This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft File: DJ8RVKmhXVqDqamBenJL_FOdtZY.mft (raw, json) Hash identifier: XipxS39VxS6nz4U5/UlzLEOmetAWdFRJPRPg3TlKQmw= Subject key identifier: E1:99:B5:23:C5:B9:BD:D5:A6:EF:9F:8E:DF:0F:30:23:5E:E2:5A:B9 Authority key identifier: 0C:9F:11:54:A9:A1:5D:5A:83:A9:A9:81:7A:72:4B:FC:53:9D:B5:96 Certificate issuer: /CN=0c9f1154a9a15d5a83a9a9817a724bfc539db596 Certificate serial: 019B2EFA2CA9675B700F17C18CC94284DD46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 01:01:45 +0000 Manifest this update: Thu 18 Dec 2025 01:01:45 +0000 Manifest next update: Fri 19 Dec 2025 01:01:45 +0000 Files and hashes: 1: DJ8RVKmhXVqDqamBenJL_FOdtZY.crl (hash: MAqc4ZJs46QL77nHW83V7PiB0aWQGjS7mr6T9xGIOTo=) 2: Kw07JxAM6PIjr2ZZEDMn7JfYALU.roa (hash: 7yLwIb1VffX9y/T7PbcK03UjKmQOn5ktXM/NbKeEUqc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:2c:a9:67:5b:70:0f:17:c1:8c:c9:42:84:dd:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c9f1154a9a15d5a83a9a9817a724bfc539db596 Validity Not Before: Dec 18 01:01:45 2025 GMT Not After : Dec 19 01:01:45 2025 GMT Subject: CN=e199b523c5b9bdd5a6ef9f8edf0f30235ee25ab9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:36:0e:36:a3:e6:88:87:02:78:07:b5:2f:db: 2f:5b:60:1f:57:e5:af:76:46:6c:fc:aa:dc:f9:49: 35:71:1e:68:62:57:09:e3:de:f3:35:d2:68:f9:53: 2f:67:10:3b:8b:aa:13:4d:1f:59:7b:fc:fe:34:73: 05:8f:9f:1d:e0:68:34:ed:15:64:99:2f:29:7c:1a: 6e:51:04:67:59:e9:50:ba:ba:e9:74:21:20:f1:d1: a0:d3:da:79:97:53:55:db:ad:c3:07:48:d6:d7:4d: c7:63:72:f6:35:77:bf:6e:71:de:e9:dd:07:6a:6c: 0b:ff:1f:46:4a:34:91:31:c2:af:90:02:40:84:95: 01:97:7a:ce:6b:0c:04:74:a1:79:88:2e:b5:14:70: 7b:14:be:0d:78:cf:58:16:7f:63:f8:22:e5:2f:29: fa:cc:60:cf:a9:7b:a3:5c:70:41:64:eb:47:e4:7a: 27:fa:d4:db:66:49:47:87:82:4c:2d:2c:f0:85:ed: 18:31:5c:dc:d1:2a:99:89:72:0b:8e:5a:66:8d:ea: 08:5c:b7:49:26:b1:79:75:d5:d8:67:95:cb:e3:ec: 5b:e9:43:12:2d:7a:1c:32:27:10:19:06:30:aa:35: 50:00:5c:a2:2a:21:61:a4:4d:41:f4:df:fb:2b:05: 5f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:99:B5:23:C5:B9:BD:D5:A6:EF:9F:8E:DF:0F:30:23:5E:E2:5A:B9 X509v3 Authority Key Identifier: keyid:0C:9F:11:54:A9:A1:5D:5A:83:A9:A9:81:7A:72:4B:FC:53:9D:B5:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJ8RVKmhXVqDqamBenJL_FOdtZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0d3d7-1c35-47cb-8504-b9dba639b1b1/1/DJ8RVKmhXVqDqamBenJL_FOdtZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:68:57:e7:23:ad:35:3a:60:6f:76:58:e7:1d:ad:24:a7:48: 