This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft File: DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft (raw, json) Hash identifier: xb/XlTfXp52IyBCxpJAB3AhKXMBJuttJGyVUlW6PdcE= Subject key identifier: AC:BA:03:39:DE:FD:8E:71:50:48:C7:EC:79:1B:E3:AE:AE:98:EF:80 Authority key identifier: 0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06 Certificate issuer: /CN=0c05ca111c0093b56514215be467b515dda56c06 Certificate serial: 019AF0889BD7EBBEB6EB7EB50E6E56D57249 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft Manifest number: 0AE5 Signing time: Fri 05 Dec 2025 22:01:15 +0000 Manifest this update: Fri 05 Dec 2025 22:01:15 +0000 Manifest next update: Sat 06 Dec 2025 22:01:15 +0000 Files and hashes: 1: DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl (hash: S6RUNDtLGYfNh4OiPw9gAXKzB0hedEOrmPWY36gxCw4=) 2: LaWeTZCAr-HUhZ4sGwn2UEM8UYc.roa (hash: B2sPWyas3UEyy6EkjCL1gILAFxuUkQj9iQf0YdV0Fw4=) 3: _2hrxKKbdmRyLOnHUiOQipQACXY.roa (hash: DxOyoU679BPpOs0ffrHVPaZuK8yvllJ+3WIdB3uJM5Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:9b:d7:eb:be:b6:eb:7e:b5:0e:6e:56:d5:72:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c05ca111c0093b56514215be467b515dda56c06 Validity Not Before: Dec 5 22:01:15 2025 GMT Not After : Dec 6 22:01:15 2025 GMT Subject: CN=acba0339defd8e715048c7ec791be3aeae98ef80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:51:92:1b:86:4c:19:9b:63:85:7e:ca:7e:76: 7b:96:9d:9b:f7:ae:37:81:61:9f:cb:76:ab:73:de: 56:81:04:d1:95:df:48:3d:5a:e5:72:92:3d:9a:67: 2e:a7:98:8e:99:a9:5e:1c:ba:b2:ec:1c:e4:02:53: af:d2:00:f5:b0:7f:17:5b:53:08:47:63:ab:35:0b: c8:5a:98:7c:a3:c1:76:3d:67:2c:48:88:90:63:6e: d9:a2:5b:cb:8f:f3:8c:f5:c9:b0:77:d8:55:61:89: 9c:93:1c:79:ff:3f:ec:76:66:77:62:8c:81:ea:cf: 55:9e:da:f0:54:59:49:d0:d6:cf:a3:f0:52:1c:35: db:7a:82:c3:9a:72:6c:e2:04:58:ac:83:55:e5:9b: 22:b9:ff:06:8b:23:ec:b7:92:85:7a:c7:6f:67:74: 42:57:88:cd:b6:4b:33:f9:47:11:0e:9f:4f:4e:b9: e5:9a:a3:eb:9c:47:2d:3c:99:d8:84:1f:5c:55:21: ab:99:a2:d7:2b:af:8f:22:47:3b:83:c1:ec:a4:98: c5:f0:ee:ad:ea:38:f6:4b:9c:76:61:2c:a2:29:95: bc:68:76:6f:dc:39:6f:32:5d:57:22:b5:ef:cc:df: 0c:b9:6c:1e:cb:ca:d4:19:c4:f9:4e:03:74:0f:8b: 76:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:BA:03:39:DE:FD:8E:71:50:48:C7:EC:79:1B:E3:AE:AE:98:EF:80 X509v3 Authority Key Identifier: keyid:0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:6b:d9:81:8a:7e:6f:67:b7:c5:e9:87:ab:59:90:e5:d3:9b: 