This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/DmmmfUshWj8x_EYvDqU074P471c.mft File: DmmmfUshWj8x_EYvDqU074P471c.mft (raw, json) Hash identifier: IYQTln7MBJE5dWOhQO464wexl5veZbaVXXQCsonbkGg= Subject key identifier: A3:CD:B8:38:14:55:E7:03:B8:C2:31:C0:6F:CA:5E:B5:B1:89:5C:DC Authority key identifier: 0E:69:A6:7D:4B:21:5A:3F:31:FC:46:2F:0E:A5:34:EF:83:F8:EF:57 Certificate issuer: /CN=0e69a67d4b215a3f31fc462f0ea534ef83f8ef57 Certificate serial: 019B08FEF4792412B8041F162A9ECA5CAB82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DmmmfUshWj8x_EYvDqU074P471c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/DmmmfUshWj8x_EYvDqU074P471c.mft Manifest number: 098E Signing time: Wed 10 Dec 2025 16:01:24 +0000 Manifest this update: Wed 10 Dec 2025 16:01:24 +0000 Manifest next update: Thu 11 Dec 2025 16:01:24 +0000 Files and hashes: 1: 5n6-nw8FoTNYcZ9aENZQUU_ruI0.roa (hash: g9NrBLOfxYZz72cswyRQrtWjdRUQegpck7SaMHmrvjs=) 2: DmmmfUshWj8x_EYvDqU074P471c.crl (hash: /6SamcEZ0Q+dBEPdMftmsXcTJLDPiel+yHr22wQLMDU=) 3: O4fx24MkcOun7eOMuF45FXz1Rp4.roa (hash: Oql3zSLN2xRRYzfupmVInGA+80An5sqYygQF4rxwNdI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/DmmmfUshWj8x_EYvDqU074P471c.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/DmmmfUshWj8x_EYvDqU074P471c.mft rsync://rpki.ripe.net/repository/DEFAULT/DmmmfUshWj8x_EYvDqU074P471c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:fe:f4:79:24:12:b8:04:1f:16:2a:9e:ca:5c:ab:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e69a67d4b215a3f31fc462f0ea534ef83f8ef57 Validity Not Before: Dec 10 16:01:24 2025 GMT Not After : Dec 11 16:01:24 2025 GMT Subject: CN=a3cdb8381455e703b8c231c06fca5eb5b1895cdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a5:b4:05:96:64:66:23:94:3f:69:dd:51:17: ef:2d:e9:81:a0:a8:f4:c8:83:9f:19:b7:16:d4:d7: 3e:7b:d3:c0:2d:1c:a6:89:b1:bb:0d:46:38:3d:a1: 7c:58:54:52:2d:0f:c8:9a:af:ad:e4:62:8a:44:3f: d8:83:d1:24:c2:ea:35:9e:a3:58:0a:cd:0d:01:9f: 2a:d1:4f:f6:94:00:63:a8:54:1e:23:bb:cd:32:d4: 03:09:a7:27:06:25:ca:ad:03:e9:ca:bd:33:68:7d: 17:8e:46:43:e2:12:5b:b6:12:c4:f9:62:6d:99:61: ef:b9:e2:b2:d8:27:ad:59:8c:b9:1c:ee:a1:29:dc: af:e7:3c:77:d8:92:5e:1e:ff:ea:87:3d:7a:51:f0: b3:50:c0:11:7b:b1:3f:00:aa:3f:db:4e:3e:47:8e: e3:93:1f:e5:6d:f0:58:22:c9:3d:ab:c5:9d:f0:60: 12:b9:73:4e:39:fa:ba:65:b3:39:61:ec:66:c6:7e: 00:83:50:94:2e:64:37:03:b2:f1:9a:77:52:25:03: 5e:93:72:59:35:c1:01:27:7d:c8:9f:9a:43:71:ab: dd:05:f7:4b:4c:0a:89:be:d4:9d:34:38:1d:67:30: 89:60:69:e1:73:0e:9b:0f:44:82:10:ce:7a:2e:ed: 32:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:CD:B8:38:14:55:E7:03:B8:C2:31:C0:6F:CA:5E:B5:B1:89:5C:DC X509v3 Authority Key Identifier: keyid:0E:69:A6:7D:4B:21:5A:3F:31:FC:46:2F:0E:A5:34:EF:83:F8:EF:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmmmfUshWj8x_EYvDqU074P471c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/DmmmfUshWj8x_EYvDqU074P471c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/DmmmfUshWj8x_EYvDqU074P471c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:68:0e:8f:f6:fd:44:b3:16:7b:d9:e6:9b:fa:b8:a9:60:8f: 22:f0:d9:02:1e:c4:90:dc:6c:e0:ee:ce:cc:99:bc:d7:33:4e: 39:24:f3:10:08:30:12:83:9c:e7:56:d7:0a:8b:fd:fc:00:f5: 14:9f:ce:81:ec:0d:fe:a2:b2:c9:95:57:d6:ec:0c:7d:f1:2d: ee:ca:bd:cd:65:0d:46:da:11:4d:b4:86:c7:ef:9d:d2:60:c9: bd:da:b7:24:a2:07:aa:00:f6:cc:69:42:7d:9a:99:9b:4d:97: 36:9a:ea:c4:01:38:6c:74:fe:21:31:29:9f:f5:bc:9d:f8:84: 7e:a6:e0:87:b2:32:67:63:ca:f7:c0:f0:35:8c:94:59:8f:1a: 01:f2:f1:3f:96:2e:e1:f1:17:f5:f6:11:fd:03:b8:53:29:bb: 0b:be:04:98:8c:03:4e:e3:2c:80:6c:0e:b1:4d:b1:44:25:b3: 86:2a:ce:d6:64:b0:fa:47:04:8e:e4:b0:8b:71:8c:1a:d7:0d: 99:b7:75:0d:e7:c8:f8:72:55:61:f0:98:5e:ca:db:7a:45:4b: 35:f1:dc:bd:a9:e8:ff:61:74:08:ed:d2:0b:b2:8d:d2:5b:ba: 40:8a:9b:df:80:fc:ed:0c:48:f7:d5:1f:35:b8:3d:be:4c:38: c7:c0:2d:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsI/vR5JBK4BB8WKp7KXKuCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNjlhNjdkNGIyMTVhM2YzMWZjNDYyZjBlYTUzNGVmODNm OGVmNTcwHhcNMjUxMjEwMTYwMTI0WhcNMjUxMjExMTYwMTI0WjAzMTEwLwYDVQQD EyhhM2NkYjgzODE0NTVlNzAzYjhjMjMxYzA2ZmNhNWViNWIxODk1Y2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaW0BZZkZiOUP2ndURfvLemBoKj0 yIOfGbcW1Nc+e9PALRymibG7DUY4PaF8WFRSLQ/Imq+t5GKKRD/Yg9Ekwuo1nqNY Cs0NAZ8q0U/2lABjqFQeI7vNMtQDCacnBiXKrQPpyr0zaH0XjkZD4hJbthLE+WJt mWHvueKy2CetWYy5HO6hKdyv5zx32JJeHv/qhz16UfCzUMARe7E/AKo/204+R47j kx/lbfBYIsk9q8Wd8GASuXNOOfq6ZbM5Yexmxn4Ag1CULmQ3A7LxmndSJQNek3JZ NcEBJ33In5pDcavdBfdLTAqJvtSdNDgdZzCJYGnhcw6bD0SCEM56Lu0yXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKPNuDgUVecDuMIxwG/KXrWxiVzcMB8GA1UdIwQY MBaAFA5ppn1LIVo/MfxGLw6lNO+D+O9XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG1tbWZVc2hXajh4X0VZdkRxVTA3NFA0NzFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81MGJkZDQtZTJhOS00NmM5LTgzNmUt NjhjMWI3ZGZiMTkwLzEvRG1tbWZVc2hXajh4X0VZdkRxVTA3NFA0NzFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy81MGJkZDQtZTJhOS00NmM5LTgzNmUtNjhjMWI3ZGZiMTkw LzEvRG1tbWZVc2hXajh4X0VZdkRxVTA3NFA0NzFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgWgOj/b9 RLMWe9nmm/q4qWCPIvDZAh7EkNxs4O7OzJm81zNOOSTzEAgwEoOc51bXCov9/AD1 FJ/OgewN/qKyyZVX1uwMffEt7sq9zWUNRtoRTbSGx++d0mDJvdq3JKIHqgD2zGlC fZqZm02XNprqxAE4bHT+ITEpn/W8nfiEfqbgh7IyZ2PK98DwNYyUWY8aAfLxP5Yu 4fEX9fYR/QO4Uym7C74EmIwDTuMsgGwOsU2xRCWzhirO1mSw+kcEjuSwi3GMGtcN mbd1DefI+HJVYfCYXsrbekVLNfHcvano/2F0CO3SC7KN0lu6QIqb34D87QxI99Uf Nbg9vkw4x8AtNw== -----END CERTIFICATE-----Generated at Wed Dec 10 17:24:36 2025 by rpki-client