This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft File: Df9Jns244Vczu3EQlZlZrA4WYAg.mft (raw, json) Hash identifier: XEBMqOc8gw6HjFlxd/Ux1jRxGSHgh8sC9LqrszpfBak= Subject key identifier: 15:CA:66:73:9F:CC:5B:AC:04:4C:BA:46:2C:10:35:EA:81:9B:24:74 Authority key identifier: 0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08 Certificate issuer: /CN=0dff499ecdb8e15733bb7110959959ac0e166008 Certificate serial: 019B292EE6E18B459BCE8846DDE86121A717 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft Manifest number: 0EF5 Signing time: Tue 16 Dec 2025 22:01:38 +0000 Manifest this update: Tue 16 Dec 2025 22:01:38 +0000 Manifest next update: Wed 17 Dec 2025 22:01:38 +0000 Files and hashes: 1: Df9Jns244Vczu3EQlZlZrA4WYAg.crl (hash: IHmYLKeLywbENHZGJPOvXdzCsxp/bZywbUYcrcuXq98=) 2: u2KSOkA9Tk7vaFv7OCby2G46AIs.roa (hash: QpVj8Qnda9R0uaJPbddZ05OYdtwL9DiuDJMuscNQj0k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 22:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:2e:e6:e1:8b:45:9b:ce:88:46:dd:e8:61:21:a7:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dff499ecdb8e15733bb7110959959ac0e166008 Validity Not Before: Dec 16 22:01:38 2025 GMT Not After : Dec 17 22:01:38 2025 GMT Subject: CN=15ca66739fcc5bac044cba462c1035ea819b2474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:40:d4:10:93:b9:28:57:e0:af:35:9a:af:cd: 15:1e:48:a8:1e:93:43:6a:3f:0a:93:1a:91:22:89: d4:2b:0b:58:6d:46:d5:9e:f3:1b:16:e9:15:49:ca: 22:ac:d7:fb:06:7d:e8:06:06:b2:78:8d:28:a5:73: c1:85:ae:a7:ce:c1:20:17:af:ed:fe:fb:16:92:8b: f4:53:02:cd:17:96:16:b9:9c:6b:3c:7a:16:27:9f: 91:83:d5:86:bf:ab:2a:d4:5b:51:37:51:3c:77:f9: 49:38:83:26:e8:06:16:3f:98:38:bb:13:a9:0d:d0: 20:d5:96:42:ee:cc:43:43:15:e3:2d:79:11:e0:54: ca:fa:5b:41:9f:c0:1a:fb:e8:cb:1b:2d:33:4f:74: da:0f:bb:de:9e:d1:f7:3e:6d:b5:d4:85:7c:53:70: 76:29:3a:53:4c:11:56:22:3c:8e:82:1d:74:9e:b4: 4b:2d:a2:b4:9f:1d:9e:35:ac:bf:51:fe:9a:10:65: 4a:8b:e7:f9:2f:65:6a:6c:ab:59:e0:22:b3:2f:ea: 45:f3:80:b1:81:8a:77:a7:f0:2c:cd:2a:01:6f:bb: 35:82:0c:4e:05:24:76:23:2d:12:d5:56:68:a1:c4: e6:ec:8c:0c:4c:76:bc:39:69:e8:7e:9a:82:7b:6e: fd:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:CA:66:73:9F:CC:5B:AC:04:4C:BA:46:2C:10:35:EA:81:9B:24:74 X509v3 Authority Key Identifier: keyid:0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:3d:c7:21:ca:4a:62:da:75:86:f1:8d:04:ec:37:b0:ae:e5: 