This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft File: DJDDVuKGT0OJSFdENVXYtcA1KBk.mft (raw, json) Hash identifier: Uu4QzjjqWMdjTA8fFyjgPy+MApWJ4p5mqgljWnzkHzw= Subject key identifier: 7D:A7:78:6F:C8:97:7E:31:44:84:E1:44:29:90:A9:07:72:CD:8A:1B Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819 Certificate serial: 019AF19B6BA7E5E493B44BADD000A8906B2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft Manifest number: 1781 Signing time: Sat 06 Dec 2025 03:01:25 +0000 Manifest this update: Sat 06 Dec 2025 03:01:25 +0000 Manifest next update: Sun 07 Dec 2025 03:01:25 +0000 Files and hashes: 1: 6EqmJwY45la03_mL9DqzIU_pULc.roa (hash: bAAWeDZY2eZUPUFFXbJVDE3ll20OGhbDr+oRfmrEiVM=) 2: 7Pzqe98aO4BoBrbjEM8VyT6sS1M.roa (hash: njNZ21C9pluyh9z/aL31IWofBM1v+N+fPmyvHPndCq0=) 3: 90MmzVO4MvLdyb-AJQYr53vSOsE.roa (hash: 5J/pNqbP4sJI9fRD38vzW+V+FYiLCJKVNSYkNzbkDm4=) 4: 9GHN6GSMWh16APWbnq7wDsfKnn8.roa (hash: JH6A2KPyYk6kU9S+YXzBoAozjZCx1I1/FQIb22szn8c=) 5: DJDDVuKGT0OJSFdENVXYtcA1KBk.crl (hash: UVnGVwlelT0edygpuaSN8kGbYBthQwhzvD7qnc5LH1s=) 6: QQRJC_YG8r-4Cm4-FiDTcyGseMs.roa (hash: v9L1LzSv9+QS9AJyAVCgrR0utN6Qk2ha4KHx/OIWRBY=) 7: WkrrwVxryAtLhNFR70baemEuAlg.roa (hash: K4NmeKi3Gvie8qG+bJIFQiovPgNvmgaWKizo+ZLILv8=) 8: _eU7wK7pdUxRG2CXsHdjbv2SOXc.roa (hash: ZAIXppKunQur0KGtFLAbnwIeXUabVYHwA+qIIq12IRo=) 9: aTMRrwo9_4SayQ9D7LTyaVFK_Xc.roa (hash: +IcvkZ/Lt7dooQvX8ekK5PfLV+YRr5hiDK4PBIh/lAA=) 10: bMezNCNwdlOYbtIsPbacYgXs4mE.roa (hash: fCSTVZLdEaGUz9Qyuwvw4wOBBUSjrK0cS/P0VURH6XA=) 11: f4tVuHbbEEExw1FgkYA_xiEVeZI.roa (hash: Ra6FxwbKM9pTj1QpToOpemmcz8OHYU34i9ladkCeWIs=) 12: fYrpElZs1NsSNrkwEfo6WNxBdRU.roa (hash: w1Z5VCOxpqbNZVNnJiTQLVLUsMOtA4kiHusU/VADD9E=) 13: rytOjYktSxYttWQbNzKnWNHr8kE.roa (hash: yLxz3XA2NehPKva17aTVpf9d8xx7CPICWNJXYP6IG3U=) 14: wz4Rxi2T5RISNbtekZKZj5gg7co.roa (hash: ZkBZlEwEIE4xANMo9oJsaqTSQA+2tjjnLN93XVxIic4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:6b:a7:e5:e4:93:b4:4b:ad:d0:00:a8:90:6b:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819 Validity Not Before: Dec 6 03:01:25 2025 GMT Not After : Dec 7 03:01:25 2025 GMT Subject: CN=7da7786fc8977e314484e1442990a90772cd8a1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6c:f7:9e:80:44:69:b8:b4:ef:3d:4a:a8:7d: 3b:ca:60:0c:cf:17:ce:f1:cf:6f:bf:cf:60:9e:79: 64:07:8d:da:c6:9f:35:0c:fa:b2:85:e5:1b:36:03: 03:bb:c1:82:97:9d:c4:c8:90:29:79:84:75:5f:02: 87:0f:47:60:d7:71:fa:f1:cc:49:5b:be:03:b8:39: 74:24:5c:8c:5a:d3:bc:24:8e:2b:aa:2f:cc:9b:3a: e2:74:e6:25:0b:7a:23:ae:f1:01:71:1f:92:ad:99: fe:03:0a:5c:6c:0e:1b:73:31:6a:ad:62:bf:f8:af: 6f:52:02:83:0e:a6:66:b0:37:8f:28:1b:62:d0:d1: 69:51:d3:90:b3:65:00:68:e0:3b:f0:9d:16:0c:cf: 6c:64:d7:3b:cf:71:33:4a:41:f1:f6:f1:1b:40:f1: 