This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.mft File: DjMedHrdOCkl1soNsipNquqi1h8.mft (raw, json) Hash identifier: fw5cZv0PmroWup+hfMaJ0AYDtqZuLcl8Jmegb6LOBRM= Subject key identifier: 8A:F4:7D:17:CB:9D:E9:2D:EC:25:5F:E6:B3:98:B1:AB:38:C8:93:16 Authority key identifier: 0E:33:1E:74:7A:DD:38:29:25:D6:CA:0D:B2:2A:4D:AA:EA:A2:D6:1F Certificate issuer: /CN=0e331e747add382925d6ca0db22a4daaeaa2d61f Certificate serial: 019AF0881F95841BC385DD9B73344C4C6684 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DjMedHrdOCkl1soNsipNquqi1h8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.mft Manifest number: 06E3 Signing time: Fri 05 Dec 2025 22:00:44 +0000 Manifest this update: Fri 05 Dec 2025 22:00:44 +0000 Manifest next update: Sat 06 Dec 2025 22:00:44 +0000 Files and hashes: 1: DjMedHrdOCkl1soNsipNquqi1h8.crl (hash: J+lXW/Yfp2re8zg32qQuh/FQoIBF2jEpBX5//2WR9Xk=) 2: zasT7S77DAPKQOFVeIKfsDjd0_c.roa (hash: mAmW2tvrIY64SxqKD2ikITN8N8TKSRkhA6FqSeLDkCI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.crl rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.mft rsync://rpki.ripe.net/repository/DEFAULT/DjMedHrdOCkl1soNsipNquqi1h8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:1f:95:84:1b:c3:85:dd:9b:73:34:4c:4c:66:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e331e747add382925d6ca0db22a4daaeaa2d61f Validity Not Before: Dec 5 22:00:44 2025 GMT Not After : Dec 6 22:00:44 2025 GMT Subject: CN=8af47d17cb9de92dec255fe6b398b1ab38c89316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6c:fc:3b:c9:64:08:9d:ec:18:80:ef:fc:d7: 83:17:8b:33:d0:63:37:47:2f:e1:d7:11:b3:8e:c5: b5:7c:f2:0e:5b:49:63:04:35:1c:d5:89:c4:9a:50: b4:28:38:d2:98:17:e5:3b:ed:aa:46:4f:a8:8d:52: 65:ae:d3:f9:a9:89:1c:27:56:c7:1f:a4:25:15:83: de:bf:ed:da:a3:95:ab:64:2f:23:42:f2:06:95:cb: 95:b7:5a:c3:b7:a1:c9:de:ab:91:65:51:3c:62:96: 7a:16:89:de:76:40:f9:f1:1a:06:d2:88:5e:d5:69: 00:b5:8e:dc:f9:15:29:d4:21:a9:34:77:c9:c2:d9: d0:83:55:4e:90:24:1e:8e:b0:fe:e0:c1:5c:03:b5: 1e:99:3f:df:6d:84:6c:88:62:b3:6b:c1:e2:b3:ce: 3b:15:93:51:23:35:9e:4d:d8:c7:19:41:c3:8a:55: ee:2d:ac:b0:0e:ad:03:7a:44:4a:df:87:cf:ac:ab: af:98:23:1c:6f:4f:20:33:b9:99:32:5c:9b:ff:bd: 04:3d:a2:82:f4:64:17:79:c5:54:e5:8a:9e:b1:c3: 86:79:d0:b8:93:db:65:2f:54:98:30:5b:a0:2e:11: 92:64:89:65:70:b5:45:d7:f5:1b:5a:07:22:bc:fc: d6:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F4:7D:17:CB:9D:E9:2D:EC:25:5F:E6:B3:98:B1:AB:38:C8:93:16 X509v3 Authority Key Identifier: keyid:0E:33:1E:74:7A:DD:38:29:25:D6:CA:0D:B2:2A:4D:AA:EA:A2:D6:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DjMedHrdOCkl1soNsipNquqi1h8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:5b:4e:f1:dd:fa:84:63:a5:6d:4a:c4:b6:c8:e3:bd:6e:0d: 1d:3b:de:51:f1:37:bb:e6:65:9c:a5:c9:74:3f:22:50:c5:0c: 31:9d:42:e5:02:78:75:b6:5e:56:fd:29:cd:ec:dd:db:1e:87: 94:52:c9:90:c0:a5:99:e7:e1:58:53:6d:5b:95:47:d7:13:81: 05:55:11:1d:55:8b:24:b9:b3:71:9e:6a:f6:8e:61:7c:c7:18: 39:4a:13:5e:4f:49:0a:11:81:32:b1:9b:bb:20:a9:b2:7a:6d: d3:d2:2d:d5:a9:63:9c:b1:bb:d9:b8:80:20:64:e0:6d:6d:ef: e6:cc:2b:3b:b2:f2:16:27:38:48:af:b1:51:7f:70:f8:c4:80: d4:f9:d6:33:a1:b9:76:d9:da:20:1c:0d:10:63:78:cd:2a:50: d8:0e:02:03:ff:14:83:ef:b4:2f:ae:20:a6:11:0c:42:85:4a: 48:ec:2f:81:32:90:7b:e2:05:3a:4b:d2:02:ba:39:86:e0:86: a6:c5:cc:e2:5a:da:13:77:64:06:e4:2a:dd:6c:73:88:57:29: 04:42:68:c0:7e:bf:d3:63:cf:d0:28:9b:8d:96:8c:c1:c2:cd: c6:61:23:b2:f2:48:71:31:73:90:03:1c:29:e3:68:13:83:f6: 4a:25:a9:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiB+VhBvDhd2bczRMTGaEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMzMxZTc0N2FkZDM4MjkyNWQ2Y2EwZGIyMmE0ZGFhZWFh MmQ2MWYwHhcNMjUxMjA1MjIwMDQ0WhcNMjUxMjA2MjIwMDQ0WjAzMTEwLwYDVQQD Eyg4YWY0N2QxN2NiOWRlOTJkZWMyNTVmZTZiMzk4YjFhYjM4Yzg5MzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2z8O8lkCJ3sGIDv/NeDF4sz0GM3 Ry/h1xGzjsW1fPIOW0ljBDUc1YnEmlC0KDjSmBflO+2qRk+ojVJlrtP5qYkcJ1bH H6QlFYPev+3ao5WrZC8jQvIGlcuVt1rDt6HJ3quRZVE8YpZ6FonedkD58RoG0ohe 1WkAtY7c+RUp1CGpNHfJwtnQg1VOkCQejrD+4MFcA7UemT/fbYRsiGKza8His847 FZNRIzWeTdjHGUHDilXuLaywDq0DekRK34fPrKuvmCMcb08gM7mZMlyb/70EPaKC 9GQXecVU5YqescOGedC4k9tlL1SYMFugLhGSZIllcLVF1/UbWgcivPzWMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIr0fRfLnekt7CVf5rOYsas4yJMWMB8GA1UdIwQY MBaAFA4zHnR63TgpJdbKDbIqTarqotYfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGpNZWRIcmRPQ2tsMXNvTnNpcE5xdXFpMWg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9hM2JkNzEtZDM0ZS00YzEzLWI5NWUt ODM0YjE0MzYyMzkyLzEvRGpNZWRIcmRPQ2tsMXNvTnNpcE5xdXFpMWg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9hM2JkNzEtZDM0ZS00YzEzLWI5NWUtODM0YjE0MzYyMzky LzEvRGpNZWRIcmRPQ2tsMXNvTnNpcE5xdXFpMWg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPltO8d36 hGOlbUrEtsjjvW4NHTveUfE3u+ZlnKXJdD8iUMUMMZ1C5QJ4dbZeVv0pzezd2x6H lFLJkMClmefhWFNtW5VH1xOBBVURHVWLJLmzcZ5q9o5hfMcYOUoTXk9JChGBMrGb uyCpsnpt09It1aljnLG72biAIGTgbW3v5swrO7LyFic4SK+xUX9w+MSA1PnWM6G5 dtnaIBwNEGN4zSpQ2A4CA/8Ug++0L64gphEMQoVKSOwvgTKQe+IFOkvSAro5huCG psXM4lraE3dkBuQq3WxziFcpBEJowH6/02PP0CibjZaMwcLNxmEjsvJIcTFzkAMc KeNoE4P2SiWptw== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:14 2025 by rpki-client