This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft File: DrG9MNMZGofH0KRi5nkyQxYz3R4.mft (raw, json) Hash identifier: GqGqhL4gY90m4gLrLtzO7HvVfHH/7rjCRJ5MsK0gDv8= Subject key identifier: 3A:40:73:5A:7B:D4:6E:20:4D:B9:64:41:5D:02:19:CA:8A:EA:CC:ED Authority key identifier: 0E:B1:BD:30:D3:19:1A:87:C7:D0:A4:62:E6:79:32:43:16:33:DD:1E Certificate issuer: /CN=0eb1bd30d3191a87c7d0a462e67932431633dd1e Certificate serial: 019B36E97B2FB87B65F4548ADA78946A122A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft Manifest number: 049E Signing time: Fri 19 Dec 2025 14:00:29 +0000 Manifest this update: Fri 19 Dec 2025 14:00:29 +0000 Manifest next update: Sat 20 Dec 2025 14:00:29 +0000 Files and hashes: 1: DrG9MNMZGofH0KRi5nkyQxYz3R4.crl (hash: zynIGjCGLcQtEs3cZUt766i/HDhaW3WsZVD23j1hP7E=) 2: ogxxjz_eGLDn7LYpHHuvCo9x5ng.roa (hash: B2U5jkd3tbLDGtZHWekj2Yva7wWVjyZDFNXj9MRShj4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:e9:7b:2f:b8:7b:65:f4:54:8a:da:78:94:6a:12:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0eb1bd30d3191a87c7d0a462e67932431633dd1e Validity Not Before: Dec 19 14:00:29 2025 GMT Not After : Dec 20 14:00:29 2025 GMT Subject: CN=3a40735a7bd46e204db964415d0219ca8aeacced Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9b:9e:6a:4d:90:3c:ad:e9:68:7b:6e:51:8c: da:21:d3:27:85:37:09:a0:73:6f:8a:f6:37:9f:64: a4:02:ac:a1:b9:b8:5b:5b:e0:60:df:67:0c:43:78: 6c:d9:be:05:c2:2b:3c:6d:b2:6f:c7:f2:85:6b:b9: c5:93:a2:18:69:23:d8:6c:4a:8d:30:8a:d2:23:57: b0:be:28:af:f6:ea:22:a1:94:ed:bb:0c:25:a7:e0: 84:04:58:ee:bc:93:56:08:5e:98:38:09:f8:5d:c5: fa:f9:b3:0c:ce:f9:e8:a7:37:67:1d:ea:87:a2:48: 56:26:82:0b:40:8e:ce:e7:f3:83:f0:7e:17:a9:e7: bb:83:a4:c9:62:e6:a9:2c:b7:85:03:9e:59:64:c7: 36:4b:c9:28:dd:67:33:7f:f9:8c:98:f4:77:27:1d: 05:d7:54:72:27:f1:0b:64:c8:ae:2b:4c:25:24:d8: 60:36:e8:4a:1e:73:4a:e4:47:15:2d:4a:22:c9:16: cb:bc:70:65:a3:7c:22:f2:e7:92:43:f4:0d:34:90: e3:8d:8a:ff:29:04:23:61:e5:a8:80:d4:b5:5b:ad: ae:52:a2:79:69:8b:fd:4c:dc:4f:3b:4d:89:b2:6f: 55:0f:ea:fa:5b:99:46:e6:6c:72:cb:1a:77:8a:4a: 4c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:40:73:5A:7B:D4:6E:20:4D:B9:64:41:5D:02:19:CA:8A:EA:CC:ED X509v3 Authority Key Identifier: keyid:0E:B1:BD:30:D3:19:1A:87:C7:D0:A4:62:E6:79:32:43:16:33:DD:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:f2:3d:34:86:0e:30:e4:9d:7b:ee:34:2d:72:45:52:42:c9: