This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/be3593-7972-4da3-ae16-293ec6322966/1/DOf4uSjz9S4LuXZD007OWeuWNKM.mft File: DOf4uSjz9S4LuXZD007OWeuWNKM.mft (raw, json) Hash identifier: 3prcmE+mJTb7WQzmwu8lDHWUx6y/Ft5r4Avmt25qRYk= Subject key identifier: A5:C7:75:99:51:7B:BA:8E:E6:2B:A0:B0:18:19:0D:2F:A0:2D:4E:60 Authority key identifier: 0C:E7:F8:B9:28:F3:F5:2E:0B:B9:76:43:D3:4E:CE:59:EB:96:34:A3 Certificate issuer: /CN=0ce7f8b928f3f52e0bb97643d34ece59eb9634a3 Certificate serial: 019B59772CD6282B5DA5757190D7D5DA0C04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOf4uSjz9S4LuXZD007OWeuWNKM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/be3593-7972-4da3-ae16-293ec6322966/1/DOf4uSjz9S4LuXZD007OWeuWNKM.mft Manifest number: 012B Signing time: Fri 26 Dec 2025 07:02:20 +0000 Manifest this update: Fri 26 Dec 2025 07:02:20 +0000 Manifest next update: Sat 27 Dec 2025 07:02:20 +0000 Files and hashes: 1: DOf4uSjz9S4LuXZD007OWeuWNKM.crl (hash: nzqwKM/+sYG7S0dbAw8HIpjPhDEv5cDGiIhosKVXLHA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/be3593-7972-4da3-ae16-293ec6322966/1/DOf4uSjz9S4LuXZD007OWeuWNKM.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/be3593-7972-4da3-ae16-293ec6322966/1/DOf4uSjz9S4LuXZD007OWeuWNKM.mft rsync://rpki.ripe.net/repository/DEFAULT/DOf4uSjz9S4LuXZD007OWeuWNKM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:2c:d6:28:2b:5d:a5:75:71:90:d7:d5:da:0c:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce7f8b928f3f52e0bb97643d34ece59eb9634a3 Validity Not Before: Dec 26 07:02:20 2025 GMT Not After : Dec 27 07:02:20 2025 GMT Subject: CN=a5c77599517bba8ee62ba0b018190d2fa02d4e60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:75:f3:80:2c:8e:7d:b2:6c:9f:20:d8:b1:6a: e4:cb:b8:2a:96:20:af:dc:13:51:1a:fc:7d:8f:80: 08:04:15:ae:49:67:8f:49:07:bf:f0:10:df:a7:00: c4:58:c7:8e:59:f7:20:77:fa:95:a5:d6:11:14:fa: 82:65:c5:42:66:74:c1:5d:8f:14:1a:dd:94:e5:96: e8:5d:6b:c6:4a:d2:80:0b:ce:f7:9f:cb:96:49:55: 83:e5:08:30:63:85:5e:ea:68:6e:0e:78:09:19:40: 0d:f2:9b:84:fe:c9:2f:a2:b9:11:15:54:e9:f4:43: 9a:6d:62:dc:21:27:ce:ef:d0:77:57:42:a0:7d:46: a9:1f:48:b8:20:97:8d:07:dc:a6:bb:24:ef:8d:de: 19:92:c1:ec:1a:92:62:db:bb:c9:91:c0:cd:bd:7d: 15:97:2f:e2:aa:93:f3:96:c6:89:0f:9f:3c:12:0f: 9e:91:6a:08:3a:07:a8:88:bc:0e:11:c4:72:1d:0a: ec:0e:3c:9e:be:04:c5:04:d3:1a:30:97:31:8f:2d: 8b:25:3b:e2:75:d9:8a:bd:89:5e:93:f9:9e:6b:f7: b8:22:6f:31:5d:6b:a8:73:87:a1:21:fc:24:ce:c3: 8b:b2:87:e2:38:e0:37:00:09:73:77:3a:3e:7f:be: 1b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C7:75:99:51:7B:BA:8E:E6:2B:A0:B0:18:19:0D:2F:A0:2D:4E:60 X509v3 Authority Key Identifier: keyid:0C:E7:F8:B9:28:F3:F5:2E:0B:B9:76:43:D3:4E:CE:59:EB:96:34:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOf4uSjz9S4LuXZD007OWeuWNKM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/be3593-7972-4da3-ae16-293ec6322966/1/DOf4uSjz9S4LuXZD007OWeuWNKM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/be3593-7972-4da3-ae16-293ec6322966/1/DOf4uSjz9S4LuXZD007OWeuWNKM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:c8:c1:22:ed:9e:42:d6:ab:af:2d:00:39:43:ea:3e:27:5a: 99:9a:83:0f:34:41:c1:4a:ea:cf:d3:c4:71:00:66:8f:53:3c: e6:e9:38:b9:6e:d2:3b:37:67:b0:0e:a9:c9:d5:86:ae:5b:45: 69:e4:5b:18:a3:dc:a7:e9:1a:15:3a:d3:48:08:07:91:ea:05: 76:65:69:2a:55:a0:c0:00:52:26:69:d4:ae:96:20:89:f5:99: 48:9c:e1:47:88:37:3f:97:64:59:5e:8b:a1:62:fe:12:fa:b5: f8:39:14:12:62:48:1c:4a:42:d6:aa:2d:4c:97:31:77:5d:a1: 28:f2:1a:ba:e5:e6:01:df:da:db:13:3a:04:57:e9:61:72:a2: ed:29:8f:31:35:9e:31:32:60:71:a4:a5:10:a8:93:64:fd:45: 12:55:29:6a:6f:6b:55:ac:6e:1c:58:0b:85:a4:eb:5e:49:c1: 73:fb:32:5f:c3:83:8e:d2:b9:6a:de:bf:bb:57:21:f6:83:56: d0:be:f4:40:c5:df:09:a3:9b:db:77:8a:41:f6:66:28:44:6e: 31:72:9f:de:98:74:35:a3:ef:04:56:84:c6:c1:7f:45:f6:a4: 57:34:6c:b1:62:be:97:15:ae:7a:dc:d1:0c:37:42:be:e7:6c: d6:4e:47:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdyzWKCtdpXVxkNfV2gwEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTdmOGI5MjhmM2Y1MmUwYmI5NzY0M2QzNGVjZTU5ZWI5 NjM0YTMwHhcNMjUxMjI2MDcwMjIwWhcNMjUxMjI3MDcwMjIwWjAzMTEwLwYDVQQD EyhhNWM3NzU5OTUxN2JiYThlZTYyYmEwYjAxODE5MGQyZmEwMmQ0ZTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HXzgCyOfbJsnyDYsWrky7gqliCv 3BNRGvx9j4AIBBWuSWePSQe/8BDfpwDEWMeOWfcgd/qVpdYRFPqCZcVCZnTBXY8U Gt2U5ZboXWvGStKAC873n8uWSVWD5QgwY4Ve6mhuDngJGUAN8puE/skvorkRFVTp 9EOabWLcISfO79B3V0KgfUapH0i4IJeNB9ymuyTvjd4ZksHsGpJi27vJkcDNvX0V ly/iqpPzlsaJD588Eg+ekWoIOgeoiLwOEcRyHQrsDjyevgTFBNMaMJcxjy2LJTvi ddmKvYlek/mea/e4Im8xXWuoc4ehIfwkzsOLsofiOOA3AAlzdzo+f74bBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKXHdZlRe7qO5iugsBgZDS+gLU5gMB8GA1UdIwQY MBaAFAzn+Lko8/UuC7l2Q9NOzlnrljSjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9mNHVTano5UzRMdVhaRDAwN09XZXVXTktNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9iZTM1OTMtNzk3Mi00ZGEzLWFlMTYt MjkzZWM2MzIyOTY2LzEvRE9mNHVTano5UzRMdVhaRDAwN09XZXVXTktNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9iZTM1OTMtNzk3Mi00ZGEzLWFlMTYtMjkzZWM2MzIyOTY2 LzEvRE9mNHVTano5UzRMdVhaRDAwN09XZXVXTktNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY8jBIu2e Qtarry0AOUPqPidamZqDDzRBwUrqz9PEcQBmj1M85uk4uW7SOzdnsA6pydWGrltF aeRbGKPcp+kaFTrTSAgHkeoFdmVpKlWgwABSJmnUrpYgifWZSJzhR4g3P5dkWV6L oWL+Evq1+DkUEmJIHEpC1qotTJcxd12hKPIauuXmAd/a2xM6BFfpYXKi7SmPMTWe MTJgcaSlEKiTZP1FElUpam9rVaxuHFgLhaTrXknBc/syX8ODjtK5at6/u1ch9oNW 0L70QMXfCaOb23eKQfZmKERuMXKf3ph0NaPvBFaExsF/RfakVzRssWK+lxWuetzR DDdCvuds1k5Hmg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:47:10 2025 by rpki-client