This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft File: DFfLOh5T52Ke47nyZy1Fce-F0sg.mft (raw, json) Hash identifier: Ra0FXRcleLXdnRRCTSEikp8tNWoCX/ZVdWOUZ87hWPU= Subject key identifier: 73:2B:F2:70:C3:20:63:6B:46:04:30:70:30:42:6A:70:A7:5A:63:E7 Authority key identifier: 0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8 Certificate issuer: /CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8 Certificate serial: 019AF12E20C779F226669A0642D1703D8D4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 01:02:03 +0000 Manifest this update: Sat 06 Dec 2025 01:02:03 +0000 Manifest next update: Sun 07 Dec 2025 01:02:03 +0000 Files and hashes: 1: 58PUT6ysZxKBONG9sTIOc1qL5Ls.roa (hash: n7460GeFmYRqG1aJJrfKZDL2a6FFJmjROlobClHOM2Y=) 2: 6BSYpk5RnNsu0NP-8CiJ4A3-eIA.roa (hash: lk5fXZ2Pgc+XIPu3nQ53XeIOSBvgneeeWVb78tjDQes=) 3: DFfLOh5T52Ke47nyZy1Fce-F0sg.crl (hash: GchRGPnO10q3mI2gQe7xBG6Ypjpmz4eXP2Dd53mQzGw=) 4: L5CVIsoItTTVw443IuKRnX_6ofc.roa (hash: u0QFKwVPCjoujirXbnFrSGkKMLgZEeDISyY/cSBSGF4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:20:c7:79:f2:26:66:9a:06:42:d1:70:3d:8d:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8 Validity Not Before: Dec 6 01:02:03 2025 GMT Not After : Dec 7 01:02:03 2025 GMT Subject: CN=732bf270c320636b4604307030426a70a75a63e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b1:8d:76:46:da:f1:7e:72:f6:13:f3:a0:40: af:c7:1b:e2:a1:f8:44:a5:3a:1c:b6:a2:11:2e:96: 15:c6:25:04:25:73:47:cf:86:be:c0:6b:c6:9f:5b: c2:7c:94:6e:b5:d2:47:d7:85:b8:31:9c:82:af:d2: da:0d:00:b4:68:0c:bc:cb:85:a8:5d:31:5d:df:d7: 52:4b:17:5c:c1:eb:13:df:ca:1d:ab:b9:a4:dd:17: c4:08:77:24:de:92:3c:01:fd:50:10:52:86:fe:a4: 06:5f:24:ea:13:d3:79:dd:36:a1:3c:28:c9:d1:d8: 6c:5f:fd:53:e7:9e:ae:40:49:88:04:94:ed:50:99: 57:23:0e:c2:4a:24:2b:a7:2c:56:d1:5c:aa:57:e9: 28:ce:3b:42:c8:b4:cf:d6:97:f2:35:7c:9a:fc:35: 1c:3c:ae:46:0c:e3:ac:56:5a:85:e7:69:f4:99:52: e0:3a:58:e4:51:68:c0:f9:0b:ab:01:ee:1a:4a:89: 1b:ea:5b:32:a0:a0:98:5a:34:f0:b1:b3:07:77:c4: 8f:57:68:46:22:86:3c:da:97:0b:95:cd:b8:58:1a: 6f:d9:e5:8d:6f:97:4b:88:93:1e:b6:04:d6:9a:22: a0:f0:8e:e8:68:68:e1:4d:97:bc:80:02:dc:0b:18: c6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:2B:F2:70:C3:20:63:6B:46:04:30:70:30:42:6A:70:A7:5A:63:E7 X509v3 Authority Key Identifier: keyid:0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:91:1b:50:1b:66:9c:42:63:6b:bf:e2:23:05:43:d6:90:83: 