a3:34:90:f3:86:6a:cc:76:6f:87:26:8c:78:0a:56:33:df:23: 46:2c:16:38:e1:0c:a6:df:59:d0:78:e6:91:c7:b1:47:03:77: c9:3d:cb:b6:a3:45:47:d3:bf:b3:aa:60:2a:d6:95:6a:8d:91: c6:5e:99:21:e2:15:ba:a7:5f:7f:8a:aa:b0:38:43:81:5e:19: 27:6f:17:fd:e1:2e:59:7f:71:3b:c0:81:e9:a6:43:17:4e:44: 3e:ce:9b:f4:28:44:b4:0c:41:d9:f6:5c:43:0e:53:21:bf:c9: a9:33:70:97:1c:0a:67:75:f6:a9:99:db:78:b2:76:53:26:ec: e2:78:3e:2b:4c:f8:16:2f:17:f6:43:5b:83:6b:7c:bc:21:a5: 57:63:71:53:1e:53:f7:bf:96:2d:cf:e1:41:ec:f7:ff:9e:4b: db:a6:95:b2:0c:34:9e:c1:12:b6:29:02:93:18:be:31:c0:ba: d1:cd:ef:aa:50:10:02:11:e0:65:b9:ba:17:a9:35:6b:77:1f: 42:a4:ed:80:ee:c9:31:4c:38:53:08:b9:4e:50:3f:ce:51:00: 4d:f2:7f:24:e4:c3:9f:26:94:46:84:81:c7:5b:7d:ff:51:18: d3:4b:3c:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs26XsvuHtl9FSK2niUahIqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlYjFiZDMwZDMxOTFhODdjN2QwYTQ2MmU2NzkzMjQzMTYz M2RkMWUwHhcNMjUxMjE5MTQwMDI5WhcNMjUxMjIwMTQwMDI5WjAzMTEwLwYDVQQD EygzYTQwNzM1YTdiZDQ2ZTIwNGRiOTY0NDE1ZDAyMTljYThhZWFjY2VkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJueak2QPK3paHtuUYzaIdMnhTcJ oHNvivY3n2SkAqyhubhbW+Bg32cMQ3hs2b4Fwis8bbJvx/KFa7nFk6IYaSPYbEqN MIrSI1ewviiv9uoioZTtuwwlp+CEBFjuvJNWCF6YOAn4XcX6+bMMzvnopzdnHeqH okhWJoILQI7O5/OD8H4Xqee7g6TJYuapLLeFA55ZZMc2S8ko3Wczf/mMmPR3Jx0F 11RyJ/ELZMiuK0wlJNhgNuhKHnNK5EcVLUoiyRbLvHBlo3wi8ueSQ/QNNJDjjYr/ KQQjYeWogNS1W62uUqJ5aYv9TNxPO02Jsm9VD+r6W5lG5mxyyxp3ikpMkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDpAc1p71G4gTblkQV0CGcqK6sztMB8GA1UdIwQY MBaAFA6xvTDTGRqHx9CkYuZ5MkMWM90eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHJHOU1OTVpHb2ZIMEtSaTVua3lReFl6M1I0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy83MmU5MWEtMDE0Zi00ODNhLWE1NDQt NGUzMzQyN2Y3MzRlLzEvRHJHOU1OTVpHb2ZIMEtSaTVua3lReFl6M1I0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy83MmU5MWEtMDE0Zi00ODNhLWE1NDQtNGUzMzQyN2Y3MzRl LzEvRHJHOU1OTVpHb2ZIMEtSaTVua3lReFl6M1I0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACfI9NIYO MOSde+40LXJFUkLJozSQ84ZqzHZvhyaMeApWM98jRiwWOOEMpt9Z0HjmkcexRwN3 yT3LtqNFR9O/s6pgKtaVao2Rxl6ZIeIVuqdff4qqsDhDgV4ZJ28X/eEuWX9xO8CB 6aZDF05EPs6b9ChEtAxB2fZcQw5TIb/JqTNwlxwKZ3X2qZnbeLJ2Uybs4ng+K0z4 Fi8X9kNbg2t8vCGlV2NxUx5T97+WLc/hQez3/55L26aVsgw0nsEStikCkxi+McC6 0c3vqlAQAhHgZbm6F6k1a3cfQqTtgO7JMUw4Uwi5TlA/zlEATfJ/JOTDnyaURoSB x1t9/1EY00s8Tw== -----END CERTIFICATE-----Generated at Fri Dec 19 16:39:53 2025 by rpki-client