3b:54:e9:23:71:e6:9c:5a:87:cb:88:a8:58:c6:64:d6:89:c0: 61:4f:d1:df:44:ca:32:e6:8b:ed:83:4a:11:86:55:d5:5b:0d: 2b:a0:56:bb:c1:ef:fb:0f:26:47:f8:3f:21:cc:20:82:82:e2: 24:74:e5:9a:f0:39:a6:02:d8:8b:c9:34:25:84:13:13:0b:37: 40:64:83:ff:5a:71:62:ce:54:13:40:a1:48:d9:2c:7a:53:46: d0:9f:cd:d2:5b:04:b1:d5:86:e1:7f:e1:78:09:fb:4e:9b:2e: b2:e3:fd:a7:df:c8:ad:b8:16:69:38:1c:3f:c7:3c:35:dd:2c: 80:d9:49:e4:a9:6c:ea:fd:d1:e7:a6:f3:3b:40:75:4f:6a:49: 0c:7d:71:46:1a:20:33:10:6a:ea:b6:1e:e9:63:3c:d7:67:4b: 68:b1:30:9a:0c:8d:ec:50:fe:75:f5:8c:c5:00:34:af:a7:e1: 15:8e:b5:19:ea:a6:af:9c:9f:ac:af:14:d6:45:ed:d1:21:f9: 7e:d4:24:df:00:ce:de:c5:25:27:61:da:1a:5a:f6:69:d9:c8: 68:70:52:97:ae:f3:54:e7:93:05:57:41:88:79:5b:05:6f:1b: b7:e4:cb:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+iypZ1twDxfBjMlChN1GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjOWYxMTU0YTlhMTVkNWE4M2E5YTk4MTdhNzI0YmZjNTM5 ZGI1OTYwHhcNMjUxMjE4MDEwMTQ1WhcNMjUxMjE5MDEwMTQ1WjAzMTEwLwYDVQQD EyhlMTk5YjUyM2M1YjliZGQ1YTZlZjlmOGVkZjBmMzAyMzVlZTI1YWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjYONqPmiIcCeAe1L9svW2AfV+Wv dkZs/Krc+Uk1cR5oYlcJ497zNdJo+VMvZxA7i6oTTR9Ze/z+NHMFj58d4Gg07RVk mS8pfBpuUQRnWelQurrpdCEg8dGg09p5l1NV263DB0jW103HY3L2NXe/bnHe6d0H amwL/x9GSjSRMcKvkAJAhJUBl3rOawwEdKF5iC61FHB7FL4NeM9YFn9j+CLlLyn6 zGDPqXujXHBBZOtH5Hon+tTbZklHh4JMLSzwhe0YMVzc0SqZiXILjlpmjeoIXLdJ JrF5ddXYZ5XL4+xb6UMSLXocMicQGQYwqjVQAFyiKiFhpE1B9N/7KwVfoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOGZtSPFub3Vpu+fjt8PMCNe4lq5MB8GA1UdIwQY MBaAFAyfEVSpoV1ag6mpgXpyS/xTnbWWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREo4UlZLbWhYVnFEcWFtQmVuSkxfRk9kdFpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMGQzZDctMWMzNS00N2NiLTg1MDQt YjlkYmE2MzliMWIxLzEvREo4UlZLbWhYVnFEcWFtQmVuSkxfRk9kdFpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9kMGQzZDctMWMzNS00N2NiLTg1MDQtYjlkYmE2MzliMWIx LzEvREo4UlZLbWhYVnFEcWFtQmVuSkxfRk9kdFpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhGhX5yOt NTpgb3ZY5x2tJKdIO1TpI3HmnFqHy4ioWMZk1onAYU/R30TKMuaL7YNKEYZV1VsN K6BWu8Hv+w8mR/g/IcwggoLiJHTlmvA5pgLYi8k0JYQTEws3QGSD/1pxYs5UE0Ch SNkselNG0J/N0lsEsdWG4X/heAn7TpsusuP9p9/IrbgWaTgcP8c8Nd0sgNlJ5Kls 6v3R56bzO0B1T2pJDH1xRhogMxBq6rYe6WM812dLaLEwmgyN7FD+dfWMxQA0r6fh FY61Geqmr5yfrK8U1kXt0SH5ftQk3wDO3sUlJ2HaGlr2adnIaHBSl67zVOeTBVdB iHlbBW8bt+TL5g== -----END CERTIFICATE-----Generated at Thu Dec 18 09:25:16 2025 by rpki-client