This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft File: Df9Jns244Vczu3EQlZlZrA4WYAg.mft (raw, json) Hash identifier: 22g9ziBlNQzOfOYW9/78xMm0xOSHILNds5BaXXxij1Y= Subject key identifier: 5F:8A:25:C7:8E:AF:81:C1:BF:49:B4:BE:AE:A0:B5:13:83:4B:FD:0A Authority key identifier: 0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08 Certificate issuer: /CN=0dff499ecdb8e15733bb7110959959ac0e166008 Certificate serial: 019B4814AFC34EC9E006E3343BA4D65CBFA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft Manifest number: 0F05 Signing time: Mon 22 Dec 2025 22:01:13 +0000 Manifest this update: Mon 22 Dec 2025 22:01:13 +0000 Manifest next update: Tue 23 Dec 2025 22:01:13 +0000 Files and hashes: 1: Df9Jns244Vczu3EQlZlZrA4WYAg.crl (hash: poYALHeL6FFo04Er4Cua8oo37J0vcHfPgPIhF4Xdypk=) 2: u2KSOkA9Tk7vaFv7OCby2G46AIs.roa (hash: QpVj8Qnda9R0uaJPbddZ05OYdtwL9DiuDJMuscNQj0k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:14:af:c3:4e:c9:e0:06:e3:34:3b:a4:d6:5c:bf:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dff499ecdb8e15733bb7110959959ac0e166008 Validity Not Before: Dec 22 22:01:13 2025 GMT Not After : Dec 23 22:01:13 2025 GMT Subject: CN=5f8a25c78eaf81c1bf49b4beaea0b513834bfd0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:70:30:70:12:e2:04:70:44:01:72:9e:4b:42: 25:d9:b9:1a:ae:26:e4:b8:6c:94:c4:7f:9a:17:ca: f6:fa:63:be:ab:d8:5e:ed:77:39:d9:93:4a:cc:f4: 57:15:00:9a:57:c1:40:8c:3a:fd:69:a2:d0:d5:3a: 6b:59:fc:68:59:f5:76:1e:c2:d8:a6:f0:18:e4:83: 80:00:3f:53:30:ec:3c:ba:f9:6b:6f:b3:cf:55:82: 9c:4f:cb:59:88:5e:c1:4b:9e:5c:49:97:56:73:25: 1b:7b:c7:63:c6:54:e7:c5:6f:8c:49:78:f9:93:24: e8:2d:45:15:ae:11:ea:d9:7c:42:29:ec:05:20:4b: bd:88:e1:e4:b7:20:25:8c:80:e2:ea:f0:42:24:86: 97:1f:b8:99:b1:68:03:0f:9a:7c:31:d9:48:21:3d: a8:6e:ed:b1:0e:70:4c:84:8d:42:9c:74:97:d3:a6: a9:c5:09:62:c9:51:4b:2e:58:65:4a:6e:50:ab:a1: b6:dc:46:4a:cd:ba:e0:ca:e9:76:e0:2b:b9:af:37: 8b:15:7b:04:26:73:34:cb:44:a9:07:2d:1d:cc:95: 8c:63:01:d8:e4:cb:ad:3d:e6:9a:96:2f:56:86:97: dc:ae:e7:d5:36:42:b4:5e:a8:55:ae:63:a8:fa:ab: 1d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:8A:25:C7:8E:AF:81:C1:BF:49:B4:BE:AE:A0:B5:13:83:4B:FD:0A X509v3 Authority Key Identifier: keyid:0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:54:9c:7f:52:68:50:91:ab:73:2c:b4:ad:e4:96:ba:85:da: 89:51:7c:05:e7:ff:58:56:49:09:e3:dd:73:20:22:2a:46:98: 