This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft File: DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft (raw, json) Hash identifier: mrsyCS4uJLC4jAW9TKwQtYWXvGRSK//BVurXzS7nj6k= Subject key identifier: 25:87:04:D8:2A:FC:CD:3E:CF:F6:76:58:49:5D:58:E0:18:52:DD:28 Authority key identifier: 0D:F1:0C:8A:58:05:43:F9:2D:19:FD:5F:8F:56:4B:EE:AA:48:CA:1E Certificate issuer: /CN=0df10c8a580543f92d19fd5f8f564beeaa48ca1e Certificate serial: 019B31559BC7B10E31977336BC51E3ECADB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft Manifest number: 05CD Signing time: Thu 18 Dec 2025 12:00:52 +0000 Manifest this update: Thu 18 Dec 2025 12:00:52 +0000 Manifest next update: Fri 19 Dec 2025 12:00:52 +0000 Files and hashes: 1: DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl (hash: K0XpOfqHI0hqy5rDDt3hf6kPHICXw1XomO9iIOS4640=) 2: YO9Rv4O7mqZvQ72FaV8J_c91SqM.roa (hash: 2QIlFXVhcWVwoyEM0B/+slqeXVtc2ygy29IyQzPmBpA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:55:9b:c7:b1:0e:31:97:73:36:bc:51:e3:ec:ad:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0df10c8a580543f92d19fd5f8f564beeaa48ca1e Validity Not Before: Dec 18 12:00:52 2025 GMT Not After : Dec 19 12:00:52 2025 GMT Subject: CN=258704d82afccd3ecff67658495d58e01852dd28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:20:d9:f7:3e:6e:31:18:e5:72:fa:d6:cc:55: b4:e7:f5:fd:14:53:51:bb:07:43:cb:fc:24:9a:76: 3f:94:bf:27:0d:91:30:10:d9:05:0b:5c:ed:40:06: d3:5a:44:64:ef:19:68:a2:f2:a7:63:be:a0:20:03: b4:31:c1:ff:9e:0d:60:11:02:ab:a9:89:4a:6b:41: ef:8a:ce:19:b9:0a:c5:24:fe:e1:3a:4c:f1:d1:b0: 97:12:9a:e6:d3:b9:6d:ba:20:24:de:2d:4f:ec:b9: e3:69:05:c4:f5:63:81:13:6e:bd:fc:32:e5:c2:3c: f0:77:51:54:67:cc:13:d0:f6:7c:e2:c0:63:03:02: 30:c5:04:2c:af:c4:6e:43:e3:8a:08:69:45:ce:a1: fb:fd:57:9d:b8:d7:0d:c4:02:56:69:b2:77:38:57: 05:a5:da:17:12:8a:59:a8:42:c9:3e:5c:95:0d:2c: db:67:ad:69:15:53:7c:e3:c7:d4:7d:82:68:cb:ed: 00:a6:9b:fd:e0:c5:1d:16:5e:c2:9b:86:fb:d0:a0: 68:74:aa:c8:18:db:69:e8:d5:55:db:63:a2:b9:b1: cc:4e:6c:7b:26:18:37:2c:bf:4a:4d:f9:08:c3:cd: b4:57:21:25:61:55:bc:92:aa:43:88:f8:c9:ab:a6: 3b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:87:04:D8:2A:FC:CD:3E:CF:F6:76:58:49:5D:58:E0:18:52:DD:28 X509v3 Authority Key Identifier: keyid:0D:F1:0C:8A:58:05:43:F9:2D:19:FD:5F:8F:56:4B:EE:AA:48:CA:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:2e:74:9d:39:24:5a:6a:c7:dc:6f:c3:e7:1a:54:d1:f3:48: b4:dc:14:79:0e:4b:fb:58:ef:3f:d0:d6:93:e6:ed:b7:78:32: 42:d2:3d:33:70:15:e9:6a:9b:19:3d:ac:95:71:b5:51:cf:69: a9:3f:83:b1:43:ef:c2:4c:29:9d:fc:32:10:68:7b:df:5d:2e: 84:73:6d:32:a3:0f:85:3a:77:3a:c0:fe:cf:53:84:72:06:23: 97:4e:f1:46:e3:eb:e2:4c:8b:83:19:1e:b2:99:f1:b0:dd:f4: fb:34:fa:8c:b8:c8:7e:cb:db:85:36:0b:d4:64:3f:d8:dd:85: 5a:5e:59:ba:5e:97:5d:38:09:d3:ea:79:e9:07:0b:f6:07:77: 26:85:eb:86:7a:de:87:9a:a4:b1:67:9c:6e:cb:f5:c8:4a:30: 61:7d:4f:fe:dc:44:8e:2b:f2:34:a9:1f:57:96:ba:0f:68:bb: 86:e7:05:76:f1:d6:12:aa:42:13:dc:d0:b2:bd:eb:85:b4:48: ea:2c:a7:29:be:a9:4d:3d:57:21:79:84:61:21:d0:34:ea:0d: 5a:9f:c8:17:11:62:8f:a9:aa:12:8c:3f:77:83:13:57:b7:79: 21:89:76:41:0e:b5:cf:0c:27:7a:0d:a6:f9:64:60:24:bd:42: b1:cc:28:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxVZvHsQ4xl3M2vFHj7K2zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZjEwYzhhNTgwNTQzZjkyZDE5ZmQ1ZjhmNTY0YmVlYWE0 OGNhMWUwHhcNMjUxMjE4MTIwMDUyWhcNMjUxMjE5MTIwMDUyWjAzMTEwLwYDVQQD EygyNTg3MDRkODJhZmNjZDNlY2ZmNjc2NTg0OTVkNThlMDE4NTJkZDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiDZ9z5uMRjlcvrWzFW05/X9FFNR uwdDy/wkmnY/lL8nDZEwENkFC1ztQAbTWkRk7xloovKnY76gIAO0McH/ng1gEQKr qYlKa0Hvis4ZuQrFJP7hOkzx0bCXEprm07ltuiAk3i1P7LnjaQXE9WOBE269/DLl wjzwd1FUZ8wT0PZ84sBjAwIwxQQsr8RuQ+OKCGlFzqH7/VeduNcNxAJWabJ3OFcF pdoXEopZqELJPlyVDSzbZ61pFVN848fUfYJoy+0Appv94MUdFl7Cm4b70KBodKrI GNtp6NVV22OiubHMTmx7Jhg3LL9KTfkIw820VyElYVW8kqpDiPjJq6Y7gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCWHBNgq/M0+z/Z2WEldWOAYUt0oMB8GA1UdIwQY MBaAFA3xDIpYBUP5LRn9X49WS+6qSMoeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGZFTWlsZ0ZRX2t0R2YxZmoxWkw3cXBJeWg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS81YjU1YjctNDRiNi00ZjY0LTliNWEt OWUwYTVhMmY2MWI4LzEvRGZFTWlsZ0ZRX2t0R2YxZmoxWkw3cXBJeWg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS81YjU1YjctNDRiNi00ZjY0LTliNWEtOWUwYTVhMmY2MWI4 LzEvRGZFTWlsZ0ZRX2t0R2YxZmoxWkw3cXBJeWg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASi50nTkk WmrH3G/D5xpU0fNItNwUeQ5L+1jvP9DWk+btt3gyQtI9M3AV6WqbGT2slXG1Uc9p qT+DsUPvwkwpnfwyEGh7310uhHNtMqMPhTp3OsD+z1OEcgYjl07xRuPr4kyLgxke spnxsN30+zT6jLjIfsvbhTYL1GQ/2N2FWl5Zul6XXTgJ0+p56QcL9gd3JoXrhnre h5qksWecbsv1yEowYX1P/txEjivyNKkfV5a6D2i7hucFdvHWEqpCE9zQsr3rhbRI 6iynKb6pTT1XIXmEYSHQNOoNWp/IFxFij6mqEow/d4MTV7d5IYl2QQ61zwwneg2m +WRgJL1CscwoRw== -----END CERTIFICATE-----Generated at Thu Dec 18 16:01:48 2025 by rpki-client