This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.mft File: DigqFcGl0VS72ocrNXYHqR-VCqU.mft (raw, json) Hash identifier: HczKjrrR/kiAuc+dkFHfIbStJFnlBzzm6cQSv4c9PJ0= Subject key identifier: 87:D6:F0:8C:B8:C5:ED:54:0C:54:67:31:0B:69:FE:49:5A:DD:3A:20 Authority key identifier: 0E:28:2A:15:C1:A5:D1:54:BB:DA:87:2B:35:76:07:A9:1F:95:0A:A5 Certificate issuer: /CN=0e282a15c1a5d154bbda872b357607a91f950aa5 Certificate serial: 019AF19B7778E5658C1872E1B21BFE8BA97C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DigqFcGl0VS72ocrNXYHqR-VCqU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.mft Manifest number: 1388 Signing time: Sat 06 Dec 2025 03:01:28 +0000 Manifest this update: Sat 06 Dec 2025 03:01:28 +0000 Manifest next update: Sun 07 Dec 2025 03:01:28 +0000 Files and hashes: 1: DigqFcGl0VS72ocrNXYHqR-VCqU.crl (hash: qk+e0DrwWY9/RAyzYD0gSoZL2g96JpCqv9PAJkGBXdo=) 2: u3O0A5kbS_BKPuygQ5bEuCuWEmM.roa (hash: EFUICxjgOr4/W3Yre79DXYxTO7h614siVS4H6ARHwaw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.crl rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.mft rsync://rpki.ripe.net/repository/DEFAULT/DigqFcGl0VS72ocrNXYHqR-VCqU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:77:78:e5:65:8c:18:72:e1:b2:1b:fe:8b:a9:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e282a15c1a5d154bbda872b357607a91f950aa5 Validity Not Before: Dec 6 03:01:28 2025 GMT Not After : Dec 7 03:01:28 2025 GMT Subject: CN=87d6f08cb8c5ed540c5467310b69fe495add3a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:42:64:d8:d3:89:fb:90:85:7f:28:12:0c:7e: 8a:67:2d:64:57:ef:f7:ed:49:f9:99:60:91:b3:6d: eb:82:56:db:6d:3e:ac:74:3e:ff:cc:9c:10:46:85: 5a:ee:73:e6:7f:28:e6:83:30:5f:d3:77:9b:af:95: 5a:e1:c9:b2:ad:3e:18:67:90:a3:11:e7:fe:4a:85: be:6a:d2:4e:2f:89:22:6f:fd:8c:0e:3e:21:96:22: 37:e7:37:15:31:99:55:24:75:92:e5:ab:c0:a8:17: c8:0f:dd:ad:67:68:bb:23:38:ef:2d:40:19:1d:e3: 24:b6:95:3d:50:71:f9:2d:1c:54:fa:d4:02:65:9e: 14:d5:83:9b:9d:80:e9:16:da:51:13:fa:ff:bc:55: d2:46:9c:7d:f4:36:3e:3e:a1:e9:1d:2a:25:5d:00: 4f:53:e0:b7:7d:e4:26:c3:20:fb:39:d3:ec:77:0b: ae:8d:80:c1:c9:0c:82:b0:94:a0:92:98:67:72:d8: bf:8f:e2:35:e2:13:dc:45:3b:4e:cb:69:e3:e2:5b: ed:cb:3f:48:dd:d3:e4:f2:3b:eb:4f:04:a4:be:fe: c5:d0:af:36:a2:09:8b:64:32:a5:3a:af:ea:0f:a3: 51:84:55:c0:92:a6:8f:fa:39:c4:be:35:e1:2f:ff: 03:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D6:F0:8C:B8:C5:ED:54:0C:54:67:31:0B:69:FE:49:5A:DD:3A:20 X509v3 Authority Key Identifier: keyid:0E:28:2A:15:C1:A5:D1:54:BB:DA:87:2B:35:76:07:A9:1F:95:0A:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DigqFcGl0VS72ocrNXYHqR-VCqU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:db:67:df:61:9e:0f:40:9e:d9:ca:8e:86:0d:e4:44:19:9d: 86:e4:7f:be:a8:d9:bc:bd:e9:62:12:62:fa:26:03:8c:04:f6: b5:bd:0d:d5:e7:2c:b0:fe:ff:93:39:08:89:e6:41:5a:a6:3f: 8e:f9:2f:4c:00:51:b2:4d:ac:6d:a1:77:eb:37:b1:47:89:9d: c6:c0:7c:c4:10:fb:d6:55:fd:e7:ae:d9:63:38:46:7d:fe:8d: 2a:d6:d2:40:30:2a:2c:9c:1d:c7:c9:89:ab:ff:70:19:d7:8f: f7:01:3e:4f:36:4a:c4:9c:f3:e7:b7:a1:d8:95:98:a4:ee:42: 54:c1:6e:9d:aa:4d:47:2b:ce:65:ff:fb:55:20:41:bb:28:78: 3c:ec:dc:d1:96:0b:11:76:c1:26:d7:6a:92:c7:4c:ea:1a:fa: 1d:40:08:25:67:0a:84:50:aa:7c:33:d7:a4:d4:92:96:1d:f8: f9:75:e0:69:55:2f:1f:52:51:0d:32:19:bb:cb:23:65:49:59: 5d:bf:e7:fb:17:a5:ef:d7:6d:30:fc:1d:6b:8c:d0:ee:29:d1: be:1c:72:52:33:3e:52:03:f8:1e:a6:85:1d:75:4d:a0:ed:07: e1:02:1d:2f:90:2d:f4:2e:ee:97:53:8e:e4:45:02:67:64:0d: 60:d5:99:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm3d45WWMGHLhshv+i6l8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMjgyYTE1YzFhNWQxNTRiYmRhODcyYjM1NzYwN2E5MWY5 NTBhYTUwHhcNMjUxMjA2MDMwMTI4WhcNMjUxMjA3MDMwMTI4WjAzMTEwLwYDVQQD Eyg4N2Q2ZjA4Y2I4YzVlZDU0MGM1NDY3MzEwYjY5ZmU0OTVhZGQzYTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkJk2NOJ+5CFfygSDH6KZy1kV+/3 7Un5mWCRs23rglbbbT6sdD7/zJwQRoVa7nPmfyjmgzBf03ebr5Va4cmyrT4YZ5Cj Eef+SoW+atJOL4kib/2MDj4hliI35zcVMZlVJHWS5avAqBfID92tZ2i7IzjvLUAZ HeMktpU9UHH5LRxU+tQCZZ4U1YObnYDpFtpRE/r/vFXSRpx99DY+PqHpHSolXQBP U+C3feQmwyD7OdPsdwuujYDByQyCsJSgkphncti/j+I14hPcRTtOy2nj4lvtyz9I 3dPk8jvrTwSkvv7F0K82ogmLZDKlOq/qD6NRhFXAkqaP+jnEvjXhL/8DvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIfW8Iy4xe1UDFRnMQtp/kla3TogMB8GA1UdIwQY MBaAFA4oKhXBpdFUu9qHKzV2B6kflQqlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGlncUZjR2wwVlM3Mm9jck5YWUhxUi1WQ3FVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9kYWYxYWUtZDVlYi00Y2E0LThhYWYt Nzg3NDFhYzkzYjMwLzEvRGlncUZjR2wwVlM3Mm9jck5YWUhxUi1WQ3FVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9kYWYxYWUtZDVlYi00Y2E0LThhYWYtNzg3NDFhYzkzYjMw LzEvRGlncUZjR2wwVlM3Mm9jck5YWUhxUi1WQ3FVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxdtn32Ge D0Ce2cqOhg3kRBmdhuR/vqjZvL3pYhJi+iYDjAT2tb0N1ecssP7/kzkIieZBWqY/ jvkvTABRsk2sbaF36zexR4mdxsB8xBD71lX9567ZYzhGff6NKtbSQDAqLJwdx8mJ q/9wGdeP9wE+TzZKxJzz57eh2JWYpO5CVMFunapNRyvOZf/7VSBBuyh4POzc0ZYL EXbBJtdqksdM6hr6HUAIJWcKhFCqfDPXpNSSlh34+XXgaVUvH1JRDTIZu8sjZUlZ Xb/n+xel79dtMPwda4zQ7inRvhxyUjM+UgP4HqaFHXVNoO0H4QIdL5At9C7ul1OO 5EUCZ2QNYNWZhQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:07:42 2025 by rpki-client