This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft File: DWu1npe_Ox78NWnflWxF5HKEmGE.mft (raw, json) Hash identifier: BigW9hNQUGiscD3Dn+pf5r0xKGnShbMJfsT2zHTtj/4= Subject key identifier: 4F:76:F0:43:75:FC:21:53:0E:AA:35:2A:41:3F:17:D1:28:C8:D5:51 Authority key identifier: 0D:6B:B5:9E:97:BF:3B:1E:FC:35:69:DF:95:6C:45:E4:72:84:98:61 Certificate issuer: /CN=0d6bb59e97bf3b1efc3569df956c45e472849861 Certificate serial: 019AF0F5CD4D32180324D77FA75890016913 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWu1npe_Ox78NWnflWxF5HKEmGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft Manifest number: 0A71 Signing time: Sat 06 Dec 2025 00:00:31 +0000 Manifest this update: Sat 06 Dec 2025 00:00:31 +0000 Manifest next update: Sun 07 Dec 2025 00:00:31 +0000 Files and hashes: 1: DWu1npe_Ox78NWnflWxF5HKEmGE.crl (hash: Zmr0OERXGJlzvnDXOvYbHyqTbKjnBIipGuBMCQkrFzY=) 2: QGurDva1s4alg8iGu6qVYxbvUlE.roa (hash: eFsT2lU76i8V7l6B+0U5YuaE3bHnUDv4afzG2LbiiJM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft rsync://rpki.ripe.net/repository/DEFAULT/DWu1npe_Ox78NWnflWxF5HKEmGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:cd:4d:32:18:03:24:d7:7f:a7:58:90:01:69:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d6bb59e97bf3b1efc3569df956c45e472849861 Validity Not Before: Dec 6 00:00:31 2025 GMT Not After : Dec 7 00:00:31 2025 GMT Subject: CN=4f76f04375fc21530eaa352a413f17d128c8d551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:83:c2:a9:d6:39:40:a0:b0:64:32:80:66:7e: 32:67:1f:b9:c6:3c:d7:bf:ad:86:d6:32:42:ce:cd: ba:c9:ab:56:f0:ad:ee:b3:ec:3f:ad:01:d8:4b:83: ad:23:f2:9d:35:56:fe:d9:0a:9e:84:e4:c2:bf:fa: d8:03:ba:82:5a:ce:ff:44:e0:13:49:93:dd:08:8a: c1:a5:c2:be:6a:ea:82:6c:9f:02:0d:c2:81:46:29: aa:81:d7:d7:85:fc:bc:ad:eb:0d:45:56:a8:5d:cd: 9a:9e:f9:d8:37:c6:d2:35:5d:4c:10:d7:49:79:0e: 8b:36:dd:33:92:e5:66:db:ac:6b:d8:56:8d:55:cb: 3c:15:dc:1b:f6:bb:1a:69:67:96:37:cd:76:91:58: 97:4c:8c:b2:ed:09:2e:d2:62:17:d1:a9:1f:81:a9: 99:c4:8b:c7:94:d7:03:bc:eb:47:92:8b:86:8d:d2: 3c:62:e1:8c:9b:ef:00:b4:73:fb:c4:ff:c0:e6:ab: d0:25:27:f6:5e:cf:6d:8e:b9:5c:a8:b4:8a:8c:f4: f4:c7:ee:6e:a5:b7:e6:4d:9b:25:36:34:7f:dd:cb: 05:30:34:da:97:c7:07:2c:14:72:56:b5:6d:1e:cb: 58:59:67:f4:f2:49:11:e8:5d:1b:62:96:2e:81:1f: 40:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:76:F0:43:75:FC:21:53:0E:AA:35:2A:41:3F:17:D1:28:C8:D5:51 X509v3 Authority Key Identifier: keyid:0D:6B:B5:9E:97:BF:3B:1E:FC:35:69:DF:95:6C:45:E4:72:84:98:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWu1npe_Ox78NWnflWxF5HKEmGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:d2:ea:60:c9:06:7d:9e:a5:f8:a5:39:d7:c0:41:51:73:01: d9:23:89:b5:ae:4d:79:b9:f1:12:f8:3a:bc:a4:7c:73:23:43: 46:bf:da:40:9b:f9:20:08:36:6f:ea:05:bf:44:39:7e:54:7d: cc:4b:16:1b:cf:21:b0:23:01:bc:7f:bc:e2:64:fd:f7:0a:27: ed:98:8a:6c:76:ed:3e:b7:66:82:5c:24:4e:50:33:6c:aa:04: 67:0b:49:7c:0c:3c:d8:14:6b:9b:d3:56:c4:19:38:b7:be:19: 57:94:63:58:63:0d:9c:24:97:cd:3e:47:f8:a2:b2:4d:b2:24: 30:c9:75:bc:f8:04:96:1e:88:02:04:ce:00:2b:57:d7:0d:76: 40:23:f2:54:47:9f:04:ea:a3:f6:3d:d0:60:ad:a7:77:6e:3e: 9e:90:91:df:c1:e3:66:64:6f:7e:ca:2f:a2:b2:b8:1d:d7:96: 1e:3a:2c:25:cb:df:4a:40:db:43:9c:ab:78:aa:d3:94:42:47: f7:14:08:26:ad:cc:d7:8b:ce:fd:63:20:91:f5:f8:dd:35:5a: 7c:3d:fd:ed:66:4a:93:bf:98:a9:96:38:16:c4:7e:7f:3f:21: 53:3a:7c:9e:42:f5:f6:84:c7:2e:f4:5c:6f:59:8e:42:ca:8d: b1:c7:41:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9c1NMhgDJNd/p1iQAWkTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNmJiNTllOTdiZjNiMWVmYzM1NjlkZjk1NmM0NWU0NzI4 NDk4NjEwHhcNMjUxMjA2MDAwMDMxWhcNMjUxMjA3MDAwMDMxWjAzMTEwLwYDVQQD Eyg0Zjc2ZjA0Mzc1ZmMyMTUzMGVhYTM1MmE0MTNmMTdkMTI4YzhkNTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoPCqdY5QKCwZDKAZn4yZx+5xjzX v62G1jJCzs26yatW8K3us+w/rQHYS4OtI/KdNVb+2QqehOTCv/rYA7qCWs7/ROAT SZPdCIrBpcK+auqCbJ8CDcKBRimqgdfXhfy8resNRVaoXc2anvnYN8bSNV1MENdJ eQ6LNt0zkuVm26xr2FaNVcs8Fdwb9rsaaWeWN812kViXTIyy7Qku0mIX0akfgamZ xIvHlNcDvOtHkouGjdI8YuGMm+8AtHP7xP/A5qvQJSf2Xs9tjrlcqLSKjPT0x+5u pbfmTZslNjR/3csFMDTal8cHLBRyVrVtHstYWWf08kkR6F0bYpYugR9AYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE928EN1/CFTDqo1KkE/F9EoyNVRMB8GA1UdIwQY MBaAFA1rtZ6Xvzse/DVp35VsReRyhJhhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFd1MW5wZV9PeDc4TlduZmxXeEY1SEtFbUdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZDNkZTQtNzZhNS00OTQxLWI2MjYt ZTk1NGUxNmFiMjdkLzEvRFd1MW5wZV9PeDc4TlduZmxXeEY1SEtFbUdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85ZDNkZTQtNzZhNS00OTQxLWI2MjYtZTk1NGUxNmFiMjdk LzEvRFd1MW5wZV9PeDc4TlduZmxXeEY1SEtFbUdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa9LqYMkG fZ6l+KU518BBUXMB2SOJta5NebnxEvg6vKR8cyNDRr/aQJv5IAg2b+oFv0Q5flR9 zEsWG88hsCMBvH+84mT99won7ZiKbHbtPrdmglwkTlAzbKoEZwtJfAw82BRrm9NW xBk4t74ZV5RjWGMNnCSXzT5H+KKyTbIkMMl1vPgElh6IAgTOACtX1w12QCPyVEef BOqj9j3QYK2nd24+npCR38HjZmRvfsovorK4HdeWHjosJcvfSkDbQ5yreKrTlEJH 9xQIJq3M14vO/WMgkfX43TVafD397WZKk7+YqZY4FsR+fz8hUzp8nkL19oTHLvRc b1mOQsqNscdB7g== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:53 2025 by rpki-client