This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft File: DZgNjKRkrkQzDALWCX0bPjRn4IU.mft (raw, json) Hash identifier: bAp5HtwiGcReSWeWDfkTj7xk1nVwqqoZAd11aPwLbok= Subject key identifier: 80:D8:3D:4E:3F:A3:61:35:59:5D:DF:D2:21:DF:0F:00:43:AF:EB:58 Authority key identifier: 0D:98:0D:8C:A4:64:AE:44:33:0C:02:D6:09:7D:1B:3E:34:67:E0:85 Certificate issuer: /CN=0d980d8ca464ae44330c02d6097d1b3e3467e085 Certificate serial: 019AF19B2E31F5BE9B5202F63FB46A7FE2AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft Manifest number: 0AFD Signing time: Sat 06 Dec 2025 03:01:09 +0000 Manifest this update: Sat 06 Dec 2025 03:01:09 +0000 Manifest next update: Sun 07 Dec 2025 03:01:09 +0000 Files and hashes: 1: 9AG_khzlUq_52M_uwAyAT--X2D8.roa (hash: j5npHva08ps2FjnGO8hTZ3BTaOYOIDt9K8fTqv+VPPw=) 2: DZgNjKRkrkQzDALWCX0bPjRn4IU.crl (hash: jert4UJLBd0V54scqzk1CNVgQuv7dG0AZJ7jWpvp01E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:2e:31:f5:be:9b:52:02:f6:3f:b4:6a:7f:e2:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d980d8ca464ae44330c02d6097d1b3e3467e085 Validity Not Before: Dec 6 03:01:09 2025 GMT Not After : Dec 7 03:01:09 2025 GMT Subject: CN=80d83d4e3fa36135595ddfd221df0f0043afeb58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7b:49:e8:9c:78:df:9b:c8:77:8b:aa:1b:33: 63:3e:11:f9:74:cf:f8:06:cb:cb:02:5a:b5:cb:38: e2:b6:df:f9:cf:e2:74:46:84:c9:65:0a:ff:d2:ad: 0b:d4:e7:26:4b:11:d2:8c:93:e3:4d:b7:41:20:51: 3b:54:39:19:bc:a5:2a:5f:cd:81:8e:3d:53:92:e3: 25:a4:53:5e:19:52:d7:90:df:e8:37:5a:79:80:32: 4d:55:f2:ab:79:84:d4:94:2c:80:fb:f4:53:0b:e8: 72:88:84:45:08:5a:90:5f:1c:c2:20:4c:df:c1:91: 6b:7b:0a:f7:df:e3:e1:ea:12:ff:ac:61:dc:02:ad: b1:57:7f:21:d1:78:00:f1:c8:e1:79:69:63:d9:5c: b6:2d:a3:b3:6f:6e:dd:e1:0a:c7:5b:23:0e:3b:5e: 1f:cd:eb:ac:90:94:c9:e8:31:25:c8:e3:70:b6:91: 67:3c:d1:db:d9:f1:b6:e8:54:6a:70:c1:d4:9d:23: b0:9a:04:4f:88:e7:36:53:90:20:85:49:72:09:c5: c0:ea:11:71:5c:e0:42:b2:16:c2:ef:82:ed:af:8c: 11:10:c0:43:b1:a5:2e:04:e0:0f:a9:9c:69:41:72: 23:31:03:22:6c:85:69:84:25:cf:41:42:53:61:0d: d0:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:D8:3D:4E:3F:A3:61:35:59:5D:DF:D2:21:DF:0F:00:43:AF:EB:58 X509v3 Authority Key Identifier: keyid:0D:98:0D:8C:A4:64:AE:44:33:0C:02:D6:09:7D:1B:3E:34:67:E0:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:87:44:c4:03:a9:19:0c:35:14:c7:96:42:66:74:72:1e:8c: 