1d:32:5d:45:e2:01:df:f4:bc:24:07:67:19:f9:de:b0:9d:3c: 08:18:e5:1b:46:23:be:9e:12:36:2c:35:98:7b:e7:0c:fd:ec: db:e7:42:78:13:a2:50:aa:63:e7:3b:4c:c8:46:62:36:f0:1f: f6:14:eb:b1:5e:17:14:af:7e:9b:48:8a:d3:28:9a:ae:d5:dd: 4c:ab:11:af:ca:87:67:e3:e5:0e:07:ba:47:5a:a5:a6:01:c9: c9:73:1a:04:73:ca:53:b2:ec:8d:90:12:d1:4f:66:f4:0a:d1: 64:f0:cd:86:2f:b4:a7:aa:6e:e0:3b:03:eb:60:f9:73:58:74: e7:71:6a:f0:37:86:72:72:a4:ca:b9:71:07:02:26:2f:66:04: d6:d4:45:42:9e:6e:3f:0a:8a:4a:b1:3d:d5:70:75:c2:54:6c: 84:19:0a:35:fb:01:ea:b5:f1:a8:15:8b:e1:01:61:bb:aa:54: c3:96:75:67:5d:9f:93:56:ed:2c:0f:1f:17:1e:ba:ec:c0:07: f5:3e:75:55:ca:cc:96:ac:5a:8e:ca:c6:94:a4:00:5e:72:c7: 7e:4f:2d:6d:e1:a4:09:dc:6e:44:bb:77:ad:a4:7f:71:31:7e: 97:8f:ba:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLiDHefImZpoGQtFwPY1MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNTdjYjNhMWU1M2U3NjI5ZWUzYjlmMjY3MmQ0NTcxZWY4 NWQyYzgwHhcNMjUxMjA2MDEwMjAzWhcNMjUxMjA3MDEwMjAzWjAzMTEwLwYDVQQD Eyg3MzJiZjI3MGMzMjA2MzZiNDYwNDMwNzAzMDQyNmE3MGE3NWE2M2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbGNdkba8X5y9hPzoECvxxviofhE pToctqIRLpYVxiUEJXNHz4a+wGvGn1vCfJRutdJH14W4MZyCr9LaDQC0aAy8y4Wo XTFd39dSSxdcwesT38odq7mk3RfECHck3pI8Af1QEFKG/qQGXyTqE9N53TahPCjJ 0dhsX/1T556uQEmIBJTtUJlXIw7CSiQrpyxW0VyqV+kozjtCyLTP1pfyNXya/DUc PK5GDOOsVlqF52n0mVLgOljkUWjA+QurAe4aSokb6lsyoKCYWjTwsbMHd8SPV2hG IoY82pcLlc24WBpv2eWNb5dLiJMetgTWmiKg8I7oaGjhTZe8gALcCxjG2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHMr8nDDIGNrRgQwcDBCanCnWmPnMB8GA1UdIwQY MBaAFAxXyzoeU+dinuO58mctRXHvhdLIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZmTE9oNVQ1MktlNDdueVp5MUZjZS1GMHNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS82YzFlMDEtMTU5NS00N2IwLTllMDMt Y2Y3MjMyZGRlYmVjLzEvREZmTE9oNVQ1MktlNDdueVp5MUZjZS1GMHNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS82YzFlMDEtMTU5NS00N2IwLTllMDMtY2Y3MjMyZGRlYmVj LzEvREZmTE9oNVQ1MktlNDdueVp5MUZjZS1GMHNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaJEbUBtm nEJja7/iIwVD1pCDHTJdReIB3/S8JAdnGfnesJ08CBjlG0Yjvp4SNiw1mHvnDP3s 2+dCeBOiUKpj5ztMyEZiNvAf9hTrsV4XFK9+m0iK0yiartXdTKsRr8qHZ+PlDge6 R1qlpgHJyXMaBHPKU7LsjZAS0U9m9ArRZPDNhi+0p6pu4DsD62D5c1h053Fq8DeG cnKkyrlxBwImL2YE1tRFQp5uPwqKSrE91XB1wlRshBkKNfsB6rXxqBWL4QFhu6pU w5Z1Z12fk1btLA8fFx667MAH9T51VcrMlqxajsrGlKQAXnLHfk8tbeGkCdxuRLt3 raR/cTF+l4+6dQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:46:10 2025 by rpki-client