This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.mft File: dvkMwSPQ0gRp05xsNFXzHqYSP04.mft (raw, json) Hash identifier: fWi+jr9VKI9PnChIRo8coIDMX54IOxDUesj4iBVWKwY= Subject key identifier: EE:F9:8A:27:6A:75:C1:56:C9:01:BE:53:23:71:68:E2:CC:CB:17:A1 Authority key identifier: 76:F9:0C:C1:23:D0:D2:04:69:D3:9C:6C:34:55:F3:1E:A6:12:3F:4E Certificate issuer: /CN=76f90cc123d0d20469d39c6c3455f31ea6123f4e Certificate serial: 019AF12D1C495BB09F40F5B4C178A97EA5E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dvkMwSPQ0gRp05xsNFXzHqYSP04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 01:00:56 +0000 Manifest this update: Sat 06 Dec 2025 01:00:56 +0000 Manifest next update: Sun 07 Dec 2025 01:00:56 +0000 Files and hashes: 1: dvkMwSPQ0gRp05xsNFXzHqYSP04.crl (hash: qNv4fPoHlImGfafEFkyE6mJlDW6crt++AQHQpWfkQvg=) 2: u3lxxc1lkavM0xc30bqZfpWxvHo.roa (hash: UHLRAbtjmSCDadx2fBrU+RDEoeooREQATwB2er11mzE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.mft rsync://rpki.ripe.net/repository/DEFAULT/dvkMwSPQ0gRp05xsNFXzHqYSP04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:1c:49:5b:b0:9f:40:f5:b4:c1:78:a9:7e:a5:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76f90cc123d0d20469d39c6c3455f31ea6123f4e Validity Not Before: Dec 6 01:00:56 2025 GMT Not After : Dec 7 01:00:56 2025 GMT Subject: CN=eef98a276a75c156c901be53237168e2cccb17a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:83:75:0b:0f:15:ba:ca:81:c0:53:1c:d1:16: b7:74:c6:0e:60:fe:8f:b7:56:d1:03:93:6c:1e:67: 2f:e6:4f:1c:7b:88:1e:89:a4:ae:51:82:a4:ec:8d: ce:b7:a9:6f:7c:45:d6:b1:a5:78:06:ea:cc:61:74: 94:0f:3e:df:89:5f:8c:6c:44:4d:68:e5:8c:5c:79: 92:b0:94:0e:d3:a5:94:dc:f4:ec:6f:18:38:7a:5e: 31:f3:e4:45:b1:1d:92:64:19:1e:a8:28:ca:e9:ca: 30:6b:15:7f:fc:90:d1:c5:f6:f4:66:85:af:da:24: cb:70:53:2a:81:b2:b0:11:21:98:52:50:31:9b:42: 02:97:2e:db:4b:6c:00:c3:91:18:29:dc:f8:21:0a: 3e:13:8a:a1:81:55:ec:50:28:aa:ae:fc:6c:09:ee: c6:73:5b:23:5a:e2:a8:af:28:ee:63:0e:ed:c2:93: 7e:de:e3:9d:02:4a:f0:2e:fc:65:d0:7b:4b:e0:da: d9:a5:51:e2:c1:79:e4:67:98:29:11:ec:80:6b:3b: 1a:67:a3:6f:13:b4:a3:dc:8a:42:94:30:a0:a2:01: 51:e3:c7:32:4f:e2:d5:09:b6:8e:9d:06:c0:b4:f3: 07:7d:46:e3:ff:4e:d8:4e:1a:1a:f5:53:38:1d:db: 45:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:F9:8A:27:6A:75:C1:56:C9:01:BE:53:23:71:68:E2:CC:CB:17:A1 X509v3 Authority Key Identifier: keyid:76:F9:0C:C1:23:D0:D2:04:69:D3:9C:6C:34:55:F3:1E:A6:12:3F:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dvkMwSPQ0gRp05xsNFXzHqYSP04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:d9:72:ea:ab:11:72:8a:53:33:36:8b:7e:59:54:97:6e:78: 