This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft File: 0DjDOLEo-Drewvadk8MsU1PKA5g.mft (raw, json) Hash identifier: kbh65ArKOsZDoNGDqphsi8ZZbB/V566T27GjepV2QV4= Subject key identifier: 63:EC:BA:5F:93:70:5D:26:85:CA:30:6D:20:4A:E4:EB:61:6A:78:22 Authority key identifier: D0:38:C3:38:B1:28:F8:3A:DE:C2:F6:9D:93:C3:2C:53:53:CA:03:98 Certificate issuer: /CN=d038c338b128f83adec2f69d93c32c5353ca0398 Certificate serial: 019AF23FC39F107330E887E9D3F6A9ECEC22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft Manifest number: 13FE Signing time: Sat 06 Dec 2025 06:00:56 +0000 Manifest this update: Sat 06 Dec 2025 06:00:56 +0000 Manifest next update: Sun 07 Dec 2025 06:00:56 +0000 Files and hashes: 1: 0DjDOLEo-Drewvadk8MsU1PKA5g.crl (hash: sS3h/Wee8ttIJQfleRmDPqsCI6VQgjZ1lRAvreokxLg=) 2: 7PD1wIgjrZ9T9-fQhjLFUrZGUJE.roa (hash: 8HGos2aeHkG0saEvUQyEseTwmsTJnTnE4JuY9jxzUVo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.crl rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:c3:9f:10:73:30:e8:87:e9:d3:f6:a9:ec:ec:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d038c338b128f83adec2f69d93c32c5353ca0398 Validity Not Before: Dec 6 06:00:56 2025 GMT Not After : Dec 7 06:00:56 2025 GMT Subject: CN=63ecba5f93705d2685ca306d204ae4eb616a7822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:fe:d0:48:ec:60:69:62:03:b1:b7:99:05:02: 61:3b:93:4b:5c:d1:77:62:72:16:99:25:99:39:92: b6:ed:c1:94:a5:f1:0b:ae:d7:9a:b7:1e:26:dc:6b: 5c:c0:39:af:60:a8:33:a4:93:6f:99:ba:0c:a5:e6: 42:79:36:b5:2f:37:5d:f6:91:70:82:70:38:e8:e1: 40:de:75:e2:ae:7e:3a:ba:80:99:3c:29:c7:79:1d: b0:ff:ca:7e:b6:3e:6c:d0:28:50:e6:3e:10:63:1c: 2c:55:da:3c:07:cb:5c:27:55:68:f4:7e:de:2e:83: f6:77:f2:ae:ee:c1:8e:6f:1a:07:66:28:ca:96:2d: a2:9e:b0:e9:86:92:b2:49:ea:40:8b:3b:d8:ef:62: 14:20:4d:06:82:e7:d3:f7:45:8b:69:06:f8:8c:86: 5b:b0:46:4a:79:64:32:ab:6f:49:1e:1a:2f:7c:66: 05:68:bc:d6:bc:16:6a:eb:e5:aa:4a:be:14:42:a2: 67:9c:4c:fb:70:33:ef:45:1e:57:67:90:00:df:7d: d0:02:5e:10:47:0e:d4:ac:05:b4:d4:12:e3:63:b5: 9c:fe:83:18:e4:31:52:e0:1c:0f:dc:e4:8c:f2:7b: a7:aa:8b:de:cf:18:ad:4d:ff:a4:ad:01:1d:f5:84: 29:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:EC:BA:5F:93:70:5D:26:85:CA:30:6D:20:4A:E4:EB:61:6A:78:22 X509v3 Authority Key Identifier: keyid:D0:38:C3:38:B1:28:F8:3A:DE:C2:F6:9D:93:C3:2C:53:53:CA:03:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:c8:14:29:04:7c:b8:22:cb:84:2b:45:d9:5d:a0:ec:ff:d0: 