This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft File: Di1CDmYchlcQif8LUZZahuDXvHU.mft (raw, json) Hash identifier: J7jekDB2/baquomxyGQ9F4IhPNl988EZPd8ZPQCEK+4= Subject key identifier: 0E:46:EE:EC:07:34:A6:A7:F2:44:AB:5B:56:B4:EE:24:83:37:60:C0 Authority key identifier: 0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75 Certificate issuer: /CN=0e2d420e661c86571089ff0b51965a86e0d7bc75 Certificate serial: 019AF0BF9BEC50063EFD0B7056914C8A5775 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft Manifest number: 1761 Signing time: Fri 05 Dec 2025 23:01:20 +0000 Manifest this update: Fri 05 Dec 2025 23:01:20 +0000 Manifest next update: Sat 06 Dec 2025 23:01:20 +0000 Files and hashes: 1: Di1CDmYchlcQif8LUZZahuDXvHU.crl (hash: 17RaMOOHj2aOSliYOXhN4bad/NN6oFUzrcTfmEwCPPk=) 2: KU9VrPubRe8eWjpLdcsjMFiIw80.roa (hash: a9ro504fqwtPl4NviidsiBYPcJ6GgoUu42PU2Cb9coI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:9b:ec:50:06:3e:fd:0b:70:56:91:4c:8a:57:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e2d420e661c86571089ff0b51965a86e0d7bc75 Validity Not Before: Dec 5 23:01:20 2025 GMT Not After : Dec 6 23:01:20 2025 GMT Subject: CN=0e46eeec0734a6a7f244ab5b56b4ee24833760c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0f:95:58:45:b0:a5:ef:ab:e1:0d:07:70:3f: 45:68:11:c4:4b:f1:42:3d:5d:63:0d:22:9e:ea:5e: 8e:50:7c:df:ec:7d:20:a2:be:ab:3a:bc:4a:a2:5b: 8b:ab:54:62:c0:ac:07:71:88:13:50:31:8c:a6:12: 7e:b4:e1:7d:09:91:5f:e8:4e:58:ec:d1:b8:4a:a0: 38:cf:8c:43:1c:b3:1f:6b:9c:42:98:5e:5f:24:02: 05:fb:10:f8:03:46:b2:aa:2c:c8:60:4c:ee:7c:bf: ff:42:1b:03:23:a4:4a:af:92:14:2c:76:a0:c3:53: 1a:f1:dd:07:3a:d0:33:c3:48:9c:3d:72:cf:bb:8e: df:45:fc:8d:6f:91:ed:cc:a0:a2:7d:cb:9d:07:3a: da:14:cc:37:f3:eb:cc:83:9c:b3:f0:81:b5:fd:51: 47:66:ba:31:62:e9:53:11:2e:2e:19:1b:8d:8a:e1: 07:4b:70:ba:db:91:5e:8c:8b:1a:f8:b8:9e:94:7b: 4e:bd:13:f2:aa:fb:12:f1:fc:fb:20:64:da:96:8b: fc:44:fc:39:4d:40:d0:28:f9:12:6f:b1:84:ef:9b: 83:e7:61:53:68:f0:fd:e7:f2:94:ff:25:24:9d:fd: 19:7b:79:b1:ac:04:c5:79:e3:df:b9:11:4d:bf:52: ec:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:46:EE:EC:07:34:A6:A7:F2:44:AB:5B:56:B4:EE:24:83:37:60:C0 X509v3 Authority Key Identifier: keyid:0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:67:4c:4e:4f:6e:6d:9c:de:96:33:50:2d:07:43:3c:9d:00: 86:bb:57:27:a8:8a:c5:f7:f9:f6:04:46:b1:0f:22:cf:90:ed: 