This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft File: DJpALskLW0dezJv0scZrI4ITIU4.mft (raw, json) Hash identifier: Bl6n1hRbfZecqn+HJn/NOj48h2IBq/zpzp0RlAd2u1g= Subject key identifier: F9:8D:97:3B:34:63:B3:1A:67:AF:B1:8A:25:A8:60:21:45:79:26:6F Authority key identifier: 0C:9A:40:2E:C9:0B:5B:47:5E:CC:9B:F4:B1:C6:6B:23:82:13:21:4E Certificate issuer: /CN=0c9a402ec90b5b475ecc9bf4b1c66b238213214e Certificate serial: 019AF54083688E363E9E58E67A9ACC19C984 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 20:00:37 +0000 Manifest this update: Sat 06 Dec 2025 20:00:37 +0000 Manifest next update: Sun 07 Dec 2025 20:00:37 +0000 Files and hashes: 1: DJpALskLW0dezJv0scZrI4ITIU4.crl (hash: oI7N1fHdWMkZSZgyKrlgP8LyXynZwr1g/ND+81ANJ6I=) 2: x2MfmeFdkAhvqtMnijQj44RaTsU.roa (hash: vo8DVrtFsZbAKsU4/jySKYry7q+PSUACGGuHHoeRqBM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.crl rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:83:68:8e:36:3e:9e:58:e6:7a:9a:cc:19:c9:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c9a402ec90b5b475ecc9bf4b1c66b238213214e Validity Not Before: Dec 6 20:00:37 2025 GMT Not After : Dec 7 20:00:37 2025 GMT Subject: CN=f98d973b3463b31a67afb18a25a860214579266f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:7b:a9:90:dd:72:a1:05:9e:39:f2:af:e9:ad: c5:cc:34:90:7f:03:67:23:0a:f6:1d:63:a5:5a:ee: dd:8e:e9:b1:99:e8:45:4a:b8:6f:6e:b1:d9:33:a3: 8a:d1:2c:f2:a3:84:55:1d:03:5e:fd:52:1f:ab:24: 62:d5:f5:90:ed:12:51:d7:3e:07:d7:3e:2d:93:9b: 2d:43:ac:c8:a6:ca:73:36:4d:40:c0:58:dd:86:a3: b2:f4:ed:d2:bd:66:39:09:5f:29:ed:62:8b:bc:eb: ae:e7:f6:c9:c7:fe:c1:bf:67:e7:30:bb:57:a8:80: e6:3b:de:af:c2:9e:c1:c8:b2:72:f8:39:d1:ae:7e: 1d:8d:27:e6:e9:b8:34:ea:1c:7e:9f:c3:1e:32:f0: 66:dc:81:77:87:f6:e5:b2:66:6f:8d:1a:53:af:8f: 3e:10:51:56:76:32:cf:c5:14:21:b2:95:f1:96:84: 8b:18:fe:8e:e2:35:9f:ef:d3:c4:64:d2:fc:c6:65: 45:ae:66:1d:51:39:03:08:b2:f8:b0:fd:9c:36:47: e4:4c:cc:61:b4:fb:b6:32:b0:c4:e1:fb:d7:55:b1: 38:c8:04:f6:82:b9:88:66:e5:c2:48:5a:2f:11:f2: 39:dc:35:7b:e8:d9:6a:b6:c1:6c:a5:f0:c8:19:b7: df:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:8D:97:3B:34:63:B3:1A:67:AF:B1:8A:25:A8:60:21:45:79:26:6F X509v3 Authority Key Identifier: keyid:0C:9A:40:2E:C9:0B:5B:47:5E:CC:9B:F4:B1:C6:6B:23:82:13:21:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:79:a6:c4:43:26:95:80:11:00:65:64:5b:c7:8e:0b:5f:b9: cc:3b:4e:b7:da:e2:62:0a:ae:53:0d:67:0e:7b:99:94:01:fa: f6:9f:62:c7:08:79:62:bd:10:5c:90:02:58:65:17:a9:d4:f3: 3d:35:86:be:ec:16:aa:3e:74:f6:75:6f:78:9e:dc:3f:1f:ef: 0f:78:26:83:ed:d0:4e:8b:1e:a8:2e:80:9d:1f:5b:35:1e:76: 05:94:09:da:8d:79:de:db:68:3f:35:e6:86:1f:09:70:d2:31: d0:ee:a2:e2:66:60:36:55:29:e0:fc:04:c5:b9:6d:66:f6:b3: ac:9e:71:56:02:33:19:f8:25:8f:d3:62:20:f3:48:95:e4:0c: 77:f8:52:e6:28:de:84:ba:e7:c1:25:84:ab:8b:0a:3c:87:bd: db:b5:ff:77:d0:a8:9e:d2:33:32:6e:3c:2b:0b:39:89:9a:a9: c7:2b:58:c9:46:8a:1d:d0:dc:e4:bf:a6:78:a9:d4:53:95:85: b2:e0:dd:65:7d:1f:dc:3c:6f:42:cd:d4:fc:fe:52:41:f1:23: db:9f:b0:3b:67:4d:bb:63:30:ea:68:19:1b:55:e5:ee:89:c2: fe:2b:59:b7:14:4a:a0:9d:8d:c1:a1:98:dc:94:9a:32:62:01: 22:4e:50:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QINojjY+nljmeprMGcmEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjOWE0MDJlYzkwYjViNDc1ZWNjOWJmNGIxYzY2YjIzODIx MzIxNGUwHhcNMjUxMjA2MjAwMDM3WhcNMjUxMjA3MjAwMDM3WjAzMTEwLwYDVQQD EyhmOThkOTczYjM0NjNiMzFhNjdhZmIxOGEyNWE4NjAyMTQ1NzkyNjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6nupkN1yoQWeOfKv6a3FzDSQfwNn Iwr2HWOlWu7djumxmehFSrhvbrHZM6OK0Szyo4RVHQNe/VIfqyRi1fWQ7RJR1z4H 1z4tk5stQ6zIpspzNk1AwFjdhqOy9O3SvWY5CV8p7WKLvOuu5/bJx/7Bv2fnMLtX qIDmO96vwp7ByLJy+DnRrn4djSfm6bg06hx+n8MeMvBm3IF3h/blsmZvjRpTr48+ EFFWdjLPxRQhspXxloSLGP6O4jWf79PEZNL8xmVFrmYdUTkDCLL4sP2cNkfkTMxh tPu2MrDE4fvXVbE4yAT2grmIZuXCSFovEfI53DV76NlqtsFspfDIGbffUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPmNlzs0Y7MaZ6+xiiWoYCFFeSZvMB8GA1UdIwQY MBaAFAyaQC7JC1tHXsyb9LHGayOCEyFOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREpwQUxza0xXMGRlekp2MHNjWnJJNElUSVU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9iMGY3YmYtNjg0NC00YmE0LWIzM2Qt Nzc4NjlhNmJmZTU0LzEvREpwQUxza0xXMGRlekp2MHNjWnJJNElUSVU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9iMGY3YmYtNjg0NC00YmE0LWIzM2QtNzc4NjlhNmJmZTU0 LzEvREpwQUxza0xXMGRlekp2MHNjWnJJNElUSVU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN3mmxEMm lYARAGVkW8eOC1+5zDtOt9riYgquUw1nDnuZlAH69p9ixwh5Yr0QXJACWGUXqdTz PTWGvuwWqj509nVveJ7cPx/vD3gmg+3QToseqC6AnR9bNR52BZQJ2o153ttoPzXm hh8JcNIx0O6i4mZgNlUp4PwExbltZvazrJ5xVgIzGfglj9NiIPNIleQMd/hS5ije hLrnwSWEq4sKPIe927X/d9ContIzMm48Kws5iZqpxytYyUaKHdDc5L+meKnUU5WF suDdZX0f3DxvQs3U/P5SQfEj25+wO2dNu2Mw6mgZG1Xl7onC/itZtxRKoJ2NwaGY 3JSaMmIBIk5Qbw== -----END CERTIFICATE-----Generated at Sun Dec 7 01:30:26 2025 by rpki-client