This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft File: DGhZ_rp4NMkyK3xva9gb0771zlE.mft (raw, json) Hash identifier: UFbPAbJo5PlKMMzTVIK1d2MeU40Z64aXwIT34u+N0ng= Subject key identifier: 82:AD:64:5F:77:67:19:E3:E8:88:3A:7E:95:A0:DB:5E:A9:5E:E0:6B Authority key identifier: 0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51 Certificate issuer: /CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51 Certificate serial: 019AF61C7C77C2FD22D269F59CDAC9C55D95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft Manifest number: 0608 Signing time: Sun 07 Dec 2025 00:00:53 +0000 Manifest this update: Sun 07 Dec 2025 00:00:53 +0000 Manifest next update: Mon 08 Dec 2025 00:00:53 +0000 Files and hashes: 1: A_Ig0V6t3ntCxD7PTccbnIguTs8.roa (hash: x63polo4t0dGd0M1xxigrw4CFjSi7R4AExIbYtwQIRY=) 2: DGhZ_rp4NMkyK3xva9gb0771zlE.crl (hash: K0mhKpqmH40abeFCt/+FlgzPca3FwAN894pbZVmGXJk=) 3: Zj1rmMEpOraplrkaquOM2ubO6Mc.roa (hash: oIS73RHQscBvRjMMzd2FUWBDj9UGJrVmsW4v2M6hJEQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:7c:77:c2:fd:22:d2:69:f5:9c:da:c9:c5:5d:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51 Validity Not Before: Dec 7 00:00:53 2025 GMT Not After : Dec 8 00:00:53 2025 GMT Subject: CN=82ad645f776719e3e8883a7e95a0db5ea95ee06b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:74:ae:5b:d3:53:4f:db:d1:13:bc:de:f4:d8: 78:7c:35:a9:76:7c:c2:97:f2:ba:34:3a:89:29:dd: 5b:6a:f8:60:61:cc:8c:6c:c2:2f:56:19:86:64:58: 41:39:5d:14:67:d3:c7:9d:f8:87:7e:f5:07:64:3a: 4b:39:94:27:6e:70:af:98:c3:31:cc:18:38:1e:93: 18:ca:01:aa:f5:6b:05:00:6f:3f:20:04:7a:55:aa: f0:37:79:73:a5:74:c3:bd:f0:44:43:74:71:0c:9d: 0a:92:8a:12:0c:08:2e:ae:6b:45:f4:3a:f3:6e:52: 2f:d3:dc:b7:45:24:fe:3b:72:18:26:e3:9f:44:c0: e8:10:69:d7:44:25:e0:1f:c2:b9:f3:c6:00:a0:66: a4:21:da:aa:6e:64:97:45:4d:f5:93:05:00:46:92: 31:36:02:b0:21:25:33:fd:4a:f2:45:35:66:04:89: 02:8b:36:a0:59:0c:16:e2:b4:06:6d:82:2a:45:a4: f6:6c:7b:78:66:62:d2:2c:18:f1:ef:73:41:8f:5a: 46:5d:75:ca:15:fc:fe:7c:3f:50:03:b5:1e:43:68: de:29:65:75:8e:43:b2:40:db:a8:ee:61:74:6f:40: 4b:0d:12:22:6d:fc:92:4b:42:a6:4b:f3:71:61:5f: ba:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:AD:64:5F:77:67:19:E3:E8:88:3A:7E:95:A0:DB:5E:A9:5E:E0:6B X509v3 Authority Key Identifier: keyid:0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:35:2f:b9:4c:66:e5:1b:a9:18:6a:fd:a4:5c:87:5d:6e:94: 