:a5:81:e1:1a:33:15:b6:61:ae:9c:f5:f6:6c: 88:03:11:b0:9e:6e:16:29:e5:2a:2a:74:30:23:35: 4a:68:c5:3b:64:68:77:a4:c3:b8:8a:4e:87:4e:0d: c3:71:59:8d:c0:59:09:7b:b5:08:f3:15:ec:37:95: e7:c0:7e:9c:88:88:89:ca:9d:ba:51:d9:94:81:37: 5a:49:09:95:88:ce:4f:18:45:de:48:35:e4:ca:9a: 75:19:a8:bf:0e:f9:57:a7:b6:d0:66:76:36:69:eb: a4:46:a8:29:f4:9f:89:a0:6c:03:a7:e2:2a:7d:cb: 24:3e:e8:bc:20:ec:45:ce:a0:98:5c:f9:15:19:89: 46:a8:50:b8:84:75:f5:a2:4a:b7:cc:8d:12:0e:a5: 4b:20:35:2d:6f:97:18:9f:52:4b:ae:20:59:a1:77: 33:25:32:ad:a6:d5:df:ea:db:0c:ad:0d:b9:6c:3f: e9:e1:a1:1e:31:6e:85:05:4a:7a:85:a4:7c:fb:4e: 9c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:04:68:C7:39:B9:66:6A:33:35:2E:9E:5C:D6:A3:4F:A2:C5:57:0D X509v3 Authority Key Identifier: keyid:0E:CA:1D:5B:DD:50:34:4F:F5:EF:88:4A:66:0E:82:EB:A8:3B:C0:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DsodW91QNE_174hKZg6C66g7wNs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/be7fcb-0755-4c1e-ac77-7c7f00a953e1/1/DsodW91QNE_174hKZg6C66g7wNs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:6a:54:11:e3:1f:25:0f:22:3c:48:c6:b5:de:7a:2b:2b:f7: 00:f7:9b:90:cf:2a:80:77:37:18:66:2f:5f:9f:c0:93:12:36: cc:4e:1f:fb:ca:66:4c:f7:68:d2:05:29:10:41:77:71:68:ab: 4a:3d:c7:5b:ec:1c:87:b4:ed:7f:4d:3a:33:88:ec:d7:c1:88: 77:a0:e8:a0:8d:c9:5b:84:a9:59:3a:5d:12:fb:4f:8f:a0:68: 51:f2:13:93:ad:3d:6d:9b:63:e4:74:3f:a0:85:ce:5b:21:39: 48:f4:01:6e:8c:6b:32:c0:e2:a6:c9:72:a0:79:cb:cf:78:b6: dd:02:9f:c4:ea:78:e2:86:0c:84:04:4d:ff:be:64:4c:8f:49: 47:62:ef:e2:f1:f7:7d:3c:b1:dd:ee:3b:7f:ed:02:ba:92:3a: 1c:51:38:a7:92:5b:aa:76:79:e1:d2:12:58:73:b7:32:a0:be: 72:3b:3b:00:58:db:63:b2:93:e6:84:18:4b:91:8c:c8:26:09: c1:9f:c8:e4:f5:f6:16:cb:32:8c:5c:3d:bf:d9:f5:5b:8b:b5: 61:ab:4b:a6:42:97:02:64:93:81:44:0e:dd:d2:20:90:c4:d2: bc:55:e4:44:45:50:c8:5d:56:fa:e7:4a:e8:b6:14:56:f0:50: 5f:c9:92:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C2cSgbgypA8iLtFwBVrmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlY2ExZDViZGQ1MDM0NGZmNWVmODg0YTY2MGU4MmViYTgz YmMwZGIwHhcNMjUxMjA2MTkwMjM2WhcNMjUxMjA3MTkwMjM2WjAzMTEwLwYDVQQD Eyg1MDA0NjhjNzM5Yjk2NjZhMzMzNTJlOWU1Y2Q2YTM0ZmEyYzU1NzBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WenDI/rlCOKAkFD1jh8aTVbJI88 Di1UCKzv5tOdTDjQdWhwYJ8S4bas2Pe6mku5KzMFOF2SWUYdEdRzyaWB4RozFbZh rpz19myIAxGwnm4WKeUqKnQwIzVKaMU7ZGh3pMO4ik6HTg3DcVmNwFkJe7UI8xXs N5XnwH6ciIiJyp26UdmUgTdaSQmViM5PGEXeSDXkypp1Gai/DvlXp7bQZnY2aeuk Rqgp9J+JoGwDp+IqfcskPui8IOxFzqCYXPkVGYlGqFC4hHX1okq3zI0SDqVLIDUt b5cYn1JLriBZoXczJTKtptXf6tsMrQ25bD/p4aEeMW6FBUp6haR8+06cXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFAEaMc5uWZqMzUunlzWo0+ixVcNMB8GA1UdIwQY MBaAFA7KHVvdUDRP9e+ISmYOguuoO8DbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHNvZFc5MVFORV8xNzRoS1pnNkM2Nmc3d05zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9iZTdmY2ItMDc1NS00YzFlLWFjNzct N2M3ZjAwYTk1M2UxLzEvRHNvZFc5MVFORV8xNzRoS1pnNkM2Nmc3d05zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9iZTdmY2ItMDc1NS00YzFlLWFjNzctN2M3ZjAwYTk1M2Ux LzEvRHNvZFc5MVFORV8xNzRoS1pnNkM2Nmc3d05zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkGpUEeMf JQ8iPEjGtd56Kyv3APebkM8qgHc3GGYvX5/AkxI2zE4f+8pmTPdo0gUpEEF3cWir Sj3HW+wch7Ttf006M4js18GId6DooI3JW4SpWTpdEvtPj6BoUfITk609bZtj5HQ/ oIXOWyE5SPQBboxrMsDipslyoHnLz3i23QKfxOp44oYMhARN/75kTI9JR2Lv4vH3 fTyx3e47f+0CupI6HFE4p5JbqnZ54dISWHO3MqC+cjs7AFjbY7KT5oQYS5GMyCYJ wZ/I5PX2FssyjFw9v9n1W4u1YatLpkKXAmSTgUQO3dIgkMTSvFXkREVQyF1W+udK 6LYUVvBQX8mSIA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:42:10 2025 by rpki-client