This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft File: DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft (raw, json) Hash identifier: 6fcg0mWdGtSHk4rxJCNThyPNikCjrmQLE2PfizKwNVU= Subject key identifier: AD:DE:07:59:69:D3:77:A8:B8:E0:A7:79:3E:54:69:55:6E:C3:58:6A Authority key identifier: 0E:00:19:ED:2C:B6:21:97:B0:CA:96:E1:E7:16:1C:98:64:90:86:AF Certificate issuer: /CN=0e0019ed2cb62197b0ca96e1e7161c98649086af Certificate serial: 019B236455975012233AB20EBE75214ED628 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft Manifest number: 0455 Signing time: Mon 15 Dec 2025 19:02:16 +0000 Manifest this update: Mon 15 Dec 2025 19:02:16 +0000 Manifest next update: Tue 16 Dec 2025 19:02:16 +0000 Files and hashes: 1: DgAZ7Sy2IZewypbh5xYcmGSQhq8.crl (hash: NIDdoB00qk1lDnrIeOR0VluCVMS9k4+toRatdEbYcAs=) 2: rtEx3Op6iiS7UiDW09qCJKnWeDg.roa (hash: 2wI3hDpLjlRGiKeHXtROGiZLVSVg2X+p2EcwYyyykiE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.crl rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft rsync://rpki.ripe.net/repository/DEFAULT/DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:64:55:97:50:12:23:3a:b2:0e:be:75:21:4e:d6:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e0019ed2cb62197b0ca96e1e7161c98649086af Validity Not Before: Dec 15 19:02:16 2025 GMT Not After : Dec 16 19:02:16 2025 GMT Subject: CN=adde075969d377a8b8e0a7793e5469556ec3586a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c6:48:16:a8:d9:df:a2:c2:64:e8:e2:1c:aa: a7:e4:eb:3f:03:a2:b1:a1:28:8a:5d:3d:67:85:eb: d1:a4:c6:50:54:71:67:35:4a:60:d6:de:b4:4d:67: 7c:da:c7:e2:71:9b:51:b6:6b:92:dd:96:df:9c:df: 06:48:15:3c:dc:9a:19:d9:e1:46:29:6a:37:61:df: f3:a1:90:46:0b:b7:2d:1b:9f:da:82:60:f0:24:08: f4:82:03:57:f0:de:aa:de:ae:6e:96:d4:23:f2:f9: f0:68:c4:db:2d:f7:c7:de:ee:97:ee:f7:a5:b4:6f: 30:af:f0:5f:2b:52:f3:24:12:c1:dd:4f:e4:7e:ac: fc:b2:b3:63:82:89:9b:5d:17:2c:5c:d4:38:98:fa: 36:85:48:50:9d:a7:94:e5:1d:63:26:33:70:77:8f: 95:23:8e:2c:02:fe:1c:81:bd:a7:60:9c:98:2f:ec: 4c:69:d8:a2:39:c8:bc:f0:81:f9:61:6c:5d:68:58: 18:b8:b2:58:4a:e2:8e:96:07:d5:ce:89:70:e9:2b: d5:6c:c4:dd:0b:76:9d:76:97:45:3f:79:16:17:12: 7e:38:1c:d4:a9:7a:d1:08:09:90:c6:35:a1:26:b3: b7:fd:f4:cb:9d:e7:f9:e9:b2:b4:02:11:8d:02:92: 5b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:DE:07:59:69:D3:77:A8:B8:E0:A7:79:3E:54:69:55:6E:C3:58:6A X509v3 Authority Key Identifier: keyid:0E:00:19:ED:2C:B6:21:97:B0:CA:96:E1:E7:16:1C:98:64:90:86:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgAZ7Sy2IZewypbh5xYcmGSQhq8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9cf57-6c25-4a43-a0b1-059b006f39d9/1/DgAZ7Sy2IZewypbh5xYcmGSQhq8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:71:26:f2:e4:e8:80:ab:cf:6f:f5:07:1c:9c:7a:07:3a:4d: