This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft File: dim08aCQrAe-F2LewzjmoP412X4.mft (raw, json) Hash identifier: RuN8tPMH6VOwCWws6BGgiGuui9N1fVJTXGCj5/C+EbM= Subject key identifier: BB:19:13:0F:CB:AC:A3:8F:72:0A:E7:F1:EE:95:97:9C:49:1D:4E:DD Authority key identifier: 76:29:B4:F1:A0:90:AC:07:BE:17:62:DE:C3:38:E6:A0:FE:35:D9:7E Certificate issuer: /CN=7629b4f1a090ac07be1762dec338e6a0fe35d97e Certificate serial: 019AF12E1A85D0AA33C63C6DADA5EFA1635D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dim08aCQrAe-F2LewzjmoP412X4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft Manifest number: 0734 Signing time: Sat 06 Dec 2025 01:02:01 +0000 Manifest this update: Sat 06 Dec 2025 01:02:01 +0000 Manifest next update: Sun 07 Dec 2025 01:02:01 +0000 Files and hashes: 1: 5YMm7iUmf7YXCbeTMsZ2gbUF8Mc.roa (hash: IgoqrrmJPuGzGpT+UcpwCttOwj7BjxbDg3tOXCDKJe8=) 2: dim08aCQrAe-F2LewzjmoP412X4.crl (hash: RIfEQ0GeGDhgLDU7ixkkkL5aoy3DJNIp5rvHRwP8tSA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.crl rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft rsync://rpki.ripe.net/repository/DEFAULT/dim08aCQrAe-F2LewzjmoP412X4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:1a:85:d0:aa:33:c6:3c:6d:ad:a5:ef:a1:63:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7629b4f1a090ac07be1762dec338e6a0fe35d97e Validity Not Before: Dec 6 01:02:01 2025 GMT Not After : Dec 7 01:02:01 2025 GMT Subject: CN=bb19130fcbaca38f720ae7f1ee95979c491d4edd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a9:f0:24:ed:f9:69:9f:e2:97:c0:b4:b1:fb: 72:64:33:80:a9:31:9e:7b:a6:00:f4:a5:0f:d1:af: 11:10:9d:59:86:66:d4:17:ae:b5:78:e7:d2:47:10: 6a:91:d0:70:6f:f6:23:6f:2c:74:25:58:37:c6:82: a8:23:74:78:0e:1c:3f:38:ff:95:eb:c2:fd:d3:ba: fb:55:72:20:2d:4b:84:c1:8c:47:b7:73:e6:6c:b6: 60:89:c1:23:cb:12:65:75:32:60:a8:fd:43:4f:c2: 7c:58:33:b7:f4:56:cd:26:99:75:2d:3a:de:be:64: 11:2e:fb:e1:e7:f1:8a:13:eb:50:59:78:c0:3d:bc: d6:77:b9:36:f5:99:b5:24:fd:d9:5b:fa:a0:de:10: 66:8f:9d:24:84:d9:f1:84:d0:5c:28:fe:80:d0:a4: 7d:7f:1f:26:1a:b5:0d:a6:e3:db:8d:8b:1d:61:65: 4b:85:bd:b0:af:bc:82:e5:32:e3:47:28:22:23:64: a2:ae:1d:ff:4c:6d:51:7a:7c:a9:9e:45:14:97:34: ee:7e:d7:f8:53:35:d0:70:34:26:bb:f1:e7:01:cf: b0:56:b7:67:6a:ef:00:08:bc:35:96:91:6b:6d:9b: 2f:39:af:b2:97:dc:9e:cb:ac:1d:dc:30:17:33:3c: 26:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:19:13:0F:CB:AC:A3:8F:72:0A:E7:F1:EE:95:97:9C:49:1D:4E:DD X509v3 Authority Key Identifier: keyid:76:29:B4:F1:A0:90:AC:07:BE:17:62:DE:C3:38:E6:A0:FE:35:D9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dim08aCQrAe-F2LewzjmoP412X4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:58:5b:83:43:1c:7e:4e:95:70:7d:d5:29:8f:23:f1:45:cb: 61:97:72:b0:c8:a2:bf:02:52:a1:b9:4e:35:bf:9d:52:b9:2f: 04:7b:7b:69:26:da:63:91:1e:a1:7b:ab:43:01:73:c9:5b:65: 19:f9:77:7d:9e:ad:92:10:38:b5:f4:be:76:67:98:b6:02:ca: f4:0b:b7:a7:7d:d9:bf:7f:4a:95:80:2c:47:0c:46:69:a5:27: 80:8e:5d:a0:79:c9:23:63:cf:de:af:16:ba:65:71:a6:24:69: 69:cc:ad:17:65:f8:48:db:c0:dc:43:29:02:52:68:95:f6:df: dd:eb:79:d1:5a:f2:e7:e9:4b:ba:b9:a2:be:8b:f3:73:30:88: 74:0c:f8:48:5a:66:d7:a9:de:11:9e:0c:ae:62:2b:0b:27:bd: e8:d1:d5:e6:47:bf:b2:f6:a2:2e:b9:6d:ae:ba:a5:15:63:42: d1:ff:57:7e:68:0c:05:c1:4b:07:74:fc:91:fe:7f:6d:67:46: ef:39:9b:62:c8:76:3f:a1:2b:c9:00:0a:35:43:c5:ab:e3:1b: 9d:e9:64:b6:88:1b:1b:4f:98:be:b0:56:f9:c3:5b:d7:8a:27: 5b:14:19:cf:27:33:d7:4a:21:3f:92:9f:98:85:fe:23:6b:1a: 6c:86:4f:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLhqF0KozxjxtraXvoWNdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2MjliNGYxYTA5MGFjMDdiZTE3NjJkZWMzMzhlNmEwZmUz NWQ5N2UwHhcNMjUxMjA2MDEwMjAxWhcNMjUxMjA3MDEwMjAxWjAzMTEwLwYDVQQD EyhiYjE5MTMwZmNiYWNhMzhmNzIwYWU3ZjFlZTk1OTc5YzQ5MWQ0ZWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKnwJO35aZ/il8C0sftyZDOAqTGe e6YA9KUP0a8REJ1ZhmbUF661eOfSRxBqkdBwb/Yjbyx0JVg3xoKoI3R4Dhw/OP+V 68L907r7VXIgLUuEwYxHt3PmbLZgicEjyxJldTJgqP1DT8J8WDO39FbNJpl1LTre vmQRLvvh5/GKE+tQWXjAPbzWd7k29Zm1JP3ZW/qg3hBmj50khNnxhNBcKP6A0KR9 fx8mGrUNpuPbjYsdYWVLhb2wr7yC5TLjRygiI2Sirh3/TG1RenypnkUUlzTuftf4 UzXQcDQmu/HnAc+wVrdnau8ACLw1lpFrbZsvOa+yl9yey6wd3DAXMzwmtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLsZEw/LrKOPcgrn8e6Vl5xJHU7dMB8GA1UdIwQY MBaAFHYptPGgkKwHvhdi3sM45qD+Ndl+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGltMDhhQ1FyQWUtRjJMZXd6am1vUDQxMlg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9hMWVmNjMtMTZhNy00YTk0LWIxMTQt NWYxNzViNWFlMDM4LzEvZGltMDhhQ1FyQWUtRjJMZXd6am1vUDQxMlg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9hMWVmNjMtMTZhNy00YTk0LWIxMTQtNWYxNzViNWFlMDM4 LzEvZGltMDhhQ1FyQWUtRjJMZXd6am1vUDQxMlg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUlhbg0Mc fk6VcH3VKY8j8UXLYZdysMiivwJSoblONb+dUrkvBHt7aSbaY5EeoXurQwFzyVtl Gfl3fZ6tkhA4tfS+dmeYtgLK9Au3p33Zv39KlYAsRwxGaaUngI5doHnJI2PP3q8W umVxpiRpacytF2X4SNvA3EMpAlJolfbf3et50Vry5+lLurmivovzczCIdAz4SFpm 16neEZ4MrmIrCye96NHV5ke/svaiLrltrrqlFWNC0f9XfmgMBcFLB3T8kf5/bWdG 7zmbYsh2P6EryQAKNUPFq+MbnelktogbG0+YvrBW+cNb14onWxQZzycz10ohP5Kf mIX+I2sabIZPHg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:32:29 2025 by rpki-client