This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft File: DghrZ9iYllO662i40kq56b0Mryo.mft (raw, json) Hash identifier: Tako+oRsMtloGHGuD4HBo+wZgiiWrdN54unJyxpSl64= Subject key identifier: D6:65:13:63:B3:39:39:0D:7E:CD:64:62:F2:F7:1B:20:15:24:F2:7A Authority key identifier: 0E:08:6B:67:D8:98:96:53:BA:EB:68:B8:D2:4A:B9:E9:BD:0C:AF:2A Certificate issuer: /CN=0e086b67d8989653baeb68b8d24ab9e9bd0caf2a Certificate serial: 019AF0BF471BEDA309014DCE3DE9AFDF60DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft Manifest number: 11DB Signing time: Fri 05 Dec 2025 23:00:58 +0000 Manifest this update: Fri 05 Dec 2025 23:00:58 +0000 Manifest next update: Sat 06 Dec 2025 23:00:58 +0000 Files and hashes: 1: DghrZ9iYllO662i40kq56b0Mryo.crl (hash: 8mzU8S8qLgsnIOvh59xgEGX04NS8LD4uVvPLZ0mm9iY=) 2: XKbuE11HMiW-d3-7SHwE1VaECgw.roa (hash: iROyh9ucuOmjws3pOPkYjHDlUGlInLoKUEPjUvuWoZE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:47:1b:ed:a3:09:01:4d:ce:3d:e9:af:df:60:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e086b67d8989653baeb68b8d24ab9e9bd0caf2a Validity Not Before: Dec 5 23:00:58 2025 GMT Not After : Dec 6 23:00:58 2025 GMT Subject: CN=d6651363b339390d7ecd6462f2f71b201524f27a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:36:23:48:cb:70:70:a2:4d:8b:54:c3:55:c3: da:05:f3:45:1d:13:e3:76:9a:89:f9:cf:86:59:b9: 8e:9d:ce:42:55:2b:0e:cb:cf:2d:13:33:0b:93:6f: b8:55:40:73:e7:72:6d:f7:74:13:11:43:39:2b:5e: 78:c6:25:1c:87:e5:2c:55:e7:2f:52:d3:8c:2e:0c: 17:a5:ad:70:ce:72:b0:6a:98:9e:ab:e4:f5:7f:d3: af:34:99:11:63:0a:f5:63:c4:aa:b4:dc:87:ff:e7: 34:7b:01:94:db:40:ec:f4:ae:4f:0c:c7:8c:fc:ed: b4:26:36:ad:e9:c8:77:ef:eb:d7:fb:d8:61:00:91: 0c:41:1c:db:bb:53:7b:e2:a1:67:e9:9a:50:0d:45: ed:6b:ab:8f:72:0d:c9:7f:62:33:17:ab:dd:4c:00: 0f:4e:e1:05:55:0a:8d:0b:4e:4c:b1:8e:d9:06:c0: c8:3e:82:64:4e:0d:96:b0:a0:cf:85:a3:1f:93:c9: 6b:42:fb:2b:5d:1d:80:1a:bc:b6:7b:97:3a:51:78: a3:4c:7d:09:ac:38:75:fd:c8:12:83:6c:b3:48:72: a5:a2:5d:0f:72:01:7e:f4:cd:42:98:e3:27:00:a9: 5a:bd:65:01:24:14:a2:88:c1:40:2e:6a:4d:49:5f: 25:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:65:13:63:B3:39:39:0D:7E:CD:64:62:F2:F7:1B:20:15:24:F2:7A X509v3 Authority Key Identifier: keyid:0E:08:6B:67:D8:98:96:53:BA:EB:68:B8:D2:4A:B9:E9:BD:0C:AF:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:5e:dd:85:6c:61:83:41:b6:13:4a:9b:d9:be:8f:1f:b3:4e: 