This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a36ae7-3557-4377-8afd-ecb3f39fc04b/1/_dpVEEhBC7XEfr24O_WBiMSjBrI.mft File: _dpVEEhBC7XEfr24O_WBiMSjBrI.mft (raw, json) Hash identifier: hz8gsbOPSFOHY1p65JUfv9cpxBFO540ZOk29I9OXJTU= Subject key identifier: 9E:F7:76:1B:59:BB:B3:0E:77:81:3B:C5:EE:93:82:30:F0:60:DA:C5 Authority key identifier: FD:DA:55:10:48:41:0B:B5:C4:7E:BD:B8:3B:F5:81:88:C4:A3:06:B2 Certificate issuer: /CN=fdda551048410bb5c47ebdb83bf58188c4a306b2 Certificate serial: 019AF19B9C310B9BE8B0228F6A4B740B22E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dpVEEhBC7XEfr24O_WBiMSjBrI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a36ae7-3557-4377-8afd-ecb3f39fc04b/1/_dpVEEhBC7XEfr24O_WBiMSjBrI.mft Manifest number: 0114 Signing time: Sat 06 Dec 2025 03:01:38 +0000 Manifest this update: Sat 06 Dec 2025 03:01:38 +0000 Manifest next update: Sun 07 Dec 2025 03:01:38 +0000 Files and hashes: 1: BBKJGvg1eMQWu4Dn8KcuHomKhy4.roa (hash: ZhbL/bOWkEXevzCvZ62AQyku+99vuUelC20ZFee2QwU=) 2: _dpVEEhBC7XEfr24O_WBiMSjBrI.crl (hash: kpw/q5F7AECBw+mJ06Fi0tIurmtrVYY/BVU2VJoR0oY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a36ae7-3557-4377-8afd-ecb3f39fc04b/1/_dpVEEhBC7XEfr24O_WBiMSjBrI.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/a36ae7-3557-4377-8afd-ecb3f39fc04b/1/_dpVEEhBC7XEfr24O_WBiMSjBrI.mft rsync://rpki.ripe.net/repository/DEFAULT/_dpVEEhBC7XEfr24O_WBiMSjBrI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:9c:31:0b:9b:e8:b0:22:8f:6a:4b:74:0b:22:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdda551048410bb5c47ebdb83bf58188c4a306b2 Validity Not Before: Dec 6 03:01:38 2025 GMT Not After : Dec 7 03:01:38 2025 GMT Subject: CN=9ef7761b59bbb30e77813bc5ee938230f060dac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a6:76:24:eb:fb:72:bf:81:55:0f:66:f4:6f: 06:10:ac:40:ac:c4:79:5e:ca:01:a5:f9:ae:c9:e2: f5:e5:6b:a6:77:b3:e6:d3:ec:ec:34:ee:1e:b3:9a: 86:b0:10:f4:f2:f3:de:2c:87:07:15:45:9d:b3:8c: 61:c7:f6:b0:3f:b2:53:55:0c:73:ee:8c:da:2e:4b: 31:bd:a5:6d:c5:b6:df:6b:c8:6e:f4:d3:90:c2:8c: 4b:24:68:68:04:99:19:d2:f7:53:5f:57:d3:8b:11: 95:ac:f9:9e:b4:28:a9:24:ee:73:bf:9e:c9:a7:7a: e3:05:23:7d:7d:96:e7:49:de:53:14:7c:05:b4:79: 5a:31:10:a7:76:df:30:c6:6b:c7:72:7b:58:94:17: 87:00:b0:90:d5:ea:7b:ff:27:8f:c7:a1:a3:5d:a6: 99:be:0d:15:04:26:33:32:f4:4d:c9:a3:97:ca:96: 6b:a4:1f:a3:6b:9c:a2:3c:e2:73:79:51:cf:2f:da: 9e:5a:b7:2e:41:b6:84:3a:65:86:7e:0e:69:38:66: b4:68:05:af:15:61:ca:dd:7b:81:54:5a:a6:43:49: 31:d8:dd:e1:09:b7:c0:71:81:76:af:e2:16:c4:d5: 76:2f:f0:2e:c0:d9:de:21:72:e4:d7:84:e9:06:3a: 93:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:F7:76:1B:59:BB:B3:0E:77:81:3B:C5:EE:93:82:30:F0:60:DA:C5 X509v3 Authority Key Identifier: