This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft File: DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft (raw, json) Hash identifier: py9XpEMLrEQovA9XPg2mUfEM5PUrW9tS/JKxnrKzMCI= Subject key identifier: F8:2C:DA:43:F7:50:40:91:16:AB:CD:05:B9:25:87:99:F6:07:48:3B Authority key identifier: 0C:5C:F7:07:30:51:2A:EF:A7:03:07:66:2C:F5:92:88:E8:CD:26:4C Certificate issuer: /CN=0c5cf70730512aefa70307662cf59288e8cd264c Certificate serial: 019AF19B05C891F6148E0CA6EFEFE2A9CDFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft Manifest number: 0454 Signing time: Sat 06 Dec 2025 03:00:59 +0000 Manifest this update: Sat 06 Dec 2025 03:00:59 +0000 Manifest next update: Sun 07 Dec 2025 03:00:59 +0000 Files and hashes: 1: DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl (hash: ADfG/iB/gWlY38MIDzi6RcSdf8Oq6XzO0BTTw5yHsgc=) 2: ZRyYFoPWFr4LTQ9gIPHP5w-ddzQ.roa (hash: GUrbPOCAIn4PH8GnCdvd1SlQ4fdh24I+//UmwqdbMWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:05:c8:91:f6:14:8e:0c:a6:ef:ef:e2:a9:cd:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c5cf70730512aefa70307662cf59288e8cd264c Validity Not Before: Dec 6 03:00:59 2025 GMT Not After : Dec 7 03:00:59 2025 GMT Subject: CN=f82cda43f750409116abcd05b9258799f607483b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:03:2d:4f:55:86:36:75:74:a0:b4:8a:03:65: c4:b6:61:b6:bd:eb:df:b9:a8:5c:40:87:d4:74:52: af:91:af:92:cc:f1:01:a1:22:bb:e4:e5:34:10:03: cc:ae:27:95:93:a7:47:82:cb:58:93:40:1f:56:8e: d7:41:94:92:5b:44:2a:26:2d:cb:01:7f:a3:34:6f: b0:5c:9b:da:46:f9:a0:e9:1c:3a:91:34:8f:dc:75: 6e:c0:ca:5e:4f:a3:60:b8:8a:bb:26:c9:ee:9c:5e: ab:c3:35:30:fc:55:6b:ba:18:df:b0:05:f4:01:6c: 55:d4:23:8d:b9:c7:72:4e:3a:92:16:91:91:1d:98: 16:5b:ce:c9:2f:61:7d:4b:18:05:f2:bc:bc:e6:d5: fd:77:c4:0b:b2:cd:01:a2:e4:2f:5c:3c:74:50:2f: 7d:b4:6f:8c:9c:8c:81:38:53:c9:2a:79:fa:8c:52: 24:c3:9c:45:f8:07:4a:7b:0b:ba:5e:a7:54:41:37: 69:90:43:2e:02:53:23:58:58:d8:d4:bb:94:d4:ed: ac:38:e8:70:78:c0:b2:0e:3c:17:fd:c2:1d:a3:85: 7d:54:7f:46:f5:e4:8f:6b:63:db:54:8e:1b:97:0a: 26:28:67:38:74:a2:26:ae:8e:f9:15:0b:9c:ab:cf: 66:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:2C:DA:43:F7:50:40:91:16:AB:CD:05:B9:25:87:99:F6:07:48:3B X509v3 Authority Key Identifier: keyid:0C:5C:F7:07:30:51:2A:EF:A7:03:07:66:2C:F5:92:88:E8:CD:26:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:ac:91:7c:86:d4:81:35:5d:f8:96:0c:a3:e4:6d:bc:e9:96: ac:5e:40:24:b7:be:8a:65:07:20:64:cd:2b:d2:7f:f1:14:a9: 3d:3a:fc:5b:1d:98:a8:e5:e4:72:1b:1a:01:f3:f4:0c:0b:39: 48:33:fb:de:1d:98:94:15:d0:d6:28:a3:1a:97:5f:33:be:3b: 40:f8:a5:de:90:cb:21:9b:7c:fa:10:12:50:0e:9c:1c:45:fe: 47:34:df:77:00:e5:f7:e9:94:fe:c5:51:0c:e1:3c:68:47:70: 15:82:53:f6:fc:5c:1b:35:37:9c:95:c6:74:34:e2:00:a8:10: 8d:d9:ba:3a:99:de:a5:71:1c:8c:47:6a:e0:7e:26:9c:c8:a5: b8:3f:5a:3c:84:f2:d9:aa:ab:82:f3:22:c1:29:f4:b6:4a:01: 9c:41:a8:ed:a3:6c:c2:a0:60:7d:80:38:17:e2:5a:73:e0:e4: 95:a1:a7:4f:46:43:1a:87:eb:c7:38:db:8c:d6:b4:00:73:57: 01:21:b9:89:93:06:68:12:5c:af:0b:2a:b5:07:bf:f0:b5:66: ab:69:02:96:1d:0d:21:ca:c7:80:97:16:b0:53:f1:4d:9b:c0: bb:5c:57:52:21:8d:46:95:60:25:48:d3:2f:e7:d8:4d:61:2e: 4b:3c:ca:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmwXIkfYUjgym7+/iqc36MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNWNmNzA3MzA1MTJhZWZhNzAzMDc2NjJjZjU5Mjg4ZThj ZDI2NGMwHhcNMjUxMjA2MDMwMDU5WhcNMjUxMjA3MDMwMDU5WjAzMTEwLwYDVQQD EyhmODJjZGE0M2Y3NTA0MDkxMTZhYmNkMDViOTI1ODc5OWY2MDc0ODNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQMtT1WGNnV0oLSKA2XEtmG2vevf uahcQIfUdFKvka+SzPEBoSK75OU0EAPMrieVk6dHgstYk0AfVo7XQZSSW0QqJi3L AX+jNG+wXJvaRvmg6Rw6kTSP3HVuwMpeT6NguIq7JsnunF6rwzUw/FVruhjfsAX0 AWxV1CONucdyTjqSFpGRHZgWW87JL2F9SxgF8ry85tX9d8QLss0BouQvXDx0UC99 tG+MnIyBOFPJKnn6jFIkw5xF+AdKewu6XqdUQTdpkEMuAlMjWFjY1LuU1O2sOOhw eMCyDjwX/cIdo4V9VH9G9eSPa2PbVI4blwomKGc4dKImro75FQucq89mFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPgs2kP3UECRFqvNBbklh5n2B0g7MB8GA1UdIwQY MBaAFAxc9wcwUSrvpwMHZiz1kojozSZMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZ6M0J6QlJLdS1uQXdkbUxQV1NpT2pOSmt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi80NDAyMTctYzVhZi00NGFjLTk1ZDMt YWRmYzcyZWYwZGZhLzEvREZ6M0J6QlJLdS1uQXdkbUxQV1NpT2pOSmt3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi80NDAyMTctYzVhZi00NGFjLTk1ZDMtYWRmYzcyZWYwZGZh LzEvREZ6M0J6QlJLdS1uQXdkbUxQV1NpT2pOSmt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALqyRfIbU gTVd+JYMo+RtvOmWrF5AJLe+imUHIGTNK9J/8RSpPTr8Wx2YqOXkchsaAfP0DAs5 SDP73h2YlBXQ1iijGpdfM747QPil3pDLIZt8+hASUA6cHEX+RzTfdwDl9+mU/sVR DOE8aEdwFYJT9vxcGzU3nJXGdDTiAKgQjdm6OpnepXEcjEdq4H4mnMiluD9aPITy 2aqrgvMiwSn0tkoBnEGo7aNswqBgfYA4F+Jac+DklaGnT0ZDGofrxzjbjNa0AHNX ASG5iZMGaBJcrwsqtQe/8LVmq2kClh0NIcrHgJcWsFPxTZvAu1xXUiGNRpVgJUjT L+fYTWEuSzzKiQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:13:00 2025 by rpki-client