This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft File: DJ8RVKmhXVqDqamBenJL_FOdtZY.mft (raw, json) Hash identifier: z18RXaNkHUs42653QHSOrYdYMEiDkTPO//Q8OPEGvC8= Subject key identifier: 5A:75:A4:40:51:B1:09:09:F3:75:CE:EB:24:AB:29:90:BC:56:17:F5 Authority key identifier: 0C:9F:11:54:A9:A1:5D:5A:83:A9:A9:81:7A:72:4B:FC:53:9D:B5:96 Certificate issuer: /CN=0c9f1154a9a15d5a83a9a9817a724bfc539db596 Certificate serial: 019AF12E47C4FD16DF9020B391783E9FBABB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 01:02:13 +0000 Manifest this update: Sat 06 Dec 2025 01:02:13 +0000 Manifest next update: Sun 07 Dec 2025 01:02:13 +0000 Files and hashes: 1: DJ8RVKmhXVqDqamBenJL_FOdtZY.crl (hash: 3rAvPuVR4P0N9Fpc9MadhIbUyDOOB10QOr4V/z1bXFA=) 2: Kw07JxAM6PIjr2ZZEDMn7JfYALU.roa (hash: 7yLwIb1VffX9y/T7PbcK03UjKmQOn5ktXM/NbKeEUqc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:47:c4:fd:16:df:90:20:b3:91:78:3e:9f:ba:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c9f1154a9a15d5a83a9a9817a724bfc539db596 Validity Not Before: Dec 6 01:02:13 2025 GMT Not After : Dec 7 01:02:13 2025 GMT Subject: CN=5a75a44051b10909f375ceeb24ab2990bc5617f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b8:49:f9:5b:81:54:70:94:17:67:cc:df:00: 61:7f:8b:7d:84:42:04:70:76:f9:06:96:7c:11:8e: b6:64:72:30:67:e3:4b:4e:7e:ab:ae:ed:bf:06:62: fb:ef:88:fe:f0:95:58:33:7d:ed:3b:60:cb:e5:11: b2:d1:84:51:20:9c:2e:16:b2:a5:6b:0e:b5:9b:25: 34:a7:06:20:67:9f:10:ef:42:77:70:25:8f:a6:a1: 32:1e:83:2b:73:74:25:b3:bd:e4:f2:b1:3e:d1:1c: 08:fb:d4:6d:88:9b:44:b0:3a:b9:5c:14:2c:16:da: 7a:f3:b4:df:68:08:c2:b0:2a:e8:39:57:7a:12:1f: 93:f6:1b:aa:74:f3:db:e0:b0:33:e9:b4:df:11:02: 62:a0:e6:d7:c2:27:36:40:db:92:82:bf:27:eb:1b: c4:b3:15:9b:74:63:f7:6c:cd:d5:5f:1d:fb:6d:7b: c1:41:af:54:8b:07:cf:82:0e:56:47:b8:a2:40:58: f4:05:53:02:92:08:75:9a:9b:a1:58:bc:9e:a4:33: f4:9d:ed:25:72:e9:db:d7:70:23:f5:85:87:79:26: 3d:20:8b:8e:2d:c5:2c:d5:38:d0:75:42:8f:97:65: 47:77:12:7e:78:1c:ab:c4:01:e9:2d:96:4b:16:84: f7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:75:A4:40:51:B1:09:09:F3:75:CE:EB:24:AB:29:90:BC:56:17:F5 X509v3 Authority Key Identifier: keyid:0C:9F:11:54:A9:A1:5D:5A:83:A9:A9:81:7A:72:4B:FC:53:9D:B5:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:81:f1:ae:ac:e8:0f:8f:13:ac:1e:98:02:c3:36:9e:b5:cd: 02:0b:47:5d:02:69:c8:d6:09:51:f5:ad:bd:c1:ce:16:e7:51: 