This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.mft File: DjMedHrdOCkl1soNsipNquqi1h8.mft (raw, json) Hash identifier: pTZTK5cmAHP47HAfNHdJbw1YtEHiSxS9nXqY9fZdHKs= Subject key identifier: BA:78:05:6C:C9:CC:72:F2:DA:12:38:60:F9:B5:0B:37:9B:D4:CF:C3 Authority key identifier: 0E:33:1E:74:7A:DD:38:29:25:D6:CA:0D:B2:2A:4D:AA:EA:A2:D6:1F Certificate issuer: /CN=0e331e747add382925d6ca0db22a4daaeaa2d61f Certificate serial: 019B269B65084FD6BFB2FD8B6FB9BB8A9C12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DjMedHrdOCkl1soNsipNquqi1h8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.mft Manifest number: 06FF Signing time: Tue 16 Dec 2025 10:01:16 +0000 Manifest this update: Tue 16 Dec 2025 10:01:16 +0000 Manifest next update: Wed 17 Dec 2025 10:01:16 +0000 Files and hashes: 1: DjMedHrdOCkl1soNsipNquqi1h8.crl (hash: cUvjNwaqOmQiMCpa0CSWtgL7sUed4pGR9lnxuWuiMy4=) 2: zasT7S77DAPKQOFVeIKfsDjd0_c.roa (hash: mAmW2tvrIY64SxqKD2ikITN8N8TKSRkhA6FqSeLDkCI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.crl rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.mft rsync://rpki.ripe.net/repository/DEFAULT/DjMedHrdOCkl1soNsipNquqi1h8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 10:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:9b:65:08:4f:d6:bf:b2:fd:8b:6f:b9:bb:8a:9c:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e331e747add382925d6ca0db22a4daaeaa2d61f Validity Not Before: Dec 16 10:01:16 2025 GMT Not After : Dec 17 10:01:16 2025 GMT Subject: CN=ba78056cc9cc72f2da123860f9b50b379bd4cfc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a4:ab:74:c8:76:5c:1e:d9:0f:06:32:70:0d: e1:11:6a:a5:61:89:24:b8:62:fb:7e:d2:b1:53:fb: 15:c9:5c:fd:b4:6b:f6:a0:80:aa:10:ab:f6:f8:29: bd:7f:65:cb:35:53:72:cb:d8:4c:47:84:b4:3c:ec: fd:6b:12:30:df:df:01:1c:0f:31:88:01:33:cb:05: 4c:d7:0c:c6:6d:50:c1:b9:06:be:79:1d:3a:aa:7e: aa:79:bb:b2:bc:16:74:d9:cd:a5:6c:90:f5:46:0f: dd:dc:f7:9d:9f:0a:70:b1:74:3f:94:6b:b6:17:e8: 9c:cb:14:bf:d4:0f:35:ba:91:5a:33:43:1f:6c:d4: c8:81:9c:a2:fa:d2:00:83:3d:45:ee:e2:ba:5d:f3: d5:1f:88:8a:b3:b7:7c:5d:fb:d5:e5:de:98:f5:29: 78:83:0b:80:92:13:31:f1:21:db:bc:bc:61:9a:dc: f3:72:14:d8:79:45:32:ed:f3:2f:91:3f:ed:45:bb: 4e:29:ec:6e:8c:b4:96:0c:b9:03:3c:fc:b6:a6:ba: 9c:84:2f:a9:28:d0:3f:81:32:20:e7:b6:70:fb:ed: 34:c8:4b:3e:ea:72:54:41:b2:f4:d3:00:da:94:cb: bc:db:0c:8c:a7:9e:ab:d9:ce:b5:91:f9:fe:0b:5f: 92:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:78:05:6C:C9:CC:72:F2:DA:12:38:60:F9:B5:0B:37:9B:D4:CF:C3 X509v3 Authority Key Identifier: keyid:0E:33:1E:74:7A:DD:38:29:25:D6:CA:0D:B2:2A:4D:AA:EA:A2:D6:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DjMedHrdOCkl1soNsipNquqi1h8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:01:e6:dc:a4:56:9a:c3:4f:7a:1a:19:65:3a:cb:28:0d:f4: 56:58:19:c3:1d:f3:22:0b:d2:6d:19:83:b9:97:32:ab:db:52: ed:73:ba:2f:32:65:21:db:e5:2b:49:0a:ef:0b:87:8b:75:35: 04:3f:87:92:76:cc:07:77:47:ce:9f:e8:d3:21:50:70:2a:f0: 8e:c4:0a:ca:df:47:22:bf:79:a0:49:25:63:80:20:5a:ca:5c: 66:14:43:95:67:d0:12:38:3f:b3:a7:33:15:b4:64:f3:e7:0c: cb:21:77:1e:34:89:ad:29:c9:00:74:fb:48:d6:51:94:99:23: d1:f0:9b:bd:44:12:63:ea:85:d2:d0:98:b5:ec:93:47:02:a8: 4c:e6:fd:ea:85:78:69:fa:8f:ac:65:94:2d:d4:0b:1f:a3:c1: a7:9a:af:0a:73:fc:f2:bf:8b:0e:78:a4:8c:e1:85:00:4d:c2: 89:41:08:18:ca:99:fc:6e:70:0c:23:1b:77:07:3f:e8:b2:7d: ff:a9:58:88:54:1c:0a:2d:16:df:35:36:29:23:fc:11:d2:84: a9:57:34:19:00:c0:21:62:83:40:f5:55:99:ce:ce:1a:ab:f8: e1:fe:6c:c9:9b:33:d4:26:44:58:88:ef:0c:9b:26:da:84:dd: 42:17:84:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmm2UIT9a/sv2Lb7m7ipwSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMzMxZTc0N2FkZDM4MjkyNWQ2Y2EwZGIyMmE0ZGFhZWFh MmQ2MWYwHhcNMjUxMjE2MTAwMTE2WhcNMjUxMjE3MTAwMTE2WjAzMTEwLwYDVQQD EyhiYTc4MDU2Y2M5Y2M3MmYyZGExMjM4NjBmOWI1MGIzNzliZDRjZmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqSrdMh2XB7ZDwYycA3hEWqlYYkk uGL7ftKxU/sVyVz9tGv2oICqEKv2+Cm9f2XLNVNyy9hMR4S0POz9axIw398BHA8x iAEzywVM1wzGbVDBuQa+eR06qn6qebuyvBZ02c2lbJD1Rg/d3PednwpwsXQ/lGu2 F+icyxS/1A81upFaM0MfbNTIgZyi+tIAgz1F7uK6XfPVH4iKs7d8XfvV5d6Y9Sl4 gwuAkhMx8SHbvLxhmtzzchTYeUUy7fMvkT/tRbtOKexujLSWDLkDPPy2prqchC+p KNA/gTIg57Zw++00yEs+6nJUQbL00wDalMu82wyMp56r2c61kfn+C1+SFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLp4BWzJzHLy2hI4YPm1Czeb1M/DMB8GA1UdIwQY MBaAFA4zHnR63TgpJdbKDbIqTarqotYfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGpNZWRIcmRPQ2tsMXNvTnNpcE5xdXFpMWg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9hM2JkNzEtZDM0ZS00YzEzLWI5NWUt ODM0YjE0MzYyMzkyLzEvRGpNZWRIcmRPQ2tsMXNvTnNpcE5xdXFpMWg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9hM2JkNzEtZDM0ZS00YzEzLWI5NWUtODM0YjE0MzYyMzky LzEvRGpNZWRIcmRPQ2tsMXNvTnNpcE5xdXFpMWg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAQHm3KRW msNPehoZZTrLKA30VlgZwx3zIgvSbRmDuZcyq9tS7XO6LzJlIdvlK0kK7wuHi3U1 BD+HknbMB3dHzp/o0yFQcCrwjsQKyt9HIr95oEklY4AgWspcZhRDlWfQEjg/s6cz FbRk8+cMyyF3HjSJrSnJAHT7SNZRlJkj0fCbvUQSY+qF0tCYteyTRwKoTOb96oV4 afqPrGWULdQLH6PBp5qvCnP88r+LDnikjOGFAE3CiUEIGMqZ/G5wDCMbdwc/6LJ9 /6lYiFQcCi0W3zU2KSP8EdKEqVc0GQDAIWKDQPVVmc7OGqv44f5syZsz1CZEWIjv DJsm2oTdQheE3Q== -----END CERTIFICATE-----Generated at Tue Dec 16 17:59:47 2025 by rpki-client