This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.mft File: Dimkgt4NVnRsMEUmn5kgUgT5VIQ.mft (raw, json) Hash identifier: m/SLnB99HReUj9NRAW6FHBfVjSzr81FrfYLSSLrg/4E= Subject key identifier: 53:BF:C3:F8:A8:7C:75:B4:3B:4B:DF:0A:ED:A8:2F:15:26:15:DC:8F Authority key identifier: 0E:29:A4:82:DE:0D:56:74:6C:30:45:26:9F:99:20:52:04:F9:54:84 Certificate issuer: /CN=0e29a482de0d56746c3045269f99205204f95484 Certificate serial: 019AF6F96C6ABAE8232AC1041DD256F3AE3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.mft Manifest number: 130A Signing time: Sun 07 Dec 2025 04:02:12 +0000 Manifest this update: Sun 07 Dec 2025 04:02:12 +0000 Manifest next update: Mon 08 Dec 2025 04:02:12 +0000 Files and hashes: 1: Dimkgt4NVnRsMEUmn5kgUgT5VIQ.crl (hash: RYHddJ6Rn0m4z2dSNOX/tLYJ8qZGEOgrJJG4rfra378=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f9:6c:6a:ba:e8:23:2a:c1:04:1d:d2:56:f3:ae:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e29a482de0d56746c3045269f99205204f95484 Validity Not Before: Dec 7 04:02:12 2025 GMT Not After : Dec 8 04:02:12 2025 GMT Subject: CN=53bfc3f8a87c75b43b4bdf0aeda82f152615dc8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f8:bc:3b:0d:6e:9a:c9:47:12:c5:7b:f6:df: 60:a9:27:37:d6:f0:33:7a:9b:32:e6:b1:4c:64:75: d9:06:57:9c:27:e0:c4:05:78:9b:e3:ba:fe:e8:49: 27:b2:dd:03:f1:36:b1:78:2c:97:92:03:ab:e3:2d: 93:c2:96:58:7e:c4:e8:9c:f6:99:fa:b2:79:d7:3a: 56:53:2a:db:f6:e4:30:90:87:c7:b7:3d:b6:b5:77: 59:95:a6:49:96:00:12:51:5e:e6:af:c1:45:d2:4c: 1f:34:c1:99:15:21:db:92:12:31:28:75:b1:4e:15: ed:27:f3:36:a9:a6:6b:cc:04:07:32:ef:97:f6:2e: f8:ec:b5:24:e7:d6:63:d4:33:f1:7b:35:be:b3:4e: 6c:86:4d:61:b7:0b:46:1f:84:fb:84:2a:d1:55:45: 7e:87:cc:1c:2d:b9:9e:17:bb:f9:7a:81:79:91:4f: db:97:43:8d:b2:2d:9c:f7:ab:eb:5f:79:3c:89:70: 93:61:d7:e0:c4:28:25:1f:6e:15:73:da:46:a9:30: 3d:e3:5c:c9:a6:77:10:85:86:cf:9f:39:e6:0c:20: 10:a5:6b:94:f0:42:49:54:9e:c0:d1:0c:cf:38:e0: b9:4b:db:c3:c5:23:fa:bd:bd:b1:c5:33:47:99:87: f4:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:BF:C3:F8:A8:7C:75:B4:3B:4B:DF:0A:ED:A8:2F:15:26:15:DC:8F X509v3 Authority Key Identifier: keyid:0E:29:A4:82:DE:0D:56:74:6C:30:45:26:9F:99:20:52:04:F9:54:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:c1:aa:b9:d9:d2:fe:25:35:7a:8d:41:38:96:dc:72:30:bc: 7f:dc:3f:b1:69:12:60:e4:f3:18:e2:8a:a1:83:c7:f1:c4:cd: 