36:54:1b:1d:19:3d:88:03:6e:21:42:b4:dd:dd:05:9f:0a:1c: b7:01:cf:32:12:b1:24:b7:7a:58:c1:e0:d2:e7:4e:b6:dc:a2: 10:1c:8f:ae:a9:06:0c:1b:ec:07:97:32:0d:2f:d1:1d:6f:a2: 48:7c:54:5e:e1:db:80:f4:ad:56:47:7a:d9:a2:2a:ad:b7:ab: 82:55:28:af:39:b4:e1:df:06:77:8b:bf:8c:09:2e:cd:ad:6f: 2b:01:97:a8:87:7b:40:db:39:0c:a7:e5:6c:29:5c:e6:38:7b: c8:bd:45:53:30:35:77:c4:0c:3b:9a:2b:6a:27:f1:26:e2:8d: 8d:80:96:2a:c7:e3:ec:2f:b2:e6:ce:8b:56:ac:a7:a1:0f:8d: 0f:65:ad:0d:e0:e5:47:29:a9:9d:68:69:5d:5d:66:74:5e:de: 7d:d7:9b:06:af:2f:d1:69:5b:73:5b:95:0b:65:9f:d7:1f:db: 22:57:28:7a:96:f8:f8:d0:3d:5b:00:d4:3b:6a:de:9e:ac:0c: 04:a6:ba:7b:28:51:d3:62:50:0d:48:fe:cf:e6:17:30:1b:c5: 51:e2:9d:e0:aa:06:d1:99:fb:e0:12:e9:13:31:1b:25:45:ec: 75:08:1a:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiJvX67626361Dm5W1XJJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMDVjYTExMWMwMDkzYjU2NTE0MjE1YmU0NjdiNTE1ZGRh NTZjMDYwHhcNMjUxMjA1MjIwMTE1WhcNMjUxMjA2MjIwMTE1WjAzMTEwLwYDVQQD EyhhY2JhMDMzOWRlZmQ4ZTcxNTA0OGM3ZWM3OTFiZTNhZWFlOThlZjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFGSG4ZMGZtjhX7KfnZ7lp2b9643 gWGfy3arc95WgQTRld9IPVrlcpI9mmcup5iOmaleHLqy7BzkAlOv0gD1sH8XW1MI R2OrNQvIWph8o8F2PWcsSIiQY27ZolvLj/OM9cmwd9hVYYmckxx5/z/sdmZ3YoyB 6s9VntrwVFlJ0NbPo/BSHDXbeoLDmnJs4gRYrINV5Zsiuf8GiyPst5KFesdvZ3RC V4jNtksz+UcRDp9PTrnlmqPrnEctPJnYhB9cVSGrmaLXK6+PIkc7g8HspJjF8O6t 6jj2S5x2YSyiKZW8aHZv3DlvMl1XIrXvzN8MuWwey8rUGcT5TgN0D4t2QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKy6Azne/Y5xUEjH7Hkb466umO+AMB8GA1UdIwQY MBaAFAwFyhEcAJO1ZRQhW+RntRXdpWwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREFYS0VSd0FrN1ZsRkNGYjVHZTFGZDJsYkFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wZmJmNDgtNWRiNy00OWZlLWJmNDQt NmEzNjcwNWJiYTZmLzEvREFYS0VSd0FrN1ZsRkNGYjVHZTFGZDJsYkFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wZmJmNDgtNWRiNy00OWZlLWJmNDQtNmEzNjcwNWJiYTZm LzEvREFYS0VSd0FrN1ZsRkNGYjVHZTFGZDJsYkFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmWvZgYp+ b2e3xemHq1mQ5dObNlQbHRk9iANuIUK03d0FnwoctwHPMhKxJLd6WMHg0udOttyi EByPrqkGDBvsB5cyDS/RHW+iSHxUXuHbgPStVkd62aIqrberglUorzm04d8Gd4u/ jAkuza1vKwGXqId7QNs5DKflbClc5jh7yL1FUzA1d8QMO5oraifxJuKNjYCWKsfj 7C+y5s6LVqynoQ+ND2WtDeDlRympnWhpXV1mdF7efdebBq8v0Wlbc1uVC2Wf1x/b Ilcoepb4+NA9WwDUO2renqwMBKa6eyhR02JQDUj+z+YXMBvFUeKd4KoG0Zn74BLp EzEbJUXsdQga4A== -----END CERTIFICATE-----Generated at Sat Dec 6 08:18:18 2025 by rpki-client