This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/f71faf-3a5b-45d8-8f25-fa44c7a07d27/1/dnh0JGjLAfClJrTpIib-O3TGfEE.mft File: dnh0JGjLAfClJrTpIib-O3TGfEE.mft (raw, json) Hash identifier: QDflavZ+Ls1VOGusP7abv7X6p3vptW/TZb6USP5FN3E= Subject key identifier: C6:E1:40:03:90:49:06:FA:0E:F2:B3:32:4E:95:71:90:1C:1A:4D:88 Authority key identifier: 76:78:74:24:68:CB:01:F0:A5:26:B4:E9:22:26:FE:3B:74:C6:7C:41 Certificate issuer: /CN=7678742468cb01f0a526b4e92226fe3b74c67c41 Certificate serial: 019B5AF670BA0BEB8AEC31056385E0D7A329 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dnh0JGjLAfClJrTpIib-O3TGfEE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/f71faf-3a5b-45d8-8f25-fa44c7a07d27/1/dnh0JGjLAfClJrTpIib-O3TGfEE.mft Manifest number: 2D Signing time: Fri 26 Dec 2025 14:00:58 +0000 Manifest this update: Fri 26 Dec 2025 14:00:58 +0000 Manifest next update: Sat 27 Dec 2025 14:00:58 +0000 Files and hashes: 1: dnh0JGjLAfClJrTpIib-O3TGfEE.crl (hash: 3hyGs+l86WZ40YRcumjPGY17efpjjad7eySUtuabsck=) 2: loKf1ScMnHbQThW7MODNStRz-Ls.roa (hash: HoafUQdwx8VXcjVeVg4yCft3f+0dDCgZMr+g7seOgDI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/f71faf-3a5b-45d8-8f25-fa44c7a07d27/1/dnh0JGjLAfClJrTpIib-O3TGfEE.crl rsync://rpki.ripe.net/repository/DEFAULT/54/f71faf-3a5b-45d8-8f25-fa44c7a07d27/1/dnh0JGjLAfClJrTpIib-O3TGfEE.mft rsync://rpki.ripe.net/repository/DEFAULT/dnh0JGjLAfClJrTpIib-O3TGfEE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:70:ba:0b:eb:8a:ec:31:05:63:85:e0:d7:a3:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7678742468cb01f0a526b4e92226fe3b74c67c41 Validity Not Before: Dec 26 14:00:58 2025 GMT Not After : Dec 27 14:00:58 2025 GMT Subject: CN=c6e14003904906fa0ef2b3324e9571901c1a4d88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e1:d7:a9:5c:42:52:4d:26:0a:97:42:10:28: 6c:f9:da:0e:d5:03:e2:83:8e:b2:49:ec:c3:40:f5: 1d:d4:84:88:26:e9:24:12:3b:3c:7d:9a:bb:d4:50: 03:3b:a4:08:0d:16:b2:7e:d0:75:95:df:b2:d5:05: 82:21:8b:21:b6:d0:85:73:a2:17:41:aa:b2:75:85: aa:e3:22:d1:6e:61:ea:f7:23:ff:9f:40:2c:bd:19: 37:37:1f:de:be:74:14:90:b6:d6:a8:52:98:c3:a3: 37:d5:a9:5a:5b:34:0b:9e:79:f4:19:48:e9:eb:b7: 6b:be:48:33:67:55:34:51:49:0f:2e:d4:f0:96:13: 10:b0:c7:31:fb:c3:7a:94:56:8a:63:40:02:0e:12: 8c:e9:5f:d0:69:03:4c:2b:4e:89:e3:ab:2a:68:d9: c1:b2:a5:58:94:e7:37:32:65:fe:9f:0a:85:ed:f4: cc:72:1b:8a:9c:4e:38:da:86:9f:55:86:db:df:b2: b2:f2:78:77:f1:33:f5:c4:17:bb:83:30:11:f4:13: 9e:cd:c2:7c:25:99:85:04:80:ef:4a:6a:81:89:7e: ef:4a:a4:02:bc:0c:c0:71:b8:2a:e4:4c:8c:f8:22: 2a:b5:fd:8c:c0:ea:20:b5:fb:02:95:b9:b3:20:b7: 2a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:E1:40:03:90:49:06:FA:0E:F2:B3:32:4E:95:71:90:1C:1A:4D:88 X509v3 Authority Key Identifier: keyid:76:78:74:24:68:CB:01:F0:A5:26:B4:E9:22:26:FE:3B:74:C6:7C:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnh0JGjLAfClJrTpIib-O3TGfEE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f71faf-3a5b-45d8-8f25-fa44c7a07d27/1/dnh0JGjLAfClJrTpIib-O3TGfEE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f71faf-3a5b-45d8-8f25-fa44c7a07d27/1/dnh0JGjLAfClJrTpIib-O3TGfEE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:91:63:e4:26:e2:31:37:0f:32:eb:bf:dd:ec:73:78:7c:ea: 54:bd:65:7a:7a:90:3e:42:1f:3c:f1:bc:f9:d8:72:c8:08:65: 75:60:2f:05:db:13:b6:f0:3d:22:ce:fd:5c:b8:4d:da:5d:08: a9:d3:ed:96:5a:d3:a7:2c:d8:e9:60:55:f7:89:b8:06:0d:59: 49:62:b1:f0:d0:fe:92:4e:b1:40:18:94:58:d4:0c:73:08:8e: 41:9c:66:c6:a2:c2:32:ad:43:99:e0:e2:0a:dc:6a:aa:df:08: 59:95:af:23:91:75:86:38:d8:8a:cc:35:74:7b:ed:5c:9b:c2: c1:bf:84:1a:a4:d3:6c:dd:a1:4d:45:ad:f3:44:8f:13:25:2e: 36:72:07:c2:d1:55:c8:22:93:0a:d5:b7:7f:59:78:50:90:33: 70:82:04:b8:d1:af:15:34:1b:a9:70:c3:76:73:07:65:0e:83: f0:cd:ec:1f:e4:63:76:91:7f:f8:a8:b7:af:87:71:db:76:19: a2:cb:d1:75:36:63:a4:15:67:ce:56:0e:a7:d3:cd:47:8d:c5: 29:33:dc:f4:9c:ee:90:43:42:6e:f3:8e:04:bc:19:6d:df:43: 26:74:ac:96:31:dc:26:4c:06:4b:46:e3:74:28:88:1b:ff:bb: 5a:ac:95:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9nC6C+uK7DEFY4Xg16MpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2Nzg3NDI0NjhjYjAxZjBhNTI2YjRlOTIyMjZmZTNiNzRj NjdjNDEwHhcNMjUxMjI2MTQwMDU4WhcNMjUxMjI3MTQwMDU4WjAzMTEwLwYDVQQD EyhjNmUxNDAwMzkwNDkwNmZhMGVmMmIzMzI0ZTk1NzE5MDFjMWE0ZDg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveHXqVxCUk0mCpdCEChs+doO1QPi g46ySezDQPUd1ISIJukkEjs8fZq71FADO6QIDRayftB1ld+y1QWCIYshttCFc6IX QaqydYWq4yLRbmHq9yP/n0AsvRk3Nx/evnQUkLbWqFKYw6M31alaWzQLnnn0GUjp 67drvkgzZ1U0UUkPLtTwlhMQsMcx+8N6lFaKY0ACDhKM6V/QaQNMK06J46sqaNnB sqVYlOc3MmX+nwqF7fTMchuKnE442oafVYbb37Ky8nh38TP1xBe7gzAR9BOezcJ8 JZmFBIDvSmqBiX7vSqQCvAzAcbgq5EyM+CIqtf2MwOogtfsClbmzILcqzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMbhQAOQSQb6DvKzMk6VcZAcGk2IMB8GA1UdIwQY MBaAFHZ4dCRoywHwpSa06SIm/jt0xnxBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG5oMEpHakxBZkNsSnJUcElpYi1PM1RHZkVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mNzFmYWYtM2E1Yi00NWQ4LThmMjUt ZmE0NGM3YTA3ZDI3LzEvZG5oMEpHakxBZkNsSnJUcElpYi1PM1RHZkVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9mNzFmYWYtM2E1Yi00NWQ4LThmMjUtZmE0NGM3YTA3ZDI3 LzEvZG5oMEpHakxBZkNsSnJUcElpYi1PM1RHZkVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAopFj5Cbi MTcPMuu/3exzeHzqVL1lenqQPkIfPPG8+dhyyAhldWAvBdsTtvA9Is79XLhN2l0I qdPtllrTpyzY6WBV94m4Bg1ZSWKx8ND+kk6xQBiUWNQMcwiOQZxmxqLCMq1DmeDi Ctxqqt8IWZWvI5F1hjjYisw1dHvtXJvCwb+EGqTTbN2hTUWt80SPEyUuNnIHwtFV yCKTCtW3f1l4UJAzcIIEuNGvFTQbqXDDdnMHZQ6D8M3sH+RjdpF/+Ki3r4dx23YZ osvRdTZjpBVnzlYOp9PNR43FKTPc9JzukENCbvOOBLwZbd9DJnSsljHcJkwGS0bj dCiIG/+7WqyVLQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:42:27 2025 by rpki-client