16:dd:de:63:5d:5a:fb:59:2b:3d:af:3a:57:55:5a: 76:ef:3d:34:fb:93:5f:40:9b:ab:5f:ec:67:4b:52: ce:ad:64:86:77:05:a6:fc:46:5d:f5:37:91:27:3c: a7:60:a1:9a:9b:77:d5:25:2a:79:52:60:8e:37:3c: 76:78:05:45:bc:8d:31:f2:0e:bf:08:5c:d4:c7:15: 2a:8c:64:25:7e:7e:5a:36:ae:b9:f3:88:b1:46:28: 87:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A7:78:6F:C8:97:7E:31:44:84:E1:44:29:90:A9:07:72:CD:8A:1B X509v3 Authority Key Identifier: keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:e8:c8:bf:40:62:ea:46:bb:c8:c1:4b:7b:f0:de:c8:c0:ff: 5d:c6:f2:18:3c:b3:51:ef:c4:44:f2:a5:be:0e:11:0b:3c:41: 65:57:34:92:ab:e7:b2:94:b7:fd:ef:b2:31:72:e3:c7:25:6d: d9:81:fc:aa:8c:0d:d9:05:f1:7a:d0:71:5f:d8:c5:9b:16:70: 9b:0b:c0:90:c7:bf:ff:d8:98:30:37:4f:f8:e6:df:dc:9f:17: a4:dd:39:62:9c:a3:f7:fa:22:e6:b5:b4:6a:23:6b:23:5b:c7: f3:a4:a9:6b:03:62:67:ea:11:49:c4:f9:a1:19:0c:ca:93:df: 99:c4:93:61:2d:4c:4f:d8:71:6e:7c:cb:da:86:ff:22:17:8a: 72:ec:b7:5d:4a:8d:84:36:36:25:4e:02:13:46:a5:ad:d4:25: 48:ae:7e:e3:1b:40:31:be:6e:5f:70:77:68:1c:4e:6d:b3:d6: e5:46:2b:c2:7b:fc:b3:fd:44:7c:2f:a1:0f:b6:a8:66:45:7d: 5f:51:88:ec:4a:e7:3f:05:f2:07:4d:82:82:f7:97:43:6c:95: 11:62:15:a0:b8:9b:3d:a6:f4:7a:72:8b:d6:32:ff:c9:e6:ea: 8c:5c:34:71:f9:62:9c:aa:74:5f:90:23:56:1b:07:f9:5f:c1: bd:2f:85:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm2un5eSTtEut0ACokGssMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjOTBjMzU2ZTI4NjRmNDM4OTQ4NTc0NDM1NTVkOGI1YzAz NTI4MTkwHhcNMjUxMjA2MDMwMTI1WhcNMjUxMjA3MDMwMTI1WjAzMTEwLwYDVQQD Eyg3ZGE3Nzg2ZmM4OTc3ZTMxNDQ4NGUxNDQyOTkwYTkwNzcyY2Q4YTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWz3noBEabi07z1KqH07ymAMzxfO 8c9vv89gnnlkB43axp81DPqyheUbNgMDu8GCl53EyJApeYR1XwKHD0dg13H68cxJ W74DuDl0JFyMWtO8JI4rqi/MmzridOYlC3ojrvEBcR+SrZn+AwpcbA4bczFqrWK/ +K9vUgKDDqZmsDePKBti0NFpUdOQs2UAaOA78J0WDM9sZNc7z3EzSkHx9vEbQPEW 3d5jXVr7WSs9rzpXVVp27z00+5NfQJurX+xnS1LOrWSGdwWm/EZd9TeRJzynYKGa m3fVJSp5UmCONzx2eAVFvI0x8g6/CFzUxxUqjGQlfn5aNq6584ixRiiHRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH2neG/Il34xRIThRCmQqQdyzYobMB8GA1UdIwQY MBaAFAyQw1bihk9DiUhXRDVV2LXANSgZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDct ZTM3OTlhZGU5ZGZlLzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDctZTM3OTlhZGU5ZGZl LzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATujIv0Bi 6ka7yMFLe/DeyMD/XcbyGDyzUe/ERPKlvg4RCzxBZVc0kqvnspS3/e+yMXLjxyVt 2YH8qowN2QXxetBxX9jFmxZwmwvAkMe//9iYMDdP+Obf3J8XpN05Ypyj9/oi5rW0 aiNrI1vH86SpawNiZ+oRScT5oRkMypPfmcSTYS1MT9hxbnzL2ob/IheKcuy3XUqN hDY2JU4CE0alrdQlSK5+4xtAMb5uX3B3aBxObbPW5UYrwnv8s/1EfC+hD7aoZkV9 X1GI7ErnPwXyB02CgveXQ2yVEWIVoLibPab0enKL1jL/yebqjFw0cflinKp0X5Aj VhsH+V/BvS+FKg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:18:48 2025 by rpki-client