This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft File: DwJfo1fCCrvxGEJiNGWOYtfccHY.mft (raw, json) Hash identifier: zt9yvrQXvU9YhbX3+m+F86IwkxcRX+t/2BV4q7EeGgA= Subject key identifier: 29:A9:6C:35:D0:6A:D9:5C:C7:00:DD:29:14:17:5A:9F:E1:C8:EA:97 Authority key identifier: 0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76 Certificate issuer: /CN=0f025fa357c20abbf118426234658e62d7dc7076 Certificate serial: 019AF23FE48BCCAE73B19A5C035689558A5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft Manifest number: 04E4 Signing time: Sat 06 Dec 2025 06:01:04 +0000 Manifest this update: Sat 06 Dec 2025 06:01:04 +0000 Manifest next update: Sun 07 Dec 2025 06:01:04 +0000 Files and hashes: 1: DwJfo1fCCrvxGEJiNGWOYtfccHY.crl (hash: EiFCZao8c65nbLxgVKIy3OinQHXGTv5d9vr4+yCU6Q8=) 2: PPz_1wH3hqFDjLC-MrIMRrZJxeQ.roa (hash: ZY1q21nV+Hi/oVRVSMTtHd27zoQ6myzruEINZqqxjKM=) 3: fnisj2MvVqaFaMeYW9lmJ0SCW9o.roa (hash: 6em1xLWv3WGsIAinbV2APlVzvS3mzKB3u+DwFqIP/5Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:e4:8b:cc:ae:73:b1:9a:5c:03:56:89:55:8a:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f025fa357c20abbf118426234658e62d7dc7076 Validity Not Before: Dec 6 06:01:04 2025 GMT Not After : Dec 7 06:01:04 2025 GMT Subject: CN=29a96c35d06ad95cc700dd2914175a9fe1c8ea97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:41:04:1a:43:e0:e1:91:12:42:5b:3a:94:47: d0:dd:81:b9:b9:f3:54:4d:1f:ce:74:da:eb:ce:ef: 05:08:be:c7:a4:0a:f7:0c:cb:d0:f9:6a:70:bb:e1: 31:7a:ea:97:36:73:47:4d:36:31:44:0a:4c:64:9d: 74:c6:c4:1e:cc:3f:67:5d:6d:8c:90:72:3a:3b:3c: 08:4b:af:a7:ae:0b:0f:7d:d7:a1:8b:33:46:19:95: fa:90:87:d6:ec:87:71:fd:b1:2d:c4:75:c8:f2:8b: 21:3a:7f:9c:4a:5f:0a:60:dd:f9:f6:3f:88:11:bd: d0:90:6b:77:76:02:1f:88:37:26:b9:38:ba:79:4d: 28:67:7d:cb:6f:fc:17:ed:ab:59:9c:71:64:e0:e4: 4f:5c:3e:dc:c2:b6:73:32:f1:ae:44:93:ff:91:7b: 5f:32:81:aa:58:ee:1d:89:1d:26:ec:45:cd:07:64: 46:eb:d7:92:09:54:a8:51:eb:4f:87:98:1a:4b:c2: 2c:c0:d6:d8:a5:74:40:ca:a1:24:fe:b9:b4:83:b1: 3a:bd:9a:c1:d2:52:c6:15:a9:a2:77:c9:51:a7:48: d2:8c:43:f8:2f:8c:d1:50:77:f0:31:65:2b:76:55: 92:b8:b9:d0:b6:99:3b:d1:36:01:03:15:7f:f0:9b: 00:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A9:6C:35:D0:6A:D9:5C:C7:00:DD:29:14:17:5A:9F:E1:C8:EA:97 X509v3 Authority Key Identifier: keyid:0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:0d:02:50:50:5a:8f:28:4a:29:96:a1:73:eb:38:6a:b8:8a: 