This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2f908b-eef9-4a1a-8f80-5fc44fd6bafc/1/DpFsLKNrUAlu4v5EuUUpwto8PsI.mft File: DpFsLKNrUAlu4v5EuUUpwto8PsI.mft (raw, json) Hash identifier: W57fNUx3Cb6e5LdAohPf2bkCf6I4TyR0tmY2LC/kYrk= Subject key identifier: 3E:4B:58:19:5F:E0:CD:20:9C:41:93:E0:1D:74:5D:8F:ED:30:6D:5F Authority key identifier: 0E:91:6C:2C:A3:6B:50:09:6E:E2:FE:44:B9:45:29:C2:DA:3C:3E:C2 Certificate issuer: /CN=0e916c2ca36b50096ee2fe44b94529c2da3c3ec2 Certificate serial: 019B341FAD46B924A5C441D01392814FD710 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DpFsLKNrUAlu4v5EuUUpwto8PsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f908b-eef9-4a1a-8f80-5fc44fd6bafc/1/DpFsLKNrUAlu4v5EuUUpwto8PsI.mft Manifest number: 050A Signing time: Fri 19 Dec 2025 01:00:49 +0000 Manifest this update: Fri 19 Dec 2025 01:00:49 +0000 Manifest next update: Sat 20 Dec 2025 01:00:49 +0000 Files and hashes: 1: DpFsLKNrUAlu4v5EuUUpwto8PsI.crl (hash: lvbQ6nOehsayjqpEHaTTaYkCftWXb3xGySXetDtbvPQ=) 2: QGeFBaZMcPUbZlccMoyAnOzy3gE.roa (hash: 7YeLQ57g/FUFF/JvQDJhVLUE18/59LuhhMGoWNanM4Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f908b-eef9-4a1a-8f80-5fc44fd6bafc/1/DpFsLKNrUAlu4v5EuUUpwto8PsI.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/2f908b-eef9-4a1a-8f80-5fc44fd6bafc/1/DpFsLKNrUAlu4v5EuUUpwto8PsI.mft rsync://rpki.ripe.net/repository/DEFAULT/DpFsLKNrUAlu4v5EuUUpwto8PsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:1f:ad:46:b9:24:a5:c4:41:d0:13:92:81:4f:d7:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e916c2ca36b50096ee2fe44b94529c2da3c3ec2 Validity Not Before: Dec 19 01:00:49 2025 GMT Not After : Dec 20 01:00:49 2025 GMT Subject: CN=3e4b58195fe0cd209c4193e01d745d8fed306d5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:33:ec:22:7c:63:c7:1e:54:cd:cd:95:00:c2: 1f:45:1f:bb:f5:00:23:94:40:9e:a9:66:5a:0d:21: 8d:e7:48:1c:fc:1b:a9:2f:8a:bd:08:fa:28:8a:1c: 69:4a:86:fb:ff:b7:fb:36:28:78:cf:d7:83:88:d9: b5:e2:89:66:69:62:46:28:15:cc:a0:35:6e:51:d4: 21:3d:cc:13:46:ba:bc:9d:b6:94:b2:86:01:3d:4d: 72:22:bd:2f:12:72:3f:74:62:17:fa:93:a1:15:d4: 0d:cd:c3:79:b5:24:3c:c4:a5:71:de:42:22:5c:fa: 5a:00:84:4e:aa:18:61:47:c4:5e:e7:29:0b:01:d6: 0e:48:14:fd:e0:14:43:74:79:ea:18:8c:3c:fa:22: 7f:3d:2a:e4:ed:69:9a:d7:26:91:e7:1f:8c:29:e8: 0d:08:f8:23:a5:20:9a:b4:6e:34:be:a8:ac:b2:d1: 31:1b:0e:ff:c0:ee:ba:e0:ff:90:bb:00:2b:d4:a8: 23:55:d0:e9:e3:82:f7:aa:5a:16:2d:90:66:6a:ea: 52:b0:d1:27:d6:9d:2a:9a:f9:6d:db:d4:31:6c:47: bd:bb:1f:41:1a:5e:07:1e:9f:2e:62:f0:e6:0b:de: d4:a4:31:91:24:7e:a8:e0:b6:aa:f9:be:96:af:ad: 43:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:4B:58:19:5F:E0:CD:20:9C:41:93:E0:1D:74:5D:8F:ED:30:6D:5F X509v3 Authority Key Identifier: