This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft File: DvJQ9m3TDDt1RDCoXVMjbxczG38.mft (raw, json) Hash identifier: tlA1aVtHgJqzBIkx4SxQGDd6310RWgjEtT/nyejNH+U= Subject key identifier: 02:D4:FD:C7:54:E0:A3:6C:56:A7:89:3D:99:29:55:38:E0:A7:D9:E5 Authority key identifier: 0E:F2:50:F6:6D:D3:0C:3B:75:44:30:A8:5D:53:23:6F:17:33:1B:7F Certificate issuer: /CN=0ef250f66dd30c3b754430a85d53236f17331b7f Certificate serial: 019AF31CF7212B067362ECDF276BEA9B8DE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvJQ9m3TDDt1RDCoXVMjbxczG38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft Manifest number: 0400 Signing time: Sat 06 Dec 2025 10:02:32 +0000 Manifest this update: Sat 06 Dec 2025 10:02:32 +0000 Manifest next update: Sun 07 Dec 2025 10:02:32 +0000 Files and hashes: 1: DvJQ9m3TDDt1RDCoXVMjbxczG38.crl (hash: Q/fFxHOewpew+ckJLWwJU+H43F/1I7OqL8a2O6cCLgo=) 2: wz1d87RRsH1wKxGmJq_DN0PXswY.roa (hash: UbFzX/CxroLQPhe2c4ynViKTu15Zs0MKcqpj4a9goDk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft rsync://rpki.ripe.net/repository/DEFAULT/DvJQ9m3TDDt1RDCoXVMjbxczG38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:f7:21:2b:06:73:62:ec:df:27:6b:ea:9b:8d:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ef250f66dd30c3b754430a85d53236f17331b7f Validity Not Before: Dec 6 10:02:32 2025 GMT Not After : Dec 7 10:02:32 2025 GMT Subject: CN=02d4fdc754e0a36c56a7893d99295538e0a7d9e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c0:2d:74:d7:f9:cc:82:2c:83:b0:9d:2e:16: 93:ab:31:99:0b:77:cf:3e:c5:f3:ab:ea:b2:6a:94: 0c:e4:fd:c4:db:04:a0:99:20:aa:0a:60:9a:25:53: 4e:a6:85:38:c5:cc:c1:f3:4c:19:ea:e7:b8:a5:e9: e0:0e:55:5b:cb:e4:d7:59:4b:ea:47:dc:5e:34:67: 12:d0:7f:cc:e4:fd:52:a7:49:ea:8a:23:cd:cb:c2: cc:0f:0e:33:b7:45:22:67:7e:c7:f4:ee:85:85:42: 68:b1:3f:b4:09:0a:02:99:a2:ed:f2:bd:38:71:0c: 03:58:28:49:fd:9f:e0:ab:28:8f:21:6e:97:c0:37: 00:2f:ca:78:5e:d6:0b:8a:c5:0b:34:63:89:c4:6e: 3d:4a:cd:ab:85:63:58:3f:5b:36:03:17:55:b0:d5: 63:4c:8e:2b:67:a3:58:97:c4:dd:bc:6d:2b:df:bf: cd:e7:4f:5a:e0:54:4a:45:7e:ef:a3:4a:bf:38:e1: e5:65:18:cb:eb:da:f4:b7:b0:bf:24:dc:00:d3:7f: 87:3f:b1:84:14:07:91:ee:91:88:a9:b1:13:ac:0c: 47:60:5d:d2:16:83:c6:5d:71:9c:52:63:ba:5c:cd: da:58:3a:5e:ee:5f:8d:74:c2:7e:72:fe:b2:ce:b3: 59:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:D4:FD:C7:54:E0:A3:6C:56:A7:89:3D:99:29:55:38:E0:A7:D9:E5 X509v3 Authority Key Identifier: keyid:0E:F2:50:F6:6D:D3:0C:3B:75:44:30:A8:5D:53:23:6F:17:33:1B:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvJQ9m3TDDt1RDCoXVMjbxczG38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:e4:7f:b4:ed:36:08:2a:4d:c1:77:e0:70:4d:a0:92:f8:35: 