This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft File: Df9Jns244Vczu3EQlZlZrA4WYAg.mft (raw, json) Hash identifier: 8KD4+J6hyd/k/I0R/f0Glcelr2COaIvLg3wDLnSWZvY= Subject key identifier: 21:24:D2:04:ED:C6:CF:10:FD:3A:EC:9C:DB:48:6B:CE:38:54:45:C6 Authority key identifier: 0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08 Certificate issuer: /CN=0dff499ecdb8e15733bb7110959959ac0e166008 Certificate serial: 019B3A90F3FA3618F9FCCF963D0332AA2AAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft Manifest number: 0EFE Signing time: Sat 20 Dec 2025 07:02:16 +0000 Manifest this update: Sat 20 Dec 2025 07:02:16 +0000 Manifest next update: Sun 21 Dec 2025 07:02:16 +0000 Files and hashes: 1: Df9Jns244Vczu3EQlZlZrA4WYAg.crl (hash: 1AWTAopM7lQq4IDvolfFtpoccqt3PPvazpw5DBT3gRA=) 2: u2KSOkA9Tk7vaFv7OCby2G46AIs.roa (hash: QpVj8Qnda9R0uaJPbddZ05OYdtwL9DiuDJMuscNQj0k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:f3:fa:36:18:f9:fc:cf:96:3d:03:32:aa:2a:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dff499ecdb8e15733bb7110959959ac0e166008 Validity Not Before: Dec 20 07:02:16 2025 GMT Not After : Dec 21 07:02:16 2025 GMT Subject: CN=2124d204edc6cf10fd3aec9cdb486bce385445c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:02:93:b8:68:89:ca:8b:08:dd:6f:ef:70:fb: 21:09:3a:00:aa:93:34:54:31:7a:35:34:9c:2a:c7: 23:ec:9d:6b:d1:a2:65:7d:c2:a2:3e:a9:5d:0f:ef: b2:dc:bf:83:a3:5e:bf:64:0a:f2:0b:ab:41:f2:51: 32:f6:f3:8c:1d:30:30:de:4d:4a:9a:80:f2:cc:a7: e1:27:20:54:61:2b:78:03:00:83:4b:bb:fa:40:73: 47:1a:0d:a6:ab:90:cc:74:ce:60:3d:92:27:5f:a3: d5:bc:ca:c3:b1:44:6d:01:f5:a8:9c:f5:8e:ce:ac: 1e:2d:e2:db:ad:ed:7f:e5:c1:d7:8b:7a:4d:b2:7d: ed:c6:8b:57:04:c1:51:ba:99:d3:a1:91:78:24:2d: 88:4a:43:3e:7d:2a:db:0f:81:71:7a:13:b1:f0:0a: 07:43:5b:5d:d4:74:9c:fe:89:eb:3d:24:9e:e1:ea: 7d:71:9d:ee:61:a1:ec:5d:b8:6f:09:16:81:c3:3b: 3b:27:9a:59:4a:08:82:2f:b9:4e:8e:be:c1:a0:94: fd:df:04:ec:92:83:c2:3d:e0:f8:ce:97:90:10:29: 6c:90:36:59:1c:27:77:5d:73:8d:8d:b5:1d:f1:df: 07:94:96:65:d2:e5:66:e1:10:65:21:39:06:59:4e: 3c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:24:D2:04:ED:C6:CF:10:FD:3A:EC:9C:DB:48:6B:CE:38:54:45:C6 X509v3 Authority Key Identifier: keyid:0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:48:a0:32:6b:a5:cb:a3:70:dd:a8:f1:e0:28:52:63:52:06: 4c:1d:9d:7b:51:88:4f:9a:41:bd:fe:f5:c9:92:ed:93:a3:c9: 