This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft File: DIquGJxjzrVkPLCAMnvKo7Dvilk.mft (raw, json) Hash identifier: wo4+7uxLmiw8iLNIfU2nxAlWY1BNNi3iryDV/n/QvGU= Subject key identifier: B1:40:55:30:65:45:BB:5E:8F:A7:CA:BB:AD:13:8B:56:60:C4:FA:57 Authority key identifier: 0C:8A:AE:18:9C:63:CE:B5:64:3C:B0:80:32:7B:CA:A3:B0:EF:8A:59 Certificate issuer: /CN=0c8aae189c63ceb5643cb080327bcaa3b0ef8a59 Certificate serial: 019AF540B25AC8AB0F281B9ABC3EA9E2C1E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 20:00:49 +0000 Manifest this update: Sat 06 Dec 2025 20:00:49 +0000 Manifest next update: Sun 07 Dec 2025 20:00:49 +0000 Files and hashes: 1: DIquGJxjzrVkPLCAMnvKo7Dvilk.crl (hash: GVi1AUr448FnJm0NjbiNlimKvmfyGwDbmkjpzyblVEc=) 2: WtAp0tL-l96y_gbMlR5puzdruQc.roa (hash: xRGTdhiVzbN5no9s0pfriVSMuD8OBdniQOQSDlzn9q8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:b2:5a:c8:ab:0f:28:1b:9a:bc:3e:a9:e2:c1:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c8aae189c63ceb5643cb080327bcaa3b0ef8a59 Validity Not Before: Dec 6 20:00:49 2025 GMT Not After : Dec 7 20:00:49 2025 GMT Subject: CN=b14055306545bb5e8fa7cabbad138b5660c4fa57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b4:47:ca:20:5c:09:d0:01:29:46:df:54:a6: 36:3b:38:2f:25:f1:4e:ef:26:25:ec:0a:ab:59:f3: 6b:d6:da:5f:6b:4d:6d:2a:b3:42:21:f3:4a:fe:5c: 07:56:77:69:3c:1d:10:ad:8a:bc:ed:a6:3e:e7:a8: 3c:1e:7e:f8:24:5f:b9:be:c0:5f:35:54:4c:79:93: ad:30:22:4c:68:32:5d:7c:b4:15:25:77:2b:a9:b2: 6d:65:39:c5:0e:7b:05:21:25:a5:f7:a9:5b:00:e6: 71:10:6f:11:9f:a4:dd:d9:c2:2d:c9:13:ea:2c:7c: b2:1f:b4:cf:ea:38:b3:25:00:bd:a5:3f:4d:a4:93: d4:aa:0b:32:2e:7d:78:d6:7f:08:36:c9:5c:4e:0e: 44:82:19:9e:3a:69:04:80:c4:f3:46:e1:15:a6:ff: 80:4b:7b:06:18:79:d3:d5:76:3d:2f:6a:07:c3:27: cc:21:85:66:05:13:29:a4:b6:66:73:a2:4e:61:b8: 8c:15:49:1a:fe:dc:e2:a9:7a:dc:82:a6:e3:79:27: 03:64:e9:32:77:73:e6:08:f1:f7:fb:ba:63:3a:c4: 18:cc:5f:ac:78:c4:f3:9d:44:43:f5:2b:e6:5c:68: d8:8d:d3:c9:1d:6c:ba:86:e7:a0:81:ef:d2:aa:3d: ae:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:40:55:30:65:45:BB:5E:8F:A7:CA:BB:AD:13:8B:56:60:C4:FA:57 X509v3 Authority Key Identifier: keyid:0C:8A:AE:18:9C:63:CE:B5:64:3C:B0:80:32:7B:CA:A3:B0:EF:8A:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:5e:6d:40:a7:fa:c4:92:16:9f:9d:7a:9c:36:a8:35:87:fd: df:62:88:41:12:db:e2:c5:66:9e:31:79:82:04:76:48:4c:f2: ee:36:e4:77:18:32:77:79:de:42:f2:71:8f:b0:00:f3:23:04: 01:9b:4d:d4:28:fc:ff:20:b8:26:4c:cb:91:cd:03:38:d7:6a: bb:52:b3:b9:9d:d5:8b:bf:bf:7d:7d:d8:71:c9:86:f4:13:33: 0d:7f:37:89:20:12:a4:62:a3:40:9b:1e:2f:df:c6:f8:29:f4: 46:e9:f9:fa:6e:09:38:27:7e:42:96:3c:5f:9b:81:63:64:62: a8:01:14:d8:2a:78:ed:fb:72:b0:0c:53:e1:eb:c9:eb:9d:72: e2:33:96:de:01:b8:87:02:41:b9:cb:45:99:c8:4d:d5:bf:9e: 7b:c1:a4:08:8f:4c:d4:66:17:e5:eb:d2:a0:61:45:2a:e7:e6: 74:0a:b7:dd:c3:b3:f7:14:78:8a:32:69:d1:8e:d9:ca:d8:16: 87:7f:1e:fb:0e:35:5e:83:9d:59:ba:d3:54:ec:ae:a6:01:39: d7:bf:ae:d9:f6:d0:18:af:57:c1:b3:0b:67:77:a8:f8:9d:67: 42:0c:5f:47:55:c7:b7:44:9c:c3:dc:58:41:a0:aa:f3:66:a7: a5:ea:fa:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QLJayKsPKBuavD6p4sHpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjOGFhZTE4OWM2M2NlYjU2NDNjYjA4MDMyN2JjYWEzYjBl ZjhhNTkwHhcNMjUxMjA2MjAwMDQ5WhcNMjUxMjA3MjAwMDQ5WjAzMTEwLwYDVQQD EyhiMTQwNTUzMDY1NDViYjVlOGZhN2NhYmJhZDEzOGI1NjYwYzRmYTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLRHyiBcCdABKUbfVKY2OzgvJfFO 7yYl7AqrWfNr1tpfa01tKrNCIfNK/lwHVndpPB0QrYq87aY+56g8Hn74JF+5vsBf NVRMeZOtMCJMaDJdfLQVJXcrqbJtZTnFDnsFISWl96lbAOZxEG8Rn6Td2cItyRPq LHyyH7TP6jizJQC9pT9NpJPUqgsyLn141n8INslcTg5EghmeOmkEgMTzRuEVpv+A S3sGGHnT1XY9L2oHwyfMIYVmBRMppLZmc6JOYbiMFUka/tziqXrcgqbjeScDZOky d3PmCPH3+7pjOsQYzF+seMTznURD9SvmXGjYjdPJHWy6huegge/Sqj2uxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLFAVTBlRbtej6fKu60Ti1ZgxPpXMB8GA1UdIwQY MBaAFAyKrhicY861ZDywgDJ7yqOw74pZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRElxdUdKeGp6clZrUExDQU1udktvN0R2aWxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81MDE1ZjYtMGJkMC00OWY5LWI4NTQt YjZiYTg2Y2YzMWY5LzEvRElxdUdKeGp6clZrUExDQU1udktvN0R2aWxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy81MDE1ZjYtMGJkMC00OWY5LWI4NTQtYjZiYTg2Y2YzMWY5 LzEvRElxdUdKeGp6clZrUExDQU1udktvN0R2aWxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1F5tQKf6 xJIWn516nDaoNYf932KIQRLb4sVmnjF5ggR2SEzy7jbkdxgyd3neQvJxj7AA8yME AZtN1Cj8/yC4JkzLkc0DONdqu1KzuZ3Vi7+/fX3YccmG9BMzDX83iSASpGKjQJse L9/G+Cn0Run5+m4JOCd+QpY8X5uBY2RiqAEU2Cp47ftysAxT4evJ651y4jOW3gG4 hwJBuctFmchN1b+ee8GkCI9M1GYX5evSoGFFKufmdAq33cOz9xR4ijJp0Y7ZytgW h38e+w41XoOdWbrTVOyupgE517+u2fbQGK9XwbMLZ3eo+J1nQgxfR1XHt0Scw9xY QaCq82anper6OQ== -----END CERTIFICATE-----Generated at Sun Dec 7 00:50:18 2025 by rpki-client