This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft File: DNScoZAd8CCTDOlx9lzBgKP8voE.mft (raw, json) Hash identifier: mFlpvNfSMFKiRaE24XGNwYGPuV5s+LlEg38Tcvw9vZ0= Subject key identifier: 11:C2:C2:D9:FD:85:74:36:77:09:8D:34:00:9F:FA:96:BA:32:4B:14 Authority key identifier: 0C:D4:9C:A1:90:1D:F0:20:93:0C:E9:71:F6:5C:C1:80:A3:FC:BE:81 Certificate issuer: /CN=0cd49ca1901df020930ce971f65cc180a3fcbe81 Certificate serial: 019AF23FDA712ABB697DADA4C643D05E2ADB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNScoZAd8CCTDOlx9lzBgKP8voE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 06:01:02 +0000 Manifest this update: Sat 06 Dec 2025 06:01:02 +0000 Manifest next update: Sun 07 Dec 2025 06:01:02 +0000 Files and hashes: 1: DNScoZAd8CCTDOlx9lzBgKP8voE.crl (hash: 9IpR8YMydPWZhJtZu1lweKWn2nEdEZlYRnLEaVBfnYs=) 2: IyvCi4bscVz-cDd1e8YDDEn65h8.roa (hash: +ReDdginBUQu4++Dvo5zNIlV1w8CIv08Gg4t44mG608=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft rsync://rpki.ripe.net/repository/DEFAULT/DNScoZAd8CCTDOlx9lzBgKP8voE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:da:71:2a:bb:69:7d:ad:a4:c6:43:d0:5e:2a:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cd49ca1901df020930ce971f65cc180a3fcbe81 Validity Not Before: Dec 6 06:01:02 2025 GMT Not After : Dec 7 06:01:02 2025 GMT Subject: CN=11c2c2d9fd85743677098d34009ffa96ba324b14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f9:66:30:0f:f1:79:03:c3:54:da:b8:5d:ea: a5:78:24:de:e0:3b:e7:bb:54:27:aa:5e:07:95:30: 94:9b:15:3f:eb:5e:5d:fb:ff:63:60:15:1b:ee:28: 98:ae:0b:9b:37:a4:d7:78:17:91:24:c7:fb:e2:60: f7:d6:57:35:e3:1c:e8:7a:c3:82:80:fe:7a:d6:f8: 5f:c2:db:8e:c1:0d:c5:d3:57:f0:3f:37:ec:ab:57: d3:50:14:46:01:ad:7f:8a:01:ef:ef:2d:50:69:c5: 93:e0:05:76:ed:50:3f:26:07:5a:6c:fb:58:e6:d9: 64:50:b2:45:1e:bc:ee:fb:d9:fd:65:37:0c:09:3a: 4a:df:b3:49:2a:07:de:35:92:9a:1e:d4:9b:29:12: 64:75:dc:05:34:72:ee:42:42:3b:02:c1:d2:9d:d2: a3:eb:53:78:88:00:6d:79:8d:1e:0a:f5:e5:ca:67: 12:2b:eb:f4:ea:37:a9:1f:a2:30:a7:f3:49:04:21: 82:b9:22:8a:22:5e:7e:35:93:11:af:f9:b9:5a:69: 6e:90:98:64:c9:52:19:7d:29:a7:41:5d:01:80:76: fc:a4:5f:73:f9:11:b1:1f:5d:e0:c7:c5:b7:ce:c1: c6:7a:55:0c:ac:2f:f2:4b:14:7e:f6:9d:62:71:a3: e4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:C2:C2:D9:FD:85:74:36:77:09:8D:34:00:9F:FA:96:BA:32:4B:14 X509v3 Authority Key Identifier: keyid:0C:D4:9C:A1:90:1D:F0:20:93:0C:E9:71:F6:5C:C1:80:A3:FC:BE:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNScoZAd8CCTDOlx9lzBgKP8voE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:a9:0d:32:76:41:e3:85:ae:ae:5f:b3:b1:0a:8b:e2:82:7c: 