This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft File: dahWeFOS2ifQC9snCRxZJsMVXYk.mft (raw, json) Hash identifier: SRSk2NmB8CrG9o5O2aM4UasisGP8oLmeNjX7j2+43vU= Subject key identifier: 9C:B9:35:62:99:57:10:EC:4C:3C:83:4C:17:FE:AE:35:C8:C6:8C:A9 Authority key identifier: 75:A8:56:78:53:92:DA:27:D0:0B:DB:27:09:1C:59:26:C3:15:5D:89 Certificate issuer: /CN=75a856785392da27d00bdb27091c5926c3155d89 Certificate serial: 019AF31B66A354E58679F3A5C21D251E4F34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dahWeFOS2ifQC9snCRxZJsMVXYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft Manifest number: 0F95 Signing time: Sat 06 Dec 2025 10:00:50 +0000 Manifest this update: Sat 06 Dec 2025 10:00:50 +0000 Manifest next update: Sun 07 Dec 2025 10:00:50 +0000 Files and hashes: 1: 4Ibv1mRm3BSugEZRLZ50GEzm6Bc.roa (hash: Ox7Eku50X67DCQ6L0nXfJGgK/iPhql76+0sQGSQq9Q4=) 2: dahWeFOS2ifQC9snCRxZJsMVXYk.crl (hash: U/7Z6KXON1nxsO89NrB43221p687xqxBDFIx6OcWs+U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft rsync://rpki.ripe.net/repository/DEFAULT/dahWeFOS2ifQC9snCRxZJsMVXYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:66:a3:54:e5:86:79:f3:a5:c2:1d:25:1e:4f:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75a856785392da27d00bdb27091c5926c3155d89 Validity Not Before: Dec 6 10:00:50 2025 GMT Not After : Dec 7 10:00:50 2025 GMT Subject: CN=9cb93562995710ec4c3c834c17feae35c8c68ca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b5:e8:21:98:b5:50:69:cb:b4:0e:3c:e2:94: bd:19:13:5a:5e:75:38:87:f3:d9:43:8f:16:6b:5e: 0e:1d:79:4e:91:94:b8:c7:be:6b:9d:ef:0b:6c:9c: 6b:35:f3:b5:95:16:1f:55:42:cf:f8:29:1f:4f:9c: 61:6f:72:08:cd:54:fb:4b:51:30:66:c0:b2:38:9e: 5d:23:67:3c:23:8e:8a:e9:13:28:e9:39:ae:23:cb: c8:5e:b9:b3:f7:b7:89:2e:4f:de:6e:49:41:16:54: 55:9e:8a:a8:84:ed:29:8c:3e:6e:39:ff:68:12:64: ea:2b:cc:71:20:c2:4b:46:3f:16:24:cd:0d:27:4b: 10:07:e9:86:7c:18:41:8a:e2:97:de:7d:e6:05:85: 55:40:9a:9d:7e:44:70:8e:6e:55:8d:de:0b:f6:3c: 5c:9b:42:d6:d1:ac:5d:0f:f9:eb:cf:66:e7:db:0f: 37:8a:a2:00:b2:e6:12:b6:5a:4c:70:d8:8d:f3:2e: a5:2c:a0:f8:65:aa:08:3f:c4:97:fd:e0:5c:b7:28: d1:dc:f0:61:50:fa:31:bf:99:4c:57:d2:f5:b1:0f: eb:31:c3:d2:37:c0:0c:2b:c7:fa:4b:83:82:95:ac: fd:c8:5e:f3:d7:76:37:5a:ac:08:7f:a7:28:6c:d1: c4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:B9:35:62:99:57:10:EC:4C:3C:83:4C:17:FE:AE:35:C8:C6:8C:A9 X509v3 Authority Key Identifier: keyid:75:A8:56:78:53:92:DA:27:D0:0B:DB:27:09:1C:59:26:C3:15:5D:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dahWeFOS2ifQC9snCRxZJsMVXYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:b9:f9:f2:c5:e3:d3:92:4e:74:e2:13:22:e5:ae:eb:53:ac: b3:3e:83:0e:4e:6c:7a:a2:0f:31:76:cf:4b:ce:6d:e6:d4:2f: 50:f3:86:4f:ef:9d:fd:08:49:5c:14:6e:89:1b:a6:1c:97:c7: 4b:8c:9b:28:e2:0c:4d:83:2b:b0:92:48:7f:3b:f3:47:cb:c7: f8:32:28:2b:d1:21:ec:fb:a6:00:df:a5:bb:68:a5:09:69:e6: cc:80:c4:0f:81:4e:ce:7c:6d:58:0b:29:02:6f:75:b0:ca:0d: be:77:9d:d4:e9:48:09:c8:51:cb:74:e5:bf:c8:93:6c:45:b7: b7:73:52:87:89:5e:fb:c2:10:23:0c:e2:6b:cb:4c:7a:1c:b3: c1:a9:b6:97:f5:e7:fc:a9:08:72:1f:e9:94:99:34:d0:fd:b3: 50:4c:45:03:a2:10:be:97:64:91:61:f5:5c:19:75:cf:21:b6: d8:f6:14:70:4f:c0:4b:0f:8f:18:c9:5e:35:de:42:c5:a6:d2: d2:c4:ff:64:1f:82:ae:46:16:99:be:64:1a:e7:b7:2d:98:c8: e3:f5:72:7e:a5:5d:c0:f9:b7:31:d4:a3:9f:01:74:57:86:13: 25:0e:eb:ad:3d:ec:38:b0:05:56:46:10:2a:d7:41:0a:0c:84: cb:f1:06:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG2ajVOWGefOlwh0lHk80MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1YTg1Njc4NTM5MmRhMjdkMDBiZGIyNzA5MWM1OTI2YzMx NTVkODkwHhcNMjUxMjA2MTAwMDUwWhcNMjUxMjA3MTAwMDUwWjAzMTEwLwYDVQQD Eyg5Y2I5MzU2Mjk5NTcxMGVjNGMzYzgzNGMxN2ZlYWUzNWM4YzY4Y2E5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA57XoIZi1UGnLtA484pS9GRNaXnU4 h/PZQ48Wa14OHXlOkZS4x75rne8LbJxrNfO1lRYfVULP+CkfT5xhb3IIzVT7S1Ew ZsCyOJ5dI2c8I46K6RMo6TmuI8vIXrmz97eJLk/ebklBFlRVnoqohO0pjD5uOf9o EmTqK8xxIMJLRj8WJM0NJ0sQB+mGfBhBiuKX3n3mBYVVQJqdfkRwjm5Vjd4L9jxc m0LW0axdD/nrz2bn2w83iqIAsuYStlpMcNiN8y6lLKD4ZaoIP8SX/eBctyjR3PBh UPoxv5lMV9L1sQ/rMcPSN8AMK8f6S4OClaz9yF7z13Y3WqwIf6cobNHE/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJy5NWKZVxDsTDyDTBf+rjXIxoypMB8GA1UdIwQY MBaAFHWoVnhTkton0AvbJwkcWSbDFV2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGFoV2VGT1MyaWZRQzlzbkNSeFpKc01WWFlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9lYzBkYTktZWE4Yy00YjhlLWEzMmEt YTViYzBjNzBjNTEzLzEvZGFoV2VGT1MyaWZRQzlzbkNSeFpKc01WWFlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9lYzBkYTktZWE4Yy00YjhlLWEzMmEtYTViYzBjNzBjNTEz LzEvZGFoV2VGT1MyaWZRQzlzbkNSeFpKc01WWFlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYbn58sXj 05JOdOITIuWu61Ossz6DDk5seqIPMXbPS85t5tQvUPOGT++d/QhJXBRuiRumHJfH S4ybKOIMTYMrsJJIfzvzR8vH+DIoK9Eh7PumAN+lu2ilCWnmzIDED4FOznxtWAsp Am91sMoNvned1OlICchRy3Tlv8iTbEW3t3NSh4le+8IQIwzia8tMehyzwam2l/Xn /KkIch/plJk00P2zUExFA6IQvpdkkWH1XBl1zyG22PYUcE/ASw+PGMleNd5CxabS 0sT/ZB+CrkYWmb5kGue3LZjI4/VyfqVdwPm3MdSjnwF0V4YTJQ7rrT3sOLAFVkYQ KtdBCgyEy/EGiA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:38:00 2025 by rpki-client