This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft File: Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft (raw, json) Hash identifier: IX2Umn4OqaqTwUWK8qOFE0xm5mq1MbcOmUG4XuCmt48= Subject key identifier: C4:21:E4:30:07:07:FD:F8:8F:31:72:18:DD:93:42:BA:0B:00:D7:A9 Authority key identifier: 0E:6B:38:5C:7B:87:78:BF:78:AF:24:21:C9:9F:5D:38:BD:55:69:14 Certificate issuer: /CN=0e6b385c7b8778bf78af2421c99f5d38bd556914 Certificate serial: 019B2D41E5B3F674C7FBB5C11CA7841039C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft Manifest number: 1781 Signing time: Wed 17 Dec 2025 17:00:51 +0000 Manifest this update: Wed 17 Dec 2025 17:00:51 +0000 Manifest next update: Thu 18 Dec 2025 17:00:51 +0000 Files and hashes: 1: Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl (hash: AoyoZVt/IVHSkhVg4FnrEq+BtXPGpchktnGsKwR7MC0=) 2: eB8JcdNMitcIB4IK3YDPeoxd_sE.roa (hash: uAuMd6C1FXSh+wtAiy0MbK5wWWHEYjRTVBUBNDQkdQU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 17:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:41:e5:b3:f6:74:c7:fb:b5:c1:1c:a7:84:10:39:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e6b385c7b8778bf78af2421c99f5d38bd556914 Validity Not Before: Dec 17 17:00:51 2025 GMT Not After : Dec 18 17:00:51 2025 GMT Subject: CN=c421e4300707fdf88f317218dd9342ba0b00d7a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fc:16:4f:a4:9f:77:d8:a8:43:79:a4:05:a6: 14:5b:ba:2b:70:26:f6:cc:d6:40:d7:29:7a:84:df: 5c:80:03:9d:95:f1:8d:55:67:27:a3:37:b3:40:44: 19:7e:38:cd:a0:37:a6:7b:dd:ee:aa:59:bc:2f:d6: a3:fb:70:b2:ed:9f:fb:16:55:d9:2a:6a:96:92:41: 44:5c:ae:55:ce:2b:b2:1e:7d:f1:09:40:62:b2:e8: e7:da:8e:ea:28:44:0a:34:b6:91:61:f3:a2:e5:a4: a5:44:dd:c1:5c:fd:41:0b:24:d5:94:5c:b6:84:fb: 96:35:b0:34:ea:f9:07:ea:ed:fd:49:3a:13:b5:e4: e2:c1:d3:56:66:53:60:86:e9:f3:10:bd:a6:e9:b4: 0d:17:aa:2d:5e:cd:83:19:88:fa:1b:30:39:38:32: c1:10:d7:d0:6b:a5:95:57:62:98:db:09:e2:ef:2a: 1e:31:6a:cb:38:65:84:b2:18:c4:13:97:a7:f6:1f: af:ef:3b:c6:95:74:21:63:fb:80:dd:dd:81:8d:dd: a5:7c:4c:9c:d8:39:14:de:57:a2:52:8b:64:c9:4d: 4d:93:a2:d1:ec:dc:6f:66:38:a6:b8:79:5f:68:93: c6:b7:17:a1:9f:68:93:8c:c4:24:80:3e:4b:1d:b6: 3d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:21:E4:30:07:07:FD:F8:8F:31:72:18:DD:93:42:BA:0B:00:D7:A9 X509v3 Authority Key Identifier: keyid:0E:6B:38:5C:7B:87:78:BF:78:AF:24:21:C9:9F:5D:38:BD:55:69:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:4a:e6:9c:c7:23:9f:a4:a9:d8:9d:fd:e1:6c:72:98:25:44: 