This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft File: Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft (raw, json) Hash identifier: JMzgGmm3ib1HVNKhmXxWZGns7PwzWYQEp/+Ebsrr0e0= Subject key identifier: 0E:E9:0A:70:A8:AC:2E:4D:1B:A5:AC:55:90:B8:B8:78:B3:94:FE:07 Authority key identifier: 0D:CD:A5:D0:60:BA:93:66:BB:43:25:82:8B:57:03:3B:EF:18:E3:C0 Certificate issuer: /CN=0dcda5d060ba9366bb4325828b57033bef18e3c0 Certificate serial: 019B364503DF59C29FA9DB3457696B586F4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft Manifest number: 1784 Signing time: Fri 19 Dec 2025 11:00:51 +0000 Manifest this update: Fri 19 Dec 2025 11:00:51 +0000 Manifest next update: Sat 20 Dec 2025 11:00:51 +0000 Files and hashes: 1: Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl (hash: Lpo86w7bEtvFdVpPkvJpBPiSYlYkei3JKAhAZ9rz6oA=) 2: TjtgoaArWXIQWELqrqb3xw0fhW8.roa (hash: U//dwICV6ljEsBioxVlDi+LuHGPP1lPYVY8ZQAvZ64M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:45:03:df:59:c2:9f:a9:db:34:57:69:6b:58:6f:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dcda5d060ba9366bb4325828b57033bef18e3c0 Validity Not Before: Dec 19 11:00:51 2025 GMT Not After : Dec 20 11:00:51 2025 GMT Subject: CN=0ee90a70a8ac2e4d1ba5ac5590b8b878b394fe07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b8:71:4a:a8:d4:b8:f5:61:36:bd:90:7d:89: 42:e3:6e:72:2c:78:41:19:97:ea:a7:44:8c:d8:84: 69:e8:6b:ae:5a:8d:18:fa:93:32:54:0d:2d:3b:35: 91:2c:dd:ea:0e:ba:bb:12:a9:cd:81:a7:1e:7d:44: de:14:ed:2f:81:88:d7:04:4d:a8:fa:f0:6e:cf:6e: 14:a7:74:9f:d1:22:17:39:2a:67:d2:b3:df:1c:c4: f3:28:ce:07:49:5d:30:1a:46:62:c3:86:38:bf:27: 98:4c:c8:78:9a:be:6a:44:73:b5:1a:2e:95:d1:02: 27:ee:b3:b2:9c:26:cb:34:33:07:db:67:7f:c0:9e: b8:73:3b:54:e1:c3:9a:e7:5a:bd:65:0f:04:33:bb: 6f:6a:b7:cc:6f:c8:d8:72:74:92:a0:d0:81:72:3a: 5e:29:aa:3f:5c:81:de:86:83:cd:6b:a9:d9:f5:f6: a9:5b:e4:34:c5:4a:02:98:85:5d:f9:9e:63:05:16: 0d:20:b0:18:b3:46:2a:b9:d9:8c:d9:80:96:3c:e9: f5:f3:ad:ad:8f:6a:d8:5c:27:3b:1a:bc:77:91:93: 88:19:71:0b:04:11:81:00:0e:a3:6c:02:53:89:c0: 4b:7c:12:c1:98:ab:ca:05:33:b3:ed:03:62:57:83: 68:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:E9:0A:70:A8:AC:2E:4D:1B:A5:AC:55:90:B8:B8:78:B3:94:FE:07 X509v3 Authority Key Identifier: keyid:0D:CD:A5:D0:60:BA:93:66:BB:43:25:82:8B:57:03:3B:EF:18:E3:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:e6:b2:53:aa:d9:98:58:87:bc:6f:9c:ba:d5:e3:76:ba:4d: 