This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft File: DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft (raw, json) Hash identifier: 9QY0rbJ2QFWTdH/3B6uraHszTThd81eYi3huanvSdNE= Subject key identifier: 8A:41:10:14:C8:59:75:D7:D0:2E:AC:55:72:71:B0:18:98:42:63:B6 Authority key identifier: 0D:1A:31:31:FE:8B:EA:9C:82:58:31:3A:0F:24:BA:2A:56:0B:58:D3 Certificate issuer: /CN=0d1a3131fe8bea9c8258313a0f24ba2a560b58d3 Certificate serial: 019AF2098341749AD4C310E39613087B413F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft Manifest number: 0FC9 Signing time: Sat 06 Dec 2025 05:01:40 +0000 Manifest this update: Sat 06 Dec 2025 05:01:40 +0000 Manifest next update: Sun 07 Dec 2025 05:01:40 +0000 Files and hashes: 1: DRoxMf6L6pyCWDE6DyS6KlYLWNM.crl (hash: eIjFHwBWahCvnK6G0JwEKqSCu7KaxrOwzVZIVQsZ1dY=) 2: ZobxiROg1-GkiBXFARtEezPM_z8.roa (hash: BIGExweVB1y4EbbG2Qn538fyHAdIwqd6x14IhgSUKYw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft rsync://rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:83:41:74:9a:d4:c3:10:e3:96:13:08:7b:41:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d1a3131fe8bea9c8258313a0f24ba2a560b58d3 Validity Not Before: Dec 6 05:01:40 2025 GMT Not After : Dec 7 05:01:40 2025 GMT Subject: CN=8a411014c85975d7d02eac557271b018984263b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3c:f2:3c:ab:65:4f:a5:41:9a:55:6e:dd:cc: 9c:6b:24:1a:55:c0:07:42:72:dd:c9:89:ef:ce:b0: 3b:ac:89:ad:af:b9:fa:c9:a4:ee:e5:e2:87:bc:b2: 88:a0:7e:d6:89:81:bf:00:8e:55:82:63:bd:a0:35: b6:87:11:90:07:8b:43:d6:6c:07:1f:89:78:81:df: 6f:96:4a:56:15:f1:e3:a1:d5:6f:51:17:b4:0f:c6: 3a:2f:cb:f5:5e:33:16:5c:b1:c5:be:4b:33:d9:19: 07:9e:b2:1f:e9:5d:d7:a1:95:5d:2e:3d:3c:50:15: 6f:e0:33:84:85:bd:16:6e:e7:25:ca:ae:0c:5d:9c: 78:ce:df:3d:9c:38:2b:5d:78:e7:8f:74:8a:f1:44: 42:02:d6:72:c2:d5:5c:68:8a:58:27:8b:89:77:9f: 1e:8b:be:04:38:b9:6d:cf:11:63:30:7c:29:f7:4e: 36:62:96:03:81:73:dd:95:95:b9:fe:19:4e:b4:45: 8b:d5:9a:ea:8e:99:07:76:a6:15:ac:f8:88:6a:c9: 2a:16:8b:51:ea:9a:47:83:3f:11:45:bc:79:ac:9d: fa:61:29:5b:f7:c2:3a:c8:0d:26:6b:3f:90:92:c8: 8e:e1:e0:68:3b:55:99:5f:79:99:0c:e6:c6:dd:7e: a9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:41:10:14:C8:59:75:D7:D0:2E:AC:55:72:71:B0:18:98:42:63:B6 X509v3 Authority Key Identifier: keyid:0D:1A:31:31:FE:8B:EA:9C:82:58:31:3A:0F:24:BA:2A:56:0B:58:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:64:d4:6b:87:9d:b3:45:f3:9f:f8:a7:a2:b7:90:61:1c:e8: 