1d:3f:49:e4:7b:8f:90:de:11:58:bf:3f:1a:4e:16:8f:cd:90: 7c:b6:46:48:91:a5:67:b7:b7:a2:30:09:a9:d8:49:a0:4c:78: cb:eb:94:3d:d4:ca:4e:eb:0a:79:ce:5c:57:4e:e2:83:64:41: 0b:4a:1f:86:3e:c3:81:a6:70:56:be:96:5f:ce:19:b7:4c:ae: da:16:eb:c0:66:59:2f:7c:37:81:6b:89:da:b7:94:c9:05:00: 82:ac:eb:7e:0d:13:86:93:37:fa:8b:34:41:48:04:22:99:56: 77:c8:d8:8a:39:4a:ec:bf:e7:e5:c7:61:be:b5:7b:51:c1:f7: d7:11:df:05:37:75:e9:40:5e:85:6a:88:ff:80:8a:f9:d2:2d: 45:6d:91:dd:fe:5b:ac:18:d4:bd:1e:04:3a:25:1c:52:35:91: 33:10:20:77:6d:ae:5c:51:b9:e2:4f:89:cd:3e:91:09:b0:71: 4f:bd:12:18:26:ca:07:b4:bb:1b:af:51:85:d2:9b:c0:9b:e9: 1f:7d:95:8b:40:8c:e9:11:46:59:5c:bd:f0:75:8f:b3:85:ca: d5:e5:8e:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLkfE/RbfkCCzkXg+n7q7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjOWYxMTU0YTlhMTVkNWE4M2E5YTk4MTdhNzI0YmZjNTM5 ZGI1OTYwHhcNMjUxMjA2MDEwMjEzWhcNMjUxMjA3MDEwMjEzWjAzMTEwLwYDVQQD Eyg1YTc1YTQ0MDUxYjEwOTA5ZjM3NWNlZWIyNGFiMjk5MGJjNTYxN2Y1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLhJ+VuBVHCUF2fM3wBhf4t9hEIE cHb5BpZ8EY62ZHIwZ+NLTn6rru2/BmL774j+8JVYM33tO2DL5RGy0YRRIJwuFrKl aw61myU0pwYgZ58Q70J3cCWPpqEyHoMrc3Qls73k8rE+0RwI+9RtiJtEsDq5XBQs Ftp687TfaAjCsCroOVd6Eh+T9huqdPPb4LAz6bTfEQJioObXwic2QNuSgr8n6xvE sxWbdGP3bM3VXx37bXvBQa9UiwfPgg5WR7iiQFj0BVMCkgh1mpuhWLyepDP0ne0l cunb13Aj9YWHeSY9IIuOLcUs1TjQdUKPl2VHdxJ+eByrxAHpLZZLFoT33wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFp1pEBRsQkJ83XO6ySrKZC8Vhf1MB8GA1UdIwQY MBaAFAyfEVSpoV1ag6mpgXpyS/xTnbWWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREo4UlZLbWhYVnFEcWFtQmVuSkxfRk9kdFpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMGQzZDctMWMzNS00N2NiLTg1MDQt YjlkYmE2MzliMWIxLzEvREo4UlZLbWhYVnFEcWFtQmVuSkxfRk9kdFpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9kMGQzZDctMWMzNS00N2NiLTg1MDQtYjlkYmE2MzliMWIx LzEvREo4UlZLbWhYVnFEcWFtQmVuSkxfRk9kdFpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARoHxrqzo D48TrB6YAsM2nrXNAgtHXQJpyNYJUfWtvcHOFudRHT9J5HuPkN4RWL8/Gk4Wj82Q fLZGSJGlZ7e3ojAJqdhJoEx4y+uUPdTKTusKec5cV07ig2RBC0ofhj7DgaZwVr6W X84Zt0yu2hbrwGZZL3w3gWuJ2reUyQUAgqzrfg0ThpM3+os0QUgEIplWd8jYijlK 7L/n5cdhvrV7UcH31xHfBTd16UBehWqI/4CK+dItRW2R3f5brBjUvR4EOiUcUjWR MxAgd22uXFG54k+JzT6RCbBxT70SGCbKB7S7G69RhdKbwJvpH32Vi0CM6RFGWVy9 8HWPs4XK1eWOBA== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:37 2025 by rpki-client