This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft File: DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft (raw, json) Hash identifier: 9irorYOVVUVRHDjhGOWexvrw4RHbeppICwqH5N3lJCQ= Subject key identifier: DF:47:28:7F:9E:B0:72:49:2F:2B:13:75:B7:65:92:51:3B:0B:11:FE Authority key identifier: 0D:7A:91:25:69:B7:87:D9:2E:53:55:FF:FA:ED:58:1F:E5:0A:29:C0 Certificate issuer: /CN=0d7a912569b787d92e5355fffaed581fe50a29c0 Certificate serial: 019AF19AF6B2CCDCC8033D533F2722E56216 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft Manifest number: 0D6B Signing time: Sat 06 Dec 2025 03:00:55 +0000 Manifest this update: Sat 06 Dec 2025 03:00:55 +0000 Manifest next update: Sun 07 Dec 2025 03:00:55 +0000 Files and hashes: 1: 1-KvMzZmip20mq_6TE6zao4jxRAY.roa (hash: +e++mFx5okLj8UNvWINUv13IrPw1m2hTZhWWjifAWCI=) 2: DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl (hash: g43wAtb+/5ORP/awaZp3GnNG1oHv20qjh7rnbcyOs3M=) 3: o-s15NWoSVwgSNMQIfsWarrXXGg.roa (hash: 6NGLeGFSgaPGE1dmOJNyifUaOXRJYE04QVot2QOuL9c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:f6:b2:cc:dc:c8:03:3d:53:3f:27:22:e5:62:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d7a912569b787d92e5355fffaed581fe50a29c0 Validity Not Before: Dec 6 03:00:55 2025 GMT Not After : Dec 7 03:00:55 2025 GMT Subject: CN=df47287f9eb072492f2b1375b76592513b0b11fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:fd:dd:54:d8:5e:07:c3:f4:86:29:d2:d6:37: 2e:9c:6f:d5:e0:d2:cd:0e:16:ec:31:02:1c:4a:d9: 53:e1:fd:40:1d:08:3e:cd:d3:f4:92:85:1d:0b:9a: a4:bc:25:e8:72:fe:2e:e4:81:a1:2f:86:9a:5a:ec: 38:65:6c:e5:d7:fa:e8:8d:c7:a5:6c:1c:92:4f:57: a4:2a:f3:a0:eb:e3:70:05:a7:c4:51:d1:07:4a:a8: ed:44:ec:17:77:62:e4:04:2b:6d:47:95:9c:e3:7b: 1a:3d:8c:65:26:e3:2c:53:06:0d:13:a1:5f:3d:ac: c1:f3:d9:b5:61:ed:5a:98:1d:64:0c:37:19:3d:81: 45:1f:2f:fc:fd:dd:05:b8:6e:54:28:37:e3:b5:06: 86:7a:a3:f8:f3:ed:ab:ee:17:24:b7:da:ae:ff:7a: 1c:94:c3:be:8a:a0:b7:86:cf:2c:60:6c:ae:7d:01: ab:4e:0d:32:ff:d3:d5:d3:d1:7e:86:28:0a:cd:9b: 3f:f7:79:4b:cd:53:a9:64:57:1b:d7:8f:e1:d1:fc: 66:6d:e4:66:40:7b:e3:70:a0:0c:5e:fd:50:66:88: 3c:ca:e1:4f:d8:62:9b:77:1d:ba:2c:05:0a:bf:04: 96:c1:9a:f6:ec:c0:7e:e6:a8:44:6e:8c:d9:91:69: fc:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:47:28:7F:9E:B0:72:49:2F:2B:13:75:B7:65:92:51:3B:0B:11:FE X509v3 Authority Key Identifier: keyid:0D:7A:91:25:69:B7:87:D9:2E:53:55:FF:FA:ED:58:1F:E5:0A:29:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:44:47:10:d2:d0:34:01:af:03:25:d2:25:a1:f5:84:6e:f2: 