This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft File: Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft (raw, json) Hash identifier: 71zyJIgm3VuSO9+PlmvZIiUW8tSHZ6zxY0rt6OeIykc= Subject key identifier: 69:3D:4B:2D:25:7C:BC:93:E1:7A:27:6A:33:A5:C0:B6:04:BD:C5:B8 Authority key identifier: 0E:6B:38:5C:7B:87:78:BF:78:AF:24:21:C9:9F:5D:38:BD:55:69:14 Certificate issuer: /CN=0e6b385c7b8778bf78af2421c99f5d38bd556914 Certificate serial: 019AF3528EF0CB407CB14226F460EEAA4A7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 11:01:05 +0000 Manifest this update: Sat 06 Dec 2025 11:01:05 +0000 Manifest next update: Sun 07 Dec 2025 11:01:05 +0000 Files and hashes: 1: Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl (hash: 8Z66yBTR6WQWYvlrn7gUa4XB0mlbfgbqUuMARWfS0WQ=) 2: eB8JcdNMitcIB4IK3YDPeoxd_sE.roa (hash: uAuMd6C1FXSh+wtAiy0MbK5wWWHEYjRTVBUBNDQkdQU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:8e:f0:cb:40:7c:b1:42:26:f4:60:ee:aa:4a:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e6b385c7b8778bf78af2421c99f5d38bd556914 Validity Not Before: Dec 6 11:01:05 2025 GMT Not After : Dec 7 11:01:05 2025 GMT Subject: CN=693d4b2d257cbc93e17a276a33a5c0b604bdc5b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:36:f2:45:f3:b2:31:63:27:0c:f4:95:a7:73: a2:37:5b:73:90:22:ee:63:0b:f4:cf:6a:83:4e:5c: c8:b6:43:47:fe:99:af:cc:47:61:7b:20:72:53:58: d9:4b:ae:cd:b9:54:d0:d9:71:51:54:66:ef:08:47: ad:75:01:f8:7f:5a:81:0f:63:06:25:6e:ad:67:ba: 91:67:78:f9:59:47:f8:c2:d4:74:b7:cf:15:ea:8e: 49:db:98:4a:52:8b:b8:31:a8:4e:65:19:0f:41:93: c3:5a:09:f5:f9:63:0a:eb:d4:ba:91:cc:d8:a1:5b: 56:71:cb:7d:09:63:33:77:d2:5f:b0:03:0a:d2:dc: 27:26:e1:6c:a7:cd:e7:82:ed:9e:90:ee:90:ff:4c: 44:55:65:33:cf:23:a6:49:c1:3e:7f:c4:ab:34:83: 24:61:08:d2:0b:c9:f9:ab:af:ca:eb:0e:39:9d:94: 7e:3a:3e:df:24:d5:c3:8d:bf:0d:c1:ab:7a:49:19: b4:c2:13:b8:c3:91:f1:59:b3:f0:bd:53:ca:83:de: 10:2e:38:19:f0:57:21:dd:66:61:92:94:a9:50:23: 98:39:6e:e8:8f:9d:fd:c9:9e:ad:43:e1:08:f3:ed: b9:c1:b1:85:50:5d:c1:3b:69:82:53:26:23:4f:b9: 15:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:3D:4B:2D:25:7C:BC:93:E1:7A:27:6A:33:A5:C0:B6:04:BD:C5:B8 X509v3 Authority Key Identifier: keyid:0E:6B:38:5C:7B:87:78:BF:78:AF:24:21:C9:9F:5D:38:BD:55:69:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:c8:33:3a:48:00:d8:98:d2:9d:ca:3e:74:df:a5:15:d3:89: 