This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft File: 0DjDOLEo-Drewvadk8MsU1PKA5g.mft (raw, json) Hash identifier: kksr47bt7nPpCk732f6r6jR6mwriDGw8Tv3Styca4eY= Subject key identifier: 7D:65:71:DF:4E:41:73:F9:40:72:DB:14:C3:E3:1C:48:43:65:54:90 Authority key identifier: D0:38:C3:38:B1:28:F8:3A:DE:C2:F6:9D:93:C3:2C:53:53:CA:03:98 Certificate issuer: /CN=d038c338b128f83adec2f69d93c32c5353ca0398 Certificate serial: 019B5A88469B6D28E715490AC2C14EA880BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft Manifest number: 1434 Signing time: Fri 26 Dec 2025 12:00:38 +0000 Manifest this update: Fri 26 Dec 2025 12:00:38 +0000 Manifest next update: Sat 27 Dec 2025 12:00:38 +0000 Files and hashes: 1: 0DjDOLEo-Drewvadk8MsU1PKA5g.crl (hash: 4qDtw1InKhEAdHN5+YAoZJzg4loJ3Sm1q6Zfc7Kl1vQ=) 2: 7PD1wIgjrZ9T9-fQhjLFUrZGUJE.roa (hash: 8HGos2aeHkG0saEvUQyEseTwmsTJnTnE4JuY9jxzUVo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.crl rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:46:9b:6d:28:e7:15:49:0a:c2:c1:4e:a8:80:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d038c338b128f83adec2f69d93c32c5353ca0398 Validity Not Before: Dec 26 12:00:38 2025 GMT Not After : Dec 27 12:00:38 2025 GMT Subject: CN=7d6571df4e4173f94072db14c3e31c4843655490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9b:98:81:a8:96:ff:c3:5c:f5:28:c3:36:7a: 9e:64:0f:aa:83:b3:48:c6:f8:fe:73:1f:23:d7:43: 38:b5:de:17:ce:f6:fe:22:62:9d:75:3d:9b:c3:5b: 34:7c:de:a8:0d:88:c0:9f:93:ca:a6:1b:63:01:25: 36:98:74:04:cf:b6:39:5b:35:32:26:3f:72:29:07: 81:bb:cc:23:10:28:77:92:1e:49:43:00:77:c0:ca: ea:a3:6d:c0:fa:c2:b6:80:86:49:8b:eb:80:45:d3: b5:1f:26:e4:a2:b7:5c:b6:19:dc:74:3d:a6:63:00: 03:4d:2e:48:5a:d5:3a:92:98:a6:2e:f7:8c:ab:2e: 1d:f9:78:a6:3b:d8:79:67:cf:4c:31:8e:67:a8:07: df:22:51:ad:7c:bc:94:95:d1:3c:b7:50:aa:9c:4a: d5:68:39:f1:d2:09:8b:15:83:0d:e4:b2:3a:24:ff: 3b:6a:20:bc:79:13:d7:d2:75:72:17:ec:c8:86:5a: 15:21:d1:6f:fa:05:12:1d:bb:d5:90:c7:28:26:2d: eb:f3:b7:3c:b8:7b:cb:ed:5f:2e:53:c9:38:48:6c: de:50:31:f3:12:fa:0c:e1:9f:b2:aa:4c:54:66:74: 3c:94:9e:90:3f:fa:5f:ae:ed:46:ea:e0:f5:7b:98: 93:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:65:71:DF:4E:41:73:F9:40:72:DB:14:C3:E3:1C:48:43:65:54:90 X509v3 Authority Key Identifier: keyid:D0:38:C3:38:B1:28:F8:3A:DE:C2:F6:9D:93:C3:2C:53:53:CA:03:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:a7:70:ff:75:67:4e:5e:d9:13:38:82:31:4e:c2:78:b7:bf: 