8e:af:6e:83:80:d6:f3:75:ad:f3:be:92:d9:f1:d7:52:a8:07: 5f:59:89:49:fe:1c:41:fb:2c:55:1a:55:62:04:e1:8c:39:df: e1:35:3e:2a:95:7d:2e:61:fb:bb:4e:85:c0:bb:1f:54:57:80: 00:5f:2a:63:b5:c9:c5:11:bb:11:da:1a:b0:9f:cf:9b:33:3c: 0d:cc:0d:cd:46:6a:ab:da:e8:c9:bd:8d:eb:fc:80:9c:2c:21: fa:f5:65:0c:b1:f9:75:85:70:78:00:40:e2:6b:68:a1:6c:0d: bd:e2:80:05:46:d8:f6:57:01:33:7c:df:c3:65:a4:ab:c5:50: 04:ae:be:72:b0:bc:7f:dc:84:ec:3c:62:bb:c6:2f:55:e5:c4: 91:67:ef:22:4c:a2:bc:a8:5c:08:e0:5a:e8:7a:7e:8b:71:94: dd:c0:4f:2b:ac:b1:c5:57:cc:8a:f9:0a:3f:a9:06:dd:f4:13: ed:30:c1:84:05:69:dc:a3:10:77:7d:88:55:78:33:e6:3f:71: f2:09:8c:50:21:d4:2f:72:30:a3:77:a5:3f:16:21:e4:01:5e: 0d:7b:14:8b:93:e5:e1:d0:0e:ee:4c:9b:27:e5:bd:3d:56:69: 85:d9:c5:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HHx3wv0i0mn1nNrJxV2VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNjg1OWZlYmE3ODM0YzkzMjJiN2M2ZjZiZDgxYmQzYmVm NWNlNTEwHhcNMjUxMjA3MDAwMDUzWhcNMjUxMjA4MDAwMDUzWjAzMTEwLwYDVQQD Eyg4MmFkNjQ1Zjc3NjcxOWUzZTg4ODNhN2U5NWEwZGI1ZWE5NWVlMDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3SuW9NTT9vRE7ze9Nh4fDWpdnzC l/K6NDqJKd1bavhgYcyMbMIvVhmGZFhBOV0UZ9PHnfiHfvUHZDpLOZQnbnCvmMMx zBg4HpMYygGq9WsFAG8/IAR6VarwN3lzpXTDvfBEQ3RxDJ0KkooSDAgurmtF9Drz blIv09y3RST+O3IYJuOfRMDoEGnXRCXgH8K588YAoGakIdqqbmSXRU31kwUARpIx NgKwISUz/UryRTVmBIkCizagWQwW4rQGbYIqRaT2bHt4ZmLSLBjx73NBj1pGXXXK Ffz+fD9QA7UeQ2jeKWV1jkOyQNuo7mF0b0BLDRIibfySS0KmS/NxYV+6gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIKtZF93Zxnj6Ig6fpWg216pXuBrMB8GA1UdIwQY MBaAFAxoWf66eDTJMit8b2vYG9O+9c5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREdoWl9ycDROTWt5SzN4dmE5Z2IwNzcxemxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC84YzNhOGItOTE3MS00NjIwLWIxZTAt NzdmY2E3YTMwYjlmLzEvREdoWl9ycDROTWt5SzN4dmE5Z2IwNzcxemxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC84YzNhOGItOTE3MS00NjIwLWIxZTAtNzdmY2E3YTMwYjlm LzEvREdoWl9ycDROTWt5SzN4dmE5Z2IwNzcxemxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASjUvuUxm 5RupGGr9pFyHXW6Ujq9ug4DW83Wt876S2fHXUqgHX1mJSf4cQfssVRpVYgThjDnf 4TU+KpV9LmH7u06FwLsfVFeAAF8qY7XJxRG7EdoasJ/PmzM8DcwNzUZqq9royb2N 6/yAnCwh+vVlDLH5dYVweABA4mtooWwNveKABUbY9lcBM3zfw2Wkq8VQBK6+crC8 f9yE7Dxiu8YvVeXEkWfvIkyivKhcCOBa6Hp+i3GU3cBPK6yxxVfMivkKP6kG3fQT 7TDBhAVp3KMQd32IVXgz5j9x8gmMUCHUL3Iwo3elPxYh5AFeDXsUi5Pl4dAO7kyb J+W9PVZphdnF3w== -----END CERTIFICATE-----Generated at Sun Dec 7 03:42:42 2025 by rpki-client