This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft File: DGgkFYtzDEQWfqdzqXchjMYvQWo.mft (raw, json) Hash identifier: 9sW0oVzWMjt0bccDQLd0gpXSkEGDGMMWlw/IYmREB+o= Subject key identifier: 43:15:E6:38:D0:CF:74:C1:F2:C4:00:4A:C8:CA:01:16:10:95:04:43 Authority key identifier: 0C:68:24:15:8B:73:0C:44:16:7E:A7:73:A9:77:21:8C:C6:2F:41:6A Certificate issuer: /CN=0c6824158b730c44167ea773a977218cc62f416a Certificate serial: 019AF3F778858F5F60CB49E0F30AF8422D07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DGgkFYtzDEQWfqdzqXchjMYvQWo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft Manifest number: 0C6D Signing time: Sat 06 Dec 2025 14:01:12 +0000 Manifest this update: Sat 06 Dec 2025 14:01:12 +0000 Manifest next update: Sun 07 Dec 2025 14:01:12 +0000 Files and hashes: 1: DGgkFYtzDEQWfqdzqXchjMYvQWo.crl (hash: 7UcShjwQnPZJ3EcWJuERX2s4glHZxIDsSbtbjwQ3h7o=) 2: xx1FjY8JYYnnymM_Usd0dhEPXMc.roa (hash: jThxXylFfBYyWhSUb/DWJLhZb//oHbnd3oYRtsD1klg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft rsync://rpki.ripe.net/repository/DEFAULT/DGgkFYtzDEQWfqdzqXchjMYvQWo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:78:85:8f:5f:60:cb:49:e0:f3:0a:f8:42:2d:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c6824158b730c44167ea773a977218cc62f416a Validity Not Before: Dec 6 14:01:12 2025 GMT Not After : Dec 7 14:01:12 2025 GMT Subject: CN=4315e638d0cf74c1f2c4004ac8ca011610950443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:53:cb:1d:f5:a4:7d:81:fa:3a:6e:9c:67:60: a9:12:88:93:02:b5:c0:ef:55:ff:cb:9b:e9:08:81: 98:0b:01:aa:c3:d4:2c:28:6c:46:aa:19:ea:8b:55: c7:4e:73:eb:43:65:87:fc:2f:d0:96:5f:b5:04:f8: e8:7c:83:18:d1:7c:7e:fc:c5:01:59:e5:04:cd:68: a8:fd:34:31:54:1d:3b:b2:82:ca:13:3b:c8:23:7a: e3:ff:d3:8b:b5:65:41:46:55:4d:23:69:5e:a7:42: e0:5d:7d:6d:03:0b:82:f6:ea:d0:b4:64:a4:c2:10: 1e:37:89:b1:ec:08:17:c7:bf:78:5c:fa:53:c0:7a: 9c:e3:23:8a:8f:a0:1e:3a:b1:8c:af:04:99:02:8c: 75:c5:83:1e:e3:b6:e5:de:53:5a:00:47:27:f7:c7: ac:64:ca:80:0a:ff:96:36:85:c3:2a:bb:f9:ec:6b: e7:00:11:5f:20:be:f2:d7:ae:93:3d:bd:20:69:f0: 1e:27:37:de:54:2a:93:38:eb:14:79:38:71:9c:a6: f4:d9:e7:32:81:c9:18:d5:01:e2:c1:4f:ee:ba:2e: 93:eb:9c:d3:ae:c3:bf:40:99:e4:76:8a:73:78:c8: 3a:5d:62:54:cf:2d:30:7f:d1:76:ea:ef:c4:49:f4: 29:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:15:E6:38:D0:CF:74:C1:F2:C4:00:4A:C8:CA:01:16:10:95:04:43 X509v3 Authority Key Identifier: keyid:0C:68:24:15:8B:73:0C:44:16:7E:A7:73:A9:77:21:8C:C6:2F:41:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGgkFYtzDEQWfqdzqXchjMYvQWo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:86:ea:27:5e:7e:e7:d8:dc:15:86:73:83:2b:f9:20:c6:e7: 