1f:ed:fe:a6:30:75:ce:6b:43:19:f1:09:7b:cf:95:75:a0:c4: 6c:5d:26:30:0e:da:8a:81:e2:8b:4b:d1:7e:bd:b1:25:c4:33: c9:cc:40:b5:3a:96:26:9c:95:c0:44:50:bd:fd:10:c6:14:c5: 36:ea:23:1f:b0:50:44:4a:fd:0e:93:4a:7e:b0:85:2d:3f:b5: ce:7a:8d:00:82:78:5f:be:56:26:18:48:15:99:78:2b:1f:c7: 6f:4c:33:17:fc:26:05:5c:1f:fa:bc:0d:59:bb:85:0a:78:7b: 91:b0:3b:7c:8e:83:49:c3:eb:78:5b:11:d2:c3:8f:14:1c:ae: dd:10:58:a9:ae:27:05:34:24:48:a8:64:32:b6:84:13:f8:7c: 0d:9f:99:a6:fd:57:5a:d8:09:e1:fd:a5:bc:63:3a:56:70:e3: 4d:63:c5:8b:8d:12:b1:ff:fb:ad:1b:9b:66:e0:5a:c6:69:86: bc:2d:e8:d2:ec:6a:54:4f:39:6c:12:42:30:7c:f8:85:30:76: fc:b9:61:0f:7a:22:b1:13:bf:d6:81:6b:8a:18:aa:24:bd:e5: 49:65:53:1e:56:be:a7:35:2a:ac:ad:fd:89:81:21:f6:7c:b8: 22:ae:3e:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiEabbSjnFUkKwsFOqIC6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwMzhjMzM4YjEyOGY4M2FkZWMyZjY5ZDkzYzMyYzUzNTNj YTAzOTgwHhcNMjUxMjI2MTIwMDM4WhcNMjUxMjI3MTIwMDM4WjAzMTEwLwYDVQQD Eyg3ZDY1NzFkZjRlNDE3M2Y5NDA3MmRiMTRjM2UzMWM0ODQzNjU1NDkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpuYgaiW/8Nc9SjDNnqeZA+qg7NI xvj+cx8j10M4td4Xzvb+ImKddT2bw1s0fN6oDYjAn5PKphtjASU2mHQEz7Y5WzUy Jj9yKQeBu8wjECh3kh5JQwB3wMrqo23A+sK2gIZJi+uARdO1HybkordcthncdD2m YwADTS5IWtU6kpimLveMqy4d+XimO9h5Z89MMY5nqAffIlGtfLyUldE8t1CqnErV aDnx0gmLFYMN5LI6JP87aiC8eRPX0nVyF+zIhloVIdFv+gUSHbvVkMcoJi3r87c8 uHvL7V8uU8k4SGzeUDHzEvoM4Z+yqkxUZnQ8lJ6QP/pfru1G6uD1e5iTGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH1lcd9OQXP5QHLbFMPjHEhDZVSQMB8GA1UdIwQY MBaAFNA4wzixKPg63sL2nZPDLFNTygOYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMERqRE9MRW8tRHJld3ZhZGs4TXNVMVBLQTVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS85MjVmOTEtMzBjNS00YTZiLWExNDkt OWJmOGIxZWYyZTk2LzEvMERqRE9MRW8tRHJld3ZhZGs4TXNVMVBLQTVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS85MjVmOTEtMzBjNS00YTZiLWExNDktOWJmOGIxZWYyZTk2 LzEvMERqRE9MRW8tRHJld3ZhZGs4TXNVMVBLQTVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtadw/3Vn Tl7ZEziCMU7CeLe/H+3+pjB1zmtDGfEJe8+VdaDEbF0mMA7aioHii0vRfr2xJcQz ycxAtTqWJpyVwERQvf0QxhTFNuojH7BQREr9DpNKfrCFLT+1znqNAIJ4X75WJhhI FZl4Kx/Hb0wzF/wmBVwf+rwNWbuFCnh7kbA7fI6DScPreFsR0sOPFByu3RBYqa4n BTQkSKhkMraEE/h8DZ+Zpv1XWtgJ4f2lvGM6VnDjTWPFi40Ssf/7rRubZuBaxmmG vC3o0uxqVE85bBJCMHz4hTB2/LlhD3oisRO/1oFrihiqJL3lSWVTHla+pzUqrK39 iYEh9ny4Iq4+gA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:09:04 2025 by rpki-client