This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.mft File: DLeircbcrxd7k6M2y47OzFrzAlg.mft (raw, json) Hash identifier: kT4GxD9lLYXz78nINJWXi9y09nu+1dQGirYF+s73Gms= Subject key identifier: 0E:01:11:33:41:A8:FA:9F:71:D7:89:B0:9A:CA:DE:94:98:F6:95:51 Authority key identifier: 0C:B7:A2:AD:C6:DC:AF:17:7B:93:A3:36:CB:8E:CE:CC:5A:F3:02:58 Certificate issuer: /CN=0cb7a2adc6dcaf177b93a336cb8ececc5af30258 Certificate serial: 019AF5E63CFDCABB080146627F59C250C130 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DLeircbcrxd7k6M2y47OzFrzAlg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.mft Manifest number: 0A0A Signing time: Sat 06 Dec 2025 23:01:37 +0000 Manifest this update: Sat 06 Dec 2025 23:01:37 +0000 Manifest next update: Sun 07 Dec 2025 23:01:37 +0000 Files and hashes: 1: DLeircbcrxd7k6M2y47OzFrzAlg.crl (hash: t2EfPsf+6PMBF82FkQjKeGWVD4jTfXso9ojjYoZ3ejw=) 2: DXgX_cMOKWmvyb5MDCu-yzGISYQ.roa (hash: fFfPzCo7zqTjJgcKhX4SxPHlq4HGUqWFQ0c7O8IZwwY=) 3: OVOzZ2g8zifvqCY8wDqOXjL1AOc.roa (hash: ei5vXf6WAl7FEI5d5Hm8KKAZYtO3URaho5E46M2Vof8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.mft rsync://rpki.ripe.net/repository/DEFAULT/DLeircbcrxd7k6M2y47OzFrzAlg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e6:3c:fd:ca:bb:08:01:46:62:7f:59:c2:50:c1:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cb7a2adc6dcaf177b93a336cb8ececc5af30258 Validity Not Before: Dec 6 23:01:37 2025 GMT Not After : Dec 7 23:01:37 2025 GMT Subject: CN=0e01113341a8fa9f71d789b09acade9498f69551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:22:6b:72:7c:09:d7:bd:1f:13:03:82:a4:31: 0b:bd:b2:ac:80:bd:5e:0e:5a:12:81:20:0e:95:db: 6f:12:4c:de:07:03:cb:25:90:da:f6:d2:97:c5:a8: 3c:6b:58:4f:2f:49:7e:7e:14:df:c9:e3:fa:31:41: c1:22:f7:93:6c:d5:f6:8c:8d:f0:90:c9:15:c9:af: 8a:0b:85:24:df:45:f7:5d:57:5e:08:a1:cf:63:b9: e5:47:8e:10:c2:49:af:f6:78:87:5e:50:93:2d:2c: ed:2b:9f:92:02:e8:ce:36:86:60:8a:b8:55:72:ac: 30:d8:6a:ba:74:8c:5c:18:42:e8:e5:43:89:0b:ef: 53:cf:c3:27:a4:5e:8e:54:1b:f0:b7:bb:a8:01:58: 53:ea:53:05:ad:cd:75:ca:b7:2e:ae:24:03:6f:3e: 96:63:a1:92:1d:01:d2:ee:29:96:f3:64:79:63:9d: d3:6f:d3:9a:07:e8:99:85:c5:71:0e:aa:8b:a2:06: b9:29:14:74:be:9b:1c:62:e4:83:aa:81:7c:0d:e1: 47:8b:9a:01:c6:f9:6e:85:f2:c3:f7:fe:69:42:f4: b3:ee:f8:cf:24:41:38:38:ed:f5:b6:79:a4:2f:6c: ae:db:12:4a:e2:f0:ff:2c:7c:df:e2:fd:06:23:8c: 09:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:01:11:33:41:A8:FA:9F:71:D7:89:B0:9A:CA:DE:94:98:F6:95:51 X509v3 Authority Key Identifier: keyid:0C:B7:A2:AD:C6:DC:AF:17:7B:93:A3:36:CB:8E:CE:CC:5A:F3:02:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DLeircbcrxd7k6M2y47OzFrzAlg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:b9:42:0f:ba:a2:97:bf:46:b8:7d:73:35:2f:c8:a4:c7:5a: 00:2d:67:33:45:1c:58:68:2f:bf:2a:a8:a3:bf:d2:32:f6:52: 0e:d1:30:17:99:38:d9:1f:37:56:a7:ee:88:44:60:06:f5:8d: 0b:69:cd:d5:13:16:42:bc:88:f3:77:37:58:75:26:ca:13:c0: 20:b1:c7:8a:b7:33:d4:15:36:90:fb:b0:82:b3:00:5a:cb:70: c0:cb:79:6b:32:aa:34:94:9b:09:e1:a2:50:47:e0:3c:df:ff: e6:cb:cd:ff:bb:cc:0d:23:75:33:9e:31:d5:44:ef:51:09:de: be:4b:0c:43:ca:ef:0e:56:8a:50:b1:0a:95:c9:65:ce:4f:c1: 9f:3f:81:4b:74:88:98:29:29:a9:94:2d:48:b9:73:48:84:0d: 88:e4:c5:af:34:a3:6f:e2:88:a0:42:ad:1f:ae:72:83:91:c8: 03:96:4c:e7:a2:6d:f5:c7:f1:58:a5:5d:c9:ea:57:a0:b8:b5: e9:5c:4b:13:65:92:ab:f7:6e:74:f3:f7:ad:b0:60:e2:41:26: f7:fb:12:aa:7b:44:f5:f0:bf:cb:74:63:c2:c7:79:69:47:38: 39:a0:af:a8:de:5e:22:17:ab:7c:1c:f5:32:7c:49:8d:42:fb: da:dc:f1:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15jz9yrsIAUZif1nCUMEwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjYjdhMmFkYzZkY2FmMTc3YjkzYTMzNmNiOGVjZWNjNWFm MzAyNTgwHhcNMjUxMjA2MjMwMTM3WhcNMjUxMjA3MjMwMTM3WjAzMTEwLwYDVQQD EygwZTAxMTEzMzQxYThmYTlmNzFkNzg5YjA5YWNhZGU5NDk4ZjY5NTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CJrcnwJ170fEwOCpDELvbKsgL1e DloSgSAOldtvEkzeBwPLJZDa9tKXxag8a1hPL0l+fhTfyeP6MUHBIveTbNX2jI3w kMkVya+KC4Uk30X3XVdeCKHPY7nlR44Qwkmv9niHXlCTLSztK5+SAujONoZgirhV cqww2Gq6dIxcGELo5UOJC+9Tz8MnpF6OVBvwt7uoAVhT6lMFrc11yrcuriQDbz6W Y6GSHQHS7imW82R5Y53Tb9OaB+iZhcVxDqqLoga5KRR0vpscYuSDqoF8DeFHi5oB xvluhfLD9/5pQvSz7vjPJEE4OO31tnmkL2yu2xJK4vD/LHzf4v0GI4wJzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA4BETNBqPqfcdeJsJrK3pSY9pVRMB8GA1UdIwQY MBaAFAy3oq3G3K8Xe5OjNsuOzsxa8wJYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRExlaXJjYmNyeGQ3azZNMnk0N096RnJ6QWxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8yZjc4OTQtNzU2ZC00Y2JmLTk3N2Mt M2M1YWU3NjFjYWIwLzEvRExlaXJjYmNyeGQ3azZNMnk0N096RnJ6QWxnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8yZjc4OTQtNzU2ZC00Y2JmLTk3N2MtM2M1YWU3NjFjYWIw LzEvRExlaXJjYmNyeGQ3azZNMnk0N096RnJ6QWxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL7lCD7qi l79GuH1zNS/IpMdaAC1nM0UcWGgvvyqoo7/SMvZSDtEwF5k42R83VqfuiERgBvWN C2nN1RMWQryI83c3WHUmyhPAILHHircz1BU2kPuwgrMAWstwwMt5azKqNJSbCeGi UEfgPN//5svN/7vMDSN1M54x1UTvUQnevksMQ8rvDlaKULEKlcllzk/Bnz+BS3SI mCkpqZQtSLlzSIQNiOTFrzSjb+KIoEKtH65yg5HIA5ZM56Jt9cfxWKVdyepXoLi1 6VxLE2WSq/dudPP3rbBg4kEm9/sSqntE9fC/y3Rjwsd5aUc4OaCvqN5eIherfBz1 MnxJjUL72tzxTw== -----END CERTIFICATE-----Generated at Sun Dec 7 01:50:28 2025 by rpki-client