This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/00d927-ed1b-4b19-ad6b-8429ba79319f/1/dwrtd5md59Z-nfM_VVkd7e62JqU.mft File: dwrtd5md59Z-nfM_VVkd7e62JqU.mft (raw, json) Hash identifier: KQLzOpv4lMTIwRso934U2vHHVVINfS9NKELPK+4xi6M= Subject key identifier: 46:C6:60:45:FB:85:D5:54:77:CE:E9:34:EC:1D:5A:67:8D:6F:ED:52 Authority key identifier: 77:0A:ED:77:99:9D:E7:D6:7E:9D:F3:3F:55:59:1D:ED:EE:B6:26:A5 Certificate issuer: /CN=770aed77999de7d67e9df33f55591dedeeb626a5 Certificate serial: 019AF2771E6C61C8A457EAE9936AE5511371 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dwrtd5md59Z-nfM_VVkd7e62JqU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/00d927-ed1b-4b19-ad6b-8429ba79319f/1/dwrtd5md59Z-nfM_VVkd7e62JqU.mft Manifest number: 0964 Signing time: Sat 06 Dec 2025 07:01:24 +0000 Manifest this update: Sat 06 Dec 2025 07:01:24 +0000 Manifest next update: Sun 07 Dec 2025 07:01:24 +0000 Files and hashes: 1: HD-O2jkuswq0DBtkA_qMAtYHpi0.roa (hash: vMxKnkHwvEkLxZMUSLynqgj1bxvvWTA51P3OBUUHA7o=) 2: dwrtd5md59Z-nfM_VVkd7e62JqU.crl (hash: NfmynhtU8OniPuSqTEK/ItXBTxl6CrYFVI4OBVbY33I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/00d927-ed1b-4b19-ad6b-8429ba79319f/1/dwrtd5md59Z-nfM_VVkd7e62JqU.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/00d927-ed1b-4b19-ad6b-8429ba79319f/1/dwrtd5md59Z-nfM_VVkd7e62JqU.mft rsync://rpki.ripe.net/repository/DEFAULT/dwrtd5md59Z-nfM_VVkd7e62JqU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:1e:6c:61:c8:a4:57:ea:e9:93:6a:e5:51:13:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=770aed77999de7d67e9df33f55591dedeeb626a5 Validity Not Before: Dec 6 07:01:24 2025 GMT Not After : Dec 7 07:01:24 2025 GMT Subject: CN=46c66045fb85d55477cee934ec1d5a678d6fed52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f7:89:45:91:2e:cb:91:56:e1:b6:65:3b:4b: f2:46:64:06:eb:5e:bc:36:52:0c:e0:7e:a7:e3:5f: 4a:ef:ac:ce:67:1c:3c:d1:99:a7:fc:59:0f:2b:ea: 59:a4:09:62:3b:d6:33:da:ca:fd:7c:2d:c9:43:44: 9c:aa:a8:f8:48:84:7b:09:c9:42:10:62:bc:5e:6f: dd:7c:53:69:2e:39:37:81:02:7c:94:1a:11:1f:f0: 8c:cd:b2:89:a9:09:32:a5:ea:a6:a7:3f:cf:32:33: 72:da:9d:50:3c:b5:91:bc:59:19:55:ce:73:ea:13: 61:68:38:a5:9c:ba:29:16:19:c1:14:54:0e:09:da: 54:f7:2c:9a:b8:40:20:e3:bb:56:a5:91:89:25:7c: 0a:98:5a:de:9f:2c:44:b4:24:29:b3:33:ae:79:0d: bd:3d:35:a0:d1:49:44:15:a2:c0:e3:6f:60:7a:12: 24:53:95:b3:bf:c6:1b:60:35:d6:76:ba:2d:b9:34: 26:78:2f:f9:2b:aa:c3:79:2a:20:02:8a:68:4f:d0: 46:b9:67:52:33:94:70:38:75:9c:4d:1d:12:fc:54: cf:8e:94:17:ff:b3:fa:4f:54:bb:ff:34:87:3b:9e: ee:43:d4:e3:e8:95:7d:2f:44:bc:6d:c2:c5:59:9d: bf:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:C6:60:45:FB:85:D5:54:77:CE:E9:34:EC:1D:5A:67:8D:6F:ED:52 X509v3 Authority Key Identifier: keyid:77:0A:ED:77:99:9D:E7:D6:7E:9D:F3:3F:55:59:1D:ED:EE:B6:26:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dwrtd5md59Z-nfM_VVkd7e62JqU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/00d927-ed1b-4b19-ad6b-8429ba79319f/1/dwrtd5md59Z-nfM_VVkd7e62JqU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/00d927-ed1b-4b19-ad6b-8429ba79319f/1/dwrtd5md59Z-nfM_VVkd7e62JqU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:eb:3f:a7:c5:a8:7e:77:27:10:5f:ed:eb:40:7b:ea:44:92: 13:b4:11:b3:8b:a1:39:b7:e6:f6:28:82:54:8f:2d:69:fe:dc: f2:f1:51:8c:c5:e0:2d:d8:1c:39:04:bb:c0:89:39:c5:75:fc: d5:53:d5:dc:76:2c:74:d5:f6:4e:69:ba:e2:41:a2:11:01:b5: 80:08:3d:55:89:7d:93:ba:63:4c:9b:79:85:22:7c:38:9c:c6: 9e:4a:30:54:12:4b:79:9e:0b:cb:56:cd:e0:f0:29:41:f3:18: 81:70:c1:d4:40:a8:e5:1b:12:e1:a5:a5:39:60:8d:e2:a9:63: d9:27:15:f8:4b:2c:57:18:e7:2d:a8:72:76:49:53:70:67:33: ea:29:15:42:d8:40:94:04:38:35:04:2c:41:49:ba:33:2a:76: 10:21:8d:7a:f2:c9:71:d4:5b:72:ec:5b:77:54:35:79:d1:52: a1:94:58:a5:ee:52:4c:8c:7a:e7:d8:0a:5e:28:b3:b4:ce:3e: 57:d9:cb:52:5c:16:d6:da:47:7b:85:80:d7:d3:74:b0:bb:21: 95:68:1e:31:ec:b1:3f:90:13:e2:ee:53:c2:f9:ea:2b:59:69: 0a:dd:45:2f:64:14:bb:fa:4d:06:02:ea:03:55:eb:18:48:4e: 77:d9:c2:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydx5sYcikV+rpk2rlURNxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MGFlZDc3OTk5ZGU3ZDY3ZTlkZjMzZjU1NTkxZGVkZWVi NjI2YTUwHhcNMjUxMjA2MDcwMTI0WhcNMjUxMjA3MDcwMTI0WjAzMTEwLwYDVQQD Eyg0NmM2NjA0NWZiODVkNTU0NzdjZWU5MzRlYzFkNWE2NzhkNmZlZDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxveJRZEuy5FW4bZlO0vyRmQG6168 NlIM4H6n419K76zOZxw80Zmn/FkPK+pZpAliO9Yz2sr9fC3JQ0Scqqj4SIR7CclC EGK8Xm/dfFNpLjk3gQJ8lBoRH/CMzbKJqQkypeqmpz/PMjNy2p1QPLWRvFkZVc5z 6hNhaDilnLopFhnBFFQOCdpU9yyauEAg47tWpZGJJXwKmFrenyxEtCQpszOueQ29 PTWg0UlEFaLA429gehIkU5Wzv8YbYDXWdrotuTQmeC/5K6rDeSogAopoT9BGuWdS M5RwOHWcTR0S/FTPjpQX/7P6T1S7/zSHO57uQ9Tj6JV9L0S8bcLFWZ2/0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEbGYEX7hdVUd87pNOwdWmeNb+1SMB8GA1UdIwQY MBaAFHcK7XeZnefWfp3zP1VZHe3utialMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHdydGQ1bWQ1OVotbmZNX1ZWa2Q3ZTYySnFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8wMGQ5MjctZWQxYi00YjE5LWFkNmIt ODQyOWJhNzkzMTlmLzEvZHdydGQ1bWQ1OVotbmZNX1ZWa2Q3ZTYySnFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8wMGQ5MjctZWQxYi00YjE5LWFkNmItODQyOWJhNzkzMTlm LzEvZHdydGQ1bWQ1OVotbmZNX1ZWa2Q3ZTYySnFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaOs/p8Wo fncnEF/t60B76kSSE7QRs4uhObfm9iiCVI8taf7c8vFRjMXgLdgcOQS7wIk5xXX8 1VPV3HYsdNX2Tmm64kGiEQG1gAg9VYl9k7pjTJt5hSJ8OJzGnkowVBJLeZ4Ly1bN 4PApQfMYgXDB1ECo5RsS4aWlOWCN4qlj2ScV+EssVxjnLahydklTcGcz6ikVQthA lAQ4NQQsQUm6Myp2ECGNevLJcdRbcuxbd1Q1edFSoZRYpe5STIx659gKXiiztM4+ V9nLUlwW1tpHe4WA19N0sLshlWgeMeyxP5AT4u5TwvnqK1lpCt1FL2QUu/pNBgLq A1XrGEhOd9nCDQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:47:58 2025 by rpki-client