This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft File: 0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft (raw, json) Hash identifier: ldzXDJ1eCQ1m1JcKlVh6k/S8LX0RAQi9QvIEAuCej9k= Subject key identifier: 67:15:DE:77:53:54:A5:E1:23:97:CB:C5:C1:CA:E9:93:63:D4:BC:BB Authority key identifier: D0:31:65:50:23:BD:14:17:31:D5:6F:B8:45:3F:F0:51:4F:72:88:65 Certificate issuer: /CN=d031655023bd141731d56fb8453ff0514f728865 Certificate serial: 019B2F67E0122DA22684DEC8470C879F2108 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft Manifest number: 1437 Signing time: Thu 18 Dec 2025 03:01:35 +0000 Manifest this update: Thu 18 Dec 2025 03:01:35 +0000 Manifest next update: Fri 19 Dec 2025 03:01:35 +0000 Files and hashes: 1: 0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl (hash: rmdSGij4Px6maF+Nz5E9CUoJBn5T73ACGYUjATnS+Q0=) 2: l2z6jen0BvB90JFFcv4xMvXKDU4.roa (hash: 3LW90buItGbBk8vwyzdEvNmU4J6IAwriJoEjk0Q8hlI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:e0:12:2d:a2:26:84:de:c8:47:0c:87:9f:21:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d031655023bd141731d56fb8453ff0514f728865 Validity Not Before: Dec 18 03:01:35 2025 GMT Not After : Dec 19 03:01:35 2025 GMT Subject: CN=6715de775354a5e12397cbc5c1cae99363d4bcbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8e:7f:f8:7f:c6:86:69:3e:32:f3:3d:c0:63: 32:39:19:3c:d4:c9:4a:6f:ff:25:03:53:01:62:24: d3:d8:21:14:b1:a8:86:52:40:65:63:25:f8:0f:cf: 6c:9b:90:05:28:1b:12:f0:5f:78:e5:c2:d0:8c:8b: d2:77:02:a3:e0:7e:43:c8:cb:ec:1c:96:e0:03:c9: 41:cb:df:7c:35:0b:0a:b6:40:52:1f:c0:c8:0b:6a: b8:44:cf:b6:05:28:94:6a:64:d9:93:7b:32:8d:eb: cf:5a:c9:94:8d:a9:f0:89:10:fd:e0:00:46:53:7e: 72:57:ce:fb:50:9c:c0:28:bc:af:43:36:9e:41:5d: 97:5d:13:3f:38:6c:68:3c:7a:51:04:d6:f6:3b:06: 99:48:5d:63:ce:3c:0c:22:02:9a:7e:14:de:54:ab: 3f:16:d4:84:86:63:69:54:ad:2d:42:85:66:48:d8: 15:b1:7c:a4:42:e8:c0:26:28:36:e2:64:cb:32:de: f9:e8:c6:43:7e:bb:ac:14:a6:51:fe:84:87:9e:b2: 98:20:c3:b6:ca:5b:13:6d:02:12:57:3b:26:f4:7e: e9:08:68:b5:41:44:93:1b:55:fd:51:aa:48:cc:f9: 81:e1:b5:9b:07:74:35:bb:cc:d1:c3:8b:db:f9:1f: 6e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:15:DE:77:53:54:A5:E1:23:97:CB:C5:C1:CA:E9:93:63:D4:BC:BB X509v3 Authority Key Identifier: keyid:D0:31:65:50:23:BD:14:17:31:D5:6F:B8:45:3F:F0:51:4F:72:88:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DFlUCO9FBcx1W-4RT_wUU9yiGU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9cf95f-73d3-4e4f-a979-d8bd2f56bc8c/1/0DFlUCO9FBcx1W-4RT_wUU9yiGU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:0a:bf:87:9b:e5:7c:1c:8c:a0:24:b4:ba:88:7d:42:b0:9f: 