3b:f4:7a:ca:9a:b8:db:1b:6b:0f:c9:99:b8:2f:30:09:d0:d8: 42:7b:9a:51:6a:85:29:27:bc:df:10:8c:26:e5:7b:da:ea:5a: b4:f1:18:f1:1e:d6:0a:db:85:cb:49:a1:25:70:3e:68:6c:35: be:36:2b:29:d5:c0:30:bd:28:d9:ad:66:ec:9a:e2:5a:85:be: 70:44:23:b4:05:ba:26:1b:23:58:53:9b:76:ed:fb:67:57:c9: 21:67:a7:f3:2e:87:0b:50:33:3b:85:d6:57:a0:31:40:45:fb: ed:95:b5:36:5a:7e:ab:a0:77:35:f1:83:09:a5:be:cd:6f:bd: 2a:15:d3:74:a8:d3:0f:cf:25:8b:92:c4:e1:9f:e4:12:5f:3b: e0:89:bf:84:f9:74:18:c2:b1:c2:fd:dd:ee:3d:b9:59:e6:b8: aa:fd:6c:90:3b:ca:59:fe:3d:bd:ee:45:ed:d9:7f:1e:ae:94: ab:50:a0:fe:64:3f:f6:30:d2:f7:67:17:6c:0f:85:85:c0:ac: 1b:2b:e1:ab:ea:d9:9a:9e:15:26:d1:9f:27:15:ff:d5:34:95: d2:23:0c:99:9d:1f:81:da:f6:60:62:9f:a3:99:3b:66:b0:72: 50:d4:e4:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstQeWz9nTH+7XBHKeEEDnEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNmIzODVjN2I4Nzc4YmY3OGFmMjQyMWM5OWY1ZDM4YmQ1 NTY5MTQwHhcNMjUxMjE3MTcwMDUxWhcNMjUxMjE4MTcwMDUxWjAzMTEwLwYDVQQD EyhjNDIxZTQzMDA3MDdmZGY4OGYzMTcyMThkZDkzNDJiYTBiMDBkN2E5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPwWT6Sfd9ioQ3mkBaYUW7orcCb2 zNZA1yl6hN9cgAOdlfGNVWcnozezQEQZfjjNoDeme93uqlm8L9aj+3Cy7Z/7FlXZ KmqWkkFEXK5VziuyHn3xCUBisujn2o7qKEQKNLaRYfOi5aSlRN3BXP1BCyTVlFy2 hPuWNbA06vkH6u39SToTteTiwdNWZlNghunzEL2m6bQNF6otXs2DGYj6GzA5ODLB ENfQa6WVV2KY2wni7yoeMWrLOGWEshjEE5en9h+v7zvGlXQhY/uA3d2Bjd2lfEyc 2DkU3leiUotkyU1Nk6LR7NxvZjimuHlfaJPGtxehn2iTjMQkgD5LHbY91wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMQh5DAHB/34jzFyGN2TQroLANepMB8GA1UdIwQY MBaAFA5rOFx7h3i/eK8kIcmfXTi9VWkUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG1zNFhIdUhlTDk0cnlRaHlaOWRPTDFWYVJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8wYThmYzEtOTg2ZS00MjA5LTkzMGMt MWM3NzQzMWIwNWY3LzEvRG1zNFhIdUhlTDk0cnlRaHlaOWRPTDFWYVJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi8wYThmYzEtOTg2ZS00MjA5LTkzMGMtMWM3NzQzMWIwNWY3 LzEvRG1zNFhIdUhlTDk0cnlRaHlaOWRPTDFWYVJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbErmnMcj n6Sp2J394WxymCVEO/R6ypq42xtrD8mZuC8wCdDYQnuaUWqFKSe83xCMJuV72upa tPEY8R7WCtuFy0mhJXA+aGw1vjYrKdXAML0o2a1m7JriWoW+cEQjtAW6JhsjWFOb du37Z1fJIWen8y6HC1AzO4XWV6AxQEX77ZW1Nlp+q6B3NfGDCaW+zW+9KhXTdKjT D88li5LE4Z/kEl874Im/hPl0GMKxwv3d7j25Wea4qv1skDvKWf49ve5F7dl/Hq6U q1Cg/mQ/9jDS92cXbA+FhcCsGyvhq+rZmp4VJtGfJxX/1TSV0iMMmZ0fgdr2YGKf o5k7ZrByUNTkqg== -----END CERTIFICATE-----Generated at Wed Dec 17 21:05:47 2025 by rpki-client