3a:cc:f0:93:fb:2f:29:4d:09:45:f7:09:68:43:47:e8:c4:f5: 9d:af:be:c1:f0:3a:8e:97:88:b7:20:b1:57:5f:6b:cb:c1:2d: 71:fe:1f:cf:b0:8f:65:31:62:6e:4d:b9:ca:40:1a:4e:95:0e: f9:5d:60:11:14:2d:96:30:13:5f:f4:4d:a2:52:bd:c8:63:24: 60:36:d1:75:98:79:1a:34:1d:59:6f:55:10:58:b4:54:52:70: 79:32:46:20:c5:fa:11:17:e5:54:90:a9:9d:17:de:a9:9d:0b: 8f:d0:be:e2:57:a9:c0:3e:40:88:98:09:18:33:aa:a2:d1:b7: 3c:74:a9:b4:e2:f6:aa:ad:5c:8c:a7:db:4e:9f:94:e6:45:15: d8:14:ed:30:d0:df:60:1b:70:81:2c:6e:e3:40:2b:89:0d:cd: 48:71:8e:70:4e:aa:f4:ae:c5:2b:0a:ec:1b:9d:bf:7f:a9:8a: 2d:9f:96:ad:cf:37:3d:bc:df:4c:e1:0d:69:43:e5:dc:fa:77: 29:a3:00:c9:a6:88:84:e6:fb:29:a9:f1:40:58:05:fc:94:c7: c1:c9:63:69:cc:b1:a8:85:c0:c0:42:65:e5:57:fc:c4:58:97: 67:64:1f:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz93iFj19gy0ng8wr4Qi0HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNjgyNDE1OGI3MzBjNDQxNjdlYTc3M2E5NzcyMThjYzYy ZjQxNmEwHhcNMjUxMjA2MTQwMTEyWhcNMjUxMjA3MTQwMTEyWjAzMTEwLwYDVQQD Eyg0MzE1ZTYzOGQwY2Y3NGMxZjJjNDAwNGFjOGNhMDExNjEwOTUwNDQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFPLHfWkfYH6Om6cZ2CpEoiTArXA 71X/y5vpCIGYCwGqw9QsKGxGqhnqi1XHTnPrQ2WH/C/Qll+1BPjofIMY0Xx+/MUB WeUEzWio/TQxVB07soLKEzvII3rj/9OLtWVBRlVNI2lep0LgXX1tAwuC9urQtGSk whAeN4mx7AgXx794XPpTwHqc4yOKj6AeOrGMrwSZAox1xYMe47bl3lNaAEcn98es ZMqACv+WNoXDKrv57GvnABFfIL7y166TPb0gafAeJzfeVCqTOOsUeThxnKb02ecy gckY1QHiwU/uui6T65zTrsO/QJnkdopzeMg6XWJUzy0wf9F26u/ESfQpqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEMV5jjQz3TB8sQASsjKARYQlQRDMB8GA1UdIwQY MBaAFAxoJBWLcwxEFn6nc6l3IYzGL0FqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREdna0ZZdHpERVFXZnFkenFYY2hqTVl2UVdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi81YjRiYjYtMjA4Mi00YzJiLThjZTUt ZmEyMTc2YWFhODQ5LzEvREdna0ZZdHpERVFXZnFkenFYY2hqTVl2UVdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi81YjRiYjYtMjA4Mi00YzJiLThjZTUtZmEyMTc2YWFhODQ5 LzEvREdna0ZZdHpERVFXZnFkenFYY2hqTVl2UVdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABYbqJ15+ 59jcFYZzgyv5IMbnOszwk/svKU0JRfcJaENH6MT1na++wfA6jpeItyCxV19ry8Et cf4fz7CPZTFibk25ykAaTpUO+V1gERQtljATX/RNolK9yGMkYDbRdZh5GjQdWW9V EFi0VFJweTJGIMX6ERflVJCpnRfeqZ0Lj9C+4lepwD5AiJgJGDOqotG3PHSptOL2 qq1cjKfbTp+U5kUV2BTtMNDfYBtwgSxu40AriQ3NSHGOcE6q9K7FKwrsG52/f6mK LZ+Wrc83PbzfTOENaUPl3Pp3KaMAyaaIhOb7KanxQFgF/JTHwcljacyxqIXAwEJl 5Vf8xFiXZ2Qfog== -----END CERTIFICATE-----Generated at Sat Dec 6 17:30:03 2025 by rpki-client