0f:00:f0:c3:a7:92:a6:a8:bb:dd:b1:c7:1b:e5:eb:67:7b:ec: 94:ee:70:19:10:65:48:cf:d1:99:51:57:b8:73:66:b4:4a:42: 28:f6:98:db:42:08:64:9f:e9:d4:15:14:8a:16:03:51:02:d1: b8:41:5b:f8:a0:3d:8a:b8:6a:af:83:34:45:16:66:1b:e4:68: 7c:85:55:a5:a0:a5:40:2b:b2:35:80:c3:14:6f:97:f8:20:72: f9:1d:9b:1e:47:18:87:be:23:d1:f0:fc:41:25:21:9c:bd:7e: d1:77:bc:0b:fb:38:e6:3d:90:f4:65:3b:8d:09:c8:16:d5:e5: 90:06:18:fe:7e:3c:56:e0:65:64:6d:8c:87:7f:60:7e:53:13: 84:14:bb:ba:61:b9:56:6d:42:05:a8:9a:92:ff:7b:e8:5c:d8: 7b:9a:8e:cf:96:8f:28:76:50:51:81:d5:d1:ec:25:c7:db:a2: 89:a7:63:49:19:a8:3a:28:76:00:09:40:ba:14:57:3e:10:b5: 48:09:ac:bf:1e:b6:af:19:85:e0:52:94:43:93:33:f7:d6:d0: 2f:c8:8a:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+WxquugjKsEEHdJW8646MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMjlhNDgyZGUwZDU2NzQ2YzMwNDUyNjlmOTkyMDUyMDRm OTU0ODQwHhcNMjUxMjA3MDQwMjEyWhcNMjUxMjA4MDQwMjEyWjAzMTEwLwYDVQQD Eyg1M2JmYzNmOGE4N2M3NWI0M2I0YmRmMGFlZGE4MmYxNTI2MTVkYzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfi8Ow1umslHEsV79t9gqSc31vAz epsy5rFMZHXZBlecJ+DEBXib47r+6Eknst0D8TaxeCyXkgOr4y2TwpZYfsTonPaZ +rJ51zpWUyrb9uQwkIfHtz22tXdZlaZJlgASUV7mr8FF0kwfNMGZFSHbkhIxKHWx ThXtJ/M2qaZrzAQHMu+X9i747LUk59Zj1DPxezW+s05shk1htwtGH4T7hCrRVUV+ h8wcLbmeF7v5eoF5kU/bl0ONsi2c96vrX3k8iXCTYdfgxCglH24Vc9pGqTA941zJ pncQhYbPnznmDCAQpWuU8EJJVJ7A0QzPOOC5S9vDxSP6vb2xxTNHmYf0IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFO/w/iofHW0O0vfCu2oLxUmFdyPMB8GA1UdIwQY MBaAFA4ppILeDVZ0bDBFJp+ZIFIE+VSEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGlta2d0NE5WblJzTUVVbW41a2dVZ1Q1VklRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xNGEyNzMtOGI3NS00NzZjLWI5ZTMt OGJiZDkzOTQwZWVmLzEvRGlta2d0NE5WblJzTUVVbW41a2dVZ1Q1VklRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8xNGEyNzMtOGI3NS00NzZjLWI5ZTMtOGJiZDkzOTQwZWVm LzEvRGlta2d0NE5WblJzTUVVbW41a2dVZ1Q1VklRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVMGqudnS /iU1eo1BOJbccjC8f9w/sWkSYOTzGOKKoYPH8cTNDwDww6eSpqi73bHHG+XrZ3vs lO5wGRBlSM/RmVFXuHNmtEpCKPaY20IIZJ/p1BUUihYDUQLRuEFb+KA9irhqr4M0 RRZmG+RofIVVpaClQCuyNYDDFG+X+CBy+R2bHkcYh74j0fD8QSUhnL1+0Xe8C/s4 5j2Q9GU7jQnIFtXlkAYY/n48VuBlZG2Mh39gflMThBS7umG5Vm1CBaiakv976FzY e5qOz5aPKHZQUYHV0ewlx9uiiadjSRmoOih2AAlAuhRXPhC1SAmsvx62rxmF4FKU Q5Mz99bQL8iKTQ== -----END CERTIFICATE-----Generated at Sun Dec 7 07:25:11 2025 by rpki-client