keyid:FD:DA:55:10:48:41:0B:B5:C4:7E:BD:B8:3B:F5:81:88:C4:A3:06:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dpVEEhBC7XEfr24O_WBiMSjBrI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a36ae7-3557-4377-8afd-ecb3f39fc04b/1/_dpVEEhBC7XEfr24O_WBiMSjBrI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a36ae7-3557-4377-8afd-ecb3f39fc04b/1/_dpVEEhBC7XEfr24O_WBiMSjBrI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:54:bc:88:34:a5:ed:b1:23:28:a9:fb:6e:6b:61:53:f4:25: 17:44:9f:16:dc:13:2d:fe:27:35:89:77:d3:63:1a:78:0c:39: 56:00:cc:34:91:d5:e2:39:f5:83:1a:de:36:6f:f8:7d:d9:2f: 4d:24:62:4a:34:f7:14:1a:ca:6a:63:72:71:a6:f3:14:5a:f8: 39:04:24:09:59:58:af:4e:56:48:18:18:aa:14:f1:e8:7c:56: d3:27:b0:5a:94:9a:13:da:9a:23:47:9e:30:28:da:10:cf:96: 9f:40:dc:6c:92:bc:d6:bc:22:79:17:fc:f1:23:f2:fa:92:d3: 87:48:eb:90:c9:e7:9d:47:9d:f5:29:d2:51:9a:c4:c8:35:22: e5:75:fa:41:6e:a5:68:83:e0:42:db:98:41:9f:12:af:7e:d5: e3:18:53:67:05:0f:6e:4f:09:2a:bd:bb:c2:59:b4:12:16:f6: 10:74:1a:da:56:7f:e3:ad:fb:80:f2:4a:07:e7:1c:cd:25:ae: 6a:40:9a:d6:80:ce:25:9e:c5:e2:1c:60:28:bf:37:d7:26:e2: 7b:97:87:3d:d6:fe:c1:38:de:e9:63:b0:5d:20:15:48:be:60: 9f:6e:47:9a:d5:58:55:15:e5:11:ef:87:d0:61:71:9f:dc:66: b1:c3:d5:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm5wxC5vosCKPakt0CyLiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZGE1NTEwNDg0MTBiYjVjNDdlYmRiODNiZjU4MTg4YzRh MzA2YjIwHhcNMjUxMjA2MDMwMTM4WhcNMjUxMjA3MDMwMTM4WjAzMTEwLwYDVQQD Eyg5ZWY3NzYxYjU5YmJiMzBlNzc4MTNiYzVlZTkzODIzMGYwNjBkYWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6Z2JOv7cr+BVQ9m9G8GEKxArMR5 XsoBpfmuyeL15Wumd7Pm0+zsNO4es5qGsBD08vPeLIcHFUWds4xhx/awP7JTVQxz 7ozaLksxvaVtxbbfa8hu9NOQwoxLJGhoBJkZ0vdTX1fTixGVrPmetCipJO5zv57J p3rjBSN9fZbnSd5TFHwFtHlaMRCndt8wxmvHcntYlBeHALCQ1ep7/yePx6GjXaaZ vg0VBCYzMvRNyaOXypZrpB+ja5yiPOJzeVHPL9qeWrcuQbaEOmWGfg5pOGa0aAWv FWHK3XuBVFqmQ0kx2N3hCbfAcYF2r+IWxNV2L/AuwNneIXLk14TpBjqTlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ73dhtZu7MOd4E7xe6TgjDwYNrFMB8GA1UdIwQY MBaAFP3aVRBIQQu1xH69uDv1gYjEowayMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2RwVkVFaEJDN1hFZnIyNE9fV0JpTVNqQnJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9hMzZhZTctMzU1Ny00Mzc3LThhZmQt ZWNiM2YzOWZjMDRiLzEvX2RwVkVFaEJDN1hFZnIyNE9fV0JpTVNqQnJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9hMzZhZTctMzU1Ny00Mzc3LThhZmQtZWNiM2YzOWZjMDRi LzEvX2RwVkVFaEJDN1hFZnIyNE9fV0JpTVNqQnJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADVS8iDSl 7bEjKKn7bmthU/QlF0SfFtwTLf4nNYl302MaeAw5VgDMNJHV4jn1gxreNm/4fdkv TSRiSjT3FBrKamNycabzFFr4OQQkCVlYr05WSBgYqhTx6HxW0yewWpSaE9qaI0ee MCjaEM+Wn0DcbJK81rwieRf88SPy+pLTh0jrkMnnnUed9SnSUZrEyDUi5XX6QW6l aIPgQtuYQZ8Sr37V4xhTZwUPbk8JKr27wlm0Ehb2EHQa2lZ/4637gPJKB+cczSWu akCa1oDOJZ7F4hxgKL831ybie5eHPdb+wTje6WOwXSAVSL5gn25HmtVYVRXlEe+H 0GFxn9xmscPV2Q== -----END CERTIFICATE-----Generated at Sat Dec 6 10:06:07 2025 by rpki-client