15:8f:ff:84:94:6d:92:5b:4c:a8:60:86:16:12:32:6c:6d:1d: 0c:c2:87:a7:f0:97:ea:d5:63:a0:af:ad:28:62:64:a2:33:f0: 75:3a:17:96:5a:93:fd:8c:c6:c9:1d:7b:10:b8:2a:77:42:8d: 48:bf:93:b3:c6:1e:d0:54:95:bb:67:a6:d5:56:4d:26:57:65: 5d:9c:a3:84:84:48:68:ea:12:c5:5e:8c:08:03:99:8a:18:60: f9:42:f5:43:ed:dd:5f:74:39:12:16:90:34:0a:93:68:1a:6f: 26:fa:8b:47:b6:37:bd:e8:73:59:dd:15:70:98:eb:94:a1:e6: f7:62:66:c1:1b:61:9c:da:43:96:fd:53:06:e7:eb:e5:de:cc: 96:e9:bf:2a:45:1a:49:15:eb:c2:32:de:63:4b:6c:14:7b:f9: 21:86:59:f4:d9:81:25:2d:f8:e3:b4:a2:8f:dc:12:21:7b:ef: 97:6f:ea:74:0f:04:5a:c7:d5:ef:20:d1:22:48:5b:ad:8c:65: 7f:46:92:54:d9:1a:42:4b:86:74:63:a2:ef:78:00:45:78:4d: 89:ad:e0:08:31:d5:bc:d9:4a:88:8c:fb:94:f2:ec:62:13:06: c4:78:3f:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP8OfEHMw6Ifp0/ap7OwiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwMzhjMzM4YjEyOGY4M2FkZWMyZjY5ZDkzYzMyYzUzNTNj YTAzOTgwHhcNMjUxMjA2MDYwMDU2WhcNMjUxMjA3MDYwMDU2WjAzMTEwLwYDVQQD Eyg2M2VjYmE1ZjkzNzA1ZDI2ODVjYTMwNmQyMDRhZTRlYjYxNmE3ODIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9f7QSOxgaWIDsbeZBQJhO5NLXNF3 YnIWmSWZOZK27cGUpfELrteatx4m3GtcwDmvYKgzpJNvmboMpeZCeTa1Lzdd9pFw gnA46OFA3nXirn46uoCZPCnHeR2w/8p+tj5s0ChQ5j4QYxwsVdo8B8tcJ1Vo9H7e LoP2d/Ku7sGObxoHZijKli2inrDphpKySepAizvY72IUIE0GgufT90WLaQb4jIZb sEZKeWQyq29JHhovfGYFaLzWvBZq6+WqSr4UQqJnnEz7cDPvRR5XZ5AA333QAl4Q Rw7UrAW01BLjY7Wc/oMY5DFS4BwP3OSM8nunqovezxitTf+krQEd9YQpSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGPsul+TcF0mhcowbSBK5OthangiMB8GA1UdIwQY MBaAFNA4wzixKPg63sL2nZPDLFNTygOYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMERqRE9MRW8tRHJld3ZhZGs4TXNVMVBLQTVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS85MjVmOTEtMzBjNS00YTZiLWExNDkt OWJmOGIxZWYyZTk2LzEvMERqRE9MRW8tRHJld3ZhZGs4TXNVMVBLQTVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS85MjVmOTEtMzBjNS00YTZiLWExNDktOWJmOGIxZWYyZTk2 LzEvMERqRE9MRW8tRHJld3ZhZGs4TXNVMVBLQTVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUcgUKQR8 uCLLhCtF2V2g7P/QFY//hJRtkltMqGCGFhIybG0dDMKHp/CX6tVjoK+tKGJkojPw dToXllqT/YzGyR17ELgqd0KNSL+Ts8Ye0FSVu2em1VZNJldlXZyjhIRIaOoSxV6M CAOZihhg+UL1Q+3dX3Q5EhaQNAqTaBpvJvqLR7Y3vehzWd0VcJjrlKHm92JmwRth nNpDlv1TBufr5d7Mlum/KkUaSRXrwjLeY0tsFHv5IYZZ9NmBJS3447Sij9wSIXvv l2/qdA8EWsfV7yDRIkhbrYxlf0aSVNkaQkuGdGOi73gARXhNia3gCDHVvNlKiIz7 lPLsYhMGxHg/uw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:04:48 2025 by rpki-client