40:99:5b:2d:b9:be:2b:85:5c:e2:dd:73:99:3c:77:48:54:57: 37:e3:e0:d6:04:c3:b5:79:1f:bc:ad:cb:d3:4a:e7:eb:3e:66: de:c1:4f:5a:77:a0:a0:af:fb:f4:0c:ac:3c:68:95:1d:79:98: d6:02:16:dc:30:86:d5:aa:d6:b1:54:7e:c0:02:53:f8:a4:63: 5c:c6:91:45:89:76:5a:e3:5e:44:00:57:27:c5:90:53:9e:d1: 20:70:29:0b:5e:0a:b2:54:6e:cc:e9:31:10:f7:8f:9d:0d:23: a3:b6:2b:77:1d:e2:66:04:ae:e8:48:74:b1:54:61:bb:84:eb: d5:54:6d:13:83:a7:fe:e7:cd:af:67:38:43:6e:2d:fd:ff:cf: 72:1f:3a:d9:36:70:73:02:df:60:fc:ec:46:eb:75:4e:d2:80: 56:b2:2f:54:7f:26:65:cd:b8:11:80:d5:cd:44:9d:6e:ac:5f: 4e:51:f2:b9:4d:d9:3f:62:14:a5:51:a1:60:48:65:5a:58:e2: d9:34:6d:f0:cd:ff:b8:4f:b6:fb:b4:13:18:85:fd:d0:7e:c9: 24:83:90:da:40:4d:bb:66:7a:8f:1e:d3:ab:88:95:6d:e4:28: da:e0:c5:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv0cb7aMJAU3OPemv32DdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMDg2YjY3ZDg5ODk2NTNiYWViNjhiOGQyNGFiOWU5YmQw Y2FmMmEwHhcNMjUxMjA1MjMwMDU4WhcNMjUxMjA2MjMwMDU4WjAzMTEwLwYDVQQD EyhkNjY1MTM2M2IzMzkzOTBkN2VjZDY0NjJmMmY3MWIyMDE1MjRmMjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzYjSMtwcKJNi1TDVcPaBfNFHRPj dpqJ+c+GWbmOnc5CVSsOy88tEzMLk2+4VUBz53Jt93QTEUM5K154xiUch+UsVecv UtOMLgwXpa1wznKwapieq+T1f9OvNJkRYwr1Y8SqtNyH/+c0ewGU20Ds9K5PDMeM /O20Jjat6ch37+vX+9hhAJEMQRzbu1N74qFn6ZpQDUXta6uPcg3Jf2IzF6vdTAAP TuEFVQqNC05MsY7ZBsDIPoJkTg2WsKDPhaMfk8lrQvsrXR2AGry2e5c6UXijTH0J rDh1/cgSg2yzSHKlol0PcgF+9M1CmOMnAKlavWUBJBSiiMFALmpNSV8l4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNZlE2OzOTkNfs1kYvL3GyAVJPJ6MB8GA1UdIwQY MBaAFA4Ia2fYmJZTuutouNJKuem9DK8qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGdoclo5aVlsbE82NjJpNDBrcTU2YjBNcnlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8zNzk2ZmEtYzAyZS00NWY5LWExYTQt NjIyYmI0ODk5ODg3LzEvRGdoclo5aVlsbE82NjJpNDBrcTU2YjBNcnlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8zNzk2ZmEtYzAyZS00NWY5LWExYTQtNjIyYmI0ODk5ODg3 LzEvRGdoclo5aVlsbE82NjJpNDBrcTU2YjBNcnlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEV7dhWxh g0G2E0qb2b6PH7NOQJlbLbm+K4Vc4t1zmTx3SFRXN+Pg1gTDtXkfvK3L00rn6z5m 3sFPWnegoK/79AysPGiVHXmY1gIW3DCG1arWsVR+wAJT+KRjXMaRRYl2WuNeRABX J8WQU57RIHApC14KslRuzOkxEPePnQ0jo7Yrdx3iZgSu6Eh0sVRhu4Tr1VRtE4On /ufNr2c4Q24t/f/Pch862TZwcwLfYPzsRut1TtKAVrIvVH8mZc24EYDVzUSdbqxf TlHyuU3ZP2IUpVGhYEhlWlji2TRt8M3/uE+2+7QTGIX90H7JJIOQ2kBNu2Z6jx7T q4iVbeQo2uDFXA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:55:50 2025 by rpki-client