24:31:aa:d6:53:36:a3:a2:b2:a2:b4:cd:d3:95:8d:b3:df:c0: f1:40:76:bc:f3:cc:91:a8:67:5c:92:80:d6:74:bb:3a:78:2c: 68:c4:1c:1c:95:b0:0b:53:9c:0e:fc:2c:7b:7a:1b:a0:f3:f1: 7e:2a:82:b3:66:8c:37:84:a8:e7:03:4b:29:df:a9:d9:e1:4c: 24:5b:24:19:39:35:d4:aa:29:e1:e4:49:47:a1:7a:a2:3b:71: 2d:d7:3b:6c:31:e1:94:97:e9:61:74:d9:d6:55:e3:db:36:a5: ce:d1:f6:50:9c:46:9d:c4:96:b1:55:c4:7a:e0:59:ce:62:0f: 6c:b3:91:99:db:32:a2:50:99:8a:ef:52:51:f4:17:11:85:9e: f1:6c:68:5c:4e:4b:d7:af:23:dd:1f:86:70:6f:06:a7:09:ec: 52:c2:02:b9:22:7d:85:99:42:5d:f7:8a:98:2e:91:26:67:52: ca:20:69:47:4f:01:6c:07:cd:11:12:3a:e9:71:86:d5:ab:fb: 30:32:95:b5:11:a0:81:de:e4:52:a9:8d:43:77:4c:d5:63:c9: d2:1e:4a:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFK/DTsngBuM0O6TWXL+hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZmY0OTllY2RiOGUxNTczM2JiNzExMDk1OTk1OWFjMGUx NjYwMDgwHhcNMjUxMjIyMjIwMTEzWhcNMjUxMjIzMjIwMTEzWjAzMTEwLwYDVQQD Eyg1ZjhhMjVjNzhlYWY4MWMxYmY0OWI0YmVhZWEwYjUxMzgzNGJmZDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynAwcBLiBHBEAXKeS0Il2bkaribk uGyUxH+aF8r2+mO+q9he7Xc52ZNKzPRXFQCaV8FAjDr9aaLQ1TprWfxoWfV2HsLY pvAY5IOAAD9TMOw8uvlrb7PPVYKcT8tZiF7BS55cSZdWcyUbe8djxlTnxW+MSXj5 kyToLUUVrhHq2XxCKewFIEu9iOHktyAljIDi6vBCJIaXH7iZsWgDD5p8MdlIIT2o bu2xDnBMhI1CnHSX06apxQliyVFLLlhlSm5Qq6G23EZKzbrgyul24Cu5rzeLFXsE JnM0y0SpBy0dzJWMYwHY5MutPeaali9WhpfcrufVNkK0XqhVrmOo+qsd5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF+KJceOr4HBv0m0vq6gtRODS/0KMB8GA1UdIwQY MBaAFA3/SZ7NuOFXM7txEJWZWawOFmAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGY5Sm5zMjQ0VmN6dTNFUWxabFpyQTRXWUFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi81OTYxMjAtYjI1ZC00Mjc5LThlYTEt NmY3YzBlYzkxZDhhLzEvRGY5Sm5zMjQ0VmN6dTNFUWxabFpyQTRXWUFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi81OTYxMjAtYjI1ZC00Mjc5LThlYTEtNmY3YzBlYzkxZDhh LzEvRGY5Sm5zMjQ0VmN6dTNFUWxabFpyQTRXWUFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcFScf1Jo UJGrcyy0reSWuoXaiVF8Bef/WFZJCePdcyAiKkaYJDGq1lM2o6KyorTN05WNs9/A 8UB2vPPMkahnXJKA1nS7OngsaMQcHJWwC1OcDvwse3oboPPxfiqCs2aMN4So5wNL Kd+p2eFMJFskGTk11Kop4eRJR6F6ojtxLdc7bDHhlJfpYXTZ1lXj2zalztH2UJxG ncSWsVXEeuBZzmIPbLORmdsyolCZiu9SUfQXEYWe8WxoXE5L168j3R+GcG8Gpwns UsICuSJ9hZlCXfeKmC6RJmdSyiBpR08BbAfNERI66XGG1av7MDKVtRGggd7kUqmN Q3dM1WPJ0h5KNw== -----END CERTIFICATE-----Generated at Tue Dec 23 06:53:22 2025 by rpki-client