This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft File: DKcf-Varj49-f1nUCax696KwqGQ.mft (raw, json) Hash identifier: cKNJ4wQ+KJxuFpwH0YNWG5WGHohRWNxSbb0Q5rjMrME= Subject key identifier: 4F:53:E7:C6:34:63:EF:CA:E4:77:36:47:45:22:BB:2C:42:B3:37:81 Authority key identifier: 0C:A7:1F:F9:56:AB:8F:8F:7E:7F:59:D4:09:AC:7A:F7:A2:B0:A8:64 Certificate issuer: /CN=0ca71ff956ab8f8f7e7f59d409ac7af7a2b0a864 Certificate serial: 019AF0BF9A9A4BFC21FDB241E7375CBDBE62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft Manifest number: 1761 Signing time: Fri 05 Dec 2025 23:01:20 +0000 Manifest this update: Fri 05 Dec 2025 23:01:20 +0000 Manifest next update: Sat 06 Dec 2025 23:01:20 +0000 Files and hashes: 1: DKcf-Varj49-f1nUCax696KwqGQ.crl (hash: UdrAn6xu5o56vLRKkechhU5H7fNXTG8hkqrrbvoyLw4=) 2: OsEqbh-MgAhZY6dEETKTLoVhiek.roa (hash: 8l+J0cXRIwFphYGIY8ShZlRzu2XOdk8YK7YXmH85akQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:9a:9a:4b:fc:21:fd:b2:41:e7:37:5c:bd:be:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ca71ff956ab8f8f7e7f59d409ac7af7a2b0a864 Validity Not Before: Dec 5 23:01:20 2025 GMT Not After : Dec 6 23:01:20 2025 GMT Subject: CN=4f53e7c63463efcae47736474522bb2c42b33781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:20:d4:17:4e:f6:23:72:b7:a9:ef:c5:ea:39: 98:af:37:4c:6e:c6:0e:30:a6:0d:e4:67:09:5d:c5: b2:e7:a1:ec:05:08:62:c6:f0:13:33:99:ef:4b:47: 55:53:f2:c6:2f:81:f2:53:76:d6:e1:f2:2c:37:3d: 85:98:df:a7:5f:0f:89:5f:48:16:74:3f:31:98:c6: fd:60:d8:84:00:af:85:76:38:1c:f5:7d:d8:af:0a: 32:a9:0e:d6:74:62:2e:5d:71:3c:be:1b:9b:65:e5: 69:5a:26:1f:c8:91:50:0e:8c:11:34:7b:6a:b9:b9: 84:ed:35:60:cf:a3:74:af:46:60:a0:d3:1b:96:18: bf:2d:52:f2:d7:c3:1e:9e:4b:23:4b:a0:a3:9a:ec: c2:59:96:34:44:8d:73:7f:9e:c6:5c:1c:df:b3:55: 7c:99:64:6c:d2:1b:17:39:92:9f:ee:7c:18:48:e1: aa:e5:60:6e:fd:62:ea:41:3c:82:b4:79:25:69:2f: 58:bf:71:f4:81:f3:28:63:cc:a6:8f:a6:36:d9:90: ba:b2:53:dd:60:49:7a:a9:2a:f5:5d:23:04:fa:b3: ef:36:c5:27:1c:34:59:8d:46:44:1b:3d:ad:ce:fc: 63:35:42:45:ef:d4:e1:35:47:0b:93:91:74:55:33: 34:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:53:E7:C6:34:63:EF:CA:E4:77:36:47:45:22:BB:2C:42:B3:37:81 X509v3 Authority Key Identifier: keyid:0C:A7:1F:F9:56:AB:8F:8F:7E:7F:59:D4:09:AC:7A:F7:A2:B0:A8:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:2b:76:0b:4b:71:f1:d7:22:e3:a7:0e:4f:1c:2a:e6:58:f5: 