0b:4f:41:3b:45:f3:0c:af:0e:35:4b:e0:f8:0a:ad:6f:19:46: 3a:dd:61:d8:b1:55:24:d7:5f:88:e4:1e:de:26:18:34:e1:2c: 50:16:40:e9:24:a0:a0:59:8a:1d:3f:32:78:04:af:5b:38:28: 17:cd:d8:71:ec:6a:12:df:ae:f6:50:6f:bb:ef:d8:75:61:5c: ba:c9:7d:61:17:9f:74:71:ee:73:6f:f9:b6:71:62:64:29:38: 9e:9c:34:dc:73:72:e2:4f:4d:de:e7:9e:47:a2:1f:f1:35:09: 22:e3:a1:af:e6:f7:8b:9c:1b:b6:9f:5a:db:5c:58:88:94:1e: a0:1a:61:fe:10:fa:ef:40:3e:a4:45:07:fd:81:b3:9f:9c:51: 7c:68:33:b7:4b:9d:27:8c:32:dc:fc:12:2a:ab:d3:9f:0b:af: 7d:0c:18:d1:5a:46:b6:1f:97:5b:6d:9e:95:11:a3:71:8e:23: 5c:76:f6:98:b4:28:fa:e5:d9:24:9e:0e:75:11:46:87:12:ce: 5f:e0:85:45:91:fe:cb:55:ce:d7:00:f0:0f:b1:86:80:69:a5: 18:76:49:dc:d4:3a:3d:17:f3:c5:bb:54:3d:47:08:ed:df:63: f1:77:f5:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLRxJW7CfQPW0wXipfqXnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2ZjkwY2MxMjNkMGQyMDQ2OWQzOWM2YzM0NTVmMzFlYTYx MjNmNGUwHhcNMjUxMjA2MDEwMDU2WhcNMjUxMjA3MDEwMDU2WjAzMTEwLwYDVQQD EyhlZWY5OGEyNzZhNzVjMTU2YzkwMWJlNTMyMzcxNjhlMmNjY2IxN2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYN1Cw8VusqBwFMc0Ra3dMYOYP6P t1bRA5NsHmcv5k8ce4geiaSuUYKk7I3Ot6lvfEXWsaV4BurMYXSUDz7fiV+MbERN aOWMXHmSsJQO06WU3PTsbxg4el4x8+RFsR2SZBkeqCjK6cowaxV//JDRxfb0ZoWv 2iTLcFMqgbKwESGYUlAxm0ICly7bS2wAw5EYKdz4IQo+E4qhgVXsUCiqrvxsCe7G c1sjWuKoryjuYw7twpN+3uOdAkrwLvxl0HtL4NrZpVHiwXnkZ5gpEeyAazsaZ6Nv E7Sj3IpClDCgogFR48cyT+LVCbaOnQbAtPMHfUbj/07YThoa9VM4HdtFgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO75iidqdcFWyQG+UyNxaOLMyxehMB8GA1UdIwQY MBaAFHb5DMEj0NIEadOcbDRV8x6mEj9OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHZrTXdTUFEwZ1JwMDV4c05GWHpIcVlTUDA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi84MmY5MDEtM2Y0OC00MjlhLTgzNjUt N2FmNTc0OTQxOTM2LzEvZHZrTXdTUFEwZ1JwMDV4c05GWHpIcVlTUDA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi84MmY5MDEtM2Y0OC00MjlhLTgzNjUtN2FmNTc0OTQxOTM2 LzEvZHZrTXdTUFEwZ1JwMDV4c05GWHpIcVlTUDA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMdly6qsR copTMzaLfllUl254C09BO0XzDK8ONUvg+AqtbxlGOt1h2LFVJNdfiOQe3iYYNOEs UBZA6SSgoFmKHT8yeASvWzgoF83YcexqEt+u9lBvu+/YdWFcusl9YRefdHHuc2/5 tnFiZCk4npw03HNy4k9N3ueeR6If8TUJIuOhr+b3i5wbtp9a21xYiJQeoBph/hD6 70A+pEUH/YGzn5xRfGgzt0udJ4wy3PwSKqvTnwuvfQwY0VpGth+XW22elRGjcY4j XHb2mLQo+uXZJJ4OdRFGhxLOX+CFRZH+y1XO1wDwD7GGgGmlGHZJ3NQ6PRfzxbtU PUcI7d9j8Xf11A== -----END CERTIFICATE-----Generated at Sat Dec 6 08:23:26 2025 by rpki-client