This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/858321-f51f-4401-9a39-68ee73f964f1/1/Dnn0fv8a-hsjtiOBOED2zr9XeaQ.mft File: Dnn0fv8a-hsjtiOBOED2zr9XeaQ.mft (raw, json) Hash identifier: aX81Vf5IcfiGeRrcCluqNIRUrP07/1NnPsIlb3Ue1sQ= Subject key identifier: 4F:F2:C9:D1:44:BE:44:D4:60:93:80:FF:9B:17:57:30:41:A7:F9:96 Authority key identifier: 0E:79:F4:7E:FF:1A:FA:1B:23:B6:23:81:38:40:F6:CE:BF:57:79:A4 Certificate issuer: /CN=0e79f47eff1afa1b23b623813840f6cebf5779a4 Certificate serial: 019AF08814756728EEE2AA618AF84BA53A75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dnn0fv8a-hsjtiOBOED2zr9XeaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/858321-f51f-4401-9a39-68ee73f964f1/1/Dnn0fv8a-hsjtiOBOED2zr9XeaQ.mft Manifest number: 1F Signing time: Fri 05 Dec 2025 22:00:41 +0000 Manifest this update: Fri 05 Dec 2025 22:00:41 +0000 Manifest next update: Sat 06 Dec 2025 22:00:41 +0000 Files and hashes: 1: Dnn0fv8a-hsjtiOBOED2zr9XeaQ.crl (hash: 0Nmm3ArwPf9qF2ELSMZoEtyv0LUZqjRiSHRPR1RuqjQ=) 2: mvG3YWdgme5kDL899liGGrl6AXw.roa (hash: RhjOG7ei+0jF0h6xgfCw7yY1D/pCi55eBTTmGtVMc0M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/858321-f51f-4401-9a39-68ee73f964f1/1/Dnn0fv8a-hsjtiOBOED2zr9XeaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/858321-f51f-4401-9a39-68ee73f964f1/1/Dnn0fv8a-hsjtiOBOED2zr9XeaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Dnn0fv8a-hsjtiOBOED2zr9XeaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:14:75:67:28:ee:e2:aa:61:8a:f8:4b:a5:3a:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e79f47eff1afa1b23b623813840f6cebf5779a4 Validity Not Before: Dec 5 22:00:41 2025 GMT Not After : Dec 6 22:00:41 2025 GMT Subject: CN=4ff2c9d144be44d4609380ff9b17573041a7f996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:71:9f:90:1e:00:17:bc:ea:fc:51:48:a0:2e: 64:84:2c:e9:24:22:f9:ae:68:57:6f:a6:eb:6b:02: f6:60:db:f5:64:56:9f:10:2e:54:07:07:28:c1:e6: e2:e7:fe:95:a6:25:a9:5e:a1:b1:1a:60:e3:29:25: 3e:ad:7b:95:8e:27:d7:76:19:7b:80:41:ec:89:8b: e4:ee:1f:6c:92:63:9f:e1:ad:35:29:45:02:4a:51: ed:ad:47:80:5a:64:08:41:87:34:cc:19:6f:de:4f: 2f:dd:ed:86:c5:32:74:e0:ad:3a:9e:f0:58:0c:a2: 56:b2:82:8a:98:1f:77:41:52:cc:c2:81:a6:87:2f: 3a:d9:9f:03:51:f5:79:68:8e:99:80:ad:f8:1e:dd: a9:7d:38:f7:7e:76:ef:f0:5e:d3:2c:a3:ce:5d:0c: 7a:3f:c2:ca:a7:f2:91:9f:62:1d:9a:69:23:d2:99: c6:89:1e:08:e8:d3:39:17:af:5b:3d:81:f8:29:c4: 94:27:db:c2:e8:09:11:16:c2:3a:2e:02:e3:f2:d2: 7f:46:8f:a4:06:ec:36:54:13:81:41:3e:b8:de:7b: 03:11:ba:09:13:2d:36:53:21:b7:e8:55:6e:08:2b: f0:f5:ae:b3:ca:ff:bd:37:6e:95:3d:70:22:1c:83: 20:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:F2:C9:D1:44:BE:44:D4:60:93:80:FF:9B:17:57:30:41:A7:F9:96 X509v3 Authority Key Identifier: keyid:0E:79:F4:7E:FF:1A:FA:1B:23:B6:23:81:38:40:F6:CE:BF:57:79:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dnn0fv8a-hsjtiOBOED2zr9XeaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/858321-f51f-4401-9a39-68ee73f964f1/1/Dnn0fv8a-hsjtiOBOED2zr9XeaQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/858321-f51f-4401-9a39-68ee73f964f1/1/Dnn0fv8a-hsjtiOBOED2zr9XeaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:bb:95:1a:5f:65:61:85:56:7c:fa:62:8b:79:fb:ab:dd:07: e0:0c:c2:6d:4b:f5:5a:c4:ef:ac:e4:ee:00:4c:bd:21:15:3c: f9:51:10:e3:1a:4e:6b:7e:5c:9c:51:1b:95:a2:cb:74:11:b2: 97:f9:dd:ae:8d:b9:95:91:af:71:0d:64:cd:96:91:2d:73:4e: e6:e6:7c:a5:02:e3:85:38:da:14:a8:15:fb:c7:a0:9f:13:5f: 24:b5:8d:36:62:26:18:82:df:18:5e:52:a6:1e:20:51:c2:06: 25:3d:bc:02:a9:b7:1a:a3:c7:28:a9:f4:1c:bb:c7:d1:1c:28: 52:c2:17:50:9c:58:a5:0a:d3:72:38:c7:2b:00:7f:62:eb:04: f1:71:46:ee:50:93:98:f5:21:c3:12:a4:94:5c:8a:9b:62:03: b2:e7:db:cd:f0:e7:43:23:b5:0f:3a:2e:d1:a8:9e:be:3a:9e: bd:ab:77:ea:87:c1:bd:4e:da:34:79:ba:f7:b0:d8:20:e1:16: 65:a3:43:d6:a3:bb:7e:9d:69:7e:ee:f3:e5:ad:34:d4:d6:80: b3:f7:13:f4:c4:04:54:87:58:01:a6:36:8f:4f:98:96:6d:02: b9:a9:31:f3:e1:5e:4d:cb:10:5c:bc:eb:b2:2a:a8:77:69:15: e3:b8:eb:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiBR1Zyju4qphivhLpTp1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNzlmNDdlZmYxYWZhMWIyM2I2MjM4MTM4NDBmNmNlYmY1 Nzc5YTQwHhcNMjUxMjA1MjIwMDQxWhcNMjUxMjA2MjIwMDQxWjAzMTEwLwYDVQQD Eyg0ZmYyYzlkMTQ0YmU0NGQ0NjA5MzgwZmY5YjE3NTczMDQxYTdmOTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnGfkB4AF7zq/FFIoC5khCzpJCL5 rmhXb6brawL2YNv1ZFafEC5UBwcowebi5/6VpiWpXqGxGmDjKSU+rXuVjifXdhl7 gEHsiYvk7h9skmOf4a01KUUCSlHtrUeAWmQIQYc0zBlv3k8v3e2GxTJ04K06nvBY DKJWsoKKmB93QVLMwoGmhy862Z8DUfV5aI6ZgK34Ht2pfTj3fnbv8F7TLKPOXQx6 P8LKp/KRn2Idmmkj0pnGiR4I6NM5F69bPYH4KcSUJ9vC6AkRFsI6LgLj8tJ/Ro+k Buw2VBOBQT643nsDEboJEy02UyG36FVuCCvw9a6zyv+9N26VPXAiHIMgMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE/yydFEvkTUYJOA/5sXVzBBp/mWMB8GA1UdIwQY MBaAFA559H7/GvobI7YjgThA9s6/V3mkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG5uMGZ2OGEtaHNqdGlPQk9FRDJ6cjlYZWFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS84NTgzMjEtZjUxZi00NDAxLTlhMzkt NjhlZTczZjk2NGYxLzEvRG5uMGZ2OGEtaHNqdGlPQk9FRDJ6cjlYZWFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS84NTgzMjEtZjUxZi00NDAxLTlhMzktNjhlZTczZjk2NGYx LzEvRG5uMGZ2OGEtaHNqdGlPQk9FRDJ6cjlYZWFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASLuVGl9l YYVWfPpii3n7q90H4AzCbUv1WsTvrOTuAEy9IRU8+VEQ4xpOa35cnFEblaLLdBGy l/ndro25lZGvcQ1kzZaRLXNO5uZ8pQLjhTjaFKgV+8egnxNfJLWNNmImGILfGF5S ph4gUcIGJT28Aqm3GqPHKKn0HLvH0RwoUsIXUJxYpQrTcjjHKwB/YusE8XFG7lCT mPUhwxKklFyKm2IDsufbzfDnQyO1Dzou0aievjqevat36ofBvU7aNHm697DYIOEW ZaND1qO7fp1pfu7z5a001NaAs/cT9MQEVIdYAaY2j0+Ylm0Cuakx8+FeTcsQXLzr siqod2kV47jrbA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:02:26 2025 by rpki-client