This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft File: DNLKvrHXJOekjdYemn4MUKTpv1A.mft (raw, json) Hash identifier: nj8AzXTrxQr5lDrr9L4AknFo/ALX5o42n3R38lUHPP8= Subject key identifier: E0:B3:8D:0D:98:09:0C:53:9B:26:5D:2F:64:9F:A5:5A:80:09:C6:0D Authority key identifier: 0C:D2:CA:BE:B1:D7:24:E7:A4:8D:D6:1E:9A:7E:0C:50:A4:E9:BF:50 Certificate issuer: /CN=0cd2cabeb1d724e7a48dd61e9a7e0c50a4e9bf50 Certificate serial: 019B25F5FBC32AF7E94DC6C103EF099FFB16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft Manifest number: 084C Signing time: Tue 16 Dec 2025 07:00:36 +0000 Manifest this update: Tue 16 Dec 2025 07:00:36 +0000 Manifest next update: Wed 17 Dec 2025 07:00:36 +0000 Files and hashes: 1: DNLKvrHXJOekjdYemn4MUKTpv1A.crl (hash: 00pc4Cxt/MGb2rUVDTuFuTqgp2L1K9hbBDd1QYDe92g=) 2: gFGZ2BFs8uwMqzE5e-fa-6VVCNI.roa (hash: RsuEdz61HYwgHfhCVbH78Gqegx1PGZpeCp/nCDSO5do=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 07:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:f5:fb:c3:2a:f7:e9:4d:c6:c1:03:ef:09:9f:fb:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cd2cabeb1d724e7a48dd61e9a7e0c50a4e9bf50 Validity Not Before: Dec 16 07:00:36 2025 GMT Not After : Dec 17 07:00:36 2025 GMT Subject: CN=e0b38d0d98090c539b265d2f649fa55a8009c60d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cd:dc:62:f0:28:0b:45:0f:fa:ac:ea:52:9a: fc:77:ba:c5:8f:14:55:56:2b:ac:93:ee:8f:60:71: 38:44:9c:e5:42:29:7e:c0:c9:ac:d4:97:e3:1a:98: bd:33:0b:18:0f:85:fe:17:28:8c:8c:cc:5f:ea:da: c4:f4:3d:f2:bf:d2:78:e4:a9:20:7a:28:47:d5:ec: 36:d0:db:e3:c3:1a:d7:a9:e7:63:d6:5b:29:17:e7: f6:bb:4d:cc:75:34:10:42:aa:0f:85:ad:78:e4:cd: 45:59:fb:87:a6:2a:7d:97:a9:aa:c1:c2:95:3f:e1: be:11:a9:47:96:79:2c:ba:2d:d7:fa:ba:e3:81:8a: 59:3b:26:93:2e:fa:f6:e9:0d:d6:fa:2c:91:b2:cc: 9d:b5:6b:09:27:9f:0e:2d:80:23:40:2d:10:6d:bd: a2:21:ba:37:b5:f9:bf:9a:d0:12:2e:03:e1:f1:0a: 04:4a:0c:11:73:99:76:46:de:0a:1a:27:68:b9:a9: 55:ba:dc:bf:1b:f1:95:b4:b3:4c:dd:b5:a7:c7:fa: 03:0c:0d:4d:26:03:53:7f:09:e7:b1:b5:c5:86:76: 31:d9:d5:7b:bb:99:b3:b9:16:e4:ed:82:1d:29:7e: 71:2a:53:3c:fb:0b:f1:dc:7c:1e:f5:73:52:8a:60: d9:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:B3:8D:0D:98:09:0C:53:9B:26:5D:2F:64:9F:A5:5A:80:09:C6:0D X509v3 Authority Key Identifier: keyid:0C:D2:CA:BE:B1:D7:24:E7:A4:8D:D6:1E:9A:7E:0C:50:A4:E9:BF:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:ad:e0:59:65:1c:24:2e:16:a8:11:0d:a9:2e:23:d2:e9:da: 