This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft File: DZHf1FaDQonB_QOg_vG1Kl79HZE.mft (raw, json) Hash identifier: YQKSQdYF5XyKP8ZJKeQ7IrsEaaEVYTp2zemQmzUfpBQ= Subject key identifier: E8:AF:5D:CD:A5:56:95:BB:EA:3A:61:2F:5A:B0:7B:17:F9:83:77:70 Authority key identifier: 0D:91:DF:D4:56:83:42:89:C1:FD:03:A0:FE:F1:B5:2A:5E:FD:1D:91 Certificate issuer: /CN=0d91dfd456834289c1fd03a0fef1b52a5efd1d91 Certificate serial: 019AF2093783C06CB31931B722F4C05F1756 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZHf1FaDQonB_QOg_vG1Kl79HZE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft Manifest number: 0FC9 Signing time: Sat 06 Dec 2025 05:01:21 +0000 Manifest this update: Sat 06 Dec 2025 05:01:21 +0000 Manifest next update: Sun 07 Dec 2025 05:01:21 +0000 Files and hashes: 1: DZHf1FaDQonB_QOg_vG1Kl79HZE.crl (hash: AlLLcE7cqgfoB5yo9BVv8m9A2km1Hv7WL3R+u1H6wN4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft rsync://rpki.ripe.net/repository/DEFAULT/DZHf1FaDQonB_QOg_vG1Kl79HZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:37:83:c0:6c:b3:19:31:b7:22:f4:c0:5f:17:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d91dfd456834289c1fd03a0fef1b52a5efd1d91 Validity Not Before: Dec 6 05:01:21 2025 GMT Not After : Dec 7 05:01:21 2025 GMT Subject: CN=e8af5dcda55695bbea3a612f5ab07b17f9837770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2b:6b:a5:a7:11:bf:d5:71:7c:89:ad:5a:f6: f9:8c:9a:4e:ad:d4:ea:b4:7f:49:e2:d6:2e:b3:b6: d8:03:e4:3d:81:16:1f:77:39:be:9f:da:9a:68:d2: 82:df:e9:83:61:ee:9a:a9:87:a1:0e:3d:56:23:67: 27:ca:69:54:16:08:86:44:fd:b3:be:91:ec:e8:2c: fd:a8:44:d2:3f:98:ce:bb:a8:0a:a1:d7:6b:65:f7: 06:8f:8c:35:93:76:a2:60:4a:a2:4d:85:43:ea:c9: 37:4f:fe:56:3e:10:a8:19:7d:68:e1:86:e3:20:b9: e2:c2:42:48:11:9f:3f:18:c1:9c:65:ba:0b:ee:5a: 41:60:a5:28:1a:c2:7c:88:fa:54:37:14:04:c6:0c: 3e:bd:52:17:33:a1:ad:20:36:51:0e:98:6e:e0:a7: 5f:f4:0b:6b:94:bb:22:37:a3:39:60:d2:78:ab:e5: 76:eb:fb:b7:c5:12:cf:08:15:36:58:9b:ed:c2:0a: 17:04:4e:9e:b1:86:e0:41:6c:9f:a6:73:2f:76:6c: f0:2a:6a:66:6b:c8:0f:8e:a7:f2:90:88:10:3d:72: 6c:d4:33:a1:96:11:ad:fb:85:0d:d2:af:e0:21:6d: c1:7a:e2:7a:02:0c:53:be:c3:32:f9:1a:de:61:15: d2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:AF:5D:CD:A5:56:95:BB:EA:3A:61:2F:5A:B0:7B:17:F9:83:77:70 X509v3 Authority Key Identifier: keyid:0D:91:DF:D4:56:83:42:89:C1:FD:03:A0:FE:F1:B5:2A:5E:FD:1D:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZHf1FaDQonB_QOg_vG1Kl79HZE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fbbe41-15b7-4f6e-9e07-8bcce303b919/1/DZHf1FaDQonB_QOg_vG1Kl79HZE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:1a:93:b8:1c:75:51:12:e5:01:aa:37:4f:c5:aa:4d:f0:ed: a1:dd:cc:91:6d:ff:d9:2d:32:0d:fe:66:51:ff:43:c0:2c:03: 6a:76:87:4e:f6:e3:c7:ef:fa:d7:5d:4e:c2:7d:dc:79:ae:38: bf:56:ca:74:0d:66:16:ba:d4:34:b2:d4:9a:b3:b6:49:88:09: 48:11:98:d9:f9:b3:a3:ac:0e:3b:27:99:2c:ce:e2:3f:fa:21: 6b:23:53:65:d4:17:f3:ee:17:4a:97:a9:19:5b:4c:69:77:96: 05:eb:09:1d:64:3e:d3:98:7e:6f:8e:83:60:77:56:d0:e6:77: 63:d8:69:0d:85:b9:29:a3:b7:84:48:ee:8a:fb:69:7f:38:12: 17:95:c0:6d:97:4e:50:d3:f4:af:c9:5a:12:59:d9:2b:b8:bc: c0:56:4e:8d:a7:97:e4:40:73:52:ba:d4:53:8e:fb:4d:aa:54: 06:f1:b2:06:1c:c7:57:8f:75:39:d6:a6:21:76:6d:f9:03:4d: 1d:b9:36:4c:71:f4:05:d2:1d:0f:3a:a5:dd:8d:ae:4f:25:ea: e2:b5:c8:53:47:ac:30:22:1f:a3:60:2c:e8:c4:c5:ea:d7:0e: 30:62:ab:05:a2:b5:88:13:35:a9:c0:14:af:6e:aa:51:51:38: 6b:8d:e8:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCTeDwGyzGTG3IvTAXxdWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkOTFkZmQ0NTY4MzQyODljMWZkMDNhMGZlZjFiNTJhNWVm ZDFkOTEwHhcNMjUxMjA2MDUwMTIxWhcNMjUxMjA3MDUwMTIxWjAzMTEwLwYDVQQD EyhlOGFmNWRjZGE1NTY5NWJiZWEzYTYxMmY1YWIwN2IxN2Y5ODM3NzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmitrpacRv9VxfImtWvb5jJpOrdTq tH9J4tYus7bYA+Q9gRYfdzm+n9qaaNKC3+mDYe6aqYehDj1WI2cnymlUFgiGRP2z vpHs6Cz9qETSP5jOu6gKoddrZfcGj4w1k3aiYEqiTYVD6sk3T/5WPhCoGX1o4Ybj ILniwkJIEZ8/GMGcZboL7lpBYKUoGsJ8iPpUNxQExgw+vVIXM6GtIDZRDphu4Kdf 9AtrlLsiN6M5YNJ4q+V26/u3xRLPCBU2WJvtwgoXBE6esYbgQWyfpnMvdmzwKmpm a8gPjqfykIgQPXJs1DOhlhGt+4UN0q/gIW3BeuJ6AgxTvsMy+RreYRXS6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOivXc2lVpW76jphL1qwexf5g3dwMB8GA1UdIwQY MBaAFA2R39RWg0KJwf0DoP7xtSpe/R2RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFpIZjFGYURRb25CX1FPZ192RzFLbDc5SFpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9mYmJlNDEtMTViNy00ZjZlLTllMDct OGJjY2UzMDNiOTE5LzEvRFpIZjFGYURRb25CX1FPZ192RzFLbDc5SFpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy9mYmJlNDEtMTViNy00ZjZlLTllMDctOGJjY2UzMDNiOTE5 LzEvRFpIZjFGYURRb25CX1FPZ192RzFLbDc5SFpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWRqTuBx1 URLlAao3T8WqTfDtod3MkW3/2S0yDf5mUf9DwCwDanaHTvbjx+/6111Own3cea44 v1bKdA1mFrrUNLLUmrO2SYgJSBGY2fmzo6wOOyeZLM7iP/ohayNTZdQX8+4XSpep GVtMaXeWBesJHWQ+05h+b46DYHdW0OZ3Y9hpDYW5KaO3hEjuivtpfzgSF5XAbZdO UNP0r8laElnZK7i8wFZOjaeX5EBzUrrUU477TapUBvGyBhzHV491OdamIXZt+QNN Hbk2THH0BdIdDzql3Y2uTyXq4rXIU0esMCIfo2As6MTF6tcOMGKrBaK1iBM1qcAU r26qUVE4a43oOA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:15:15 2025 by rpki-client