28:d1:fb:81:cd:8f:0f:99:7d:34:68:d8:64:f0:7b:01:09:9a: 36:62:1a:b8:cf:33:e8:68:3e:80:9c:5e:d3:3d:34:1e:f8:a4: 81:e2:f1:55:5f:72:c4:9e:95:f3:d8:29:72:87:1f:5b:ad:04: 6c:88:3a:46:78:6a:c5:1a:54:4e:ac:b5:7c:b6:0c:e3:f0:2c: 90:08:4e:7d:ca:d7:cd:73:02:ae:5c:61:17:0b:f2:23:42:45: 65:f7:82:78:e6:16:56:10:84:25:05:37:1e:e3:6a:11:11:b1: f0:d1:53:87:82:c2:6c:ff:2d:35:25:e3:11:9f:39:f2:13:45: 08:6a:c9:b0:87:ac:a7:3f:72:f7:8b:11:08:b5:69:bf:2b:34: 76:a0:d0:13:b9:8d:56:6b:f1:5c:40:09:00:2e:6b:e3:2b:7c: fa:63:c4:03:af:4b:0c:2d:0d:64:69:e5:e6:35:d6:11:1a:ab: 1f:3c:74:ff:f2:8b:69:a2:2e:6d:af:71:df:e7:8e:32:2b:7b: 6f:a3:a3:4c:54:7e:06:4b:7d:49:b3:c3:bd:f7:70:1c:1a:ac: 62:b1:8f:b2:94:ab:b2:54:91:a1:c7:08:b6:00:d1:f7:4b:ff: 68:68:6c:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP9pxKrtpfa2kxkPQXirbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZDQ5Y2ExOTAxZGYwMjA5MzBjZTk3MWY2NWNjMTgwYTNm Y2JlODEwHhcNMjUxMjA2MDYwMTAyWhcNMjUxMjA3MDYwMTAyWjAzMTEwLwYDVQQD EygxMWMyYzJkOWZkODU3NDM2NzcwOThkMzQwMDlmZmE5NmJhMzI0YjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvlmMA/xeQPDVNq4XeqleCTe4Dvn u1Qnql4HlTCUmxU/615d+/9jYBUb7iiYrgubN6TXeBeRJMf74mD31lc14xzoesOC gP561vhfwtuOwQ3F01fwPzfsq1fTUBRGAa1/igHv7y1QacWT4AV27VA/JgdabPtY 5tlkULJFHrzu+9n9ZTcMCTpK37NJKgfeNZKaHtSbKRJkddwFNHLuQkI7AsHSndKj 61N4iABteY0eCvXlymcSK+v06jepH6Iwp/NJBCGCuSKKIl5+NZMRr/m5WmlukJhk yVIZfSmnQV0BgHb8pF9z+RGxH13gx8W3zsHGelUMrC/ySxR+9p1icaPkfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBHCwtn9hXQ2dwmNNACf+pa6MksUMB8GA1UdIwQY MBaAFAzUnKGQHfAgkwzpcfZcwYCj/L6BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE5TY29aQWQ4Q0NURE9seDlsekJnS1A4dm9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9jOWNjYzktYzQwNS00MjhmLWI3NzMt ZGQyM2RjNDI0MWZhLzEvRE5TY29aQWQ4Q0NURE9seDlsekJnS1A4dm9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9jOWNjYzktYzQwNS00MjhmLWI3NzMtZGQyM2RjNDI0MWZh LzEvRE5TY29aQWQ4Q0NURE9seDlsekJnS1A4dm9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb6kNMnZB 44Wurl+zsQqL4oJ8KNH7gc2PD5l9NGjYZPB7AQmaNmIauM8z6Gg+gJxe0z00Hvik geLxVV9yxJ6V89gpcocfW60EbIg6RnhqxRpUTqy1fLYM4/AskAhOfcrXzXMCrlxh FwvyI0JFZfeCeOYWVhCEJQU3HuNqERGx8NFTh4LCbP8tNSXjEZ858hNFCGrJsIes pz9y94sRCLVpvys0dqDQE7mNVmvxXEAJAC5r4yt8+mPEA69LDC0NZGnl5jXWERqr Hzx0//KLaaIuba9x3+eOMit7b6OjTFR+Bkt9SbPDvfdwHBqsYrGPspSrslSRoccI tgDR90v/aGhszQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:17:24 2025 by rpki-client