This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft File: DG8YKAS1blCKo3LAPM63PvjCxos.mft (raw, json) Hash identifier: rQXFf05tWc283a0J55/fKvVGINU+3UF8qYIJiPt98wg= Subject key identifier: 27:45:7F:4E:DE:2A:48:8C:BF:F6:21:63:A0:3B:CC:45:E6:44:5B:11 Authority key identifier: 0C:6F:18:28:04:B5:6E:50:8A:A3:72:C0:3C:CE:B7:3E:F8:C2:C6:8B Certificate issuer: /CN=0c6f182804b56e508aa372c03cceb73ef8c2c68b Certificate serial: 019AF2091308FA5EEB76922900F29D2CB7ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft Manifest number: 1769 Signing time: Sat 06 Dec 2025 05:01:12 +0000 Manifest this update: Sat 06 Dec 2025 05:01:12 +0000 Manifest next update: Sun 07 Dec 2025 05:01:12 +0000 Files and hashes: 1: CboN5GI28SiyUWI4MOyyBBarnSE.roa (hash: IuQeN17ie/CZAm40U/UBsK+jP36giHzi+QWUvQDTrTI=) 2: DG8YKAS1blCKo3LAPM63PvjCxos.crl (hash: DAJk2lSIadj42Fti9SzMd4Ekfzs/G2+awFfP6qFNy00=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:13:08:fa:5e:eb:76:92:29:00:f2:9d:2c:b7:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c6f182804b56e508aa372c03cceb73ef8c2c68b Validity Not Before: Dec 6 05:01:12 2025 GMT Not After : Dec 7 05:01:12 2025 GMT Subject: CN=27457f4ede2a488cbff62163a03bcc45e6445b11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:2c:3d:82:d7:d7:bf:13:b8:a3:1c:e0:55:2f: 11:8b:72:fc:5d:a7:f7:0b:61:63:04:76:32:2f:f4: d2:a1:01:48:7e:26:e3:15:d4:66:80:67:cc:38:af: 26:87:ea:32:d2:ba:f9:de:9a:14:73:28:3d:c1:32: 0a:f3:73:0f:f0:fb:b6:73:17:60:6a:90:39:b0:81: 9b:f5:34:d7:41:62:e0:89:51:0c:83:81:b1:36:5d: 2d:45:01:a3:0b:00:0f:6d:2b:f5:76:26:d9:60:0c: 85:f8:54:5c:31:7e:b3:29:2b:0f:30:a2:78:3c:f6: 81:1c:74:04:28:9e:b9:6a:48:74:61:38:d9:8a:8a: c5:83:a7:38:af:3c:0f:09:40:c9:c1:04:de:c4:f4: a0:b3:e9:8b:62:b7:60:da:be:8c:ba:38:22:a9:f2: fd:bc:72:c8:c7:8d:5d:5b:08:47:27:85:06:4e:df: 14:d5:45:95:75:3d:d4:69:4c:fa:a0:65:0e:be:85: a5:51:ce:7d:07:c1:0e:68:26:16:4e:fe:54:62:2c: 45:82:25:63:91:26:84:95:ae:ab:c3:9d:68:79:51: 27:b0:1b:a0:8d:31:f9:cf:a6:35:55:b2:eb:0d:b9: 8d:d6:12:a9:cf:ac:da:d8:d3:70:d8:d5:c1:4d:d2: 54:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:45:7F:4E:DE:2A:48:8C:BF:F6:21:63:A0:3B:CC:45:E6:44:5B:11 X509v3 Authority Key Identifier: keyid:0C:6F:18:28:04:B5:6E:50:8A:A3:72:C0:3C:CE:B7:3E:F8:C2:C6:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:60:e7:b5:da:41:9f:d1:c8:91:60:7b:13:13:7f:31:69:41: 