89:47:2a:01:8e:82:77:3c:48:5c:b4:9b:b8:55:13:a1:71:d0: 88:2f:2a:44:eb:a3:b1:51:d5:ea:c8:55:7a:7f:54:ad:12:e4: 96:1f:92:bf:ca:a8:c9:f7:18:e4:9e:ed:34:45:22:bd:0d:4b: c4:3d:67:89:5a:ff:2d:d0:13:97:20:fe:12:f2:0d:12:fd:df: 89:db:c3:33:40:99:36:13:3f:30:cd:9d:20:ec:e6:64:47:01: d9:3e:56:b1:e9:40:e1:37:43:bc:17:7a:f8:36:57:10:4f:15: 81:fb:75:f1:93:85:c1:9f:88:c0:49:3d:46:bb:b5:fb:72:0a: 95:36:e4:c3:1e:50:38:3b:12:ee:00:b0:3e:ce:26:d5:25:ed: 54:69:6f:5a:03:25:cc:76:2d:98:b2:a1:4b:6f:c0:be:d5:70: 9e:79:52:b8:38:1e:f6:74:59:86:37:37:79:69:a3:50:84:89: 32:e2:ac:5c:d1:d4:59:d4:c3:3f:f6:b5:fb:65:d4:ae:55:f7: 49:a7:45:ff:11:ec:a2:05:e8:fa:c2:d6:e0:26:84:f2:93:1c: ec:77:05:24:f1:b2:a3:ac:d6:69:27:3e:58:d9:1e:33:72:d3: 03:fa:df:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP+SLzK5zsZpcA1aJVYpeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMDI1ZmEzNTdjMjBhYmJmMTE4NDI2MjM0NjU4ZTYyZDdk YzcwNzYwHhcNMjUxMjA2MDYwMTA0WhcNMjUxMjA3MDYwMTA0WjAzMTEwLwYDVQQD EygyOWE5NmMzNWQwNmFkOTVjYzcwMGRkMjkxNDE3NWE5ZmUxYzhlYTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEEEGkPg4ZESQls6lEfQ3YG5ufNU TR/OdNrrzu8FCL7HpAr3DMvQ+Wpwu+ExeuqXNnNHTTYxRApMZJ10xsQezD9nXW2M kHI6OzwIS6+nrgsPfdehizNGGZX6kIfW7Idx/bEtxHXI8oshOn+cSl8KYN359j+I Eb3QkGt3dgIfiDcmuTi6eU0oZ33Lb/wX7atZnHFk4ORPXD7cwrZzMvGuRJP/kXtf MoGqWO4diR0m7EXNB2RG69eSCVSoUetPh5gaS8IswNbYpXRAyqEk/rm0g7E6vZrB 0lLGFamid8lRp0jSjEP4L4zRUHfwMWUrdlWSuLnQtpk70TYBAxV/8JsA2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCmpbDXQatlcxwDdKRQXWp/hyOqXMB8GA1UdIwQY MBaAFA8CX6NXwgq78RhCYjRljmLX3HB2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHdKZm8xZkNDcnZ4R0VKaU5HV09ZdGZjY0hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xMTRhMTAtOGVmNy00OTAzLTk2M2Ut ZDRkNTlhMDk1YzdmLzEvRHdKZm8xZkNDcnZ4R0VKaU5HV09ZdGZjY0hZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8xMTRhMTAtOGVmNy00OTAzLTk2M2UtZDRkNTlhMDk1Yzdm LzEvRHdKZm8xZkNDcnZ4R0VKaU5HV09ZdGZjY0hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARQ0CUFBa jyhKKZahc+s4ariKiUcqAY6CdzxIXLSbuFUToXHQiC8qROujsVHV6shVen9UrRLk lh+Sv8qoyfcY5J7tNEUivQ1LxD1niVr/LdATlyD+EvINEv3fidvDM0CZNhM/MM2d IOzmZEcB2T5WselA4TdDvBd6+DZXEE8Vgft18ZOFwZ+IwEk9Rru1+3IKlTbkwx5Q ODsS7gCwPs4m1SXtVGlvWgMlzHYtmLKhS2/AvtVwnnlSuDge9nRZhjc3eWmjUISJ MuKsXNHUWdTDP/a1+2XUrlX3SadF/xHsogXo+sLW4CaE8pMc7HcFJPGyo6zWaSc+ WNkeM3LTA/rf5Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:05:32 2025 by rpki-client