73:f0:b1:51:bc:f2:89:32:bf:43:e7:25:d7:84:53:23:99:71: 3e:aa:8a:f3:f0:e9:bd:00:ae:e9:58:fe:e7:34:26:bf:2b:1d: 18:0e:3a:83:0f:3e:b4:49:b9:fe:5a:73:a8:93:f4:1d:32:1e: 03:f4:57:b2:a4:5d:69:dd:d9:8f:4f:bf:9f:15:93:2f:c4:a3: 1d:c5:17:36:6c:cc:96:4c:73:96:b1:4b:8c:92:4d:9b:51:31: 90:72:91:08:e2:a3:9b:d6:ad:ad:ef:3a:e4:42:d9:3f:96:ee: 1e:f4:b2:8e:a7:58:a5:f0:b0:7d:f6:cf:0a:e2:85:9f:f7:6b: 5b:39:39:9d:25:b0:5c:a0:c4:2e:7d:db:ad:b0:c4:ee:0e:4d: 8b:54:ce:73:76:f0:b5:f9:2a:20:5c:95:0b:45:22:f2:e8:3d: 68:d8:57:f9:7d:f8:13:9e:2e:bf:91:1b:6b:64:7a:bf:35:ec: 88:28:ec:81:14:43:3d:51:28:8c:a7:c0:95:83:47:07:78:15: bc:35:e3:88:93:b5:d7:ff:93:92:55:e5:5d:3e:71:76:27:b8: ac:64:e3:52:ca:7e:ab:d5:f1:35:bc:0c:c4:f2:eb:ca:93:1d: e1:51:d2:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmy4x9b6bUgL2P7Rqf+KvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkOTgwZDhjYTQ2NGFlNDQzMzBjMDJkNjA5N2QxYjNlMzQ2 N2UwODUwHhcNMjUxMjA2MDMwMTA5WhcNMjUxMjA3MDMwMTA5WjAzMTEwLwYDVQQD Eyg4MGQ4M2Q0ZTNmYTM2MTM1NTk1ZGRmZDIyMWRmMGYwMDQzYWZlYjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03tJ6Jx435vId4uqGzNjPhH5dM/4 BsvLAlq1yzjitt/5z+J0RoTJZQr/0q0L1OcmSxHSjJPjTbdBIFE7VDkZvKUqX82B jj1TkuMlpFNeGVLXkN/oN1p5gDJNVfKreYTUlCyA+/RTC+hyiIRFCFqQXxzCIEzf wZFrewr33+Ph6hL/rGHcAq2xV38h0XgA8cjheWlj2Vy2LaOzb27d4QrHWyMOO14f zeuskJTJ6DElyONwtpFnPNHb2fG26FRqcMHUnSOwmgRPiOc2U5AghUlyCcXA6hFx XOBCshbC74Ltr4wREMBDsaUuBOAPqZxpQXIjMQMibIVphCXPQUJTYQ3QYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIDYPU4/o2E1WV3f0iHfDwBDr+tYMB8GA1UdIwQY MBaAFA2YDYykZK5EMwwC1gl9Gz40Z+CFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFpnTmpLUmtya1F6REFMV0NYMGJQalJuNElVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS82MzU2OWUtZjQ1OC00NDY3LWE0MTUt ZjZmZjI4MWZiYzMyLzEvRFpnTmpLUmtya1F6REFMV0NYMGJQalJuNElVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS82MzU2OWUtZjQ1OC00NDY3LWE0MTUtZjZmZjI4MWZiYzMy LzEvRFpnTmpLUmtya1F6REFMV0NYMGJQalJuNElVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhIdExAOp GQw1FMeWQmZ0ch6Mc/CxUbzyiTK/Q+cl14RTI5lxPqqK8/DpvQCu6Vj+5zQmvysd GA46gw8+tEm5/lpzqJP0HTIeA/RXsqRdad3Zj0+/nxWTL8SjHcUXNmzMlkxzlrFL jJJNm1ExkHKRCOKjm9atre865ELZP5buHvSyjqdYpfCwffbPCuKFn/drWzk5nSWw XKDELn3brbDE7g5Ni1TOc3bwtfkqIFyVC0Ui8ug9aNhX+X34E54uv5Eba2R6vzXs iCjsgRRDPVEojKfAlYNHB3gVvDXjiJO11/+TklXlXT5xdie4rGTjUsp+q9XxNbwM xPLrypMd4VHSDA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:00:24 2025 by rpki-client