This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft File: DJvBsU8NllP1FOwWd3G3dVmsY8w.mft (raw, json) Hash identifier: nCTF4dBCyhIcEpOKxXNIkMOm6nPpRmunIdL/LvuKpPc= Subject key identifier: 11:B4:B2:F4:BE:30:AF:0C:B5:72:24:80:8C:6F:6E:1B:C2:3D:5D:F9 Authority key identifier: 0C:9B:C1:B1:4F:0D:96:53:F5:14:EC:16:77:71:B7:75:59:AC:63:CC Certificate issuer: /CN=0c9bc1b14f0d9653f514ec167771b77559ac63cc Certificate serial: 019B330D66D2FDC9CF43ED55A5633F204922 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJvBsU8NllP1FOwWd3G3dVmsY8w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 20:01:14 +0000 Manifest this update: Thu 18 Dec 2025 20:01:14 +0000 Manifest next update: Fri 19 Dec 2025 20:01:14 +0000 Files and hashes: 1: DJvBsU8NllP1FOwWd3G3dVmsY8w.crl (hash: uKaBiEEw+QauGilyTM69aeqKkjdse4LPMuJzKPBaWjw=) 2: YeUbav6EAp2mAnn2v72RBK_mFZw.roa (hash: 6lsjmApYWIJWgcJbH7Xr/EBHcstui66uMy/hUDB8r3c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft rsync://rpki.ripe.net/repository/DEFAULT/DJvBsU8NllP1FOwWd3G3dVmsY8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0d:66:d2:fd:c9:cf:43:ed:55:a5:63:3f:20:49:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c9bc1b14f0d9653f514ec167771b77559ac63cc Validity Not Before: Dec 18 20:01:14 2025 GMT Not After : Dec 19 20:01:14 2025 GMT Subject: CN=11b4b2f4be30af0cb57224808c6f6e1bc23d5df9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e7:90:51:9f:16:83:d3:b8:f9:7d:7d:a7:4e: 8e:93:2e:5e:59:c1:ad:7c:f8:4a:55:f7:9d:6b:9e: c9:54:84:1c:e4:24:d5:98:1b:db:1c:b2:40:00:8d: c7:a1:53:53:34:4b:dc:6b:83:0b:7c:c1:c1:71:28: a1:a5:24:0a:7c:11:aa:23:18:dd:1c:d4:1d:7f:ad: 54:58:67:aa:92:88:3e:c9:be:5e:c9:7c:dd:6f:dc: a2:31:06:1e:06:2a:a5:a2:0b:ae:e4:66:da:92:45: 3d:02:74:e0:b3:d3:f1:70:f4:c1:02:41:f3:a3:6d: 5c:36:df:e8:c1:60:65:92:d2:9b:27:0f:cb:b3:ee: 3c:71:e9:3e:66:24:0b:cd:22:73:a5:47:a8:a9:42: 9d:48:0f:9b:9c:97:b3:b4:b1:92:dd:4c:6d:5a:37: db:a8:9b:54:6a:45:f2:59:58:78:ca:53:90:f8:8d: 28:10:50:62:52:07:ea:ce:2b:ae:fa:3e:97:08:0b: 27:9f:2f:e7:e0:e4:7c:db:8f:33:36:15:99:0c:91: e8:10:ff:bf:2c:5b:4b:e1:b3:8c:85:f6:a2:2c:3b: 1f:3f:4c:b4:cb:a7:1a:5a:50:56:6b:38:5a:e7:ba: 38:30:aa:49:ed:68:dd:a6:ab:4a:f2:7f:b3:8b:a1: 23:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:B4:B2:F4:BE:30:AF:0C:B5:72:24:80:8C:6F:6E:1B:C2:3D:5D:F9 X509v3 Authority Key Identifier: keyid:0C:9B:C1:B1:4F:0D:96:53:F5:14:EC:16:77:71:B7:75:59:AC:63:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJvBsU8NllP1FOwWd3G3dVmsY8w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:d2:8b:a6:c0:4c:c6:07:43:67:8b:dd:b7:8e:4a:cc:c6:ac: 