17:14:24:85:e4:d9:ff:fa:98:2d:cd:15:87:70:83:28:1e:70: c9:78:66:3d:17:3e:31:94:30:6d:91:c6:52:58:66:f0:c6:e1: 45:a9:d2:89:d1:b7:b8:2e:74:91:9e:32:07:89:47:52:a6:1a: 4e:89:93:22:62:fa:5f:06:c3:60:8f:0f:14:fc:05:4d:4f:fc: d6:23:fe:9d:f7:e1:65:ce:98:f7:55:24:1b:63:bc:9f:0b:7d: 3c:7a:f9:a7:cd:3a:b3:3b:df:6a:a2:20:33:7f:13:38:30:55: 61:7e:53:47:87:3d:3a:ba:b7:60:12:97:85:ae:25:7e:fe:93: f7:3c:bf:bb:b1:39:7e:9e:54:b9:fd:13:76:18:68:5f:24:0d: 74:ec:56:46:df:9f:49:cd:37:5f:a0:23:95:ce:de:a8:e6:09: fa:94:b0:c4:08:d8:af:e1:f7:18:39:39:37:88:c9:33:42:18: 21:b8:53:42:71:b2:df:6a:61:c0:9a:49:d7:ba:d9:f5:aa:3f: 91:47:b2:b0:78:92:6b:02:f8:ed:ce:91:27:67:f3:bf:ce:f0: 5a:29:19:11:7c:51:7d:18:94:97:ec:78:e4:c0:04:d9:23:aa: 67:60:82:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ+ASLaImhN7IRwyHnyEIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwMzE2NTUwMjNiZDE0MTczMWQ1NmZiODQ1M2ZmMDUxNGY3 Mjg4NjUwHhcNMjUxMjE4MDMwMTM1WhcNMjUxMjE5MDMwMTM1WjAzMTEwLwYDVQQD Eyg2NzE1ZGU3NzUzNTRhNWUxMjM5N2NiYzVjMWNhZTk5MzYzZDRiY2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArI5/+H/Ghmk+MvM9wGMyORk81MlK b/8lA1MBYiTT2CEUsaiGUkBlYyX4D89sm5AFKBsS8F945cLQjIvSdwKj4H5DyMvs HJbgA8lBy998NQsKtkBSH8DIC2q4RM+2BSiUamTZk3syjevPWsmUjanwiRD94ABG U35yV877UJzAKLyvQzaeQV2XXRM/OGxoPHpRBNb2OwaZSF1jzjwMIgKafhTeVKs/ FtSEhmNpVK0tQoVmSNgVsXykQujAJig24mTLMt756MZDfrusFKZR/oSHnrKYIMO2 ylsTbQISVzsm9H7pCGi1QUSTG1X9UapIzPmB4bWbB3Q1u8zRw4vb+R9utQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGcV3ndTVKXhI5fLxcHK6ZNj1Ly7MB8GA1UdIwQY MBaAFNAxZVAjvRQXMdVvuEU/8FFPcohlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMERGbFVDTzlGQmN4MVctNFJUX3dVVTl5aUdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS85Y2Y5NWYtNzNkMy00ZTRmLWE5Nzkt ZDhiZDJmNTZiYzhjLzEvMERGbFVDTzlGQmN4MVctNFJUX3dVVTl5aUdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS85Y2Y5NWYtNzNkMy00ZTRmLWE5NzktZDhiZDJmNTZiYzhj LzEvMERGbFVDTzlGQmN4MVctNFJUX3dVVTl5aUdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgAq/h5vl fByMoCS0uoh9QrCfFxQkheTZ//qYLc0Vh3CDKB5wyXhmPRc+MZQwbZHGUlhm8Mbh RanSidG3uC50kZ4yB4lHUqYaTomTImL6XwbDYI8PFPwFTU/81iP+nffhZc6Y91Uk G2O8nwt9PHr5p806szvfaqIgM38TODBVYX5TR4c9Orq3YBKXha4lfv6T9zy/u7E5 fp5Uuf0TdhhoXyQNdOxWRt+fSc03X6Ajlc7eqOYJ+pSwxAjYr+H3GDk5N4jJM0IY IbhTQnGy32phwJpJ17rZ9ao/kUeysHiSawL47c6RJ2fzv87wWikZEXxRfRiUl+x4 5MAE2SOqZ2CCPg== -----END CERTIFICATE-----Generated at Thu Dec 18 07:53:31 2025 by rpki-client