This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft File: DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft (raw, json) Hash identifier: F9m1/lQNB8Tf1Tb9TPp7fx4pl81375DDZLM3qTR1zu8= Subject key identifier: 05:EF:21:71:D0:4A:41:87:3A:90:9A:DE:01:C6:F3:29:83:D1:82:85 Authority key identifier: 0C:17:DA:E0:44:76:DB:10:16:CA:A4:3E:3E:D9:BC:6B:D6:9F:39:75 Certificate issuer: /CN=0c17dae04476db1016caa43e3ed9bc6bd69f3975 Certificate serial: 019AF23FFEE8E2D034A9BC28501CE14D3829 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft Manifest number: 0DFE Signing time: Sat 06 Dec 2025 06:01:11 +0000 Manifest this update: Sat 06 Dec 2025 06:01:11 +0000 Manifest next update: Sun 07 Dec 2025 06:01:11 +0000 Files and hashes: 1: 6Y2-BPBwmi0ajRFfuk-7gjxb3VY.roa (hash: zEnO2OcP02snJFVmokqdabitxnMtngb7RKkC32lY0BQ=) 2: DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl (hash: bpn4SNUlsV01+DsUsDR2t84BJKEX0XJ4tKpxUHmdocA=) 3: JSDk17ahgjuw722aAK05JMcAXY0.roa (hash: /NFnbJGiq89G5CeYaHNRHk4PJoghq/D0jyLC3XejUq4=) 4: tn_gy-6KAV5ZpTSqYbryoSs6AIA.roa (hash: tZ5/NhO61aB/g/lfOTBKTOhiuBSX3QMZ1HNoyXDOpwg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:fe:e8:e2:d0:34:a9:bc:28:50:1c:e1:4d:38:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c17dae04476db1016caa43e3ed9bc6bd69f3975 Validity Not Before: Dec 6 06:01:11 2025 GMT Not After : Dec 7 06:01:11 2025 GMT Subject: CN=05ef2171d04a41873a909ade01c6f32983d18285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:58:8a:1e:97:27:e9:4b:49:6f:9c:b1:e9:f4: f0:a4:e3:b3:de:da:00:ee:a2:9c:6b:0e:c2:e0:57: 7c:cc:26:eb:d6:3a:d8:ff:78:e0:b6:21:3a:89:af: 3b:a3:04:7b:5a:a6:99:90:2a:8d:1e:e3:32:3b:9b: 9b:ed:de:61:ae:2d:1f:b7:f2:15:0f:0d:d8:08:88: a0:8b:d1:a7:3e:17:7c:88:e0:f6:be:f1:a4:38:32: 6f:b4:82:31:26:38:d0:6d:48:df:28:14:3e:7a:57: 9d:53:fa:02:a6:cf:0b:7b:5b:f8:df:ba:6d:01:f9: 6a:bb:86:a1:43:69:54:97:04:2b:e7:d3:59:b0:ca: d6:dd:22:f5:6d:47:b1:0d:3c:da:3d:63:72:ef:eb: 61:0a:07:9e:91:2c:73:a1:5b:9d:e8:38:90:69:5c: 3c:73:1c:f9:24:bd:d1:f9:dd:a3:d8:6f:8e:39:0b: 4d:7c:22:c0:6d:9a:eb:d9:27:6c:cc:a9:e3:3b:30: 6c:ae:fd:17:c3:b9:7c:57:20:be:f0:6c:f1:47:35: 6a:be:4d:d3:a5:c1:62:48:79:b2:cd:4f:e0:8e:8b: 25:d5:41:a2:3d:1f:c1:00:f7:69:c3:d9:77:54:74: be:67:59:96:5f:01:22:0b:f4:15:6d:ed:f6:6c:9d: 79:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:EF:21:71:D0:4A:41:87:3A:90:9A:DE:01:C6:F3:29:83:D1:82:85 X509v3 Authority Key Identifier: keyid:0C:17:DA:E0:44:76:DB:10:16:CA:A4:3E:3E:D9:BC:6B:D6:9F:39:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:bd:bd:34:ae:4f:ce:92:c7:5a:d6:17:28:d9:61:31:ae:2c: 09:06:1e:f9:2e:e9:33:e4:78:ad:fe:28:f1:78:af:d9:09:bf: d9:bf:b7:4e:62:a7:a1:5e:b8:8c:ad:6d:a2:99:38:fb:e7:34: 55:ac:18:a3:cb:f4:fe:ee:1b:50:53:16:ca:c9:9f:41:c7:b3: 2b:2a:4d:7e:0e:b6:db:61:4b:05:ed:19:62:a3:f9:d6:52:fe: 5b:4c:40:e5:ea:56:ae:32:4d:2e:e8:e5:7c:8e:e4:8c:f2:53: 9f:46:9e:af:bb:c8:cb:fc:64:c6:b7:6f:04:49:b5:86:3f:cd: 9d:88:05:1a:a7:30:9f:fe:2f:78:64:69:44:8f:55:fe:b6:58: 7d:25:7c:13:0b:65:9f:58:06:f9:8d:8e:9b:61:8f:95:1d:17: b4:a6:1e:3e:2a:b3:09:4a:17:99:fb:d6:31:e8:a5:79:73:67: 91:2c:26:66:ab:92:ef:39:f4:bf:e6:0b:73:8f:26:d8:b3:7a: e5:ec:fa:67:eb:e6:f3:75:54:f5:21:f3:a9:86:ef:1e:f2:01: 5a:a5:33:24:4a:78:59:ef:2c:9d:70:e2:de:82:fd:04:23:ea: b8:2f:0b:e3:46:c3:39:11:cc:ac:02:d5:47:4a:a9:a6:cb:98: 46:e3:50:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP/7o4tA0qbwoUBzhTTgpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMTdkYWUwNDQ3NmRiMTAxNmNhYTQzZTNlZDliYzZiZDY5 ZjM5NzUwHhcNMjUxMjA2MDYwMTExWhcNMjUxMjA3MDYwMTExWjAzMTEwLwYDVQQD EygwNWVmMjE3MWQwNGE0MTg3M2E5MDlhZGUwMWM2ZjMyOTgzZDE4Mjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtliKHpcn6UtJb5yx6fTwpOOz3toA 7qKcaw7C4Fd8zCbr1jrY/3jgtiE6ia87owR7WqaZkCqNHuMyO5ub7d5hri0ft/IV Dw3YCIigi9GnPhd8iOD2vvGkODJvtIIxJjjQbUjfKBQ+eledU/oCps8Le1v437pt Aflqu4ahQ2lUlwQr59NZsMrW3SL1bUexDTzaPWNy7+thCgeekSxzoVud6DiQaVw8 cxz5JL3R+d2j2G+OOQtNfCLAbZrr2SdszKnjOzBsrv0Xw7l8VyC+8GzxRzVqvk3T pcFiSHmyzU/gjosl1UGiPR/BAPdpw9l3VHS+Z1mWXwEiC/QVbe32bJ15BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAXvIXHQSkGHOpCa3gHG8ymD0YKFMB8GA1UdIwQY MBaAFAwX2uBEdtsQFsqkPj7ZvGvWnzl1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREJmYTRFUjIyeEFXeXFRLVB0bThhOWFmT1hVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi84MWQ5NGQtMmU0MC00NTQ2LThiODkt ODA0ZjE3ZWMyNDVlLzEvREJmYTRFUjIyeEFXeXFRLVB0bThhOWFmT1hVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi84MWQ5NGQtMmU0MC00NTQ2LThiODktODA0ZjE3ZWMyNDVl LzEvREJmYTRFUjIyeEFXeXFRLVB0bThhOWFmT1hVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOr29NK5P zpLHWtYXKNlhMa4sCQYe+S7pM+R4rf4o8Xiv2Qm/2b+3TmKnoV64jK1topk4++c0 VawYo8v0/u4bUFMWysmfQcezKypNfg6222FLBe0ZYqP51lL+W0xA5epWrjJNLujl fI7kjPJTn0aer7vIy/xkxrdvBEm1hj/NnYgFGqcwn/4veGRpRI9V/rZYfSV8Ewtl n1gG+Y2Om2GPlR0XtKYePiqzCUoXmfvWMeileXNnkSwmZquS7zn0v+YLc48m2LN6 5ez6Z+vm83VU9SHzqYbvHvIBWqUzJEp4We8snXDi3oL9BCPquC8L40bDORHMrALV R0qppsuYRuNQeQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:13:49 2025 by rpki-client