This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft File: DXj57XHKOklrjVS5fxR5GNrbnFQ.mft (raw, json) Hash identifier: Xqvvg+KGsFEiqmQ6804axPWMcFEacjuzESzNGQbipm8= Subject key identifier: A4:C8:D1:CA:B6:E7:0F:EF:A7:CA:CC:10:49:B0:EA:43:E3:02:13:34 Authority key identifier: 0D:78:F9:ED:71:CA:3A:49:6B:8D:54:B9:7F:14:79:18:DA:DB:9C:54 Certificate issuer: /CN=0d78f9ed71ca3a496b8d54b97f147918dadb9c54 Certificate serial: 019AFBB15828E04987E45A29121A5F363763 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft Manifest number: 02FE Signing time: Mon 08 Dec 2025 02:01:34 +0000 Manifest this update: Mon 08 Dec 2025 02:01:34 +0000 Manifest next update: Tue 09 Dec 2025 02:01:34 +0000 Files and hashes: 1: DXj57XHKOklrjVS5fxR5GNrbnFQ.crl (hash: /5d8JWlQ0S6BJF+VDD9vstL9drdZbiFwwpNLWlmOc90=) 2: _Lwar98mX_HPuZ6I_iBOIoPweAU.roa (hash: Q4wLDgz1BPTM2gYviJRrmaBtuFqzTEu5NxXR8pya5BA=) 3: uLyoln8iUo21XJeVRG0IGUytncA.roa (hash: rExu+xv1UDsqwxWWN3KFhMpN7PoTmi5ksePI6jLVE7I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:b1:58:28:e0:49:87:e4:5a:29:12:1a:5f:36:37:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d78f9ed71ca3a496b8d54b97f147918dadb9c54 Validity Not Before: Dec 8 02:01:34 2025 GMT Not After : Dec 9 02:01:34 2025 GMT Subject: CN=a4c8d1cab6e70fefa7cacc1049b0ea43e3021334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:ca:a8:2d:19:7d:bc:c7:94:ed:3b:6e:d1:08: 2f:d3:4b:b6:2d:c9:43:c2:6c:45:98:2c:65:a5:a2: 8a:4f:55:f0:d5:c8:d9:a0:56:33:45:9f:0e:49:a7: 70:11:25:16:94:61:14:11:83:99:9c:fb:1d:65:ca: a7:b7:2d:ee:f4:e2:f1:fc:f2:cf:38:ad:76:b6:5f: 24:4f:e7:54:6d:93:39:07:f7:22:2f:4e:27:7a:cb: 21:14:1a:28:ee:53:54:92:d9:0b:0f:7b:bb:4c:1e: 29:49:d4:45:f2:a4:1a:26:6f:7d:f9:10:fa:e7:4f: c3:27:6f:bd:75:46:60:97:a5:ef:43:28:e4:f6:41: a5:d7:ec:58:3c:09:5a:64:a9:1a:c9:9d:40:c8:fd: b6:cc:85:9b:19:cc:d0:18:4c:75:59:c3:09:86:8b: 47:48:0b:ac:92:e0:3f:e3:09:73:2a:9f:9a:b7:43: 7d:74:c9:55:23:5a:6e:67:14:f7:d0:dd:53:6a:18: 3f:e0:8b:a6:d3:4d:46:6e:6d:af:ca:0f:d5:b0:f0: de:f3:7b:8b:37:24:ff:91:22:77:88:46:75:d0:bd: 90:6c:12:af:20:b9:ae:ff:1f:84:a4:ae:17:19:c4: 48:b2:3c:b4:68:f7:2c:fd:94:12:35:5a:0f:71:56: a7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C8:D1:CA:B6:E7:0F:EF:A7:CA:CC:10:49:B0:EA:43:E3:02:13:34 X509v3 Authority Key Identifier: keyid:0D:78:F9:ED:71:CA:3A:49:6B:8D:54:B9:7F:14:79:18:DA:DB:9C:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:76:e5:ba:d2:4a:21:40:c9:63:4b:42:76:07:56:2d:7c:c2: ca:83:48:ae:df:e7:7d:d5:c3:c6:57:22:b4:03:90:79:6b:68: 36:b5:60:91:f2:f6:9a:38:a2:5b:ea:83:73:d6:3a:a0:fe:ec: 2c:f9:fd:11:1b:4c:8b:b0:e9:2b:06:31:b5:77:b5:b3:6d:32: 49:be:54:28:c6:2c:f8:be:ff:8b:75:d9:02:ad:55:b7:db:c4: 93:0e:ac:26:b1:bf:2b:d9:26:d2:f2:c6:fa:0a:e1:9e:99:74: 9a:68:79:79:d1:21:60:ec:83:63:72:c2:3d:af:37:d0:a9:1f: 42:65:42:b4:10:34:16:2a:20:8d:9a:4e:6b:7c:e2:88:7e:46: 9b:de:eb:8c:1c:f1:64:e2:3a:9b:9b:51:2a:b4:a5:6c:d6:70: 7b:5b:dd:63:0e:bb:89:0e:c3:66:e2:51:38:e2:d3:41:5b:72: a8:82:83:dd:83:a5:73:27:04:ce:86:78:1b:84:a1:29:2c:58: 8f:e6:58:27:58:b8:2b:fd:53:95:a2:27:94:08:5f:40:86:c5: a8:dc:6e:7c:86:d7:2a:af:99:72:27:af:8e:05:b9:01:c4:c5: 87:21:03:62:85:f0:d0:2c:70:7e:a8:b8:38:51:bf:a4:9a:c2: 4f:3c:65:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr7sVgo4EmH5FopEhpfNjdjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzhmOWVkNzFjYTNhNDk2YjhkNTRiOTdmMTQ3OTE4ZGFk YjljNTQwHhcNMjUxMjA4MDIwMTM0WhcNMjUxMjA5MDIwMTM0WjAzMTEwLwYDVQQD EyhhNGM4ZDFjYWI2ZTcwZmVmYTdjYWNjMTA0OWIwZWE0M2UzMDIxMzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA78qoLRl9vMeU7Ttu0Qgv00u2LclD wmxFmCxlpaKKT1Xw1cjZoFYzRZ8OSadwESUWlGEUEYOZnPsdZcqnty3u9OLx/PLP OK12tl8kT+dUbZM5B/ciL04nesshFBoo7lNUktkLD3u7TB4pSdRF8qQaJm99+RD6 50/DJ2+9dUZgl6XvQyjk9kGl1+xYPAlaZKkayZ1AyP22zIWbGczQGEx1WcMJhotH SAuskuA/4wlzKp+at0N9dMlVI1puZxT30N1Tahg/4Ium001Gbm2vyg/VsPDe83uL NyT/kSJ3iEZ10L2QbBKvILmu/x+EpK4XGcRIsjy0aPcs/ZQSNVoPcVanLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKTI0cq25w/vp8rMEEmw6kPjAhM0MB8GA1UdIwQY MBaAFA14+e1xyjpJa41UuX8UeRja25xUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhqNTdYSEtPa2xyalZTNWZ4UjVHTnJibkZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mN2QwZjAtYTU3MS00NTdjLTkxNTQt OGU4Njc1Y2IwOTJmLzEvRFhqNTdYSEtPa2xyalZTNWZ4UjVHTnJibkZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9mN2QwZjAtYTU3MS00NTdjLTkxNTQtOGU4Njc1Y2IwOTJm LzEvRFhqNTdYSEtPa2xyalZTNWZ4UjVHTnJibkZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABXblutJK IUDJY0tCdgdWLXzCyoNIrt/nfdXDxlcitAOQeWtoNrVgkfL2mjiiW+qDc9Y6oP7s LPn9ERtMi7DpKwYxtXe1s20ySb5UKMYs+L7/i3XZAq1Vt9vEkw6sJrG/K9km0vLG +grhnpl0mmh5edEhYOyDY3LCPa830KkfQmVCtBA0FiogjZpOa3ziiH5Gm97rjBzx ZOI6m5tRKrSlbNZwe1vdYw67iQ7DZuJROOLTQVtyqIKD3YOlcycEzoZ4G4ShKSxY j+ZYJ1i4K/1TlaInlAhfQIbFqNxufIbXKq+ZcievjgW5AcTFhyEDYoXw0Cxwfqi4 OFG/pJrCTzxl1A== -----END CERTIFICATE-----Generated at Mon Dec 8 09:32:15 2025 by rpki-client