3b:68:73:71:af:ff:a6:f2:62:7d:6b:31:95:1d:84:1b:4f:bb: c9:3c:f2:77:bb:2d:d5:af:74:70:37:89:39:e9:41:42:80:30: c6:f3:89:6f:28:93:19:b2:81:72:b1:5d:c3:3f:14:e9:6a:ee: 40:6b:3a:a8:72:5f:c2:31:bf:b6:be:46:b9:99:35:0d:05:47: c3:d4:4a:44:41:09:5b:22:b4:27:f9:76:6d:d7:a7:5e:3f:cc: 67:00:dd:15:7f:28:11:74:04:98:50:ba:26:28:f2:1d:2c:8d: 39:ed:e9:e2:88:3c:7e:72:65:36:a6:09:31:8a:3e:1a:e1:b6: 27:2f:5d:71:dc:3b:20:38:9a:a3:b1:2b:68:14:49:96:e7:fe: 31:4f:fa:d0:64:bb:99:9b:29:28:d1:b8:29:62:65:13:29:ac: 37:54:08:e9:38:0b:61:4c:27:42:a9:ab:da:12:12:84:2a:0e: a1:bc:cb:16:9f:c9:6c:80:90:75:24:d5:81:7f:bb:c1:07:21: e3:a3:43:05:a1:f6:c3:a3:4b:81:1d:f5:e4:0c:ea:43:f6:2c: e5:a0:82:82:dd:0f:a2:e2:69:3e:47:7d:d3:8e:8f:4f:65:df: ba:a1:39:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszDWbS/cnPQ+1VpWM/IEkiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjOWJjMWIxNGYwZDk2NTNmNTE0ZWMxNjc3NzFiNzc1NTlh YzYzY2MwHhcNMjUxMjE4MjAwMTE0WhcNMjUxMjE5MjAwMTE0WjAzMTEwLwYDVQQD EygxMWI0YjJmNGJlMzBhZjBjYjU3MjI0ODA4YzZmNmUxYmMyM2Q1ZGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOeQUZ8Wg9O4+X19p06Oky5eWcGt fPhKVfeda57JVIQc5CTVmBvbHLJAAI3HoVNTNEvca4MLfMHBcSihpSQKfBGqIxjd HNQdf61UWGeqkog+yb5eyXzdb9yiMQYeBiqloguu5GbakkU9AnTgs9PxcPTBAkHz o21cNt/owWBlktKbJw/Ls+48cek+ZiQLzSJzpUeoqUKdSA+bnJeztLGS3UxtWjfb qJtUakXyWVh4ylOQ+I0oEFBiUgfqziuu+j6XCAsnny/n4OR8248zNhWZDJHoEP+/ LFtL4bOMhfaiLDsfP0y0y6caWlBWazha57o4MKpJ7WjdpqtK8n+zi6EjswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBG0svS+MK8MtXIkgIxvbhvCPV35MB8GA1UdIwQY MBaAFAybwbFPDZZT9RTsFndxt3VZrGPMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREp2QnNVOE5sbFAxRk93V2QzRzNkVm1zWTh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YzM4ZjQtNWRhZS00ZDJjLTgyMDgt MWQxOTQ5OWQwOThmLzEvREp2QnNVOE5sbFAxRk93V2QzRzNkVm1zWTh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YzM4ZjQtNWRhZS00ZDJjLTgyMDgtMWQxOTQ5OWQwOThm LzEvREp2QnNVOE5sbFAxRk93V2QzRzNkVm1zWTh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdNKLpsBM xgdDZ4vdt45KzMasO2hzca//pvJifWsxlR2EG0+7yTzyd7st1a90cDeJOelBQoAw xvOJbyiTGbKBcrFdwz8U6WruQGs6qHJfwjG/tr5GuZk1DQVHw9RKREEJWyK0J/l2 bdenXj/MZwDdFX8oEXQEmFC6JijyHSyNOe3p4og8fnJlNqYJMYo+GuG2Jy9dcdw7 IDiao7EraBRJluf+MU/60GS7mZspKNG4KWJlEymsN1QI6TgLYUwnQqmr2hIShCoO obzLFp/JbICQdSTVgX+7wQch46NDBaH2w6NLgR315AzqQ/Ys5aCCgt0PouJpPkd9 046PT2XfuqE5qg== -----END CERTIFICATE-----Generated at Fri Dec 19 00:17:12 2025 by rpki-client