17:6e:e1:76:19:5f:44:1a:4a:eb:b2:b1:bb:3f:0f:50:c0:61: 82:93:26:bc:89:ad:a1:01:48:a5:92:de:05:fa:6d:bc:87:a5: b2:d9:a8:21:0a:ed:5a:6d:e1:5b:3f:19:c9:d8:ae:5c:2e:d9: 5b:da:64:c1:71:ff:82:e1:17:f0:d9:99:3b:a7:fa:91:14:32: a0:ee:5b:37:2f:c2:fe:17:94:b1:3d:6e:46:f2:c7:88:8a:2a: a2:04:6e:21:27:f2:85:cb:d0:9c:85:b3:cd:40:a6:26:ec:1f: 3e:b4:f7:49:dd:9a:d0:51:3a:92:f9:e9:98:b9:8a:12:53:93: fd:9e:e2:8e:2c:90:49:57:1c:a2:ce:f5:1a:e7:e1:bd:e8:c7: ae:c2:9b:d5:d3:af:61:4a:51:a0:89:34:88:12:c4:0e:7d:51: 5c:f5:6b:f6:58:24:f0:b7:b7:4e:6b:7a:54:42:23:6f:58:bd: 6a:e3:12:e9:7d:2e:cb:0a:21:cc:d7:3b:26:0d:0f:11:d3:b9: 9c:8f:0e:5b:fc:a6:e7:5c:82:70:ec:48:88:d8:7c:a6:f6:d1: a4:d8:88:44:aa:de:90:f7:1c:40:4e:fa:89:76:0b:c2:98:34: 4d:35:b4:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv5qaS/wh/bJB5zdcvb5iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjYTcxZmY5NTZhYjhmOGY3ZTdmNTlkNDA5YWM3YWY3YTJi MGE4NjQwHhcNMjUxMjA1MjMwMTIwWhcNMjUxMjA2MjMwMTIwWjAzMTEwLwYDVQQD Eyg0ZjUzZTdjNjM0NjNlZmNhZTQ3NzM2NDc0NTIyYmIyYzQyYjMzNzgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSDUF072I3K3qe/F6jmYrzdMbsYO MKYN5GcJXcWy56HsBQhixvATM5nvS0dVU/LGL4HyU3bW4fIsNz2FmN+nXw+JX0gW dD8xmMb9YNiEAK+Fdjgc9X3YrwoyqQ7WdGIuXXE8vhubZeVpWiYfyJFQDowRNHtq ubmE7TVgz6N0r0ZgoNMblhi/LVLy18MenksjS6CjmuzCWZY0RI1zf57GXBzfs1V8 mWRs0hsXOZKf7nwYSOGq5WBu/WLqQTyCtHklaS9Yv3H0gfMoY8ymj6Y22ZC6slPd YEl6qSr1XSME+rPvNsUnHDRZjUZEGz2tzvxjNUJF79ThNUcLk5F0VTM0AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE9T58Y0Y+/K5Hc2R0UiuyxCszeBMB8GA1UdIwQY MBaAFAynH/lWq4+Pfn9Z1AmseveisKhkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREtjZi1WYXJqNDktZjFuVUNheDY5Nkt3cUdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC82ZWI4NWUtYmJiMC00ZGE3LWE0ZTAt ZDJlYTYwMDRkNTUzLzEvREtjZi1WYXJqNDktZjFuVUNheDY5Nkt3cUdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC82ZWI4NWUtYmJiMC00ZGE3LWE0ZTAtZDJlYTYwMDRkNTUz LzEvREtjZi1WYXJqNDktZjFuVUNheDY5Nkt3cUdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFyt2C0tx 8dci46cOTxwq5lj1F27hdhlfRBpK67Kxuz8PUMBhgpMmvImtoQFIpZLeBfptvIel stmoIQrtWm3hWz8ZydiuXC7ZW9pkwXH/guEX8NmZO6f6kRQyoO5bNy/C/heUsT1u RvLHiIoqogRuISfyhcvQnIWzzUCmJuwfPrT3Sd2a0FE6kvnpmLmKElOT/Z7ijiyQ SVccos71GufhvejHrsKb1dOvYUpRoIk0iBLEDn1RXPVr9lgk8Le3Tmt6VEIjb1i9 auMS6X0uywohzNc7Jg0PEdO5nI8OW/ym51yCcOxIiNh8pvbRpNiIRKrekPccQE76 iXYLwpg0TTW0Eg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:18:39 2025 by rpki-client