This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft File: DcIGFAWVaZPMY6YNsPljUl01dzE.mft (raw, json) Hash identifier: MW8cx1j3bU3UvfTk7c54Wv8J4dYDhBMRFbuCF3ZUMIo= Subject key identifier: 0F:41:87:1F:1E:D9:C4:F4:36:C3:70:B7:5C:FC:F8:E6:3A:47:D4:97 Authority key identifier: 0D:C2:06:14:05:95:69:93:CC:63:A6:0D:B0:F9:63:52:5D:35:77:31 Certificate issuer: /CN=0dc2061405956993cc63a60db0f963525d357731 Certificate serial: 019AF209AE6B70168C869C8C9F9A446B1B5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 05:01:51 +0000 Manifest this update: Sat 06 Dec 2025 05:01:51 +0000 Manifest next update: Sun 07 Dec 2025 05:01:51 +0000 Files and hashes: 1: DcIGFAWVaZPMY6YNsPljUl01dzE.crl (hash: 3ugG45qK2qwxQ5Y1C3oEuiAn8/PrvFlZje1H9GuHKXc=) 2: Spijy9s0dl5Zj39GdhMa_kS4bpQ.roa (hash: yNGOiWMyz1u0T1szDPmkVxet3IhLc4ljiBf05yJrLuA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:ae:6b:70:16:8c:86:9c:8c:9f:9a:44:6b:1b:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dc2061405956993cc63a60db0f963525d357731 Validity Not Before: Dec 6 05:01:51 2025 GMT Not After : Dec 7 05:01:51 2025 GMT Subject: CN=0f41871f1ed9c4f436c370b75cfcf8e63a47d497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:42:81:1c:9c:80:24:60:8a:0b:1c:8b:c7:f9: 6e:88:d7:48:e9:ec:5e:37:17:88:9a:1a:2b:0e:b9: 35:7e:d6:a4:be:ab:51:5c:95:b2:5e:24:ed:90:69: a4:3b:be:30:68:b1:5c:49:e7:90:65:d9:e0:10:58: 9f:0b:ac:84:d7:85:65:bc:ab:56:46:ce:dc:f3:bb: eb:10:45:e6:80:0c:4e:55:e6:4a:e1:dd:d8:0d:e8: cb:4c:c7:c6:88:ca:4b:bc:bc:af:e8:46:34:ab:ea: 8e:39:d2:35:0c:24:a0:58:67:6b:21:b4:c8:43:48: c8:08:76:c4:43:61:49:10:bb:16:74:ef:b4:10:27: 12:ab:da:fe:e7:27:28:4a:51:2b:1f:b1:10:b0:3e: 72:f8:b7:ab:d0:2e:b0:3f:f0:f4:62:12:37:09:1d: b0:91:6e:49:e6:08:59:fb:c1:fe:a7:64:0e:06:25: 99:27:1c:1b:c5:88:69:40:3e:94:b8:98:87:81:35: d5:61:7b:4c:07:31:d4:68:2e:81:08:98:14:7c:74: 71:35:b4:39:b4:81:f8:ef:6e:d1:ab:43:31:85:33: 27:5b:73:e4:68:7b:2e:27:e8:af:20:08:5b:bc:21: b1:63:3e:15:38:a0:d9:5c:2e:f8:ba:ce:5a:9b:0f: f8:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:41:87:1F:1E:D9:C4:F4:36:C3:70:B7:5C:FC:F8:E6:3A:47:D4:97 X509v3 Authority Key Identifier: keyid:0D:C2:06:14:05:95:69:93:CC:63:A6:0D:B0:F9:63:52:5D:35:77:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:57:3d:28:ff:cb:0e:bd:90:49:13:81:a4:a9:fe:58:12:db: 78:d1:b8:1c:91:e7:15:3f:3f:c5:6e:13:73:17:b2:24:32:0a: c7:7e:57:cc:52:df:5d:a6:c6:e1:06:d7:18:28:8f:4c:50:87: 81:3b:28:1f:78:e8:3e:50:72:5a:55:11:10:b7:cf:f9:e4:d8: 20:07:0f:b6:da:2b:6b:ea:56:a4:65:b1:10:29:ea:6e:26:e4: c5:4f:6f:95:94:3e:12:e6:46:34:49:f3:15:84:a2:bd:ff:59: 96:74:e4:01:02:37:c5:b5:d8:ae:b8:c5:89:ac:06:0b:71:81: bf:f1:61:e6:f9:f2:71:27:fa:ed:cd:3f:79:e1:43:ea:8c:48: 9d:80:ba:e2:12:23:2a:f6:20:2d:a6:31:a8:cc:a2:be:b2:05: 7a:a0:a3:d3:f6:e6:54:51:b0:cc:7c:53:3e:ab:54:3f:8d:70: db:df:48:c0:51:37:82:1b:2b:f5:1a:95:78:03:cc:b4:55:df: 50:32:13:9b:7d:37:a8:a4:45:2d:ec:18:b0:6f:3c:4e:1b:5b: 09:49:d7:89:43:52:88:8c:b5:0d:ce:e7:d0:21:a7:fa:1a:53: 37:40:e1:df:2e:3b:e6:9b:3d:b1:b1:8c:36:af:95:80:91:05: 09:dc:9b:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCa5rcBaMhpyMn5pEaxteMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYzIwNjE0MDU5NTY5OTNjYzYzYTYwZGIwZjk2MzUyNWQz NTc3MzEwHhcNMjUxMjA2MDUwMTUxWhcNMjUxMjA3MDUwMTUxWjAzMTEwLwYDVQQD EygwZjQxODcxZjFlZDljNGY0MzZjMzcwYjc1Y2ZjZjhlNjNhNDdkNDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEKBHJyAJGCKCxyLx/luiNdI6exe NxeImhorDrk1ftakvqtRXJWyXiTtkGmkO74waLFcSeeQZdngEFifC6yE14VlvKtW Rs7c87vrEEXmgAxOVeZK4d3YDejLTMfGiMpLvLyv6EY0q+qOOdI1DCSgWGdrIbTI Q0jICHbEQ2FJELsWdO+0ECcSq9r+5ycoSlErH7EQsD5y+Ler0C6wP/D0YhI3CR2w kW5J5ghZ+8H+p2QOBiWZJxwbxYhpQD6UuJiHgTXVYXtMBzHUaC6BCJgUfHRxNbQ5 tIH4727Rq0MxhTMnW3PkaHsuJ+ivIAhbvCGxYz4VOKDZXC74us5amw/4OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA9Bhx8e2cT0NsNwt1z8+OY6R9SXMB8GA1UdIwQY MBaAFA3CBhQFlWmTzGOmDbD5Y1JdNXcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGNJR0ZBV1ZhWlBNWTZZTnNQbGpVbDAxZHpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85ZGU3NjctM2EyOC00OWFiLWFlMjgt MjM0OGJhNmZiNGMzLzEvRGNJR0ZBV1ZhWlBNWTZZTnNQbGpVbDAxZHpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy85ZGU3NjctM2EyOC00OWFiLWFlMjgtMjM0OGJhNmZiNGMz LzEvRGNJR0ZBV1ZhWlBNWTZZTnNQbGpVbDAxZHpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtlc9KP/L Dr2QSROBpKn+WBLbeNG4HJHnFT8/xW4TcxeyJDIKx35XzFLfXabG4QbXGCiPTFCH gTsoH3joPlByWlURELfP+eTYIAcPttora+pWpGWxECnqbibkxU9vlZQ+EuZGNEnz FYSivf9ZlnTkAQI3xbXYrrjFiawGC3GBv/Fh5vnycSf67c0/eeFD6oxInYC64hIj KvYgLaYxqMyivrIFeqCj0/bmVFGwzHxTPqtUP41w299IwFE3ghsr9RqVeAPMtFXf UDITm303qKRFLewYsG88ThtbCUnXiUNSiIy1Dc7n0CGn+hpTN0Dh3y475ps9sbGM Nq+VgJEFCdybnQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:25:16 2025 by rpki-client