This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.mft File: DigqFcGl0VS72ocrNXYHqR-VCqU.mft (raw, json) Hash identifier: xngSin6kZa1y/NpZURr6LQQB2fSger8f8pn6er5XtkY= Subject key identifier: 32:2F:9A:40:33:4E:4D:DD:BD:FE:19:00:EC:CB:D6:19:E1:E7:E8:03 Authority key identifier: 0E:28:2A:15:C1:A5:D1:54:BB:DA:87:2B:35:76:07:A9:1F:95:0A:A5 Certificate issuer: /CN=0e282a15c1a5d154bbda872b357607a91f950aa5 Certificate serial: 019B2F67849ED65658FFEB5DB021337E7712 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DigqFcGl0VS72ocrNXYHqR-VCqU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.mft Manifest number: 13A8 Signing time: Thu 18 Dec 2025 03:01:11 +0000 Manifest this update: Thu 18 Dec 2025 03:01:11 +0000 Manifest next update: Fri 19 Dec 2025 03:01:11 +0000 Files and hashes: 1: DigqFcGl0VS72ocrNXYHqR-VCqU.crl (hash: ZL+GpMDiJUpooMMPp9hipfi0OrH7wTYeq1MUiifFZUc=) 2: u3O0A5kbS_BKPuygQ5bEuCuWEmM.roa (hash: EFUICxjgOr4/W3Yre79DXYxTO7h614siVS4H6ARHwaw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.crl rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.mft rsync://rpki.ripe.net/repository/DEFAULT/DigqFcGl0VS72ocrNXYHqR-VCqU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:84:9e:d6:56:58:ff:eb:5d:b0:21:33:7e:77:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e282a15c1a5d154bbda872b357607a91f950aa5 Validity Not Before: Dec 18 03:01:11 2025 GMT Not After : Dec 19 03:01:11 2025 GMT Subject: CN=322f9a40334e4dddbdfe1900eccbd619e1e7e803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:95:5c:e5:29:7e:03:11:5e:0b:45:aa:65:8e: bb:a1:c3:32:16:cc:ac:1c:99:d4:ad:3c:cc:1c:ad: 48:0d:f1:ab:b5:d1:ac:2d:e9:2a:dd:c3:b4:4d:cb: a2:72:56:f6:38:0d:74:db:a3:69:df:ff:40:d1:e1: 2c:ab:1e:69:09:7c:99:b3:5e:3f:e6:ec:59:db:47: d2:af:ef:ed:c7:9a:fe:6d:5e:f2:fa:22:15:0b:11: eb:ee:6b:03:d3:40:e2:99:b6:b8:97:d5:d9:04:2e: 52:eb:a1:58:99:6b:9a:6f:ee:24:4c:b0:92:8a:2b: 92:30:f6:b8:28:b6:b0:60:07:71:a5:a4:94:81:1a: 94:c4:dd:66:09:06:ba:71:93:05:cf:0c:cb:22:f3: ec:c5:32:f9:11:3d:cf:13:6e:e8:33:fe:e9:d4:df: 4d:e1:f1:9f:db:33:aa:9b:bf:10:a0:c7:bb:69:96: b1:94:53:c1:86:06:ad:bc:8e:9f:3d:cb:e0:70:03: ac:af:d6:c0:75:6e:53:14:4b:83:b3:74:18:7c:68: 4a:7f:47:02:2a:e7:e3:37:9d:6f:ff:6b:68:bb:ee: aa:2b:a6:d5:e3:00:40:23:54:42:09:49:2b:ad:45: fe:a1:1d:ad:1c:1b:53:4f:75:a6:f6:d5:b0:49:ae: ce:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:2F:9A:40:33:4E:4D:DD:BD:FE:19:00:EC:CB:D6:19:E1:E7:E8:03 X509v3 Authority Key Identifier: keyid:0E:28:2A:15:C1:A5:D1:54:BB:DA:87:2B:35:76:07:A9:1F:95:0A:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DigqFcGl0VS72ocrNXYHqR-VCqU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:61:b6:13:0d:5b:bf:3c:52:dc:5b:ae:e5:b2:18:ad:57:b1: 93:3f:f6:a5:7c:3b:1c:17:fe:e6:f1:14:f7:20:01:43:12:c3: ff:70:6c:fd:51:83:f3:73:81:26:a1:e0:f4:b9:e0:f5:0e:44: a4:be:1d:88:b7:91:b9:0a:d4:17:a2:45:35:6b:cd:66:4c:e0: f7:ff:e4:a5:6a:92:7c:20:e3:d4:f8:4b:15:14:eb:2a:f4:f2: 11:e2:50:7e:b0:93:13:6b:d9:c1:43:94:84:f9:d2:50:5f:38: fd:3b:8c:79:33:47:db:1d:ad:58:1c:0b:d7:c1:cc:e4:b9:6c: df:9b:7d:c1:0e:de:e6:ad:0b:2f:dd:79:76:11:74:5b:8f:96: 6a:b2:1a:4f:70:f6:58:fd:27:ee:44:52:6d:39:ef:8c:3d:5c: 87:86:bf:4a:85:21:b8:3c:56:3e:41:a1:ea:2e:b0:57:9e:25: fe:6b:75:e1:0b:a2:2a:06:b0:b0:85:87:1d:3d:1a:95:01:f1: 45:57:d4:cd:8e:aa:41:fb:dc:83:76:f3:4a:b9:0c:a8:ea:e6: bd:41:a0:4c:a9:c4:54:f1:b8:b5:41:ee:4f:a1:94:b1:c6:1c: 01:e6:8f:f4:85:6e:55:93:e8:de:f4:08:f5:ab:3f:09:0f:fe: 23:8f:20:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ4Se1lZY/+tdsCEzfncSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMjgyYTE1YzFhNWQxNTRiYmRhODcyYjM1NzYwN2E5MWY5 NTBhYTUwHhcNMjUxMjE4MDMwMTExWhcNMjUxMjE5MDMwMTExWjAzMTEwLwYDVQQD EygzMjJmOWE0MDMzNGU0ZGRkYmRmZTE5MDBlY2NiZDYxOWUxZTdlODAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJVc5Sl+AxFeC0WqZY67ocMyFsys HJnUrTzMHK1IDfGrtdGsLekq3cO0Tcuiclb2OA1026Np3/9A0eEsqx5pCXyZs14/ 5uxZ20fSr+/tx5r+bV7y+iIVCxHr7msD00Dimba4l9XZBC5S66FYmWuab+4kTLCS iiuSMPa4KLawYAdxpaSUgRqUxN1mCQa6cZMFzwzLIvPsxTL5ET3PE27oM/7p1N9N 4fGf2zOqm78QoMe7aZaxlFPBhgatvI6fPcvgcAOsr9bAdW5TFEuDs3QYfGhKf0cC KufjN51v/2tou+6qK6bV4wBAI1RCCUkrrUX+oR2tHBtTT3Wm9tWwSa7OswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDIvmkAzTk3dvf4ZAOzL1hnh5+gDMB8GA1UdIwQY MBaAFA4oKhXBpdFUu9qHKzV2B6kflQqlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGlncUZjR2wwVlM3Mm9jck5YWUhxUi1WQ3FVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9kYWYxYWUtZDVlYi00Y2E0LThhYWYt Nzg3NDFhYzkzYjMwLzEvRGlncUZjR2wwVlM3Mm9jck5YWUhxUi1WQ3FVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9kYWYxYWUtZDVlYi00Y2E0LThhYWYtNzg3NDFhYzkzYjMw LzEvRGlncUZjR2wwVlM3Mm9jck5YWUhxUi1WQ3FVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk2G2Ew1b vzxS3Fuu5bIYrVexkz/2pXw7HBf+5vEU9yABQxLD/3Bs/VGD83OBJqHg9Lng9Q5E pL4diLeRuQrUF6JFNWvNZkzg9//kpWqSfCDj1PhLFRTrKvTyEeJQfrCTE2vZwUOU hPnSUF84/TuMeTNH2x2tWBwL18HM5Lls35t9wQ7e5q0LL915dhF0W4+WarIaT3D2 WP0n7kRSbTnvjD1ch4a/SoUhuDxWPkGh6i6wV54l/mt14QuiKgawsIWHHT0alQHx RVfUzY6qQfvcg3bzSrkMqOrmvUGgTKnEVPG4tUHuT6GUscYcAeaP9IVuVZPo3vQI 9as/CQ/+I48goQ== -----END CERTIFICATE-----Generated at Thu Dec 18 11:23:14 2025 by rpki-client