This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft File: DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft (raw, json) Hash identifier: 3e/1zA827CpyTx/CYusFGt+sLPgrP9H6+ZIAPWqv0wo= Subject key identifier: CF:67:41:D4:5B:35:F0:1B:7B:78:71:56:F0:F3:7B:DB:84:C2:F3:B5 Authority key identifier: 0C:6F:A1:56:C5:7C:4E:88:5B:9E:6A:F8:23:0B:65:4D:79:6A:56:11 Certificate issuer: /CN=0c6fa156c57c4e885b9e6af8230b654d796a5611 Certificate serial: 019AF653715B0074C8F4D52E5C73FA76D4A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft Manifest number: 1403 Signing time: Sun 07 Dec 2025 01:00:54 +0000 Manifest this update: Sun 07 Dec 2025 01:00:54 +0000 Manifest next update: Mon 08 Dec 2025 01:00:54 +0000 Files and hashes: 1: DG-hVsV8Tohbnmr4IwtlTXlqVhE.crl (hash: 2lhs9K2+0jxVhmgNQ929ldI/PvIL6s8nXsNIjpW5GiU=) 2: cnib18kOQCfp6lVhz4WmJc4Qscg.roa (hash: 29WsgPo6IrtJ1OC04nNW3KGjgpHd3XfgWJen7328b88=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:71:5b:00:74:c8:f4:d5:2e:5c:73:fa:76:d4:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c6fa156c57c4e885b9e6af8230b654d796a5611 Validity Not Before: Dec 7 01:00:54 2025 GMT Not After : Dec 8 01:00:54 2025 GMT Subject: CN=cf6741d45b35f01b7b787156f0f37bdb84c2f3b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1e:21:8d:f3:6c:5d:c1:01:0d:ac:4e:05:f4: a3:c3:07:7b:b8:27:9c:83:5c:f7:f1:54:79:7f:5c: e1:25:8e:6d:27:4b:e0:8a:3e:07:af:50:34:ab:46: 57:b4:3d:96:8b:6a:13:bf:60:93:2f:e1:77:17:e7: 0a:86:cf:94:b9:d6:b2:18:c3:57:a1:93:61:6c:43: ca:e7:d8:1c:fa:16:a2:79:ff:40:63:8c:8b:2d:85: 31:8b:d4:61:9e:e4:96:24:8b:d9:75:08:13:2f:00: 55:b5:f1:99:04:a1:43:84:80:c5:1e:03:e9:72:f9: a7:d5:55:0c:52:e2:67:9b:46:70:93:64:e5:ca:dc: cf:1d:5b:a7:f7:92:e6:c1:3d:ad:12:d1:6f:2d:0f: 7e:72:62:d7:12:02:d8:22:49:d1:14:a8:6c:36:e8: d1:81:5b:49:09:3d:f6:31:a2:9d:75:07:65:02:ea: ef:45:04:c1:fb:b7:6e:15:c8:78:00:f5:94:08:8a: 8d:cb:04:61:7b:a2:0d:59:51:02:b1:8f:e6:e4:31: 00:fb:77:b4:19:db:3e:65:c3:c9:3f:6f:96:d8:7a: 63:5f:cb:89:f6:29:fb:74:14:a6:4f:ba:84:ef:ad: 9f:5a:85:e8:63:91:cf:64:e8:52:eb:59:15:71:80: 8f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:67:41:D4:5B:35:F0:1B:7B:78:71:56:F0:F3:7B:DB:84:C2:F3:B5 X509v3 Authority Key Identifier: keyid:0C:6F:A1:56:C5:7C:4E:88:5B:9E:6A:F8:23:0B:65:4D:79:6A:56:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:77:c1:49:51:47:4b:b7:e0:13:29:ad:b3:45:e9:bf:bc:bf: e6:ac:fd:93:b9:83:69:92:07:03:06:a8:f1:e4:aa:ce:82:69: 87:f7:3e:01:4b:24:56:b5:1c:29:33:2e:6e:dc:94:c8:3b:a4: 3b:3a:92:06:fb:30:92:bd:e9:e4:c4:f3:06:17:1c:54:15:5d: 69:8c:fe:ff:16:a5:86:de:75:89:df:55:81:2f:ee:38:7d:0b: 7c:53:5b:52:5e:88:ff:fd:8d:d7:5b:0b:07:b0:bb:99:f3:e6: bf:ad:fa:eb:0d:33:d2:2c:14:79:3f:99:d8:79:61:22:f9:dc: 9d:1e:d9:9e:23:99:a3:1b:ef:fa:e1:e9:2c:0a:ed:ea:98:70: b6:97:6b:da:53:8e:b0:15:1a:82:67:69:72:31:09:0b:b1:02: 89:61:fd:32:99:70:80:3f:c6:18:51:87:64:d4:23:04:e3:93: 05:21:2b:c7:67:74:a5:70:9e:0b:b0:25:b4:de:c0:94:ee:08: 38:99:9d:29:4f:96:76:f2:4d:56:42:40:2a:a9:4b:cf:f7:a3: d3:32:1b:87:25:bf:59:f1:f8:8b:d4:97:b5:2d:fe:79:2f:fb: d7:86:94:93:92:5f:a6:ab:da:41:78:39:94:33:71:c0:d2:89: b9:26:42:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2U3FbAHTI9NUuXHP6dtSkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNmZhMTU2YzU3YzRlODg1YjllNmFmODIzMGI2NTRkNzk2 YTU2MTEwHhcNMjUxMjA3MDEwMDU0WhcNMjUxMjA4MDEwMDU0WjAzMTEwLwYDVQQD EyhjZjY3NDFkNDViMzVmMDFiN2I3ODcxNTZmMGYzN2JkYjg0YzJmM2I1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtx4hjfNsXcEBDaxOBfSjwwd7uCec g1z38VR5f1zhJY5tJ0vgij4Hr1A0q0ZXtD2Wi2oTv2CTL+F3F+cKhs+UudayGMNX oZNhbEPK59gc+haief9AY4yLLYUxi9RhnuSWJIvZdQgTLwBVtfGZBKFDhIDFHgPp cvmn1VUMUuJnm0Zwk2TlytzPHVun95LmwT2tEtFvLQ9+cmLXEgLYIknRFKhsNujR gVtJCT32MaKddQdlAurvRQTB+7duFch4APWUCIqNywRhe6INWVECsY/m5DEA+3e0 Gds+ZcPJP2+W2HpjX8uJ9in7dBSmT7qE762fWoXoY5HPZOhS61kVcYCPFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM9nQdRbNfAbe3hxVvDze9uEwvO1MB8GA1UdIwQY MBaAFAxvoVbFfE6IW55q+CMLZU15alYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREctaFZzVjhUb2hibm1yNEl3dGxUWGxxVmhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS80OGM1NmQtNTcyNy00MmJhLTgwYzQt YjhjMzZlY2VkYWQ4LzEvREctaFZzVjhUb2hibm1yNEl3dGxUWGxxVmhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS80OGM1NmQtNTcyNy00MmJhLTgwYzQtYjhjMzZlY2VkYWQ4 LzEvREctaFZzVjhUb2hibm1yNEl3dGxUWGxxVmhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd3fBSVFH S7fgEymts0Xpv7y/5qz9k7mDaZIHAwao8eSqzoJph/c+AUskVrUcKTMubtyUyDuk OzqSBvswkr3p5MTzBhccVBVdaYz+/xalht51id9VgS/uOH0LfFNbUl6I//2N11sL B7C7mfPmv6366w0z0iwUeT+Z2HlhIvncnR7ZniOZoxvv+uHpLArt6phwtpdr2lOO sBUagmdpcjEJC7ECiWH9MplwgD/GGFGHZNQjBOOTBSErx2d0pXCeC7AltN7AlO4I OJmdKU+WdvJNVkJAKqlLz/ej0zIbhyW/WfH4i9SXtS3+eS/714aUk5JfpqvaQXg5 lDNxwNKJuSZChQ== -----END CERTIFICATE-----Generated at Sun Dec 7 07:25:10 2025 by rpki-client