This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.mft File: DWnj7lXdhiZ01FhmG6NJCLBhf6E.mft (raw, json) Hash identifier: woSKEdALhxJITty3guMBC7a87aHRE7U3YjqB3f7Hc1Y= Subject key identifier: D6:F9:3E:07:FA:78:BA:BE:66:87:7C:AF:AF:81:E4:A9:1A:43:F5:93 Authority key identifier: 0D:69:E3:EE:55:DD:86:26:74:D4:58:66:1B:A3:49:08:B0:61:7F:A1 Certificate issuer: /CN=0d69e3ee55dd862674d458661ba34908b0617fa1 Certificate serial: 019B59ACF4EB99A10DEF7344C723DC5AEF93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWnj7lXdhiZ01FhmG6NJCLBhf6E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.mft Manifest number: 09AD Signing time: Fri 26 Dec 2025 08:01:05 +0000 Manifest this update: Fri 26 Dec 2025 08:01:05 +0000 Manifest next update: Sat 27 Dec 2025 08:01:05 +0000 Files and hashes: 1: DWnj7lXdhiZ01FhmG6NJCLBhf6E.crl (hash: oZkNH3K7+MKNFJhtVZZKmpjWyFIs9aAzBLuyOVbuBWY=) 2: EjaSjQvA_h8ofCWrzWooV6nayF8.roa (hash: gCmjXDkeCn1nqh4fUFSkYceSyNQm14lj5sOPimTxKOE=) 3: wS1UXRfPtMS1NBYtNz71NeZmtRk.roa (hash: iGK/CXBp/TXIP03g8PJuN3+7774KqoPIJH5kjoUJiwk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.mft rsync://rpki.ripe.net/repository/DEFAULT/DWnj7lXdhiZ01FhmG6NJCLBhf6E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:f4:eb:99:a1:0d:ef:73:44:c7:23:dc:5a:ef:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d69e3ee55dd862674d458661ba34908b0617fa1 Validity Not Before: Dec 26 08:01:05 2025 GMT Not After : Dec 27 08:01:05 2025 GMT Subject: CN=d6f93e07fa78babe66877cafaf81e4a91a43f593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:58:24:e8:b1:e6:28:52:65:f3:35:de:f7:71: d9:8b:25:2a:c3:cb:2b:f0:9d:47:54:b0:e3:72:6d: 15:47:12:5a:01:2f:6a:bd:c1:06:f9:f0:f3:ef:8e: 5e:eb:e2:fc:89:97:fa:5d:04:42:bc:21:d5:af:72: e2:29:c6:bb:fb:1e:75:98:b3:c3:e4:b1:71:cf:ff: 4c:0d:7f:24:3b:1f:98:b3:59:d3:a6:d7:b5:f4:c0: c9:cd:08:59:5b:b7:f0:78:9c:ed:66:07:7a:e5:d7: 20:bf:7b:0e:7a:ea:28:b7:3b:ad:38:f4:cd:07:57: aa:6f:d8:1e:e6:24:92:ac:18:8b:81:2c:ca:4b:b4: 3a:71:56:47:b0:6c:ec:03:ce:89:90:fa:aa:ba:1a: 0e:fa:52:5c:de:b2:5b:47:43:84:ee:e3:dc:ea:35: 72:56:87:49:e8:78:69:31:75:23:e1:99:3e:43:cb: 26:0a:ee:7c:66:ab:4b:21:af:cf:38:b4:f9:2e:a4: 83:79:4d:4e:6d:05:31:72:e3:ee:03:24:35:f3:65: 9b:d4:0e:eb:81:37:59:a5:ed:4e:62:20:36:9d:df: b8:61:ed:b0:c3:63:39:9c:ef:c4:3d:1a:a2:cf:f0: 79:0d:78:20:19:bf:e6:42:ca:ca:e2:10:13:aa:ee: 1c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:F9:3E:07:FA:78:BA:BE:66:87:7C:AF:AF:81:E4:A9:1A:43:F5:93 X509v3 Authority Key Identifier: keyid:0D:69:E3:EE:55:DD:86:26:74:D4:58:66:1B:A3:49:08:B0:61:7F:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWnj7lXdhiZ01FhmG6NJCLBhf6E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:7b:19:50:a5:d5:da:f8:66:32:eb:5d:38:c8:78:75:80:d7: 55:f8:cb:4d:ad:56:ba:72:26:52:1e:77:bd:ce:e5:9c:90:e5: 66:ff:76:32:77:ce:c6:29:31:7d:cd:c1:47:56:20:f9:7d:0c: ef:68:2d:2a:0c:3b:e0:77:8e:6d:d3:04:4b:e3:7d:28:50:2f: 91:f2:ad:de:c7:21:91:28:e9:6a:dd:5e:78:6a:6a:26:32:d7: cd:df:0d:8c:ec:a7:1c:1a:ac:15:33:89:01:ce:48:55:9e:dc: 80:47:67:3a:83:3d:33:76:cf:bf:be:de:aa:6a:ac:33:27:f9: d8:c9:f7:3b:88:3d:a1:be:81:a7:7e:e1:04:11:23:54:3f:cd: a8:a1:de:24:de:d9:1b:6b:2f:db:59:9a:d3:70:ed:9f:ef:a1: a7:e8:96:d4:5b:06:a6:ae:e3:f7:fa:cc:11:8b:03:e2:47:05: cc:14:33:7a:78:8f:5f:11:98:4a:fb:73:52:04:21:b5:7f:74: 56:26:c5:60:60:c2:f8:a6:9e:97:d9:63:ea:a8:fa:46:6c:39: 75:b8:ae:e3:0b:9b:c0:29:ec:9e:d7:b2:a8:86:fe:d2:c9:23: 8c:61:e7:c9:f1:f3:87:7d:00:c7:6a:7b:06:00:77:11:41:bb: eb:72:bc:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrPTrmaEN73NExyPcWu+TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNjllM2VlNTVkZDg2MjY3NGQ0NTg2NjFiYTM0OTA4YjA2 MTdmYTEwHhcNMjUxMjI2MDgwMTA1WhcNMjUxMjI3MDgwMTA1WjAzMTEwLwYDVQQD EyhkNmY5M2UwN2ZhNzhiYWJlNjY4NzdjYWZhZjgxZTRhOTFhNDNmNTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVgk6LHmKFJl8zXe93HZiyUqw8sr 8J1HVLDjcm0VRxJaAS9qvcEG+fDz745e6+L8iZf6XQRCvCHVr3LiKca7+x51mLPD 5LFxz/9MDX8kOx+Ys1nTpte19MDJzQhZW7fweJztZgd65dcgv3sOeuootzutOPTN B1eqb9ge5iSSrBiLgSzKS7Q6cVZHsGzsA86JkPqquhoO+lJc3rJbR0OE7uPc6jVy VodJ6HhpMXUj4Zk+Q8smCu58ZqtLIa/POLT5LqSDeU1ObQUxcuPuAyQ182Wb1A7r gTdZpe1OYiA2nd+4Ye2ww2M5nO/EPRqiz/B5DXggGb/mQsrK4hATqu4cxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNb5Pgf6eLq+Zod8r6+B5KkaQ/WTMB8GA1UdIwQY MBaAFA1p4+5V3YYmdNRYZhujSQiwYX+hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFduajdsWGRoaVowMUZobUc2TkpDTEJoZjZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8xZDJlZjgtYTg2ZS00NDZmLThjMzUt YjgzM2JkOWUwYjNhLzEvRFduajdsWGRoaVowMUZobUc2TkpDTEJoZjZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8xZDJlZjgtYTg2ZS00NDZmLThjMzUtYjgzM2JkOWUwYjNh LzEvRFduajdsWGRoaVowMUZobUc2TkpDTEJoZjZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZHsZUKXV 2vhmMutdOMh4dYDXVfjLTa1WunImUh53vc7lnJDlZv92MnfOxikxfc3BR1Yg+X0M 72gtKgw74HeObdMES+N9KFAvkfKt3schkSjpat1eeGpqJjLXzd8NjOynHBqsFTOJ Ac5IVZ7cgEdnOoM9M3bPv77eqmqsMyf52Mn3O4g9ob6Bp37hBBEjVD/NqKHeJN7Z G2sv21ma03Dtn++hp+iW1FsGpq7j9/rMEYsD4kcFzBQzeniPXxGYSvtzUgQhtX90 VibFYGDC+Kael9lj6qj6Rmw5dbiu4wubwCnsnteyqIb+0skjjGHnyfHzh30Ax2p7 BgB3EUG763K84g== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:58 2025 by rpki-client