This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft File: DA96BN1ySaXRS33gVCpBlzgABsw.mft (raw, json) Hash identifier: jARnJmHO7bjzz602M0h56CBaxle4bGiMJnIPKhBeudc= Subject key identifier: FA:D5:83:2A:24:2C:5D:76:34:5E:CB:72:99:EE:A8:F8:7A:DF:44:94 Authority key identifier: 0C:0F:7A:04:DD:72:49:A5:D1:4B:7D:E0:54:2A:41:97:38:00:06:CC Certificate issuer: /CN=0c0f7a04dd7249a5d14b7de0542a4197380006cc Certificate serial: 019AF0BF73D4F16D72E1103660357A9DD792 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DA96BN1ySaXRS33gVCpBlzgABsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft Manifest number: 1304 Signing time: Fri 05 Dec 2025 23:01:10 +0000 Manifest this update: Fri 05 Dec 2025 23:01:10 +0000 Manifest next update: Sat 06 Dec 2025 23:01:10 +0000 Files and hashes: 1: DA96BN1ySaXRS33gVCpBlzgABsw.crl (hash: WAs6CcBU9imrU0HscS0vjEZkjx8panwwH1N6bpO5EWU=) 2: DnlnaiUOn3bGRjdw-Yb1fkUsNto.roa (hash: E1ibhwBfmIcFn7h/JxzOSZ/iplWkTSQE9ZGFZ1Ek2Kg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft rsync://rpki.ripe.net/repository/DEFAULT/DA96BN1ySaXRS33gVCpBlzgABsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:73:d4:f1:6d:72:e1:10:36:60:35:7a:9d:d7:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c0f7a04dd7249a5d14b7de0542a4197380006cc Validity Not Before: Dec 5 23:01:10 2025 GMT Not After : Dec 6 23:01:10 2025 GMT Subject: CN=fad5832a242c5d76345ecb7299eea8f87adf4494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e4:9f:1d:04:b2:4f:27:76:cc:e9:d2:ce:48: 5d:c2:2f:27:93:88:42:4e:80:9e:52:7d:af:2e:5a: d9:46:31:f4:2b:b2:d2:27:cc:6e:6b:0b:29:c3:36: 6a:c0:cf:f5:02:f8:b7:72:b1:f4:03:46:42:aa:62: 53:56:1b:53:85:da:bb:82:00:66:ef:71:b3:60:93: d1:77:7a:3b:15:46:c1:15:be:55:2a:ac:72:96:70: 63:a5:20:85:66:9a:ab:f0:42:bf:98:1a:37:28:cf: 79:3e:da:08:18:73:5f:90:36:f2:12:e0:ef:e1:5b: eb:98:14:19:30:00:16:30:ff:c0:9b:76:48:86:b4: 2f:5c:c7:63:68:d2:c5:db:6f:85:a6:24:47:22:68: 8c:75:76:5f:6c:04:89:b5:11:70:d2:f1:37:52:a9: ac:93:9e:b4:aa:9f:d0:05:84:80:5d:44:d9:18:1f: 64:40:22:5e:eb:74:77:f5:51:5a:07:ec:a6:e0:c2: a5:e0:d8:11:26:68:6f:44:32:da:ff:7d:6a:1e:f3: b0:b9:ff:13:47:aa:48:57:47:a3:fd:1b:75:e7:95: 0d:7f:ce:92:ad:76:d9:49:46:f8:bf:de:c8:c3:92: 3d:3d:80:d5:40:54:2f:10:b6:97:04:84:ec:87:d0: b9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:D5:83:2A:24:2C:5D:76:34:5E:CB:72:99:EE:A8:F8:7A:DF:44:94 X509v3 Authority Key Identifier: keyid:0C:0F:7A:04:DD:72:49:A5:D1:4B:7D:E0:54:2A:41:97:38:00:06:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DA96BN1ySaXRS33gVCpBlzgABsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:79:e9:03:17:a9:dd:ed:ab:12:c9:e0:31:ed:b9:05:fe:97: de:13:30:47:4c:55:aa:69:45:c7:ae:46:76:5f:49:7a:ea:49: a7:0b:80:ad:e2:9f:59:aa:f7:fb:89:28:60:35:d8:de:af:d2: c2:35:93:c4:4c:c3:dc:ad:e9:15:26:8c:25:e2:4d:2d:51:ad: df:1f:b3:cf:19:a4:90:a8:7b:12:ce:a6:8d:76:d6:04:9d:2b: 3f:1f:6f:de:b1:12:52:9e:db:6e:ac:48:0b:d4:11:2b:7d:d1: 71:41:64:2d:9a:75:d5:58:a6:48:e6:b7:bb:3e:2a:d9:23:c4: d5:c6:f2:c3:52:d5:11:4c:bb:b8:c5:8d:d8:55:e5:fa:4d:34: d0:53:cb:75:ee:ed:15:74:bc:af:76:5e:1d:80:af:ee:48:7c: bc:39:f8:e3:92:7b:a5:97:35:aa:de:dd:9d:cb:66:85:0f:03: c8:3d:2e:3c:ca:e8:1f:66:32:bb:3f:8f:b2:dd:e2:7b:27:f9: 8b:99:71:c2:f0:31:ab:a8:c5:2f:37:36:57:13:48:f8:aa:e3: 57:50:b7:03:b7:6f:2f:6d:24:07:7b:96:4a:a1:66:7b:27:52: 9d:c3:a6:9a:80:67:11:2a:ce:66:0e:97:b4:c2:08:a7:bb:b3: ea:f8:a4:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv3PU8W1y4RA2YDV6ndeSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMGY3YTA0ZGQ3MjQ5YTVkMTRiN2RlMDU0MmE0MTk3Mzgw MDA2Y2MwHhcNMjUxMjA1MjMwMTEwWhcNMjUxMjA2MjMwMTEwWjAzMTEwLwYDVQQD EyhmYWQ1ODMyYTI0MmM1ZDc2MzQ1ZWNiNzI5OWVlYThmODdhZGY0NDk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eSfHQSyTyd2zOnSzkhdwi8nk4hC ToCeUn2vLlrZRjH0K7LSJ8xuawspwzZqwM/1Avi3crH0A0ZCqmJTVhtThdq7ggBm 73GzYJPRd3o7FUbBFb5VKqxylnBjpSCFZpqr8EK/mBo3KM95PtoIGHNfkDbyEuDv 4VvrmBQZMAAWMP/Am3ZIhrQvXMdjaNLF22+FpiRHImiMdXZfbASJtRFw0vE3Uqms k560qp/QBYSAXUTZGB9kQCJe63R39VFaB+ym4MKl4NgRJmhvRDLa/31qHvOwuf8T R6pIV0ej/Rt155UNf86SrXbZSUb4v97Iw5I9PYDVQFQvELaXBITsh9C5HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPrVgyokLF12NF7LcpnuqPh630SUMB8GA1UdIwQY MBaAFAwPegTdckml0Ut94FQqQZc4AAbMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREE5NkJOMXlTYVhSUzMzZ1ZDcEJsemdBQnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8xMWRiMTQtZTg0NS00ZTRmLWE2OTIt YTNjYmVmZmY3Nzc3LzEvREE5NkJOMXlTYVhSUzMzZ1ZDcEJsemdBQnN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8xMWRiMTQtZTg0NS00ZTRmLWE2OTItYTNjYmVmZmY3Nzc3 LzEvREE5NkJOMXlTYVhSUzMzZ1ZDcEJsemdBQnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUXnpAxep 3e2rEsngMe25Bf6X3hMwR0xVqmlFx65Gdl9JeupJpwuAreKfWar3+4koYDXY3q/S wjWTxEzD3K3pFSaMJeJNLVGt3x+zzxmkkKh7Es6mjXbWBJ0rPx9v3rESUp7bbqxI C9QRK33RcUFkLZp11VimSOa3uz4q2SPE1cbyw1LVEUy7uMWN2FXl+k000FPLde7t FXS8r3ZeHYCv7kh8vDn445J7pZc1qt7dnctmhQ8DyD0uPMroH2Yyuz+Pst3ieyf5 i5lxwvAxq6jFLzc2VxNI+KrjV1C3A7dvL20kB3uWSqFmeydSncOmmoBnESrOZg6X tMIIp7uz6vikoQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:32 2025 by rpki-client