This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.mft File: dciLHEH7612r73Q8V6zf_E-nRpk.mft (raw, json) Hash identifier: 5JFtrhdZQjLdqr8tb7Q3Yw4F3Y+Wk+XhWlmvifyqUYs= Subject key identifier: 0F:EF:97:CC:58:2A:01:F1:F2:B2:93:78:57:CD:7C:03:0F:21:CB:AB Authority key identifier: 75:C8:8B:1C:41:FB:EB:5D:AB:EF:74:3C:57:AC:DF:FC:4F:A7:46:99 Certificate issuer: /CN=75c88b1c41fbeb5dabef743c57acdffc4fa74699 Certificate serial: 019AF1D20EE4022FCE57E3595A1757821EB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dciLHEH7612r73Q8V6zf_E-nRpk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.mft Manifest number: 11F0 Signing time: Sat 06 Dec 2025 04:01:06 +0000 Manifest this update: Sat 06 Dec 2025 04:01:06 +0000 Manifest next update: Sun 07 Dec 2025 04:01:06 +0000 Files and hashes: 1: 2bqsQsJql_hwoFMeZ0nmgZGmbEw.roa (hash: e5rzAihzL4LX4PAPTH0rwfwcZpBTQn6I0oUQG0cd6f8=) 2: dciLHEH7612r73Q8V6zf_E-nRpk.crl (hash: G4fAfZDjU8Sjafnnjv1jc/7lpkgSBin/VMTRVy+ZHws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.mft rsync://rpki.ripe.net/repository/DEFAULT/dciLHEH7612r73Q8V6zf_E-nRpk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:0e:e4:02:2f:ce:57:e3:59:5a:17:57:82:1e:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75c88b1c41fbeb5dabef743c57acdffc4fa74699 Validity Not Before: Dec 6 04:01:06 2025 GMT Not After : Dec 7 04:01:06 2025 GMT Subject: CN=0fef97cc582a01f1f2b2937857cd7c030f21cbab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:15:11:7d:e2:29:31:39:3a:04:76:25:89:0e: d9:31:55:e4:7e:54:69:bc:b0:d5:83:64:b2:44:54: b4:bb:6d:90:a3:f0:61:ee:74:37:bb:8e:6a:f7:b4: d2:95:fc:35:c6:9a:95:ea:be:d7:81:4b:76:ad:84: 92:ae:56:38:a4:a2:bc:2c:33:eb:ff:99:ab:5a:1d: e9:48:31:2b:55:2b:5d:f5:13:3e:bc:b2:e3:2a:be: 72:c9:2a:49:49:68:0c:1f:3b:19:59:f9:c4:83:e0: 6f:a0:24:4b:5e:38:59:0a:54:24:a2:5a:30:f9:6a: 98:8e:a7:e8:e4:ae:c1:17:37:69:6d:16:8e:36:33: 83:69:df:10:71:2f:22:a0:3c:3f:4b:b5:57:4b:b4: 38:ef:d9:3a:5e:94:49:07:d3:7e:d8:43:f2:8b:75: 20:af:e6:6f:92:df:27:b8:69:d7:e2:ba:1d:62:63: 12:42:c1:84:c3:ec:a9:fb:f9:1f:5e:35:f6:ab:26: 61:c5:91:d8:cc:04:c3:43:03:18:aa:40:54:80:11: 92:e2:3c:99:b6:03:14:af:4a:eb:68:2e:7c:77:22: 90:13:1c:87:87:b9:d5:d6:27:4c:e0:4e:ab:eb:ea: a5:9d:c6:a8:5a:0b:2b:ee:c1:9d:a3:8c:4b:9b:cd: 9c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:EF:97:CC:58:2A:01:F1:F2:B2:93:78:57:CD:7C:03:0F:21:CB:AB X509v3 Authority Key Identifier: keyid:75:C8:8B:1C:41:FB:EB:5D:AB:EF:74:3C:57:AC:DF:FC:4F:A7:46:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dciLHEH7612r73Q8V6zf_E-nRpk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2a2164-1656-44cb-9294-0b1dec375554/1/dciLHEH7612r73Q8V6zf_E-nRpk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:04:b8:a6:05:fb:41:46:22:68:a1:62:11:95:5f:06:a2:1b: f1:07:cc:2b:cb:94:ff:d6:07:6f:43:2d:7a:89:c5:af:49:7f: 50:a5:b2:c0:90:0e:69:cb:a9:16:b6:d5:c2:be:38:b5:5f:86: 96:fe:28:ef:83:41:3e:dd:b3:e9:c4:c2:d3:3e:a1:2e:7b:70: d6:bd:f3:72:8c:93:69:54:24:ba:05:7c:14:e7:b4:2f:58:53: b4:48:56:ce:25:78:cf:f8:de:78:72:50:e8:a8:4f:96:eb:a6: 76:e9:60:92:18:f4:e6:25:73:46:8d:e8:47:89:1f:a5:7a:86: a4:1c:c3:65:fa:c6:7a:03:ac:d3:de:6b:99:3c:99:03:43:f3: c7:a1:ff:72:05:b7:83:60:c9:18:cb:0a:be:96:36:3f:26:9b: ec:c5:34:78:af:0a:1d:98:07:ee:50:5f:e1:26:ff:35:f3:e3: 55:83:36:3d:3b:81:4f:bd:2b:e1:30:5b:95:c5:f8:dc:11:16: b3:20:22:da:e3:cf:5b:d3:0c:66:15:e2:e8:81:69:8b:5a:b9: 55:18:6e:e5:f7:1a:ff:63:ce:6e:bd:09:46:05:11:71:dc:a3: e7:21:1f:59:95:69:cf:a2:1f:cf:51:86:a1:3f:7f:2a:bc:5f: be:b9:84:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0g7kAi/OV+NZWhdXgh62MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1Yzg4YjFjNDFmYmViNWRhYmVmNzQzYzU3YWNkZmZjNGZh NzQ2OTkwHhcNMjUxMjA2MDQwMTA2WhcNMjUxMjA3MDQwMTA2WjAzMTEwLwYDVQQD EygwZmVmOTdjYzU4MmEwMWYxZjJiMjkzNzg1N2NkN2MwMzBmMjFjYmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxURfeIpMTk6BHYliQ7ZMVXkflRp vLDVg2SyRFS0u22Qo/Bh7nQ3u45q97TSlfw1xpqV6r7XgUt2rYSSrlY4pKK8LDPr /5mrWh3pSDErVStd9RM+vLLjKr5yySpJSWgMHzsZWfnEg+BvoCRLXjhZClQkolow +WqYjqfo5K7BFzdpbRaONjODad8QcS8ioDw/S7VXS7Q479k6XpRJB9N+2EPyi3Ug r+Zvkt8nuGnX4rodYmMSQsGEw+yp+/kfXjX2qyZhxZHYzATDQwMYqkBUgBGS4jyZ tgMUr0rraC58dyKQExyHh7nV1idM4E6r6+qlncaoWgsr7sGdo4xLm82cAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA/vl8xYKgHx8rKTeFfNfAMPIcurMB8GA1UdIwQY MBaAFHXIixxB++tdq+90PFes3/xPp0aZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGNpTEhFSDc2MTJyNzNROFY2emZfRS1uUnBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8yYTIxNjQtMTY1Ni00NGNiLTkyOTQt MGIxZGVjMzc1NTU0LzEvZGNpTEhFSDc2MTJyNzNROFY2emZfRS1uUnBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8yYTIxNjQtMTY1Ni00NGNiLTkyOTQtMGIxZGVjMzc1NTU0 LzEvZGNpTEhFSDc2MTJyNzNROFY2emZfRS1uUnBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASgS4pgX7 QUYiaKFiEZVfBqIb8QfMK8uU/9YHb0MteonFr0l/UKWywJAOacupFrbVwr44tV+G lv4o74NBPt2z6cTC0z6hLntw1r3zcoyTaVQkugV8FOe0L1hTtEhWziV4z/jeeHJQ 6KhPluumdulgkhj05iVzRo3oR4kfpXqGpBzDZfrGegOs095rmTyZA0Pzx6H/cgW3 g2DJGMsKvpY2Pyab7MU0eK8KHZgH7lBf4Sb/NfPjVYM2PTuBT70r4TBblcX43BEW syAi2uPPW9MMZhXi6IFpi1q5VRhu5fca/2PObr0JRgURcdyj5yEfWZVpz6Ifz1GG oT9/KrxfvrmE3A== -----END CERTIFICATE-----Generated at Sat Dec 6 10:30:57 2025 by rpki-client