This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft File: djNetjP3aUK76Z8Smh64ik1z_Hw.mft (raw, json) Hash identifier: AoBYjqF0mIGCGBkjI+ntU8OU562xrdMaNEViy/8kXD0= Subject key identifier: 4A:3D:32:B1:E2:1F:43:F5:76:90:34:4A:96:FE:CF:5D:F6:04:B3:31 Authority key identifier: 76:33:5E:B6:33:F7:69:42:BB:E9:9F:12:9A:1E:B8:8A:4D:73:FC:7C Certificate issuer: /CN=76335eb633f76942bbe99f129a1eb88a4d73fc7c Certificate serial: 019AF12D4C5C6A118438E9BEACE09BD28FAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/djNetjP3aUK76Z8Smh64ik1z_Hw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 01:01:08 +0000 Manifest this update: Sat 06 Dec 2025 01:01:08 +0000 Manifest next update: Sun 07 Dec 2025 01:01:08 +0000 Files and hashes: 1: djNetjP3aUK76Z8Smh64ik1z_Hw.crl (hash: pznsMXItUe9tq8II+UZVRKSkU5lXl/9KhGoHy0uxbEU=) 2: qv1Sau3fL4G3RgHjzDZHci6uI6I.roa (hash: ET2wfrNdhyfoM3NLg7fIoXPxXSHceauvtrVyaQ0oOdE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft rsync://rpki.ripe.net/repository/DEFAULT/djNetjP3aUK76Z8Smh64ik1z_Hw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:4c:5c:6a:11:84:38:e9:be:ac:e0:9b:d2:8f:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76335eb633f76942bbe99f129a1eb88a4d73fc7c Validity Not Before: Dec 6 01:01:08 2025 GMT Not After : Dec 7 01:01:08 2025 GMT Subject: CN=4a3d32b1e21f43f57690344a96fecf5df604b331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6b:2a:e0:bc:61:2f:99:98:96:62:20:86:06: 72:58:c8:ef:ae:c9:96:e0:70:d7:25:c0:46:f0:0c: ca:86:63:95:84:42:e5:52:b0:af:ca:ab:ca:e5:57: dd:88:19:e2:02:08:fa:5f:5a:26:ea:b9:22:3f:25: 93:9b:e7:8f:9f:24:36:7f:3c:5f:3f:c4:1a:f0:83: 84:74:10:ed:ea:26:7c:f6:75:9c:2d:42:e5:ba:44: d8:ed:5d:b7:61:45:f4:94:a3:38:49:4b:be:42:5b: e4:05:0b:e8:d6:0e:af:08:5b:04:00:62:8c:bb:10: c4:ff:2b:02:d2:15:28:e3:fb:c8:02:19:cf:84:ca: e2:99:3b:a5:da:04:ae:73:64:a0:67:72:11:f0:55: 6e:86:ca:d6:a5:b7:99:b2:07:0c:e2:63:c7:91:96: 88:96:d4:fd:ae:6a:1b:58:cb:be:02:9c:a6:55:ae: 24:ba:4f:df:d7:e5:b0:89:8b:20:d1:6a:0d:2b:06: 78:e8:3f:21:47:58:77:0b:37:83:1d:b0:f8:e2:d9: c6:c5:39:b5:6d:8f:79:64:5f:0c:c9:de:7b:ce:61: 7f:6a:6c:f5:07:0c:7a:b8:80:ab:a1:c5:ef:9e:67: da:c7:be:b8:d3:0c:ec:58:39:97:e2:98:88:f9:af: 8e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:3D:32:B1:E2:1F:43:F5:76:90:34:4A:96:FE:CF:5D:F6:04:B3:31 X509v3 Authority Key Identifier: keyid:76:33:5E:B6:33:F7:69:42:BB:E9:9F:12:9A:1E:B8:8A:4D:73:FC:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/djNetjP3aUK76Z8Smh64ik1z_Hw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:d5:9f:74:1f:c4:f6:00:a8:da:48:87:1d:5e:07:b0:9b:da: f5:93:e0:c1:1b:35:d3:07:9a:d6:13:48:25:01:ec:8e:9b:33: a8:37:cc:dd:e3:dc:36:08:2a:01:04:23:d3:13:62:1a:e8:60: e2:3b:04:f7:55:8c:ab:aa:90:9c:90:9f:a1:14:f9:0b:c0:f8: 36:f6:43:fd:74:29:50:75:f1:d3:37:fa:59:37:bd:36:5b:bc: 32:2b:81:10:9d:e7:10:cd:a9:54:97:20:c7:ea:30:f2:27:9e: c7:19:36:d6:4a:27:55:c6:88:68:1f:d7:4b:9c:40:0a:56:f2: 8d:89:26:b9:f8:61:63:45:7a:4a:d9:3e:fc:a7:ff:5c:16:c2: d1:8d:63:3f:11:cd:8b:4c:1d:a6:9a:8a:ec:55:5e:4a:48:f5: b3:d9:00:ae:fb:5d:4b:e6:32:2f:8f:2a:54:51:7c:fb:34:57: 85:d1:93:a7:c2:a8:3c:72:a5:c8:55:30:b3:8d:a4:aa:9e:8b: 4a:ac:0d:fb:d8:b2:7b:26:64:c2:bc:ee:dc:53:6d:2b:96:79: c3:d7:c3:cb:16:b8:7c:0e:23:f7:58:d0:9f:71:50:2d:bb:7b: 59:03:60:48:19:18:c8:85:a5:17:40:e8:0f:ee:42:26:a0:16: 62:76:5f:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLUxcahGEOOm+rOCb0o+sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2MzM1ZWI2MzNmNzY5NDJiYmU5OWYxMjlhMWViODhhNGQ3 M2ZjN2MwHhcNMjUxMjA2MDEwMTA4WhcNMjUxMjA3MDEwMTA4WjAzMTEwLwYDVQQD Eyg0YTNkMzJiMWUyMWY0M2Y1NzY5MDM0NGE5NmZlY2Y1ZGY2MDRiMzMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWsq4LxhL5mYlmIghgZyWMjvrsmW 4HDXJcBG8AzKhmOVhELlUrCvyqvK5VfdiBniAgj6X1om6rkiPyWTm+ePnyQ2fzxf P8Qa8IOEdBDt6iZ89nWcLULlukTY7V23YUX0lKM4SUu+QlvkBQvo1g6vCFsEAGKM uxDE/ysC0hUo4/vIAhnPhMrimTul2gSuc2SgZ3IR8FVuhsrWpbeZsgcM4mPHkZaI ltT9rmobWMu+ApymVa4kuk/f1+WwiYsg0WoNKwZ46D8hR1h3CzeDHbD44tnGxTm1 bY95ZF8Myd57zmF/amz1Bwx6uICrocXvnmfax7640wzsWDmX4piI+a+O8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEo9MrHiH0P1dpA0Spb+z132BLMxMB8GA1UdIwQY MBaAFHYzXrYz92lCu+mfEpoeuIpNc/x8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGpOZXRqUDNhVUs3Nlo4U21oNjRpazF6X0h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wODM4NWEtMWU4MS00MWYyLThiODUt OWMyOTNmNzFhODBhLzEvZGpOZXRqUDNhVUs3Nlo4U21oNjRpazF6X0h3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy8wODM4NWEtMWU4MS00MWYyLThiODUtOWMyOTNmNzFhODBh LzEvZGpOZXRqUDNhVUs3Nlo4U21oNjRpazF6X0h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh9WfdB/E 9gCo2kiHHV4HsJva9ZPgwRs10wea1hNIJQHsjpszqDfM3ePcNggqAQQj0xNiGuhg 4jsE91WMq6qQnJCfoRT5C8D4NvZD/XQpUHXx0zf6WTe9Nlu8MiuBEJ3nEM2pVJcg x+ow8ieexxk21konVcaIaB/XS5xAClbyjYkmufhhY0V6Stk+/Kf/XBbC0Y1jPxHN i0wdppqK7FVeSkj1s9kArvtdS+YyL48qVFF8+zRXhdGTp8KoPHKlyFUws42kqp6L SqwN+9iyeyZkwrzu3FNtK5Z5w9fDyxa4fA4j91jQn3FQLbt7WQNgSBkYyIWlF0Do D+5CJqAWYnZfUg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:37 2025 by rpki-client