7d:24:23:c8:b4:1c:2e:50:ff:c2:e4:02:b1:7c:48:dd:64:05: 72:28:f9:f5:d2:ec:47:19:f3:1b:7c:66:7e:dc:08:8b:99:da: 7e:b4:38:33:97:9b:65:39:fa:84:c5:74:50:51:d2:5e:73:c5: 6c:5c:48:34:d5:9c:4e:2b:5f:9c:48:10:77:9e:9a:8c:9e:ed: 0c:c5:97:56:97:92:15:40:07:54:c3:eb:17:43:44:ca:ac:71: 5b:3b:bd:54:97:0d:af:42:8c:df:2f:f0:28:13:cf:41:11:90: 91:bc:c0:6a:63:1a:14:98:f1:69:4c:ec:2b:72:ae:f4:33:28: 37:c0:95:ea:3e:e7:76:57:a9:aa:8c:4d:f6:f8:43:8b:f4:a5: dc:37:40:11:1f:ae:80:83:fd:b8:64:8f:d6:8f:4b:c1:ef:7f: 17:36:38:68:7f:61:f8:21:19:fc:51:53:be:64:cf:57:68:23: 15:6b:02:16:0a:88:ea:4d:72:ee:f4:6e:79:d0:24:1c:86:9f: 9f:82:9b:27:0b:76:00:54:9a:0b:20:29:25:3d:b1:82:34:d1: 86:bf:90:9d:dc:07:8f:41:8d:96:0a:c8:54:89:f4:eb:3d:a2: 25:d2:72:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsl9fvDKvfpTcbBA+8Jn/sWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZDJjYWJlYjFkNzI0ZTdhNDhkZDYxZTlhN2UwYzUwYTRl OWJmNTAwHhcNMjUxMjE2MDcwMDM2WhcNMjUxMjE3MDcwMDM2WjAzMTEwLwYDVQQD EyhlMGIzOGQwZDk4MDkwYzUzOWIyNjVkMmY2NDlmYTU1YTgwMDljNjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuM3cYvAoC0UP+qzqUpr8d7rFjxRV Viusk+6PYHE4RJzlQil+wMms1JfjGpi9MwsYD4X+FyiMjMxf6trE9D3yv9J45Kkg eihH1ew20NvjwxrXqedj1lspF+f2u03MdTQQQqoPha145M1FWfuHpip9l6mqwcKV P+G+EalHlnksui3X+rrjgYpZOyaTLvr26Q3W+iyRssydtWsJJ58OLYAjQC0Qbb2i Ibo3tfm/mtASLgPh8QoESgwRc5l2Rt4KGidoualVuty/G/GVtLNM3bWnx/oDDA1N JgNTfwnnsbXFhnYx2dV7u5mzuRbk7YIdKX5xKlM8+wvx3Hwe9XNSimDZMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOCzjQ2YCQxTmyZdL2SfpVqACcYNMB8GA1UdIwQY MBaAFAzSyr6x1yTnpI3WHpp+DFCk6b9QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE5MS3ZySFhKT2VramRZZW1uNE1VS1RwdjFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9iNzk3NzctNGEwNC00ZGFiLWExZGMt MjUzNzQ0OTRjZWVlLzEvRE5MS3ZySFhKT2VramRZZW1uNE1VS1RwdjFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9iNzk3NzctNGEwNC00ZGFiLWExZGMtMjUzNzQ0OTRjZWVl LzEvRE5MS3ZySFhKT2VramRZZW1uNE1VS1RwdjFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX63gWWUc JC4WqBENqS4j0unafSQjyLQcLlD/wuQCsXxI3WQFcij59dLsRxnzG3xmftwIi5na frQ4M5ebZTn6hMV0UFHSXnPFbFxINNWcTitfnEgQd56ajJ7tDMWXVpeSFUAHVMPr F0NEyqxxWzu9VJcNr0KM3y/wKBPPQRGQkbzAamMaFJjxaUzsK3Ku9DMoN8CV6j7n dlepqoxN9vhDi/Sl3DdAER+ugIP9uGSP1o9Lwe9/FzY4aH9h+CEZ/FFTvmTPV2gj FWsCFgqI6k1y7vRuedAkHIafn4KbJwt2AFSaCyApJT2xgjTRhr+QndwHj0GNlgrI VIn06z2iJdJy2Q== -----END CERTIFICATE-----Generated at Tue Dec 16 17:08:42 2025 by rpki-client