78:8c:fd:b4:da:67:f0:45:8c:eb:d1:b5:e8:30:d2:8a:3f:22: 13:23:f6:8b:dd:c2:b9:f0:81:ab:51:71:12:b4:21:bc:53:3e: 16:49:83:ad:7a:76:14:d9:6c:aa:dd:8a:15:0f:eb:5e:f6:ad: de:63:dd:50:1d:13:16:1a:1b:ef:30:b4:f0:fc:2d:cd:7d:c2: 72:ff:a8:00:ca:62:24:06:96:66:7d:ab:3c:a0:f9:c8:a8:12: db:f8:d1:5f:f6:08:8f:cd:5e:3c:c9:3a:5f:fb:0c:18:9c:4a: 69:a5:8d:eb:f3:98:e0:1c:10:b9:ec:46:f6:1b:f6:b5:63:4a: f1:83:39:0b:9c:f3:dd:24:9c:03:ec:41:f9:ad:1b:ec:ef:44: 93:eb:f7:24:3c:65:8a:49:0b:5c:e5:bf:44:0a:f4:cb:6e:b3: 0a:aa:33:6e:07:d9:ee:f6:3d:71:fd:99:1b:c1:ea:8c:9c:f1: c7:35:55:55:fc:d6:be:cf:15:9a:23:c0:b1:ba:68:a9:b3:d1: 25:53:37:5d:55:b8:d0:a6:59:82:d2:ee:4a:4f:90:07:5c:80: 30:e2:37:df:2c:a3:92:61:a1:b2:8f:a1:e9:1d:d6:0a:31:9a: ab:bd:89:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCYNBdJrUwxDjlhMIe0E/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMWEzMTMxZmU4YmVhOWM4MjU4MzEzYTBmMjRiYTJhNTYw YjU4ZDMwHhcNMjUxMjA2MDUwMTQwWhcNMjUxMjA3MDUwMTQwWjAzMTEwLwYDVQQD Eyg4YTQxMTAxNGM4NTk3NWQ3ZDAyZWFjNTU3MjcxYjAxODk4NDI2M2I2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzzyPKtlT6VBmlVu3cycayQaVcAH QnLdyYnvzrA7rImtr7n6yaTu5eKHvLKIoH7WiYG/AI5VgmO9oDW2hxGQB4tD1mwH H4l4gd9vlkpWFfHjodVvURe0D8Y6L8v1XjMWXLHFvksz2RkHnrIf6V3XoZVdLj08 UBVv4DOEhb0Wbuclyq4MXZx4zt89nDgrXXjnj3SK8URCAtZywtVcaIpYJ4uJd58e i74EOLltzxFjMHwp9042YpYDgXPdlZW5/hlOtEWL1ZrqjpkHdqYVrPiIaskqFotR 6ppHgz8RRbx5rJ36YSlb98I6yA0maz+QksiO4eBoO1WZX3mZDObG3X6ppwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIpBEBTIWXXX0C6sVXJxsBiYQmO2MB8GA1UdIwQY MBaAFA0aMTH+i+qcglgxOg8kuipWC1jTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFJveE1mNkw2cHlDV0RFNkR5UzZLbFlMV05NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8xM2IxNjUtMDk4Ni00ZTkzLWIxYjQt YmJmN2M3MGVmNGIzLzEvRFJveE1mNkw2cHlDV0RFNkR5UzZLbFlMV05NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8xM2IxNjUtMDk4Ni00ZTkzLWIxYjQtYmJmN2M3MGVmNGIz LzEvRFJveE1mNkw2cHlDV0RFNkR5UzZLbFlMV05NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOGTUa4ed s0Xzn/inoreQYRzoeIz9tNpn8EWM69G16DDSij8iEyP2i93CufCBq1FxErQhvFM+ FkmDrXp2FNlsqt2KFQ/rXvat3mPdUB0TFhob7zC08PwtzX3Ccv+oAMpiJAaWZn2r PKD5yKgS2/jRX/YIj81ePMk6X/sMGJxKaaWN6/OY4BwQuexG9hv2tWNK8YM5C5zz 3SScA+xB+a0b7O9Ek+v3JDxlikkLXOW/RAr0y26zCqozbgfZ7vY9cf2ZG8HqjJzx xzVVVfzWvs8VmiPAsbpoqbPRJVM3XVW40KZZgtLuSk+QB1yAMOI33yyjkmGhso+h 6R3WCjGaq72JSQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:03:28 2025 by rpki-client