This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/DjGYqYJ97q-rHSe1U3lPRLkabAY.mft File: DjGYqYJ97q-rHSe1U3lPRLkabAY.mft (raw, json) Hash identifier: XXHSce9InkVDezNCTnt2SQo43sTuiUYj4kQ8wtKgnDw= Subject key identifier: FD:39:20:C6:13:E8:F5:43:02:07:46:1E:51:3B:4D:8A:DA:07:E4:F5 Authority key identifier: 0E:31:98:A9:82:7D:EE:AF:AB:1D:27:B5:53:79:4F:44:B9:1A:6C:06 Certificate issuer: /CN=0e3198a9827deeafab1d27b553794f44b91a6c06 Certificate serial: 019AF16428B81228DCB99FDA01660875CB00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DjGYqYJ97q-rHSe1U3lPRLkabAY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/DjGYqYJ97q-rHSe1U3lPRLkabAY.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 02:01:04 +0000 Manifest this update: Sat 06 Dec 2025 02:01:04 +0000 Manifest next update: Sun 07 Dec 2025 02:01:04 +0000 Files and hashes: 1: DjGYqYJ97q-rHSe1U3lPRLkabAY.crl (hash: sT/uSMy9mVmsYrXC3DhcjCydZE2KmnZL6zH2t5mwuP0=) 2: Q2G86FF3yJmX8igU3QYVD4ZCivo.roa (hash: 6/LUNvPV45MHYpMpmogqr8zL/TAfgvM+oAX3YS1oNRc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/DjGYqYJ97q-rHSe1U3lPRLkabAY.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/DjGYqYJ97q-rHSe1U3lPRLkabAY.mft rsync://rpki.ripe.net/repository/DEFAULT/DjGYqYJ97q-rHSe1U3lPRLkabAY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:28:b8:12:28:dc:b9:9f:da:01:66:08:75:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e3198a9827deeafab1d27b553794f44b91a6c06 Validity Not Before: Dec 6 02:01:04 2025 GMT Not After : Dec 7 02:01:04 2025 GMT Subject: CN=fd3920c613e8f5430207461e513b4d8ada07e4f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:76:c0:ac:e2:eb:bc:45:ae:1c:a8:d3:79:7d: 25:4e:14:2f:b1:ef:31:1b:24:6a:2a:f9:56:74:de: 7f:83:30:bd:05:c2:f0:26:43:ad:e4:e2:8c:dc:5a: ba:dd:40:72:79:2d:ba:16:2e:f6:4b:3a:c0:68:e2: bf:fc:f9:af:36:05:f8:cf:33:a1:18:18:2f:54:57: 37:09:03:de:84:54:90:8d:ed:0a:50:38:5f:54:2c: 13:78:68:1f:8f:78:29:92:43:d4:e9:a4:27:4e:32: 60:6c:f6:20:27:d2:b8:d4:50:32:82:e2:ce:78:20: fb:81:d6:9c:d3:6c:26:b6:8a:f8:d1:9e:9a:9f:75: b4:93:bd:dc:ec:f9:73:1f:91:c8:f8:ab:f8:0c:c5: d6:bf:3a:e5:17:02:99:b4:9f:d9:f6:0a:5a:b1:d3: ff:e3:ca:5a:95:a2:c6:fc:1e:4c:53:73:e4:45:16: 2d:98:df:56:07:90:bd:88:2a:21:42:3c:df:b7:3f: dc:57:64:d4:ce:11:ed:37:c5:34:9f:b6:db:89:0b: 13:45:5f:0c:c8:f3:cd:58:36:70:30:f5:9c:e7:65: f7:43:ef:b6:b1:ba:a7:17:3c:13:9c:0c:cb:f0:cf: 36:ab:c6:36:a3:33:1a:f3:d4:5f:fa:a9:52:de:54: f7:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:39:20:C6:13:E8:F5:43:02:07:46:1E:51:3B:4D:8A:DA:07:E4:F5 X509v3 Authority Key Identifier: keyid:0E:31:98:A9:82:7D:EE:AF:AB:1D:27:B5:53:79:4F:44:B9:1A:6C:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DjGYqYJ97q-rHSe1U3lPRLkabAY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/DjGYqYJ97q-rHSe1U3lPRLkabAY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/DjGYqYJ97q-rHSe1U3lPRLkabAY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:6a:76:02:e6:b4:64:a1:41:2a:4a:2e:08:d7:fa:1b:68:34: 41:4d:91:47:a6:e3:f0:21:d2:7b:92:76:b9:eb:6f:4c:7d:1b: ce:ff:94:70:7a:7e:e7:78:d4:1c:83:59:86:e3:09:15:54:9b: 15:0f:9c:7b:d6:ff:b5:85:2e:92:da:b1:be:16:ea:fe:a9:c9: 77:ae:21:20:be:b1:a7:2b:b1:00:c0:ca:98:a9:2d:46:5f:ca: e9:5c:d3:5f:fc:3c:61:c7:a7:d1:82:ac:27:b8:f7:34:c4:f1: 8b:90:53:de:f9:1a:34:4a:b2:53:f7:18:85:30:4f:f6:ec:44: f3:b5:04:e5:64:7f:5f:65:30:3d:8e:91:1b:62:b5:b0:2f:9a: 0c:55:6c:0a:a8:32:b8:2d:67:74:39:d2:0c:65:28:4a:46:ea: e5:3e:1c:13:1f:fc:75:51:d5:ff:f7:52:b8:6b:76:7c:1e:7c: c0:9c:79:c2:30:90:83:63:68:c3:5c:eb:27:2b:fc:02:30:f3: 71:88:34:21:3a:7d:39:4d:c7:74:32:d0:8c:52:5d:77:51:d4: 51:a1:9f:59:87:37:70:d6:2d:9a:14:ad:72:a2:a9:6c:3b:95: 0c:23:4a:c9:db:f3:fd:a4:39:50:36:aa:cd:59:59:85:eb:26: b4:d0:e5:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZCi4EijcuZ/aAWYIdcsAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMzE5OGE5ODI3ZGVlYWZhYjFkMjdiNTUzNzk0ZjQ0Yjkx YTZjMDYwHhcNMjUxMjA2MDIwMTA0WhcNMjUxMjA3MDIwMTA0WjAzMTEwLwYDVQQD EyhmZDM5MjBjNjEzZThmNTQzMDIwNzQ2MWU1MTNiNGQ4YWRhMDdlNGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHbArOLrvEWuHKjTeX0lThQvse8x GyRqKvlWdN5/gzC9BcLwJkOt5OKM3Fq63UByeS26Fi72SzrAaOK//PmvNgX4zzOh GBgvVFc3CQPehFSQje0KUDhfVCwTeGgfj3gpkkPU6aQnTjJgbPYgJ9K41FAyguLO eCD7gdac02wmtor40Z6an3W0k73c7PlzH5HI+Kv4DMXWvzrlFwKZtJ/Z9gpasdP/ 48palaLG/B5MU3PkRRYtmN9WB5C9iCohQjzftz/cV2TUzhHtN8U0n7bbiQsTRV8M yPPNWDZwMPWc52X3Q++2sbqnFzwTnAzL8M82q8Y2ozMa89Rf+qlS3lT3tQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP05IMYT6PVDAgdGHlE7TYraB+T1MB8GA1UdIwQY MBaAFA4xmKmCfe6vqx0ntVN5T0S5GmwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGpHWXFZSjk3cS1ySFNlMVUzbFBSTGthYkFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8yZjdiOTEtMTdiZi00YzJhLWE4MWUt NDE1Mjc5NjFkNDhlLzEvRGpHWXFZSjk3cS1ySFNlMVUzbFBSTGthYkFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy8yZjdiOTEtMTdiZi00YzJhLWE4MWUtNDE1Mjc5NjFkNDhl LzEvRGpHWXFZSjk3cS1ySFNlMVUzbFBSTGthYkFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw2p2Aua0 ZKFBKkouCNf6G2g0QU2RR6bj8CHSe5J2uetvTH0bzv+UcHp+53jUHINZhuMJFVSb FQ+ce9b/tYUuktqxvhbq/qnJd64hIL6xpyuxAMDKmKktRl/K6VzTX/w8Ycen0YKs J7j3NMTxi5BT3vkaNEqyU/cYhTBP9uxE87UE5WR/X2UwPY6RG2K1sC+aDFVsCqgy uC1ndDnSDGUoSkbq5T4cEx/8dVHV//dSuGt2fB58wJx5wjCQg2Now1zrJyv8AjDz cYg0ITp9OU3HdDLQjFJdd1HUUaGfWYc3cNYtmhStcqKpbDuVDCNKydvz/aQ5UDaq zVlZhesmtNDlXA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:12:22 2025 by rpki-client