This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft File: Df9Jns244Vczu3EQlZlZrA4WYAg.mft (raw, json) Hash identifier: 2UGs19sNnT75/aw5OpMPWY1PZxR9kUn1RYoDJFBxu4Q= Subject key identifier: FE:8C:F4:7B:5E:08:DB:E5:11:2A:E3:FF:1B:38:03:A1:C0:9D:5A:01 Authority key identifier: 0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08 Certificate issuer: /CN=0dff499ecdb8e15733bb7110959959ac0e166008 Certificate serial: 019AF12DDAC93C417D57BDF2E209DD9CB4F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft Manifest number: 0ED8 Signing time: Sat 06 Dec 2025 01:01:45 +0000 Manifest this update: Sat 06 Dec 2025 01:01:45 +0000 Manifest next update: Sun 07 Dec 2025 01:01:45 +0000 Files and hashes: 1: Df9Jns244Vczu3EQlZlZrA4WYAg.crl (hash: vin11PilqqFd6wy9Uz62/3vMm6HVjggSR4XR6BeznCo=) 2: u2KSOkA9Tk7vaFv7OCby2G46AIs.roa (hash: QpVj8Qnda9R0uaJPbddZ05OYdtwL9DiuDJMuscNQj0k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:da:c9:3c:41:7d:57:bd:f2:e2:09:dd:9c:b4:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dff499ecdb8e15733bb7110959959ac0e166008 Validity Not Before: Dec 6 01:01:45 2025 GMT Not After : Dec 7 01:01:45 2025 GMT Subject: CN=fe8cf47b5e08dbe5112ae3ff1b3803a1c09d5a01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:04:44:ff:87:4f:4c:a7:7a:89:ae:4e:87:62: 46:86:2c:dc:2f:ac:3a:02:94:eb:f4:81:38:a0:2b: 93:d5:b5:bb:cf:a4:e0:22:19:5c:f5:ee:dd:e3:ae: 28:b5:30:90:5e:46:15:e4:75:24:c7:6c:5f:6d:d1: 39:10:1a:9b:7b:11:21:cf:bf:fd:fd:a8:09:38:e2: 87:76:b1:1b:cc:62:21:69:15:a8:88:c1:a5:3e:f3: fb:b1:b0:2f:c8:bd:ec:22:83:3b:08:57:0c:8a:09: 98:a3:82:4d:68:cb:38:4a:3b:b6:5c:bf:cc:20:80: 09:21:d9:bf:9e:ef:0f:61:91:cf:fe:44:a2:c1:a6: f8:a4:72:90:90:1d:b5:b6:61:37:6c:35:21:f4:83: 20:66:14:36:37:80:c3:8b:09:14:6d:fb:88:1c:77: 23:30:ef:c4:88:15:b2:51:04:b7:ba:66:7e:23:eb: b6:1a:b3:77:7a:98:3e:bc:7c:84:88:f6:e4:7c:45: 60:4c:f4:bd:e7:8e:91:72:6e:1e:b7:1a:33:64:ce: 5e:52:74:0f:1c:0f:31:20:d0:91:ab:aa:24:31:e4: c0:f4:da:62:da:ce:c4:36:88:31:34:67:e1:ed:c1: ac:56:ea:84:a7:29:b8:da:25:c3:e9:0f:1b:18:fb: ce:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:8C:F4:7B:5E:08:DB:E5:11:2A:E3:FF:1B:38:03:A1:C0:9D:5A:01 X509v3 Authority Key Identifier: keyid:0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:35:9a:e1:a7:21:d8:52:8d:f0:6b:c9:53:ff:09:95:f6:b7: 3d:9f:26:88:4c:6c:ff:45:de:fa:96:fd:3b:a5:8b:3d:ff:ed: a0:84:f1:1c:c3:19:22:92:05:a6:28:72:97:8a:38:71:67:1b: 02:e9:86:72:d2:73:42:77:58:bc:5b:ff:f2:59:37:6f:22:22: 8c:ee:74:82:de:3d:60:23:3e:f2:9a:00:5b:45:12:fa:17:0c: d6:a5:00:01:32:86:62:97:76:92:d4:dd:04:96:42:a0:e8:d1: 63:5f:0a:39:d4:53:05:cb:35:ed:5e:dc:50:e8:77:40:1a:59: a1:93:2f:0c:3d:9e:42:e6:d8:89:e4:4c:3b:8d:6a:7c:8c:56: 48:bb:d5:db:29:d9:6c:f6:5d:87:77:05:89:62:d4:df:f4:5c: 13:5c:9c:ca:0d:83:7c:a9:1c:16:28:41:fa:27:d6:02:a7:5d: cf:57:b7:55:2c:ff:50:e6:a5:cc:22:d6:be:79:18:cb:48:d9: 90:e7:38:d3:39:55:86:d4:37:ae:56:e1:b5:ad:ae:57:89:26: 60:b0:d5:c6:5b:72:51:e9:09:cb:27:11:e6:b5:b2:c5:03:4d: ae:39:1b:23:45:d4:b5:b9:09:17:cd:f6:db:05:6b:37:d7:69: 16:7e:a4:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLdrJPEF9V73y4gndnLT2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZmY0OTllY2RiOGUxNTczM2JiNzExMDk1OTk1OWFjMGUx NjYwMDgwHhcNMjUxMjA2MDEwMTQ1WhcNMjUxMjA3MDEwMTQ1WjAzMTEwLwYDVQQD EyhmZThjZjQ3YjVlMDhkYmU1MTEyYWUzZmYxYjM4MDNhMWMwOWQ1YTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyARE/4dPTKd6ia5Oh2JGhizcL6w6 ApTr9IE4oCuT1bW7z6TgIhlc9e7d464otTCQXkYV5HUkx2xfbdE5EBqbexEhz7/9 /agJOOKHdrEbzGIhaRWoiMGlPvP7sbAvyL3sIoM7CFcMigmYo4JNaMs4Sju2XL/M IIAJIdm/nu8PYZHP/kSiwab4pHKQkB21tmE3bDUh9IMgZhQ2N4DDiwkUbfuIHHcj MO/EiBWyUQS3umZ+I+u2GrN3epg+vHyEiPbkfEVgTPS9546Rcm4etxozZM5eUnQP HA8xINCRq6okMeTA9Npi2s7ENogxNGfh7cGsVuqEpym42iXD6Q8bGPvOkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP6M9HteCNvlESrj/xs4A6HAnVoBMB8GA1UdIwQY MBaAFA3/SZ7NuOFXM7txEJWZWawOFmAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGY5Sm5zMjQ0VmN6dTNFUWxabFpyQTRXWUFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi81OTYxMjAtYjI1ZC00Mjc5LThlYTEt NmY3YzBlYzkxZDhhLzEvRGY5Sm5zMjQ0VmN6dTNFUWxabFpyQTRXWUFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi81OTYxMjAtYjI1ZC00Mjc5LThlYTEtNmY3YzBlYzkxZDhh LzEvRGY5Sm5zMjQ0VmN6dTNFUWxabFpyQTRXWUFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATzWa4ach 2FKN8GvJU/8Jlfa3PZ8miExs/0Xe+pb9O6WLPf/toITxHMMZIpIFpihyl4o4cWcb AumGctJzQndYvFv/8lk3byIijO50gt49YCM+8poAW0US+hcM1qUAATKGYpd2ktTd BJZCoOjRY18KOdRTBcs17V7cUOh3QBpZoZMvDD2eQubYieRMO41qfIxWSLvV2ynZ bPZdh3cFiWLU3/RcE1ycyg2DfKkcFihB+ifWAqddz1e3VSz/UOalzCLWvnkYy0jZ kOc40zlVhtQ3rlbhta2uV4kmYLDVxltyUekJyycR5rWyxQNNrjkbI0XUtbkJF832 2wVrN9dpFn6kkQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:15:36 2025 by rpki-client