This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft File: DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft (raw, json) Hash identifier: xnfzV5n0Qv2nSGw03aW48mVRzTHtEGitO7F8n5eo8O4= Subject key identifier: DE:9C:13:BB:1B:6E:D2:DC:FB:AE:07:98:1A:11:70:90:9C:5F:32:F4 Authority key identifier: 0E:51:51:67:67:D9:A8:50:8C:6E:14:D5:8D:EE:FF:BF:AB:80:80:DD Certificate issuer: /CN=0e51516767d9a8508c6e14d58deeffbfab8080dd Certificate serial: 019AF23FC66C904953AD51E5DD9AF7F91692 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DlFRZ2fZqFCMbhTVje7_v6uAgN0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft Manifest number: 0988 Signing time: Sat 06 Dec 2025 06:00:56 +0000 Manifest this update: Sat 06 Dec 2025 06:00:56 +0000 Manifest next update: Sun 07 Dec 2025 06:00:56 +0000 Files and hashes: 1: ByGHodkRngTWyaxrywBx9HU_pgo.roa (hash: +PGhvckml5x5MT6xt2SMtvcfa7zw9W0WZ25LYIkA+NY=) 2: DlFRZ2fZqFCMbhTVje7_v6uAgN0.crl (hash: zfHl/WBjmSR1a4PRa4ieyROMBrs9qdpKgKl79WSJjw8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.crl rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft rsync://rpki.ripe.net/repository/DEFAULT/DlFRZ2fZqFCMbhTVje7_v6uAgN0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:c6:6c:90:49:53:ad:51:e5:dd:9a:f7:f9:16:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e51516767d9a8508c6e14d58deeffbfab8080dd Validity Not Before: Dec 6 06:00:56 2025 GMT Not After : Dec 7 06:00:56 2025 GMT Subject: CN=de9c13bb1b6ed2dcfbae07981a1170909c5f32f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ee:49:5a:49:b7:d0:ff:a5:29:4f:cb:be:e3: ff:9c:4b:52:4d:09:b5:f1:a3:98:2a:cb:99:c0:47: b4:06:64:c9:b6:3a:5d:9c:46:67:6d:34:fc:bb:9c: 2c:e5:7a:2f:d1:99:d1:0b:6c:8a:65:50:e9:5e:bb: 03:cd:93:82:d4:dd:b1:50:68:d6:77:54:d1:a3:4c: ed:a7:36:8d:3e:ac:1e:9d:97:9c:94:87:ec:79:1c: dc:e0:ce:d3:f9:66:5c:1b:d4:60:9a:1e:51:75:cc: 23:db:4d:f7:11:d5:5b:b8:1e:79:5f:04:76:b5:0b: 15:b0:9a:7e:b7:29:41:7a:c6:90:c8:67:a3:16:a9: 65:7a:06:8e:16:60:39:89:0a:9b:66:7b:50:b3:09: 8e:ab:82:c9:d3:c1:bf:e2:fd:e3:91:cc:d5:7b:82: 79:ba:a7:38:28:ba:8b:af:f2:ac:c7:aa:64:14:35: b6:10:30:24:0f:43:53:24:bd:0d:0a:27:b9:12:2f: ec:27:05:7b:0c:50:4e:82:d9:a9:3e:df:44:67:d1: 20:1c:67:46:58:c7:c5:b4:21:22:f5:e3:b8:43:5c: e0:8f:39:96:f3:0d:28:23:6a:5d:be:bb:2f:cf:38: fa:e2:c4:b0:bd:39:fe:cf:12:96:ee:49:7e:96:36: 43:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:9C:13:BB:1B:6E:D2:DC:FB:AE:07:98:1A:11:70:90:9C:5F:32:F4 X509v3 Authority Key Identifier: keyid:0E:51:51:67:67:D9:A8:50:8C:6E:14:D5:8D:EE:FF:BF:AB:80:80:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DlFRZ2fZqFCMbhTVje7_v6uAgN0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:12:b3:f8:41:9e:ac:9d:29:d4:d1:4c:af:fb:8a:a1:f4:79: 6b:ac:26:08:02:ca:b9:82:2e:66:7e:d6:84:c1:8b:7b:f0:69: c1:ab:96:95:82:33:f9:8b:05:5a:ce:ac:11:18:13:1a:22:07: f0:26:e7:8c:b1:3a:ec:11:00:00:b3:55:92:a3:e7:c2:d1:30: 50:57:2b:43:c5:b5:86:ef:da:7f:5a:4e:8d:89:9b:60:29:04: 89:61:a7:ee:32:54:14:33:a8:e5:c5:b6:13:38:b4:ad:b5:8d: 96:c3:1c:e8:4c:0a:aa:95:99:fc:f2:30:fd:95:04:55:c6:53: 86:72:e3:22:db:57:1c:0e:65:2e:2c:fe:a9:f6:d1:c1:d4:0b: 04:1e:93:66:40:1f:a9:b8:e1:72:7a:e2:3d:d9:dd:8d:0b:f8: d6:32:8f:5a:e0:a1:24:39:e2:98:9c:df:cc:f6:f1:9d:5b:85: 71:08:c8:dc:9d:59:7f:c4:c0:da:26:88:c7:23:0f:f8:73:f3: 3d:e9:0a:1a:f1:51:41:c4:da:e6:0d:e3:9a:71:e8:aa:ae:eb: cd:7a:67:07:85:ce:cd:6a:5c:50:fb:c7:c7:5f:40:ef:af:4a: f4:69:ca:b4:ca:4c:5e:6a:85:5c:35:ea:a1:cc:7f:0a:27:ec: 89:ef:8d:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP8ZskElTrVHl3Zr3+RaSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNTE1MTY3NjdkOWE4NTA4YzZlMTRkNThkZWVmZmJmYWI4 MDgwZGQwHhcNMjUxMjA2MDYwMDU2WhcNMjUxMjA3MDYwMDU2WjAzMTEwLwYDVQQD EyhkZTljMTNiYjFiNmVkMmRjZmJhZTA3OTgxYTExNzA5MDljNWYzMmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1e5JWkm30P+lKU/LvuP/nEtSTQm1 8aOYKsuZwEe0BmTJtjpdnEZnbTT8u5ws5Xov0ZnRC2yKZVDpXrsDzZOC1N2xUGjW d1TRo0ztpzaNPqwenZeclIfseRzc4M7T+WZcG9Rgmh5Rdcwj2033EdVbuB55XwR2 tQsVsJp+tylBesaQyGejFqllegaOFmA5iQqbZntQswmOq4LJ08G/4v3jkczVe4J5 uqc4KLqLr/Ksx6pkFDW2EDAkD0NTJL0NCie5Ei/sJwV7DFBOgtmpPt9EZ9EgHGdG WMfFtCEi9eO4Q1zgjzmW8w0oI2pdvrsvzzj64sSwvTn+zxKW7kl+ljZDbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN6cE7sbbtLc+64HmBoRcJCcXzL0MB8GA1UdIwQY MBaAFA5RUWdn2ahQjG4U1Y3u/7+rgIDdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGxGUloyZlpxRkNNYmhUVmplN192NnVBZ04wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny80NjQxZjYtODdjMC00ZDE3LWE1OGEt NjE2MzU2NGQ5NzA0LzEvRGxGUloyZlpxRkNNYmhUVmplN192NnVBZ04wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny80NjQxZjYtODdjMC00ZDE3LWE1OGEtNjE2MzU2NGQ5NzA0 LzEvRGxGUloyZlpxRkNNYmhUVmplN192NnVBZ04wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjBKz+EGe rJ0p1NFMr/uKofR5a6wmCALKuYIuZn7WhMGLe/BpwauWlYIz+YsFWs6sERgTGiIH 8CbnjLE67BEAALNVkqPnwtEwUFcrQ8W1hu/af1pOjYmbYCkEiWGn7jJUFDOo5cW2 Ezi0rbWNlsMc6EwKqpWZ/PIw/ZUEVcZThnLjIttXHA5lLiz+qfbRwdQLBB6TZkAf qbjhcnriPdndjQv41jKPWuChJDnimJzfzPbxnVuFcQjI3J1Zf8TA2iaIxyMP+HPz PekKGvFRQcTa5g3jmnHoqq7rzXpnB4XOzWpcUPvHx19A769K9GnKtMpMXmqFXDXq ocx/Cifsie+NuQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:49:16 2025 by rpki-client