98:1a:42:4a:de:03:f5:87:dc:c4:28:62:46:5d:ba:dd:c0:bf: 34:b7:0a:1c:e2:50:6d:9f:30:ba:78:60:4e:fa:ad:28:4b:a2: f4:de:98:43:42:3c:9d:d7:f2:83:89:66:d1:5c:82:f6:7f:35: d3:5e:70:51:a7:97:94:5e:61:8e:53:45:dd:c7:a3:55:9d:99: 84:7d:62:ec:ec:8f:b7:a9:8d:02:86:a3:5b:57:cc:7d:54:5c: 41:d4:84:95:ca:df:3d:cf:51:3b:c4:2f:bb:97:44:99:9a:9e: 42:ed:ac:f4:af:c1:93:d6:46:b5:49:64:26:31:5a:40:ab:4b: 86:3a:5e:f7:1f:d8:13:1f:9e:49:c6:5f:ec:7d:be:60:a9:bb: 06:06:10:e7:e0:c6:d6:72:0e:cf:d7:59:f9:1a:3c:54:dd:45: 20:d8:50:c4:73:f7:3c:7f:1c:cf:be:65:41:30:02:ab:32:38: a7:3f:6e:47:a5:c4:cf:bd:24:7d:78:14:f9:11:ae:13:46:59: 46:a6:83:23:7c:64:3a:ed:79:df:ed:6b:23:80:74:e8:67:97: 55:90:28:7d:96:ae:3e:e0:c8:d9:2e:2e:d8:01:58:aa:b1:00: d8:5c:8c:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCRMI+l7rdpIpAPKdLLftMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNmYxODI4MDRiNTZlNTA4YWEzNzJjMDNjY2ViNzNlZjhj MmM2OGIwHhcNMjUxMjA2MDUwMTEyWhcNMjUxMjA3MDUwMTEyWjAzMTEwLwYDVQQD EygyNzQ1N2Y0ZWRlMmE0ODhjYmZmNjIxNjNhMDNiY2M0NWU2NDQ1YjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Cw9gtfXvxO4oxzgVS8Ri3L8Xaf3 C2FjBHYyL/TSoQFIfibjFdRmgGfMOK8mh+oy0rr53poUcyg9wTIK83MP8Pu2cxdg apA5sIGb9TTXQWLgiVEMg4GxNl0tRQGjCwAPbSv1dibZYAyF+FRcMX6zKSsPMKJ4 PPaBHHQEKJ65akh0YTjZiorFg6c4rzwPCUDJwQTexPSgs+mLYrdg2r6MujgiqfL9 vHLIx41dWwhHJ4UGTt8U1UWVdT3UaUz6oGUOvoWlUc59B8EOaCYWTv5UYixFgiVj kSaEla6rw51oeVEnsBugjTH5z6Y1VbLrDbmN1hKpz6za2NNw2NXBTdJUswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCdFf07eKkiMv/YhY6A7zEXmRFsRMB8GA1UdIwQY MBaAFAxvGCgEtW5QiqNywDzOtz74wsaLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREc4WUtBUzFibENLbzNMQVBNNjNQdmpDeG9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC82YzBlMjItZmI2MS00OWRiLWIwNjUt OTkzY2Q4Mzg4ZmQ1LzEvREc4WUtBUzFibENLbzNMQVBNNjNQdmpDeG9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC82YzBlMjItZmI2MS00OWRiLWIwNjUtOTkzY2Q4Mzg4ZmQ1 LzEvREc4WUtBUzFibENLbzNMQVBNNjNQdmpDeG9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjGDntdpB n9HIkWB7ExN/MWlBmBpCSt4D9YfcxChiRl263cC/NLcKHOJQbZ8wunhgTvqtKEui 9N6YQ0I8ndfyg4lm0VyC9n81015wUaeXlF5hjlNF3cejVZ2ZhH1i7OyPt6mNAoaj W1fMfVRcQdSElcrfPc9RO8Qvu5dEmZqeQu2s9K/Bk9ZGtUlkJjFaQKtLhjpe9x/Y Ex+eScZf7H2+YKm7BgYQ5+DG1nIOz9dZ+Ro8VN1FINhQxHP3PH8cz75lQTACqzI4 pz9uR6XEz70kfXgU+RGuE0ZZRqaDI3xkOu153+1rI4B06GeXVZAofZauPuDI2S4u 2AFYqrEA2FyMEw== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:01 2025 by rpki-client