63:65:7b:5b:54:79:8c:9a:b1:44:14:11:63:b5:b9:60:8b:d3: a9:1b:6d:10:b9:75:be:46:e2:b0:46:be:62:0b:ca:e0:5d:de: de:dc:e3:ac:e7:33:3f:da:16:d5:e4:ac:cd:08:30:cb:8b:6d: cd:50:b3:1a:f4:49:9c:dd:26:57:c4:f2:39:d0:fd:d4:2a:90: 42:5b:50:93:71:a9:6d:35:af:0c:05:d8:dc:93:83:7a:15:48: 1f:2b:a1:2b:34:a9:b1:ab:e3:7f:9c:03:a9:8d:3d:7c:30:5b: ce:d7:b1:34:1a:5a:ec:55:99:0a:24:1d:93:17:94:8b:05:95: eb:28:14:d0:a4:c0:a8:9a:b1:f7:31:99:6a:d5:2c:df:0c:34: 50:0a:64:39:c7:3f:22:e9:00:52:52:8e:10:46:63:d4:df:43: cc:1f:76:c0:49:61:0e:33:5b:32:09:ca:ed:77:e6:d8:f7:3c: 0c:d3:96:f9:97:2f:07:2d:02:c0:dc:02:7c:cc:99:ef:2a:ec: b4:3e:cc:46:6c:3a:01:66:7e:59:f0:71:8c:95:a5:b5:76:86: 48:02:16:39:28:b7:13:53:fb:f9:ef:17:3a:6f:7e:f9:6c:9b: 0e:ec:73:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHPchKwZzYuzfJ2vqm43hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlZjI1MGY2NmRkMzBjM2I3NTQ0MzBhODVkNTMyMzZmMTcz MzFiN2YwHhcNMjUxMjA2MTAwMjMyWhcNMjUxMjA3MTAwMjMyWjAzMTEwLwYDVQQD EygwMmQ0ZmRjNzU0ZTBhMzZjNTZhNzg5M2Q5OTI5NTUzOGUwYTdkOWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsAtdNf5zIIsg7CdLhaTqzGZC3fP PsXzq+qyapQM5P3E2wSgmSCqCmCaJVNOpoU4xczB80wZ6ue4pengDlVby+TXWUvq R9xeNGcS0H/M5P1Sp0nqiiPNy8LMDw4zt0UiZ37H9O6FhUJosT+0CQoCmaLt8r04 cQwDWChJ/Z/gqyiPIW6XwDcAL8p4XtYLisULNGOJxG49Ss2rhWNYP1s2AxdVsNVj TI4rZ6NYl8TdvG0r37/N509a4FRKRX7vo0q/OOHlZRjL69r0t7C/JNwA03+HP7GE FAeR7pGIqbETrAxHYF3SFoPGXXGcUmO6XM3aWDpe7l+NdMJ+cv6yzrNZxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFALU/cdU4KNsVqeJPZkpVTjgp9nlMB8GA1UdIwQY MBaAFA7yUPZt0ww7dUQwqF1TI28XMxt/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHZKUTltM1RERHQxUkRDb1hWTWpieGN6RzM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85OTlkZDMtODhmNy00MmMyLWFmZjUt ODFkNWFhYzAzNDk2LzEvRHZKUTltM1RERHQxUkRDb1hWTWpieGN6RzM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy85OTlkZDMtODhmNy00MmMyLWFmZjUtODFkNWFhYzAzNDk2 LzEvRHZKUTltM1RERHQxUkRDb1hWTWpieGN6RzM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsOR/tO02 CCpNwXfgcE2gkvg1Y2V7W1R5jJqxRBQRY7W5YIvTqRttELl1vkbisEa+YgvK4F3e 3tzjrOczP9oW1eSszQgwy4ttzVCzGvRJnN0mV8TyOdD91CqQQltQk3GpbTWvDAXY 3JODehVIHyuhKzSpsavjf5wDqY09fDBbztexNBpa7FWZCiQdkxeUiwWV6ygU0KTA qJqx9zGZatUs3ww0UApkOcc/IukAUlKOEEZj1N9DzB92wElhDjNbMgnK7Xfm2Pc8 DNOW+ZcvBy0CwNwCfMyZ7yrstD7MRmw6AWZ+WfBxjJWltXaGSAIWOSi3E1P7+e8X Om9++WybDuxzdw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:07:43 2025 by rpki-client