This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft File: DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft (raw, json) Hash identifier: AgeS/9JD678uvLTi7ZwHmHauAUFT+jVpSuaZO7s/054= Subject key identifier: 24:92:77:5B:94:99:9E:70:09:A1:C2:C0:00:EF:A2:02:CB:4D:B5:1A Authority key identifier: 0E:F8:1D:9E:89:E2:C4:71:32:1D:96:7F:70:92:09:4D:AD:FE:2A:A8 Certificate issuer: /CN=0ef81d9e89e2c471321d967f7092094dadfe2aa8 Certificate serial: 019AF209536B92390E8E87AF7A0AEADDC98B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft Manifest number: 0E7F Signing time: Sat 06 Dec 2025 05:01:28 +0000 Manifest this update: Sat 06 Dec 2025 05:01:28 +0000 Manifest next update: Sun 07 Dec 2025 05:01:28 +0000 Files and hashes: 1: 0CytvhJudNwvmE_qIywCHCo6NeE.roa (hash: 88aZ7TRUqfxW9sX6erHIjwQ5v2GdVw5BH0X6fcp/TYs=) 2: DvgdnonixHEyHZZ_cJIJTa3-Kqg.crl (hash: JZXT99rQt/DPkZMx8a52PFhu3MGSIKP65Mohl127WR0=) 3: KrKK6KlWrbwro0xZGJbZRZAIMbY.roa (hash: mLgmMH2GpuH6gYsfQafOR8wiybY64hDgIvWRNRviit8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:53:6b:92:39:0e:8e:87:af:7a:0a:ea:dd:c9:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ef81d9e89e2c471321d967f7092094dadfe2aa8 Validity Not Before: Dec 6 05:01:28 2025 GMT Not After : Dec 7 05:01:28 2025 GMT Subject: CN=2492775b94999e7009a1c2c000efa202cb4db51a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:50:07:19:59:44:0e:80:30:ed:60:35:84:32: dd:74:18:6c:26:9d:a4:f2:47:6a:6d:38:d0:d4:55: 10:b3:9b:bb:57:f0:45:53:6f:5d:b4:e8:86:e3:66: fe:b2:47:69:c7:03:5d:fd:d8:71:2f:d2:f1:5a:f4: 07:08:1a:97:21:58:2c:ee:a6:eb:9b:dd:9d:e6:cc: 3f:dc:08:bf:8c:9f:98:9f:5a:d7:63:40:b0:48:55: c5:4b:54:b9:44:89:93:87:f9:49:d8:df:35:7f:f8: 27:0b:9f:64:3c:25:93:6a:11:72:ac:7e:ad:02:34: 13:44:d5:3f:d4:89:f5:54:aa:42:1b:cb:5a:e2:01: c0:0b:68:3f:36:d2:54:50:d0:57:f6:45:d7:c0:fe: f1:a8:b1:a5:68:33:4a:f5:fc:43:ec:18:43:20:69: d7:d6:fb:ae:6c:c4:fd:17:6b:19:e0:86:b9:91:e0: 3f:60:b5:68:85:86:41:73:ff:87:c3:6d:01:0a:67: 12:99:b7:61:d6:90:7d:37:0c:b2:61:8e:17:e2:ca: 5d:0f:ea:4e:44:c7:97:3d:a0:45:d0:dd:f1:a2:37: 89:46:36:ee:34:96:9e:ab:76:7b:bf:09:92:53:13: 2b:fb:13:2a:1e:3d:9a:2b:ad:4f:14:44:bb:e5:91: 0b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:92:77:5B:94:99:9E:70:09:A1:C2:C0:00:EF:A2:02:CB:4D:B5:1A X509v3 Authority Key Identifier: keyid:0E:F8:1D:9E:89:E2:C4:71:32:1D:96:7F:70:92:09:4D:AD:FE:2A:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:0a:85:d0:82:77:7d:a2:e5:22:2e:25:10:28:3d:94:81:d9: 