This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft File: _dcAK_Oi6s_IgdXhoCEQmMZplWw.mft (raw, json) Hash identifier: 1qWGOo3qdN5Q1eFwwRJt/9epnfpw6JUW+S3XZXshHB0= Subject key identifier: 60:94:38:7B:7A:2A:CD:9A:FC:0D:40:5E:6F:B1:D0:AB:66:95:75:30 Authority key identifier: FD:D7:00:2B:F3:A2:EA:CF:C8:81:D5:E1:A0:21:10:98:C6:69:95:6C Certificate issuer: /CN=fdd7002bf3a2eacfc881d5e1a0211098c669956c Certificate serial: 019AF31DA3ADE8E8FE45D39687BC511EAF00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dcAK_Oi6s_IgdXhoCEQmMZplWw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft Manifest number: 115D Signing time: Sat 06 Dec 2025 10:03:17 +0000 Manifest this update: Sat 06 Dec 2025 10:03:17 +0000 Manifest next update: Sun 07 Dec 2025 10:03:17 +0000 Files and hashes: 1: _dcAK_Oi6s_IgdXhoCEQmMZplWw.crl (hash: LuuEx87xtHXtmqLkZlWmNf7i2UsGyrFpRlVLW/7PPPU=) 2: uzHsVm3pK-eWySg6DxW1LNadfN4.roa (hash: f7Ekdfxt1w1Ik7dpXGT0WWQ4k0292INTL/KsMP+l94c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft rsync://rpki.ripe.net/repository/DEFAULT/_dcAK_Oi6s_IgdXhoCEQmMZplWw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:03:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:a3:ad:e8:e8:fe:45:d3:96:87:bc:51:1e:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd7002bf3a2eacfc881d5e1a0211098c669956c Validity Not Before: Dec 6 10:03:17 2025 GMT Not After : Dec 7 10:03:17 2025 GMT Subject: CN=6094387b7a2acd9afc0d405e6fb1d0ab66957530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:50:77:05:11:27:30:f6:0b:00:31:5a:d0:f3: bf:ae:ab:53:2a:24:bb:d8:60:0d:8f:ce:1c:5e:55: fd:f2:fd:ad:ae:12:e2:4f:eb:ab:8d:bd:f8:7d:fe: dd:63:6a:c4:a3:22:ac:90:99:2b:e9:84:c5:53:f7: 09:70:da:4c:95:72:f3:5e:c9:92:ca:2c:e1:2f:20: d0:7a:60:84:ee:0c:9f:84:ce:60:b6:25:e2:95:cd: 47:be:f5:33:14:5e:5e:f0:c9:99:0d:0b:70:8b:70: 91:06:57:a9:76:d3:2e:c3:58:06:20:bd:4a:8d:aa: b6:e0:82:7a:ff:3a:07:33:fb:81:83:5c:ce:73:35: 14:31:7c:05:bd:05:2a:59:8e:0c:25:fc:82:96:f3: 42:29:33:05:96:56:e4:aa:57:37:0e:21:cf:33:24: 38:7c:b8:41:e8:f0:a4:0b:f6:11:58:f2:32:6a:e4: c7:a7:63:97:3c:c7:89:99:92:75:b0:14:23:94:cc: e9:24:22:23:cd:ed:7c:87:34:60:dd:2b:b6:4a:91: 2d:60:44:4c:e2:fb:7e:3b:6f:c5:43:13:e7:c7:21: 37:c7:94:35:e4:cb:9e:53:c6:0e:52:42:bf:08:a7: ce:9d:71:8a:fd:58:ad:e4:fc:32:2e:11:20:59:a2: 86:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:94:38:7B:7A:2A:CD:9A:FC:0D:40:5E:6F:B1:D0:AB:66:95:75:30 X509v3 Authority Key Identifier: keyid:FD:D7:00:2B:F3:A2:EA:CF:C8:81:D5:E1:A0:21:10:98:C6:69:95:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dcAK_Oi6s_IgdXhoCEQmMZplWw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/101bcf-d1df-47c4-a2eb-2161ff47881c/1/_dcAK_Oi6s_IgdXhoCEQmMZplWw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:5c:ac:c2:2f:3f:4b:e7:64:61:ff:ee:f0:77:05:53:0d:a2: e4:7f:78:c5:f8:b0:00:b0:1d:05:b4:3c:f4:27:aa:dd:93:d3: bd:ff:d9:7d:14:33:e6:0e:de:43:db:2c:3b:5e:e6:47:74:82: e9:90:a2:72:e4:dc:e4:4e:17:30:d2:a5:09:39:12:a3:e9:20: 47:d8:da:1f:f9:da:39:40:31:c9:df:2d:82:40:b5:dd:d3:e2: b2:ee:0b:25:2b:86:fb:3a:7d:e9:fe:3c:cc:5a:00:0a:35:e0: 2d:1d:9c:04:f7:19:f2:7c:91:73:3b:bc:04:3f:4b:e8:2b:c2: 3f:92:c3:a9:62:67:99:8e:0b:be:5d:63:fe:2f:31:2a:9a:05: a0:b2:27:e0:04:df:c1:1a:73:a6:cc:00:4b:6e:89:ab:52:11: 6a:b2:4d:a8:94:3a:19:26:f9:db:5b:08:d9:32:61:bc:74:6e: d7:a0:4a:ef:bb:0d:07:c8:17:d5:4a:93:f3:9a:a2:97:9f:27: 06:64:a3:91:e5:ec:d2:6c:6d:4b:c6:f9:f5:51:05:51:95:10: c3:28:1e:07:f2:7e:90:12:a9:cf:9d:2e:23:4a:3a:47:10:17: 1d:4a:22:0e:3d:9a:0d:11:f0:f0:07:e4:f0:ed:d5:78:4d:5c: 47:c7:6f:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHaOt6Oj+RdOWh7xRHq8AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZDcwMDJiZjNhMmVhY2ZjODgxZDVlMWEwMjExMDk4YzY2 OTk1NmMwHhcNMjUxMjA2MTAwMzE3WhcNMjUxMjA3MTAwMzE3WjAzMTEwLwYDVQQD Eyg2MDk0Mzg3YjdhMmFjZDlhZmMwZDQwNWU2ZmIxZDBhYjY2OTU3NTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5FB3BREnMPYLADFa0PO/rqtTKiS7 2GANj84cXlX98v2trhLiT+urjb34ff7dY2rEoyKskJkr6YTFU/cJcNpMlXLzXsmS yizhLyDQemCE7gyfhM5gtiXilc1HvvUzFF5e8MmZDQtwi3CRBlepdtMuw1gGIL1K jaq24IJ6/zoHM/uBg1zOczUUMXwFvQUqWY4MJfyClvNCKTMFllbkqlc3DiHPMyQ4 fLhB6PCkC/YRWPIyauTHp2OXPMeJmZJ1sBQjlMzpJCIjze18hzRg3Su2SpEtYERM 4vt+O2/FQxPnxyE3x5Q15MueU8YOUkK/CKfOnXGK/Vit5PwyLhEgWaKGqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGCUOHt6Ks2a/A1AXm+x0KtmlXUwMB8GA1UdIwQY MBaAFP3XACvzourPyIHV4aAhEJjGaZVsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2RjQUtfT2k2c19JZ2RYaG9DRVFtTVpwbFd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8xMDFiY2YtZDFkZi00N2M0LWEyZWIt MjE2MWZmNDc4ODFjLzEvX2RjQUtfT2k2c19JZ2RYaG9DRVFtTVpwbFd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8xMDFiY2YtZDFkZi00N2M0LWEyZWItMjE2MWZmNDc4ODFj LzEvX2RjQUtfT2k2c19JZ2RYaG9DRVFtTVpwbFd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHVyswi8/ S+dkYf/u8HcFUw2i5H94xfiwALAdBbQ89Ceq3ZPTvf/ZfRQz5g7eQ9ssO17mR3SC 6ZCicuTc5E4XMNKlCTkSo+kgR9jaH/naOUAxyd8tgkC13dPisu4LJSuG+zp96f48 zFoACjXgLR2cBPcZ8nyRczu8BD9L6CvCP5LDqWJnmY4Lvl1j/i8xKpoFoLIn4ATf wRpzpswAS26Jq1IRarJNqJQ6GSb521sI2TJhvHRu16BK77sNB8gX1UqT85qil58n BmSjkeXs0mxtS8b59VEFUZUQwygeB/J+kBKpz50uI0o6RxAXHUoiDj2aDRHw8Afk 8O3VeE1cR8dv+g== -----END CERTIFICATE-----Generated at Sat Dec 6 18:52:13 2025 by rpki-client