09:91:77:33:09:49:75:58:7d:2a:cd:c5:6d:51:9e:92:ba:5b: 81:ee:58:81:80:27:fd:9d:41:21:10:60:f6:18:74:b4:4c:24: e9:d7:af:c3:90:9c:b5:61:15:7f:e3:5e:c6:e1:0b:7f:75:de: 31:61:a9:09:b1:a6:da:d5:c3:e8:68:39:02:7c:9b:1b:e1:86: 25:96:35:86:09:7a:83:31:06:77:93:29:62:6d:0d:eb:ed:4b: 5b:d0:a4:b2:ec:72:6b:2f:5f:7c:23:80:68:20:93:68:4b:71: 41:44:72:80:f7:6d:c0:87:cb:d5:3a:2d:66:45:f6:02:de:45: 26:6c:02:45:bd:24:ae:ba:c1:a0:0d:13:1d:2b:e7:e3:60:61: 5e:5c:20:31:1e:31:33:bc:d3:50:f2:9a:7e:dc:29:bf:ce:a3: 98:7b:af:80:0b:43:7f:d9:e1:16:2e:bc:c6:ee:f0:c5:74:17: 02:d4:14:da:a7:be:aa:7b:1c:01:3c:f2:8e:66:a8:0e:a2:63: ca:d9:f4:90:a7:65:b5:b2:9e:ab:2d:fe:d4:40:72:7b:83:cf: ce:3f:b9:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kPP6Nhj5/M+WPQMyqiqrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZmY0OTllY2RiOGUxNTczM2JiNzExMDk1OTk1OWFjMGUx NjYwMDgwHhcNMjUxMjIwMDcwMjE2WhcNMjUxMjIxMDcwMjE2WjAzMTEwLwYDVQQD EygyMTI0ZDIwNGVkYzZjZjEwZmQzYWVjOWNkYjQ4NmJjZTM4NTQ0NWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQKTuGiJyosI3W/vcPshCToAqpM0 VDF6NTScKscj7J1r0aJlfcKiPqldD++y3L+Do16/ZAryC6tB8lEy9vOMHTAw3k1K moDyzKfhJyBUYSt4AwCDS7v6QHNHGg2mq5DMdM5gPZInX6PVvMrDsURtAfWonPWO zqweLeLbre1/5cHXi3pNsn3txotXBMFRupnToZF4JC2ISkM+fSrbD4FxehOx8AoH Q1td1HSc/onrPSSe4ep9cZ3uYaHsXbhvCRaBwzs7J5pZSgiCL7lOjr7BoJT93wTs koPCPeD4zpeQEClskDZZHCd3XXONjbUd8d8HlJZl0uVm4RBlITkGWU48mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCEk0gTtxs8Q/TrsnNtIa844VEXGMB8GA1UdIwQY MBaAFA3/SZ7NuOFXM7txEJWZWawOFmAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGY5Sm5zMjQ0VmN6dTNFUWxabFpyQTRXWUFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi81OTYxMjAtYjI1ZC00Mjc5LThlYTEt NmY3YzBlYzkxZDhhLzEvRGY5Sm5zMjQ0VmN6dTNFUWxabFpyQTRXWUFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi81OTYxMjAtYjI1ZC00Mjc5LThlYTEtNmY3YzBlYzkxZDhh LzEvRGY5Sm5zMjQ0VmN6dTNFUWxabFpyQTRXWUFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPUigMmul y6Nw3ajx4ChSY1IGTB2de1GIT5pBvf71yZLtk6PJCZF3MwlJdVh9Ks3FbVGekrpb ge5YgYAn/Z1BIRBg9hh0tEwk6devw5CctWEVf+NexuELf3XeMWGpCbGm2tXD6Gg5 AnybG+GGJZY1hgl6gzEGd5MpYm0N6+1LW9Cksuxyay9ffCOAaCCTaEtxQURygPdt wIfL1TotZkX2At5FJmwCRb0krrrBoA0THSvn42BhXlwgMR4xM7zTUPKaftwpv86j mHuvgAtDf9nhFi68xu7wxXQXAtQU2qe+qnscATzyjmaoDqJjytn0kKdltbKeqy3+ 1EBye4PPzj+5TA== -----END CERTIFICATE-----Generated at Sat Dec 20 10:49:26 2025 by rpki-client