17:bc:e8:30:62:e8:74:ac:1f:d6:c7:7b:9a:d8:d7:eb:fb:3d: ed:49:6c:c2:0c:50:91:44:a6:9a:48:60:8d:a8:17:0c:2a:66: 9d:f3:15:94:a4:1e:7a:8a:66:1e:8e:b3:f0:e4:a4:ff:40:6c: b5:7c:1b:70:04:6d:1e:49:5c:20:67:6d:18:f8:a6:28:ce:1c: 8c:be:0a:bb:ed:b0:4c:97:f1:fd:4b:ea:29:1a:8e:13:e8:2f: 08:52:94:35:6a:4f:92:e2:fd:a3:3a:65:c5:af:3d:58:87:bf: be:dd:1c:3d:de:ed:81:04:6c:16:76:2c:67:88:58:03:6f:2d: e4:9c:3e:c8:1e:47:e6:0e:cd:96:39:ce:12:5e:30:a7:53:13: 45:12:62:b3:a6:a1:27:6e:e2:fd:fb:11:90:9b:21:b5:73:37: c0:7d:42:fe:48:14:fb:24:bc:35:c4:35:86:98:9a:94:ff:33: 1a:1b:ef:81:2c:ea:25:6f:c2:33:95:dd:de:e3:0d:ec:60:b3: 66:e1:04:85:8f:e0:70:b6:06:d6:d4:33:23:89:39:d0:27:bf: e9:ba:94:c4:f0:c5:00:08:d3:7e:6a:0f:df:5c:ba:a6:48:a6: 13:e7:59:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCVNrkjkOjoevegrq3cmLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlZjgxZDllODllMmM0NzEzMjFkOTY3ZjcwOTIwOTRkYWRm ZTJhYTgwHhcNMjUxMjA2MDUwMTI4WhcNMjUxMjA3MDUwMTI4WjAzMTEwLwYDVQQD EygyNDkyNzc1Yjk0OTk5ZTcwMDlhMWMyYzAwMGVmYTIwMmNiNGRiNTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlAHGVlEDoAw7WA1hDLddBhsJp2k 8kdqbTjQ1FUQs5u7V/BFU29dtOiG42b+skdpxwNd/dhxL9LxWvQHCBqXIVgs7qbr m92d5sw/3Ai/jJ+Yn1rXY0CwSFXFS1S5RImTh/lJ2N81f/gnC59kPCWTahFyrH6t AjQTRNU/1In1VKpCG8ta4gHAC2g/NtJUUNBX9kXXwP7xqLGlaDNK9fxD7BhDIGnX 1vuubMT9F2sZ4Ia5keA/YLVohYZBc/+Hw20BCmcSmbdh1pB9NwyyYY4X4spdD+pO RMeXPaBF0N3xojeJRjbuNJaeq3Z7vwmSUxMr+xMqHj2aK61PFES75ZELvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCSSd1uUmZ5wCaHCwADvogLLTbUaMB8GA1UdIwQY MBaAFA74HZ6J4sRxMh2Wf3CSCU2t/iqoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHZnZG5vbml4SEV5SFpaX2NKSUpUYTMtS3FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS81ZDE1YTgtMjJhNy00MDFiLThjNWUt MDc1ZjI0ZTRiZTcxLzEvRHZnZG5vbml4SEV5SFpaX2NKSUpUYTMtS3FnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS81ZDE1YTgtMjJhNy00MDFiLThjNWUtMDc1ZjI0ZTRiZTcx LzEvRHZnZG5vbml4SEV5SFpaX2NKSUpUYTMtS3FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASgqF0IJ3 faLlIi4lECg9lIHZF7zoMGLodKwf1sd7mtjX6/s97UlswgxQkUSmmkhgjagXDCpm nfMVlKQeeopmHo6z8OSk/0BstXwbcARtHklcIGdtGPimKM4cjL4Ku+2wTJfx/Uvq KRqOE+gvCFKUNWpPkuL9ozplxa89WIe/vt0cPd7tgQRsFnYsZ4hYA28t5Jw+yB5H 5g7NljnOEl4wp1MTRRJis6ahJ27i/fsRkJshtXM3wH1C/kgU+yS8NcQ1hpialP8z GhvvgSzqJW/CM5Xd3uMN7GCzZuEEhY/gcLYG1tQzI4k50Ce/6bqUxPDFAAjTfmoP 31y6pkimE+dZ8w== -----END CERTIFICATE-----Generated at Sat Dec 6 12:14:37 2025 by rpki-client