bd:44:7d:55:a8:6a:85:0b:01:3d:bc:93:84:69:d9:61:82:fe: 8d:1b:5e:02:03:99:55:02:61:54:06:66:71:fd:2f:f7:7b:ca: d4:80:cf:c4:70:b4:4c:9c:6e:ef:0c:d3:c0:89:04:25:6d:90: aa:38:04:b6:2e:f0:9a:da:3f:5f:33:66:da:c6:77:a5:0e:35: b5:b3:75:41:c6:44:b5:7f:1b:50:95:29:30:fb:02:a8:91:46: 4c:a0:52:cd:5b:5a:f3:3c:2d:dc:71:85:53:3c:02:30:d1:54: 24:85:bd:f0:08:43:e7:43:7f:d6:12:3e:35:21:ec:6f:67:96: 8b:46:15:50:c4:14:b5:6a:f6:c8:d3:cc:33:60:4b:44:6b:1d: 71:47:72:89:58:38:b9:34:35:b8:bb:d8:1f:ec:70:d3:3f:73: 5c:0c:c5:3e:75:fa:e2:0d:30:06:90:09:b2:49:09:f4:28:13: 22:84:6c:df:55:4c:36:f4:06:9a:f6:af:44:87:7b:84:9a:92: 98:b5:e9:7e:b7:d5:d9:bc:56:4c:bc:2f:70:a9:4a:27:32:d7: f9:80:2e:1a:44:4a:12:69:db:e1:95:21:f1:0c:15:20:b7:25: d9:7d:65:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjZFWXUBIjOrIOvnUhTtYoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMDAxOWVkMmNiNjIxOTdiMGNhOTZlMWU3MTYxYzk4NjQ5 MDg2YWYwHhcNMjUxMjE1MTkwMjE2WhcNMjUxMjE2MTkwMjE2WjAzMTEwLwYDVQQD EyhhZGRlMDc1OTY5ZDM3N2E4YjhlMGE3NzkzZTU0Njk1NTZlYzM1ODZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMZIFqjZ36LCZOjiHKqn5Os/A6Kx oSiKXT1nhevRpMZQVHFnNUpg1t60TWd82sficZtRtmuS3ZbfnN8GSBU83JoZ2eFG KWo3Yd/zoZBGC7ctG5/agmDwJAj0ggNX8N6q3q5ultQj8vnwaMTbLffH3u6X7vel tG8wr/BfK1LzJBLB3U/kfqz8srNjgombXRcsXNQ4mPo2hUhQnaeU5R1jJjNwd4+V I44sAv4cgb2nYJyYL+xMadiiOci88IH5YWxdaFgYuLJYSuKOlgfVzolw6SvVbMTd C3addpdFP3kWFxJ+OBzUqXrRCAmQxjWhJrO3/fTLnef56bK0AhGNApJbpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK3eB1lp03eouOCneT5UaVVuw1hqMB8GA1UdIwQY MBaAFA4AGe0stiGXsMqW4ecWHJhkkIavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGdBWjdTeTJJWmV3eXBiaDV4WWNtR1NRaHE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iOWNmNTctNmMyNS00YTQzLWEwYjEt MDU5YjAwNmYzOWQ5LzEvRGdBWjdTeTJJWmV3eXBiaDV4WWNtR1NRaHE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9iOWNmNTctNmMyNS00YTQzLWEwYjEtMDU5YjAwNmYzOWQ5 LzEvRGdBWjdTeTJJWmV3eXBiaDV4WWNtR1NRaHE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL3Em8uTo gKvPb/UHHJx6BzpNvUR9VahqhQsBPbyThGnZYYL+jRteAgOZVQJhVAZmcf0v93vK 1IDPxHC0TJxu7wzTwIkEJW2QqjgEti7wmto/XzNm2sZ3pQ41tbN1QcZEtX8bUJUp MPsCqJFGTKBSzVta8zwt3HGFUzwCMNFUJIW98AhD50N/1hI+NSHsb2eWi0YVUMQU tWr2yNPMM2BLRGsdcUdyiVg4uTQ1uLvYH+xw0z9zXAzFPnX64g0wBpAJskkJ9CgT IoRs31VMNvQGmvavRId7hJqSmLXpfrfV2bxWTLwvcKlKJzLX+YAuGkRKEmnb4ZUh 8QwVILcl2X1l+A== -----END CERTIFICATE-----Generated at Mon Dec 15 21:44:55 2025 by rpki-client