06:8e:74:49:95:7f:cd:09:91:b7:bf:4b:3f:e5:16:fa:2d:73: f3:73:63:e7:0f:0e:aa:82:3c:cf:fe:d7:44:c2:bf:8e:eb:5b: 2f:e6:4e:05:99:eb:3f:a9:71:2f:f2:10:76:1c:ea:47:48:95: d7:b4:92:1e:bf:43:fe:e9:35:d3:b7:19:70:05:68:52:f0:a6: 12:c4:5f:3b:66:2a:8f:99:a1:da:2d:e4:b1:c0:66:25:56:04: 8a:45:00:a9:59:26:9b:d4:76:21:57:f6:43:8b:ac:d8:04:1c: cd:ea:d5:4b:cd:51:e2:cf:39:29:f8:75:f7:58:c9:af:27:05: 68:e4:08:f6:2a:30:a7:c5:38:62:2e:a6:17:c1:c1:92:da:20: 8f:04:a4:eb:1b:8e:62:86:b4:7e:ce:df:08:d5:08:f7:f5:42: f2:bf:bb:92:4c:ca:75:01:67:3b:55:be:7d:58:96:a6:6f:94: ca:ad:70:6c:18:7a:d0:b3:55:f8:e7:de:8a:5b:54:6a:82:b2: 82:e7:96:a7:e0:7b:73:2b:5c:c2:05:9a:d0:e1:04:8f:a3:25: 48:4d:9d:35:0a:7d:9b:71:1f:8f:9f:2e:06:21:a4:80:61:35: 86:f1:e9:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUo7wy0B8sUIm9GDuqkp8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNmIzODVjN2I4Nzc4YmY3OGFmMjQyMWM5OWY1ZDM4YmQ1 NTY5MTQwHhcNMjUxMjA2MTEwMTA1WhcNMjUxMjA3MTEwMTA1WjAzMTEwLwYDVQQD Eyg2OTNkNGIyZDI1N2NiYzkzZTE3YTI3NmEzM2E1YzBiNjA0YmRjNWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDbyRfOyMWMnDPSVp3OiN1tzkCLu Ywv0z2qDTlzItkNH/pmvzEdheyByU1jZS67NuVTQ2XFRVGbvCEetdQH4f1qBD2MG JW6tZ7qRZ3j5WUf4wtR0t88V6o5J25hKUou4MahOZRkPQZPDWgn1+WMK69S6kczY oVtWcct9CWMzd9JfsAMK0twnJuFsp83ngu2ekO6Q/0xEVWUzzyOmScE+f8SrNIMk YQjSC8n5q6/K6w45nZR+Oj7fJNXDjb8Nwat6SRm0whO4w5HxWbPwvVPKg94QLjgZ 8Fch3WZhkpSpUCOYOW7oj539yZ6tQ+EI8+25wbGFUF3BO2mCUyYjT7kVkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGk9Sy0lfLyT4XonajOlwLYEvcW4MB8GA1UdIwQY MBaAFA5rOFx7h3i/eK8kIcmfXTi9VWkUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG1zNFhIdUhlTDk0cnlRaHlaOWRPTDFWYVJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8wYThmYzEtOTg2ZS00MjA5LTkzMGMt MWM3NzQzMWIwNWY3LzEvRG1zNFhIdUhlTDk0cnlRaHlaOWRPTDFWYVJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi8wYThmYzEtOTg2ZS00MjA5LTkzMGMtMWM3NzQzMWIwNWY3 LzEvRG1zNFhIdUhlTDk0cnlRaHlaOWRPTDFWYVJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAecgzOkgA 2JjSnco+dN+lFdOJBo50SZV/zQmRt79LP+UW+i1z83Nj5w8OqoI8z/7XRMK/jutb L+ZOBZnrP6lxL/IQdhzqR0iV17SSHr9D/uk107cZcAVoUvCmEsRfO2Yqj5mh2i3k scBmJVYEikUAqVkmm9R2IVf2Q4us2AQczerVS81R4s85Kfh191jJrycFaOQI9iow p8U4Yi6mF8HBktogjwSk6xuOYoa0fs7fCNUI9/VC8r+7kkzKdQFnO1W+fViWpm+U yq1wbBh60LNV+OfeiltUaoKygueWp+B7cytcwgWa0OEEj6MlSE2dNQp9m3Efj58u BiGkgGE1hvHpfg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:45:35 2025 by rpki-client