This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft File: DFLdBfaKoaMkrVvBJHbFuaYevAA.mft (raw, json) Hash identifier: NJfVzCtRT4i/xoa5E72cE70TxiClWE2w9qoE3Vz6log= Subject key identifier: D3:5C:53:70:2D:90:7C:54:08:10:30:FE:C4:79:48:A9:C3:46:6A:06 Authority key identifier: 0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00 Certificate issuer: /CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00 Certificate serial: 019AF352A4C175232E733E10B27A89D68A0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft Manifest number: 02AF Signing time: Sat 06 Dec 2025 11:01:10 +0000 Manifest this update: Sat 06 Dec 2025 11:01:10 +0000 Manifest next update: Sun 07 Dec 2025 11:01:10 +0000 Files and hashes: 1: 1qnlJEQNpHnPn_lNZ4CHHpUTAqE.roa (hash: Vr0tQvsEhdsTIIzQr8GlHNrOORTAaoDkwB4jUIzgLLo=) 2: DFLdBfaKoaMkrVvBJHbFuaYevAA.crl (hash: P9aynFtgPX172gqY5hixyj5mFXujTiJ+xOKGl4cSnPM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:a4:c1:75:23:2e:73:3e:10:b2:7a:89:d6:8a:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00 Validity Not Before: Dec 6 11:01:10 2025 GMT Not After : Dec 7 11:01:10 2025 GMT Subject: CN=d35c53702d907c54081030fec47948a9c3466a06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9a:6d:7e:10:37:e1:f2:89:5f:af:b9:25:31: 53:dc:1e:c1:af:7c:83:45:cc:6f:7b:66:66:36:9c: 71:f0:1f:4e:f3:5a:5e:92:0b:9e:5f:e0:b0:80:15: a6:4d:9e:7a:da:24:1f:da:7f:15:cc:41:d2:ef:0c: e6:07:2b:22:4e:88:4b:87:32:c3:45:21:18:49:8c: 8f:a1:18:af:5e:05:0a:5b:38:9d:0e:83:54:a0:42: bd:5a:ac:22:45:2e:ef:25:c2:8c:91:c9:a7:e0:0c: ea:5f:e4:43:72:87:65:80:c1:2e:4b:13:58:c5:ee: 3b:48:e9:11:1d:94:5c:ff:a6:25:c0:5a:ef:85:ce: 62:76:bb:4d:dd:00:c7:17:d6:fa:d0:4d:a0:b5:90: 51:6c:14:ba:93:24:f1:b2:eb:27:59:72:b0:29:a5: b6:ad:77:53:64:68:91:0b:6f:f1:24:83:80:97:56: ce:6a:75:0b:0c:f2:d4:18:58:60:aa:72:b6:1f:72: 35:a9:40:b9:07:9b:2b:21:33:aa:9b:ec:af:17:fe: 75:7d:82:f5:a4:72:dd:84:51:02:5a:27:3b:98:78: 5f:76:4e:69:35:37:f6:a5:07:e4:2a:b4:13:c4:84: 52:05:61:41:bc:80:9a:ad:80:87:b1:d0:5b:24:bf: 98:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:5C:53:70:2D:90:7C:54:08:10:30:FE:C4:79:48:A9:C3:46:6A:06 X509v3 Authority Key Identifier: keyid:0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:7b:53:1e:84:98:e6:58:fc:a8:02:4e:6c:7b:09:e0:f4:62: 1f:35:88:b2:b1:b2:e5:85:c3:36:48:2a:21:f7:e7:ce:6e:e1: f0:99:d0:60:0e:c2:f7:b8:83:28:41:a5:11:97:ae:e2:99:35: 50:df:99:0b:d8:e3:00:bb:99:83:1e:bf:80:47:d1:45:98:c2: fd:cc:cd:d4:3d:65:eb:11:67:ef:79:6f:da:26:56:be:ca:24: 33:cf:dd:82:af:c3:6a:61:c4:62:28:fc:2e:7c:ed:a2:84:e1: 76:40:6a:f7:41:e7:f9:7f:cd:ac:b6:85:53:d8:3b:66:3c:cd: b0:07:0e:85:c4:f6:81:5b:98:37:45:1e:8f:97:52:d6:48:64: a3:f9:7d:e4:d4:aa:88:be:9c:1c:38:62:91:01:90:ce:2b:c8: 05:b2:30:14:54:b8:a2:04:1f:a4:c4:82:2a:53:80:3f:93:90: d2:1b:28:f2:7d:2b:35:1a:49:9c:2a:3f:d6:e4:c4:64:71:33: 73:e7:39:10:5f:ea:6d:10:87:7c:f2:ce:f4:f6:45:c3:61:10: fc:47:b4:0e:6d:e4:f6:55:b9:0b:33:59:12:1b:46:58:d7:1a: 0a:01:62:c2:26:e8:db:b4:ae:e6:2d:87:ce:80:e0:03:7f:6c: 7a:be:69:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUqTBdSMucz4QsnqJ1ooPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNTJkZDA1ZjY4YWExYTMyNGFkNWJjMTI0NzZjNWI5YTYx ZWJjMDAwHhcNMjUxMjA2MTEwMTEwWhcNMjUxMjA3MTEwMTEwWjAzMTEwLwYDVQQD EyhkMzVjNTM3MDJkOTA3YzU0MDgxMDMwZmVjNDc5NDhhOWMzNDY2YTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5ptfhA34fKJX6+5JTFT3B7Br3yD Rcxve2ZmNpxx8B9O81pekgueX+CwgBWmTZ562iQf2n8VzEHS7wzmBysiTohLhzLD RSEYSYyPoRivXgUKWzidDoNUoEK9WqwiRS7vJcKMkcmn4AzqX+RDcodlgMEuSxNY xe47SOkRHZRc/6YlwFrvhc5idrtN3QDHF9b60E2gtZBRbBS6kyTxsusnWXKwKaW2 rXdTZGiRC2/xJIOAl1bOanULDPLUGFhgqnK2H3I1qUC5B5srITOqm+yvF/51fYL1 pHLdhFECWic7mHhfdk5pNTf2pQfkKrQTxIRSBWFBvICarYCHsdBbJL+YzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNNcU3AtkHxUCBAw/sR5SKnDRmoGMB8GA1UdIwQY MBaAFAxS3QX2iqGjJK1bwSR2xbmmHrwAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZMZEJmYUtvYU1rclZ2QkpIYkZ1YVlldkFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xYjRlNTctNWViNC00YjlkLWJjMjYt NzA3NDllN2E0ZDk0LzEvREZMZEJmYUtvYU1rclZ2QkpIYkZ1YVlldkFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS8xYjRlNTctNWViNC00YjlkLWJjMjYtNzA3NDllN2E0ZDk0 LzEvREZMZEJmYUtvYU1rclZ2QkpIYkZ1YVlldkFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANntTHoSY 5lj8qAJObHsJ4PRiHzWIsrGy5YXDNkgqIffnzm7h8JnQYA7C97iDKEGlEZeu4pk1 UN+ZC9jjALuZgx6/gEfRRZjC/czN1D1l6xFn73lv2iZWvsokM8/dgq/DamHEYij8 LnztooThdkBq90Hn+X/NrLaFU9g7ZjzNsAcOhcT2gVuYN0Uej5dS1khko/l95NSq iL6cHDhikQGQzivIBbIwFFS4ogQfpMSCKlOAP5OQ0hso8n0rNRpJnCo/1uTEZHEz c+c5EF/qbRCHfPLO9PZFw2EQ/Ee0Dm3k9lW5CzNZEhtGWNcaCgFiwibo27Su5i2H zoDgA39ser5pKA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:51:48 2025 by rpki-client