This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft File: djLJDvGdK9b2aKSCbi0NFWNelH0.mft (raw, json) Hash identifier: BG8jSn2aNu9lFV54JuRYM0nYWscubHRsdETsV6T9GKM= Subject key identifier: 66:EA:8C:4E:47:27:80:8F:F0:48:29:2C:DA:78:66:9B:06:52:0B:9D Authority key identifier: 76:32:C9:0E:F1:9D:2B:D6:F6:68:A4:82:6E:2D:0D:15:63:5E:94:7D Certificate issuer: /CN=7632c90ef19d2bd6f668a4826e2d0d15635e947d Certificate serial: 019AF3C02225E58D56CBD58D3C2B34ED2D5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/djLJDvGdK9b2aKSCbi0NFWNelH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 13:00:46 +0000 Manifest this update: Sat 06 Dec 2025 13:00:46 +0000 Manifest next update: Sun 07 Dec 2025 13:00:46 +0000 Files and hashes: 1: djLJDvGdK9b2aKSCbi0NFWNelH0.crl (hash: jL4Ygr3nsjn7ffxK+rI8TfT1+j9qLWveOKySZTTyVgE=) 2: wBaE5svUrTDa4cJiCAHlEwrForw.roa (hash: sNv0g7ZzW3+C7EQOHQU5ckniP/nqJPJ/xsRMEfe9338=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.crl rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft rsync://rpki.ripe.net/repository/DEFAULT/djLJDvGdK9b2aKSCbi0NFWNelH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:22:25:e5:8d:56:cb:d5:8d:3c:2b:34:ed:2d:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7632c90ef19d2bd6f668a4826e2d0d15635e947d Validity Not Before: Dec 6 13:00:46 2025 GMT Not After : Dec 7 13:00:46 2025 GMT Subject: CN=66ea8c4e4727808ff048292cda78669b06520b9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:fb:95:70:4f:7d:38:ff:d9:2e:9e:e3:59:f9: f4:75:a7:7c:77:05:e5:28:50:67:0a:e5:85:c9:02: 41:55:c7:b1:bc:03:a3:97:36:8a:33:ab:cf:a3:87: 49:6f:8a:63:62:ba:07:44:d9:c5:db:59:9a:ab:11: 09:43:0a:28:54:da:bd:30:df:3f:0c:dd:09:55:9c: 75:80:8a:e8:0c:f5:e3:b4:96:fb:b4:0b:69:d0:8a: b5:0c:63:58:5b:95:b4:0d:89:ac:be:45:ad:31:4e: b0:3d:1d:93:15:b8:04:8e:3a:da:ff:5a:0c:10:f7: e1:22:af:4b:c5:5f:8d:9a:9f:76:81:ab:e7:b6:92: 1b:88:29:6c:2d:ed:ba:68:77:16:bb:7f:46:ea:a5: 38:f9:1e:c5:55:c8:55:b2:af:ab:a5:8b:aa:82:92: 7f:8f:17:a0:06:73:75:a1:e9:cd:40:e2:a5:0e:84: 26:2f:f7:06:9e:e6:30:3c:49:4b:e7:30:2f:15:ee: c1:74:c4:15:1c:04:65:1b:c4:23:b2:e2:37:0e:e2: 8e:a9:ca:22:46:ce:2b:a2:42:bf:f0:f3:49:c5:cd: b2:24:8c:e1:f6:7b:44:ac:68:24:cb:7d:03:71:5a: c5:b1:d6:82:91:c5:29:d3:42:35:4c:7f:11:b6:9f: da:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:EA:8C:4E:47:27:80:8F:F0:48:29:2C:DA:78:66:9B:06:52:0B:9D X509v3 Authority Key Identifier: keyid:76:32:C9:0E:F1:9D:2B:D6:F6:68:A4:82:6E:2D:0D:15:63:5E:94:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/djLJDvGdK9b2aKSCbi0NFWNelH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:55:6b:4b:f7:f7:ed:33:68:f8:24:7f:21:c6:f6:e2:6e:c9: cf:66:4c:a1:59:3d:5b:3c:60:54:d9:3f:b8:1e:34:62:a2:d5: c9:d6:93:01:8f:0b:68:f9:42:60:07:f3:dd:a9:77:70:e6:1c: e3:d6:a9:94:18:c4:7a:97:3a:1a:05:34:33:fd:22:71:a6:cf: f1:4a:10:4c:2d:ab:7e:bb:c5:69:50:0e:a7:58:fc:a1:3d:4f: e6:eb:8c:2e:b9:72:d2:75:c5:15:7b:cd:e0:e1:4e:84:68:68: e3:5a:92:34:cb:18:f0:5a:13:c8:8a:d9:1c:fe:bf:9b:88:b6: 7d:3a:f4:3a:88:39:07:0d:21:42:9b:07:20:d8:cc:6a:b2:df: 07:f3:7c:e3:95:44:a4:64:72:ab:32:d4:03:96:7d:7b:e6:ca: 8b:43:47:5f:9a:61:e4:a2:ad:e5:49:eb:48:fc:19:e8:90:a2: a1:a4:94:3d:b9:a3:39:4d:b6:41:a9:bd:4f:49:c9:44:db:43: c8:97:dd:b7:4c:3e:63:f4:fd:58:6d:e5:f4:8d:1f:ce:be:73: 77:21:e7:bd:a2:d7:8e:2f:09:18:0b:f9:a0:17:9b:18:9d:78: 6c:64:48:9f:d7:13:c7:87:2a:88:da:89:1b:1c:14:82:28:c5: ac:9d:38:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwCIl5Y1Wy9WNPCs07S1fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2MzJjOTBlZjE5ZDJiZDZmNjY4YTQ4MjZlMmQwZDE1NjM1 ZTk0N2QwHhcNMjUxMjA2MTMwMDQ2WhcNMjUxMjA3MTMwMDQ2WjAzMTEwLwYDVQQD Eyg2NmVhOGM0ZTQ3Mjc4MDhmZjA0ODI5MmNkYTc4NjY5YjA2NTIwYjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vuVcE99OP/ZLp7jWfn0dad8dwXl KFBnCuWFyQJBVcexvAOjlzaKM6vPo4dJb4pjYroHRNnF21maqxEJQwooVNq9MN8/ DN0JVZx1gIroDPXjtJb7tAtp0Iq1DGNYW5W0DYmsvkWtMU6wPR2TFbgEjjra/1oM EPfhIq9LxV+Nmp92gavntpIbiClsLe26aHcWu39G6qU4+R7FVchVsq+rpYuqgpJ/ jxegBnN1oenNQOKlDoQmL/cGnuYwPElL5zAvFe7BdMQVHARlG8QjsuI3DuKOqcoi Rs4rokK/8PNJxc2yJIzh9ntErGgky30DcVrFsdaCkcUp00I1TH8Rtp/a+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGbqjE5HJ4CP8EgpLNp4ZpsGUgudMB8GA1UdIwQY MBaAFHYyyQ7xnSvW9mikgm4tDRVjXpR9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGpMSkR2R2RLOWIyYUtTQ2JpME5GV05lbEgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC85ODQ0Y2QtMjRmOC00ZTUyLWI0MmIt YzdiZjAyMWVlNjY0LzEvZGpMSkR2R2RLOWIyYUtTQ2JpME5GV05lbEgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC85ODQ0Y2QtMjRmOC00ZTUyLWI0MmItYzdiZjAyMWVlNjY0 LzEvZGpMSkR2R2RLOWIyYUtTQ2JpME5GV05lbEgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKFVrS/f3 7TNo+CR/Icb24m7Jz2ZMoVk9WzxgVNk/uB40YqLVydaTAY8LaPlCYAfz3al3cOYc 49aplBjEepc6GgU0M/0icabP8UoQTC2rfrvFaVAOp1j8oT1P5uuMLrly0nXFFXvN 4OFOhGho41qSNMsY8FoTyIrZHP6/m4i2fTr0Oog5Bw0hQpsHINjMarLfB/N845VE pGRyqzLUA5Z9e+bKi0NHX5ph5KKt5UnrSPwZ6JCioaSUPbmjOU22Qam9T0nJRNtD yJfdt0w+Y/T9WG3l9I0fzr5zdyHnvaLXji8JGAv5oBebGJ14bGRIn9cTx4cqiNqJ GxwUgijFrJ04BA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:53:23 2025 by rpki-client