This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft File: dh55HzroOuiyY-PNtoKjR1tXB98.mft (raw, json) Hash identifier: aJOXrFk2LcQa+fe88x0BkdTgbGtQ2lrObmxTxcNEaXI= Subject key identifier: 38:30:C5:A7:21:F8:22:D3:C4:F6:DB:64:8C:62:02:D7:97:3E:BB:33 Authority key identifier: 76:1E:79:1F:3A:E8:3A:E8:B2:63:E3:CD:B6:82:A3:47:5B:57:07:DF Certificate issuer: /CN=761e791f3ae83ae8b263e3cdb682a3475b5707df Certificate serial: 019AF465B5FD27DC4BBAA188FFAED47DAD45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 16:01:37 +0000 Manifest this update: Sat 06 Dec 2025 16:01:37 +0000 Manifest next update: Sun 07 Dec 2025 16:01:37 +0000 Files and hashes: 1: dh55HzroOuiyY-PNtoKjR1tXB98.crl (hash: f5pPQ08AuBtZK5m2rxgC6l8im+IhwNq6Z2rZ6wQe2II=) 2: e3qYhLR-km5IQlHYrXGIQxD6r18.roa (hash: o3slshWpfwKW/e4DeCSWK9BRzXX7zHWEOnbvJOQywpo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 16:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:b5:fd:27:dc:4b:ba:a1:88:ff:ae:d4:7d:ad:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=761e791f3ae83ae8b263e3cdb682a3475b5707df Validity Not Before: Dec 6 16:01:37 2025 GMT Not After : Dec 7 16:01:37 2025 GMT Subject: CN=3830c5a721f822d3c4f6db648c6202d7973ebb33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:07:5b:94:de:e4:50:d0:76:85:d4:2c:df:17: 42:dd:33:01:ea:7f:2e:93:61:d3:dd:2e:20:43:7d: 45:d6:58:9d:2d:33:bd:e4:c3:1f:50:e0:cd:5f:af: fa:f4:4b:4a:23:fc:35:84:6a:c0:71:6a:83:7b:60: 73:73:19:4c:c7:15:e4:2a:d0:cd:f8:ee:90:31:a0: 43:fe:c3:35:d5:98:91:1d:09:37:c1:6a:cc:d8:c5: 1b:3e:10:a8:c7:c4:bb:7a:24:2a:7b:b8:ee:10:b9: e2:22:9b:c8:33:55:82:a2:d9:08:62:5f:6f:ba:b0: ef:5e:68:d5:cf:37:d0:bb:a4:a7:d2:e7:fd:a5:e2: d5:35:08:b7:3a:a9:2e:1c:b6:85:76:4b:76:e3:82: c2:70:23:a6:2f:1f:de:88:13:ac:f8:d2:02:06:e8: fc:17:56:48:42:50:59:94:ab:3b:ca:5b:ab:1d:5f: 79:61:75:66:a2:12:6c:fd:8f:1f:6a:68:17:47:03: 00:f2:0b:8d:dc:ab:6a:a9:51:d4:a6:a2:d3:3d:c3: 2d:1a:e6:17:04:33:ab:e0:c2:7b:ef:30:7c:02:0a: 88:b5:c0:b2:f1:d3:28:2d:9f:07:10:c7:6d:41:bf: ea:88:1b:37:66:28:93:e4:39:d5:c1:69:6b:00:5b: 68:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:30:C5:A7:21:F8:22:D3:C4:F6:DB:64:8C:62:02:D7:97:3E:BB:33 X509v3 Authority Key Identifier: keyid:76:1E:79:1F:3A:E8:3A:E8:B2:63:E3:CD:B6:82:A3:47:5B:57:07:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:1f:c5:e4:4d:3d:42:40:a7:d2:95:0c:b9:99:95:64:18:df: f9:e9:e1:df:00:d2:3f:b6:2a:7f:37:05:86:73:52:59:da:4b: e6:43:9e:d0:46:08:8a:3c:6a:1a:e2:87:43:95:fa:e5:35:d6: 0d:77:ad:26:30:7f:d4:75:59:ed:05:29:f9:5b:11:82:64:01: ba:8c:8d:84:8d:46:0e:fe:5e:f3:73:41:d1:7f:c5:9c:73:b3: ff:ce:e7:6c:be:75:f6:d1:c3:47:5f:6f:da:79:f3:b8:0b:14: c6:7d:67:ff:9f:f0:e9:9c:7d:0b:fb:80:63:e1:da:45:7a:3e: f7:10:6e:24:c1:c4:1b:5e:e9:ad:6d:dd:78:60:ed:39:fb:f6: 01:84:96:9e:fc:ff:0a:ce:44:6a:91:91:e0:22:9a:b7:b8:8b: 43:80:24:58:c2:79:8d:b2:b3:2e:e7:ca:cb:03:d7:91:40:b3: c2:48:c6:45:55:d7:fd:87:cf:8c:0f:52:53:59:07:45:e4:88: 8c:7c:17:73:fd:84:d1:32:f8:c5:f2:e5:6b:94:df:30:07:43: 48:1a:8d:28:11:c9:e3:f9:c6:e2:5e:70:d9:f8:b2:2f:47:d8: fd:c5:a2:d5:70:ee:bd:62:78:57:69:74:27:a5:1a:8b:be:a6: fd:40:83:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZbX9J9xLuqGI/67Ufa1FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2MWU3OTFmM2FlODNhZThiMjYzZTNjZGI2ODJhMzQ3NWI1 NzA3ZGYwHhcNMjUxMjA2MTYwMTM3WhcNMjUxMjA3MTYwMTM3WjAzMTEwLwYDVQQD EygzODMwYzVhNzIxZjgyMmQzYzRmNmRiNjQ4YzYyMDJkNzk3M2ViYjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gdblN7kUNB2hdQs3xdC3TMB6n8u k2HT3S4gQ31F1lidLTO95MMfUODNX6/69EtKI/w1hGrAcWqDe2BzcxlMxxXkKtDN +O6QMaBD/sM11ZiRHQk3wWrM2MUbPhCox8S7eiQqe7juELniIpvIM1WCotkIYl9v urDvXmjVzzfQu6Sn0uf9peLVNQi3OqkuHLaFdkt244LCcCOmLx/eiBOs+NICBuj8 F1ZIQlBZlKs7ylurHV95YXVmohJs/Y8famgXRwMA8guN3KtqqVHUpqLTPcMtGuYX BDOr4MJ77zB8AgqItcCy8dMoLZ8HEMdtQb/qiBs3ZiiT5DnVwWlrAFtoMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDgwxach+CLTxPbbZIxiAteXPrszMB8GA1UdIwQY MBaAFHYeeR866DrosmPjzbaCo0dbVwffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGg1NUh6cm9PdWl5WS1QTnRvS2pSMXRYQjk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9mY2Q5OTAtNzJmNC00ZWJkLTg2NGEt OTJlNDUxODc3ZDJjLzEvZGg1NUh6cm9PdWl5WS1QTnRvS2pSMXRYQjk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9mY2Q5OTAtNzJmNC00ZWJkLTg2NGEtOTJlNDUxODc3ZDJj LzEvZGg1NUh6cm9PdWl5WS1QTnRvS2pSMXRYQjk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfB/F5E09 QkCn0pUMuZmVZBjf+enh3wDSP7YqfzcFhnNSWdpL5kOe0EYIijxqGuKHQ5X65TXW DXetJjB/1HVZ7QUp+VsRgmQBuoyNhI1GDv5e83NB0X/FnHOz/87nbL519tHDR19v 2nnzuAsUxn1n/5/w6Zx9C/uAY+HaRXo+9xBuJMHEG17prW3deGDtOfv2AYSWnvz/ Cs5EapGR4CKat7iLQ4AkWMJ5jbKzLufKywPXkUCzwkjGRVXX/YfPjA9SU1kHReSI jHwXc/2E0TL4xfLla5TfMAdDSBqNKBHJ4/nG4l5w2fiyL0fY/cWi1XDuvWJ4V2l0 J6Uai76m/UCDOw== -----END CERTIFICATE-----Generated at Sun Dec 7 00:31:36 2025 by rpki-client