40:73:22:5b:7a:72:f1:79:b8:55:b3:cc:86:43:fb:43:59:cb: aa:9e:35:85:5c:00:cb:22:25:58:fc:4e:96:59:47:cf:b6:18: a7:cd:42:3e:a3:ed:39:16:b2:a5:b8:41:93:f1:a0:dc:d3:08: 1d:1a:6f:53:ef:32:7b:d0:0a:c3:31:7e:bf:8d:95:b7:bf:36: 00:fa:4a:8d:53:60:81:be:42:52:3e:77:24:41:63:6b:03:cd: 55:cf:ca:79:b4:53:c4:70:e6:2e:c4:d0:61:70:ca:fc:ac:77: 55:9a:0c:1e:42:8b:58:3e:36:20:32:e3:a0:98:48:41:39:92: dd:74:04:25:a8:ae:2b:73:c0:3e:e5:b3:93:d0:45:92:8c:7c: 48:61:68:85:cc:93:2a:6a:a7:29:fd:99:a3:00:ef:f0:ff:45: 5c:19:ac:55:21:ef:75:67:37:7c:74:91:4f:b8:86:ad:a5:9e: af:81:6a:d0:c8:7e:5c:e8:98:21:8f:86:c7:4e:c9:03:8e:59: 17:cd:a4:09:0b:1e:d2:51:aa:73:15:9f:4d:9c:1e:1d:6a:f7: fe:bb:86:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv5vsUAY+/QtwVpFMild1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMmQ0MjBlNjYxYzg2NTcxMDg5ZmYwYjUxOTY1YTg2ZTBk N2JjNzUwHhcNMjUxMjA1MjMwMTIwWhcNMjUxMjA2MjMwMTIwWjAzMTEwLwYDVQQD EygwZTQ2ZWVlYzA3MzRhNmE3ZjI0NGFiNWI1NmI0ZWUyNDgzMzc2MGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3A+VWEWwpe+r4Q0HcD9FaBHES/FC PV1jDSKe6l6OUHzf7H0gor6rOrxKoluLq1RiwKwHcYgTUDGMphJ+tOF9CZFf6E5Y 7NG4SqA4z4xDHLMfa5xCmF5fJAIF+xD4A0ayqizIYEzufL//QhsDI6RKr5IULHag w1Ma8d0HOtAzw0icPXLPu47fRfyNb5HtzKCifcudBzraFMw38+vMg5yz8IG1/VFH ZroxYulTES4uGRuNiuEHS3C625FejIsa+LielHtOvRPyqvsS8fz7IGTalov8RPw5 TUDQKPkSb7GE75uD52FTaPD95/KU/yUknf0Ze3mxrATFeePfuRFNv1Ls8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA5G7uwHNKan8kSrW1a07iSDN2DAMB8GA1UdIwQY MBaAFA4tQg5mHIZXEIn/C1GWWobg17x1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGkxQ0RtWWNobGNRaWY4TFVaWmFodURYdkhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83NTAwMDktNmZhMS00ZWYxLTgzMmEt NzUxODhiM2MxMTJlLzEvRGkxQ0RtWWNobGNRaWY4TFVaWmFodURYdkhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi83NTAwMDktNmZhMS00ZWYxLTgzMmEtNzUxODhiM2MxMTJl LzEvRGkxQ0RtWWNobGNRaWY4TFVaWmFodURYdkhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlWdMTk9u bZzeljNQLQdDPJ0AhrtXJ6iKxff59gRGsQ8iz5DtQHMiW3py8Xm4VbPMhkP7Q1nL qp41hVwAyyIlWPxOlllHz7YYp81CPqPtORaypbhBk/Gg3NMIHRpvU+8ye9AKwzF+ v42Vt782APpKjVNggb5CUj53JEFjawPNVc/KebRTxHDmLsTQYXDK/Kx3VZoMHkKL WD42IDLjoJhIQTmS3XQEJaiuK3PAPuWzk9BFkox8SGFohcyTKmqnKf2ZowDv8P9F XBmsVSHvdWc3fHSRT7iGraWer4Fq0Mh+XOiYIY+Gx07JA45ZF82kCQse0lGqcxWf TZweHWr3/ruGpg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:24:02 2025 by rpki-client