8d:6e:2c:cc:a6:78:c9:4d:bf:65:ad:f7:84:e6:7d:8d:d0:5f: 95:77:43:3a:f0:61:b5:c6:08:dd:4c:1b:aa:2f:87:c2:03:20: e3:05:f4:d1:4a:3c:aa:e4:e4:83:7b:f4:30:b7:1b:99:0f:c6: 86:8e:12:04:e2:1c:c0:07:c9:96:15:2b:b1:3e:9a:55:48:5c: 46:0f:23:f3:b0:70:1b:03:43:7c:6e:f1:37:a1:2b:30:ef:e2: c6:52:34:e0:38:6c:c2:78:b1:9e:c3:d3:83:8d:b5:76:b9:4f: 7b:ea:b2:52:6c:58:6d:d1:2b:05:b6:5a:3a:6f:29:40:47:f1: 35:51:41:e5:9a:40:48:40:98:77:f2:dd:75:02:0c:3f:d5:92: 96:6e:40:a3:15:c4:d0:0f:7e:2b:4e:0b:6d:7e:d9:6b:a5:1c: 95:37:50:de:18:5a:3b:9e:ed:bc:b8:3d:6f:cd:5a:be:6f:6e: e1:ab:52:9f:7a:9a:5a:5d:8b:71:e9:c4:2a:8d:00:52:cd:51: 68:f5:5e:3d:21:85:bc:5c:50:8c:61:b4:20:2e:35:6b:c6:d0: 88:41:49:0e:41:cf:14:2a:0b:6d:fd:85:42:3a:9f:71:dd:18: f7:06:1a:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2RQPfWcKfqds0V2lrWG9LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkY2RhNWQwNjBiYTkzNjZiYjQzMjU4MjhiNTcwMzNiZWYx OGUzYzAwHhcNMjUxMjE5MTEwMDUxWhcNMjUxMjIwMTEwMDUxWjAzMTEwLwYDVQQD EygwZWU5MGE3MGE4YWMyZTRkMWJhNWFjNTU5MGI4Yjg3OGIzOTRmZTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrhxSqjUuPVhNr2QfYlC425yLHhB GZfqp0SM2IRp6GuuWo0Y+pMyVA0tOzWRLN3qDrq7EqnNgacefUTeFO0vgYjXBE2o +vBuz24Up3Sf0SIXOSpn0rPfHMTzKM4HSV0wGkZiw4Y4vyeYTMh4mr5qRHO1Gi6V 0QIn7rOynCbLNDMH22d/wJ64cztU4cOa51q9ZQ8EM7tvarfMb8jYcnSSoNCBcjpe Kao/XIHehoPNa6nZ9fapW+Q0xUoCmIVd+Z5jBRYNILAYs0YqudmM2YCWPOn1862t j2rYXCc7Grx3kZOIGXELBBGBAA6jbAJTicBLfBLBmKvKBTOz7QNiV4NohwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA7pCnCorC5NG6WsVZC4uHizlP4HMB8GA1UdIwQY MBaAFA3NpdBgupNmu0MlgotXAzvvGOPAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGMybDBHQzZrMmE3UXlXQ2kxY0RPLThZNDhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9lMTYwMDEtNjUyNS00MDRiLTliNDkt YTU3YjFiMzkyMjA1LzEvRGMybDBHQzZrMmE3UXlXQ2kxY0RPLThZNDhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9lMTYwMDEtNjUyNS00MDRiLTliNDktYTU3YjFiMzkyMjA1 LzEvRGMybDBHQzZrMmE3UXlXQ2kxY0RPLThZNDhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA+ayU6rZ mFiHvG+cutXjdrpNjW4szKZ4yU2/Za33hOZ9jdBflXdDOvBhtcYI3Uwbqi+HwgMg 4wX00Uo8quTkg3v0MLcbmQ/Gho4SBOIcwAfJlhUrsT6aVUhcRg8j87BwGwNDfG7x N6ErMO/ixlI04DhswnixnsPTg421drlPe+qyUmxYbdErBbZaOm8pQEfxNVFB5ZpA SECYd/LddQIMP9WSlm5AoxXE0A9+K04LbX7Za6UclTdQ3hhaO57tvLg9b81avm9u 4atSn3qaWl2LcenEKo0AUs1RaPVePSGFvFxQjGG0IC41a8bQiEFJDkHPFCoLbf2F Qjqfcd0Y9wYaYw== -----END CERTIFICATE-----Generated at Fri Dec 19 12:49:33 2025 by rpki-client