This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft File: DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft (raw, json) Hash identifier: 7GzGrRcbJitemfceJRh/b4cyyNWR+EiIHl/cLTta7BQ= Subject key identifier: C4:C0:30:16:64:DA:0B:AD:11:FC:EC:97:A7:3C:2D:5C:E5:F5:3F:0F Authority key identifier: 0D:18:53:2B:AA:2F:D8:65:83:A2:63:BB:1F:BC:CB:C8:0D:40:D9:90 Certificate issuer: /CN=0d18532baa2fd86583a263bb1fbccbc80d40d990 Certificate serial: 019AF19B05AC1B491FD1B1F7558C3A287BC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft Manifest number: 1382 Signing time: Sat 06 Dec 2025 03:00:59 +0000 Manifest this update: Sat 06 Dec 2025 03:00:59 +0000 Manifest next update: Sun 07 Dec 2025 03:00:59 +0000 Files and hashes: 1: DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl (hash: q1E7Aii/b/wTO4EqPLhYBhcA1lMGJiK+crJ0IqUnKcE=) 2: GU3WIEeqeryj-R-zsa0cMuUQBHM.roa (hash: P0OhDT05+JAj4QXmTS/0O2Bzhb6RhdbVqJWFN0gOpmE=) 3: cIkzHkYil73CUQBJR_lXOc-rvck.roa (hash: rY7DgjrJWLfJoJzDxWf7uBXP1TGyTLjuDroDK6Z0PGQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:05:ac:1b:49:1f:d1:b1:f7:55:8c:3a:28:7b:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d18532baa2fd86583a263bb1fbccbc80d40d990 Validity Not Before: Dec 6 03:00:59 2025 GMT Not After : Dec 7 03:00:59 2025 GMT Subject: CN=c4c0301664da0bad11fcec97a73c2d5ce5f53f0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:0a:52:d2:81:0f:bb:5b:b3:f1:ef:20:b5:d3: a6:71:55:e2:57:58:b2:df:8c:f1:cf:e5:bb:e7:55: 3a:d5:17:59:41:19:93:54:59:aa:d6:60:89:9c:c3: 6f:a4:bb:b6:5b:11:48:92:19:d1:f4:aa:8d:75:f5: fc:99:d0:f0:1b:68:33:2a:47:83:93:21:95:b6:1f: b8:1f:ce:58:73:69:24:77:53:96:d5:0d:68:f5:1a: 38:39:a8:e9:ed:ea:73:5d:b0:ce:32:82:ec:77:b6: d1:e2:87:b4:2b:56:17:e2:50:2c:2e:35:60:2e:94: 1f:94:6d:34:ca:17:b7:0d:8e:4b:be:42:20:b1:3a: 70:53:e2:a8:9d:74:79:b5:3d:34:67:b5:21:6f:6f: a2:f1:11:ca:dc:9b:13:3f:6c:93:08:38:a1:c5:e6: b3:19:a9:dc:b2:4e:9d:34:0b:1c:7d:09:6c:b4:2a: 02:ef:f8:6d:81:29:72:dc:84:38:89:ff:ea:f8:73: 8e:ca:44:a0:8c:e6:1d:a8:ac:ba:d1:55:42:84:3c: 06:99:84:37:17:f8:a7:ae:6c:e3:dd:a1:5c:5d:85: 44:de:91:2a:17:14:7b:2c:98:61:24:35:70:7d:76: 62:b6:1e:75:eb:83:c7:3a:42:10:c9:96:f9:55:01: 8e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:C0:30:16:64:DA:0B:AD:11:FC:EC:97:A7:3C:2D:5C:E5:F5:3F:0F X509v3 Authority Key Identifier: keyid:0D:18:53:2B:AA:2F:D8:65:83:A2:63:BB:1F:BC:CB:C8:0D:40:D9:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:af:c0:72:e5:3e:67:7b:9f:59:f9:dc:47:8f:41:ca:1d:16: a1:9e:ad:3f:3c:fe:f4:e8:1e:ce:d1:6b:77:62:c4:6a:7c:ca: fd:3a:a3:c4:8b:a1:ad:39:13:a2:e8:59:75:18:68:7b:e1:68: 1d:ba:a4:ce:8b:fd:b7:5e:3c:5d:f8:67:a3:4a:bc:fd:d8:0d: 9f:1b:c0:bf:b8:7f:e1:08:4e:f9:49:c5:91:00:e1:12:fa:77: 30:de:1e:78:cb:68:bb:e6:26:2e:a4:43:09:95:a9:78:73:2d: cb:1a:9b:1b:fd:6e:9a:96:7d:04:16:6e:ac:f1:03:05:f2:8a: 4a:24:8e:cf:4c:dc:b0:fb:7f:d4:63:e3:aa:c2:af:4b:fc:02: 2b:01:5d:a7:87:97:2d:5d:59:3e:2d:41:78:8b:b8:b5:14:3e: 1b:ad:d7:b1:f4:05:a6:a5:01:78:fd:d1:e7:fd:bc:46:60:7e: ca:59:a3:87:f8:d9:4f:1b:40:45:c6:8c:e6:15:9e:dc:06:40: 2d:9f:40:9f:23:ac:09:ee:1a:cb:a3:d9:79:b9:5a:b6:6a:fc: 9a:36:29:aa:bc:39:14:fd:ca:a3:21:f5:09:3e:52:37:73:9e: bf:ea:61:b6:6b:be:24:ec:76:53:d2:98:7f:67:64:63:c0:7d: 2f:7b:79:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmwWsG0kf0bH3VYw6KHvCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMTg1MzJiYWEyZmQ4NjU4M2EyNjNiYjFmYmNjYmM4MGQ0 MGQ5OTAwHhcNMjUxMjA2MDMwMDU5WhcNMjUxMjA3MDMwMDU5WjAzMTEwLwYDVQQD EyhjNGMwMzAxNjY0ZGEwYmFkMTFmY2VjOTdhNzNjMmQ1Y2U1ZjUzZjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8wpS0oEPu1uz8e8gtdOmcVXiV1iy 34zxz+W751U61RdZQRmTVFmq1mCJnMNvpLu2WxFIkhnR9KqNdfX8mdDwG2gzKkeD kyGVth+4H85Yc2kkd1OW1Q1o9Ro4Oajp7epzXbDOMoLsd7bR4oe0K1YX4lAsLjVg LpQflG00yhe3DY5LvkIgsTpwU+KonXR5tT00Z7Uhb2+i8RHK3JsTP2yTCDihxeaz Gancsk6dNAscfQlstCoC7/htgSly3IQ4if/q+HOOykSgjOYdqKy60VVChDwGmYQ3 F/inrmzj3aFcXYVE3pEqFxR7LJhhJDVwfXZith5164PHOkIQyZb5VQGOoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMTAMBZk2gutEfzsl6c8LVzl9T8PMB8GA1UdIwQY MBaAFA0YUyuqL9hlg6Jjux+8y8gNQNmQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFJoVEs2b3YyR1dEb21PN0g3ekx5QTFBMlpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9iOGI1YmQtOGFkZi00M2VmLThhYmQt MmIzYTE1OWNhMmVmLzEvRFJoVEs2b3YyR1dEb21PN0g3ekx5QTFBMlpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9iOGI1YmQtOGFkZi00M2VmLThhYmQtMmIzYTE1OWNhMmVm LzEvRFJoVEs2b3YyR1dEb21PN0g3ekx5QTFBMlpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAka/AcuU+ Z3ufWfncR49Byh0WoZ6tPzz+9OgeztFrd2LEanzK/TqjxIuhrTkTouhZdRhoe+Fo Hbqkzov9t148Xfhno0q8/dgNnxvAv7h/4QhO+UnFkQDhEvp3MN4eeMtou+YmLqRD CZWpeHMtyxqbG/1umpZ9BBZurPEDBfKKSiSOz0zcsPt/1GPjqsKvS/wCKwFdp4eX LV1ZPi1BeIu4tRQ+G63XsfQFpqUBeP3R5/28RmB+ylmjh/jZTxtARcaM5hWe3AZA LZ9AnyOsCe4ay6PZeblatmr8mjYpqrw5FP3KoyH1CT5SN3Oev+phtmu+JOx2U9KY f2dkY8B9L3t55A== -----END CERTIFICATE-----Generated at Sat Dec 6 10:01:06 2025 by rpki-client