keyid:0E:91:6C:2C:A3:6B:50:09:6E:E2:FE:44:B9:45:29:C2:DA:3C:3E:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpFsLKNrUAlu4v5EuUUpwto8PsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f908b-eef9-4a1a-8f80-5fc44fd6bafc/1/DpFsLKNrUAlu4v5EuUUpwto8PsI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f908b-eef9-4a1a-8f80-5fc44fd6bafc/1/DpFsLKNrUAlu4v5EuUUpwto8PsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:10:72:3a:3b:a4:06:de:29:ef:3e:c9:c9:46:84:d1:c4:e0: b6:ad:af:c2:1f:ee:7f:ec:14:52:8b:a7:d5:40:81:79:91:50: 40:11:5d:4d:3e:a4:d6:06:eb:3b:82:02:62:24:2e:c3:44:98: 46:32:31:0c:da:a0:9d:fe:28:7d:73:7d:09:b6:46:c3:9e:e4: 41:99:cc:19:9b:5d:8f:78:71:f7:d8:fe:97:b8:fd:4d:49:87: 20:54:48:3b:e6:b2:e2:d1:ec:fa:fb:09:c4:60:c7:39:61:67: d0:da:b7:af:32:47:5a:85:0a:44:13:15:5a:de:6e:4a:43:02: 6f:42:c0:58:07:8d:f5:fd:3d:59:5e:6d:d1:ce:91:79:ac:76: 72:ce:e5:d1:f6:73:b6:fb:f9:25:5b:30:54:48:48:ff:38:ea: fd:97:73:22:45:dd:09:68:52:6e:25:2b:73:0a:06:6b:a6:f9: ce:f7:ad:cf:ed:d6:ab:46:7e:4c:86:53:10:7f:5a:11:f6:d7: 6e:99:f2:f1:b4:dc:06:7f:3b:94:0a:fb:f9:53:d7:a5:02:16: 43:e4:6a:55:73:29:34:35:e0:7a:2a:a5:56:5f:9f:48:70:f1: 7b:6e:2b:19:ac:d8:c8:db:01:57:43:85:ff:26:7f:7b:d3:94: b3:b8:3d:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0H61GuSSlxEHQE5KBT9cQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlOTE2YzJjYTM2YjUwMDk2ZWUyZmU0NGI5NDUyOWMyZGEz YzNlYzIwHhcNMjUxMjE5MDEwMDQ5WhcNMjUxMjIwMDEwMDQ5WjAzMTEwLwYDVQQD EygzZTRiNTgxOTVmZTBjZDIwOWM0MTkzZTAxZDc0NWQ4ZmVkMzA2ZDVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTPsInxjxx5Uzc2VAMIfRR+79QAj lECeqWZaDSGN50gc/BupL4q9CPooihxpSob7/7f7Nih4z9eDiNm14olmaWJGKBXM oDVuUdQhPcwTRrq8nbaUsoYBPU1yIr0vEnI/dGIX+pOhFdQNzcN5tSQ8xKVx3kIi XPpaAIROqhhhR8Re5ykLAdYOSBT94BRDdHnqGIw8+iJ/PSrk7Wma1yaR5x+MKegN CPgjpSCatG40vqisstExGw7/wO664P+QuwAr1KgjVdDp44L3qloWLZBmaupSsNEn 1p0qmvlt29QxbEe9ux9BGl4HHp8uYvDmC97UpDGRJH6o4Laq+b6Wr61DDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD5LWBlf4M0gnEGT4B10XY/tMG1fMB8GA1UdIwQY MBaAFA6RbCyja1AJbuL+RLlFKcLaPD7CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHBGc0xLTnJVQWx1NHY1RXVVVXB3dG84UHNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8yZjkwOGItZWVmOS00YTFhLThmODAt NWZjNDRmZDZiYWZjLzEvRHBGc0xLTnJVQWx1NHY1RXVVVXB3dG84UHNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8yZjkwOGItZWVmOS00YTFhLThmODAtNWZjNDRmZDZiYWZj LzEvRHBGc0xLTnJVQWx1NHY1RXVVVXB3dG84UHNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANBByOjuk Bt4p7z7JyUaE0cTgtq2vwh/uf+wUUoun1UCBeZFQQBFdTT6k1gbrO4ICYiQuw0SY RjIxDNqgnf4ofXN9CbZGw57kQZnMGZtdj3hx99j+l7j9TUmHIFRIO+ay4tHs+vsJ xGDHOWFn0Nq3rzJHWoUKRBMVWt5uSkMCb0LAWAeN9f09WV5t0c6Reax2cs7l0fZz tvv5JVswVEhI/zjq/ZdzIkXdCWhSbiUrcwoGa6b5zvetz+3Wq0Z+TIZTEH9aEfbX bpny8bTcBn87lAr7+VPXpQIWQ+RqVXMpNDXgeiqlVl+fSHDxe24rGazYyNsBV0OF /yZ/e9OUs7g9PQ== -----END CERTIFICATE-----Generated at Fri Dec 19 06:39:27 2025 by rpki-client