9f:07:a6:bf:86:56:8e:4b:d6:cc:33:c0:83:46:13:98:27:17: 8b:62:3b:ec:e1:17:4b:52:b0:be:aa:6b:b1:88:a1:9e:e6:8c: 69:63:bf:48:6f:82:6f:bb:98:71:b2:b1:15:f3:65:82:1f:b1: 60:bd:62:38:df:18:70:3d:75:29:a2:8d:5d:97:87:55:44:fd: d5:6a:b2:3b:cf:30:03:66:78:19:75:de:88:bb:d2:13:56:b7: 29:0a:cd:52:1d:89:d6:6a:61:1c:e7:62:48:62:77:7c:47:c0: 49:81:5b:9c:e2:6d:b0:15:74:a0:37:e8:5a:e7:de:bf:d4:24: 88:dc:1d:2f:0a:1d:7f:d4:9e:1c:0f:6a:98:44:55:4a:f3:45: 2f:41:69:be:e6:42:c8:f2:74:74:68:36:4a:a6:2f:80:ac:7e: cd:11:61:bf:ad:a8:66:aa:af:8d:26:84:00:58:49:1c:bb:1a: 4b:75:99:e9:05:66:f1:6c:59:5b:a8:e3:b9:90:15:69:c0:2a: a4:b9:7b:73:d9:b5:d5:88:c8:33:b3:f7:d6:9a:e4:80:c2:1d: af:4e:04:58:19:42:94:67:e0:17:f4:e4:1a:d1:f6:40:e1:1d: 9f:72:23:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZspLubhi0WbzohG3ehhIacXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZmY0OTllY2RiOGUxNTczM2JiNzExMDk1OTk1OWFjMGUx NjYwMDgwHhcNMjUxMjE2MjIwMTM4WhcNMjUxMjE3MjIwMTM4WjAzMTEwLwYDVQQD EygxNWNhNjY3MzlmY2M1YmFjMDQ0Y2JhNDYyYzEwMzVlYTgxOWIyNDc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkDUEJO5KFfgrzWar80VHkioHpND aj8KkxqRIonUKwtYbUbVnvMbFukVScoirNf7Bn3oBgayeI0opXPBha6nzsEgF6/t /vsWkov0UwLNF5YWuZxrPHoWJ5+Rg9WGv6sq1FtRN1E8d/lJOIMm6AYWP5g4uxOp DdAg1ZZC7sxDQxXjLXkR4FTK+ltBn8Aa++jLGy0zT3TaD7ventH3Pm211IV8U3B2 KTpTTBFWIjyOgh10nrRLLaK0nx2eNay/Uf6aEGVKi+f5L2VqbKtZ4CKzL+pF84Cx gYp3p/AszSoBb7s1ggxOBSR2Iy0S1VZoocTm7IwMTHa8OWnofpqCe2793wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBXKZnOfzFusBEy6RiwQNeqBmyR0MB8GA1UdIwQY MBaAFA3/SZ7NuOFXM7txEJWZWawOFmAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGY5Sm5zMjQ0VmN6dTNFUWxabFpyQTRXWUFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi81OTYxMjAtYjI1ZC00Mjc5LThlYTEt NmY3YzBlYzkxZDhhLzEvRGY5Sm5zMjQ0VmN6dTNFUWxabFpyQTRXWUFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi81OTYxMjAtYjI1ZC00Mjc5LThlYTEtNmY3YzBlYzkxZDhh LzEvRGY5Sm5zMjQ0VmN6dTNFUWxabFpyQTRXWUFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUj3HIcpK Ytp1hvGNBOw3sK7lnwemv4ZWjkvWzDPAg0YTmCcXi2I77OEXS1KwvqprsYihnuaM aWO/SG+Cb7uYcbKxFfNlgh+xYL1iON8YcD11KaKNXZeHVUT91WqyO88wA2Z4GXXe iLvSE1a3KQrNUh2J1mphHOdiSGJ3fEfASYFbnOJtsBV0oDfoWufev9QkiNwdLwod f9SeHA9qmERVSvNFL0FpvuZCyPJ0dGg2SqYvgKx+zRFhv62oZqqvjSaEAFhJHLsa S3WZ6QVm8WxZW6jjuZAVacAqpLl7c9m11YjIM7P31prkgMIdr04EWBlClGfgF/Tk GtH2QOEdn3IjLw== -----END CERTIFICATE-----Generated at Wed Dec 17 09:09:42 2025 by rpki-client