67:6a:78:48:dd:7f:80:94:5d:e6:49:b7:41:eb:ee:76:41:c5: c6:a1:c8:68:20:39:d4:71:2f:be:8e:b9:59:00:e2:e5:e1:7a: a0:f5:20:0d:1b:af:3a:e0:cd:43:47:56:2b:6a:6a:be:76:70: b4:98:39:fe:93:55:86:80:a8:7b:9a:e3:5e:a0:30:39:78:38: 0d:d6:e2:68:b2:61:96:c4:76:cb:de:6d:12:8b:c1:d4:0c:49: 88:36:a7:36:13:7c:25:35:8b:71:24:48:9b:84:03:2d:d4:e1: f5:b8:c4:18:61:61:3d:14:23:bd:fe:b9:d5:44:bc:cd:9f:d2: 8b:95:15:61:02:9b:d9:ba:7d:6b:8b:cd:5f:92:db:63:dc:77: 7f:16:57:a9:cf:88:18:35:b9:ff:9d:fe:67:df:2e:81:f8:67: a1:46:15:94:ee:8f:af:65:ae:37:f2:21:5b:f9:98:16:ce:92: 7c:23:66:75:f1:e3:99:ff:af:59:fc:66:5b:1a:66:df:ee:83: 0d:1f:21:a5:d7:d3:ca:04:3d:52:f3:8e:99:b1:c6:fb:21:58: 4e:c7:72:7b:fc:63:9c:7a:c7:e0:df:ee:d8:d9:13:32:97:72: d2:5d:7d:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmvayzNzIAz1TPyci5WIWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkN2E5MTI1NjliNzg3ZDkyZTUzNTVmZmZhZWQ1ODFmZTUw YTI5YzAwHhcNMjUxMjA2MDMwMDU1WhcNMjUxMjA3MDMwMDU1WjAzMTEwLwYDVQQD EyhkZjQ3Mjg3ZjllYjA3MjQ5MmYyYjEzNzViNzY1OTI1MTNiMGIxMWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlP3dVNheB8P0hinS1jcunG/V4NLN DhbsMQIcStlT4f1AHQg+zdP0koUdC5qkvCXocv4u5IGhL4aaWuw4ZWzl1/rojcel bByST1ekKvOg6+NwBafEUdEHSqjtROwXd2LkBCttR5Wc43saPYxlJuMsUwYNE6Ff PazB89m1Ye1amB1kDDcZPYFFHy/8/d0FuG5UKDfjtQaGeqP48+2r7hckt9qu/3oc lMO+iqC3hs8sYGyufQGrTg0y/9PV09F+higKzZs/93lLzVOpZFcb14/h0fxmbeRm QHvjcKAMXv1QZog8yuFP2GKbdx26LAUKvwSWwZr27MB+5qhEbozZkWn8cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN9HKH+esHJJLysTdbdlklE7CxH+MB8GA1UdIwQY MBaAFA16kSVpt4fZLlNV//rtWB/lCinAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhxUkpXbTNoOWt1VTFYXy11MVlILVVLS2NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8wNTlkMWEtZWY5NC00NzI5LWJmNmQt NDJhZTc1Yjc5NTdkLzEvRFhxUkpXbTNoOWt1VTFYXy11MVlILVVLS2NBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8wNTlkMWEtZWY5NC00NzI5LWJmNmQtNDJhZTc1Yjc5NTdk LzEvRFhxUkpXbTNoOWt1VTFYXy11MVlILVVLS2NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAckRHENLQ NAGvAyXSJaH1hG7yZ2p4SN1/gJRd5km3QevudkHFxqHIaCA51HEvvo65WQDi5eF6 oPUgDRuvOuDNQ0dWK2pqvnZwtJg5/pNVhoCoe5rjXqAwOXg4DdbiaLJhlsR2y95t EovB1AxJiDanNhN8JTWLcSRIm4QDLdTh9bjEGGFhPRQjvf651US8zZ/Si5UVYQKb 2bp9a4vNX5LbY9x3fxZXqc+IGDW5/53+Z98ugfhnoUYVlO6Pr2WuN/IhW/mYFs6S fCNmdfHjmf+vWfxmWxpm3+6DDR8hpdfTygQ9UvOOmbHG+yFYTsdye/xjnHrH4N/u 2NkTMpdy0l19WA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:51:08 2025 by rpki-client