This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft File: DOLccfnsGpsngQd_OtKYHEuHKwU.mft (raw, json) Hash identifier: l0n0A+KeDR96dH+D+cYLMumjyWlUWNcYLpvlb80noAU= Subject key identifier: E4:0C:0A:87:F5:8B:9D:90:B6:2F:20:FE:84:19:6D:70:57:7B:78:64 Authority key identifier: 0C:E2:DC:71:F9:EC:1A:9B:27:81:07:7F:3A:D2:98:1C:4B:87:2B:05 Certificate issuer: /CN=0ce2dc71f9ec1a9b2781077f3ad2981c4b872b05 Certificate serial: 019B4994EB5204797BE18F9D28F38B65B606 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft Manifest number: 0A1D Signing time: Tue 23 Dec 2025 05:00:54 +0000 Manifest this update: Tue 23 Dec 2025 05:00:54 +0000 Manifest next update: Wed 24 Dec 2025 05:00:54 +0000 Files and hashes: 1: DOLccfnsGpsngQd_OtKYHEuHKwU.crl (hash: 78OovAT3l74sftRGM4llHM4RADIJJoKfOrUxZ6KrIDY=) 2: lbzZ5Xd-Bxx74-HdFugAtLWfqT0.roa (hash: MO8BCssJP9Ug+UVQ/493gxdacSXvZ1bCntr7vQJ6/Y0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.crl rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 05:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:94:eb:52:04:79:7b:e1:8f:9d:28:f3:8b:65:b6:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce2dc71f9ec1a9b2781077f3ad2981c4b872b05 Validity Not Before: Dec 23 05:00:54 2025 GMT Not After : Dec 24 05:00:54 2025 GMT Subject: CN=e40c0a87f58b9d90b62f20fe84196d70577b7864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d3:d0:64:90:2b:db:4c:08:78:4b:3d:97:f0: aa:8b:74:e1:49:df:b6:e6:9e:52:c7:85:74:af:48: cc:8c:d4:c8:c2:7f:e7:ff:9c:d9:d7:c1:77:6b:ee: 7d:22:0b:da:12:7f:74:68:e8:83:c2:c4:b3:ce:9d: ca:f5:1e:74:c5:cf:95:ec:34:76:01:fe:e4:19:b6: 69:9a:8a:9f:c8:80:12:7d:f9:69:e0:21:7b:d5:eb: 55:36:7d:3a:e0:33:e1:71:71:25:b3:35:e8:17:50: 56:86:82:0f:c4:41:fd:cb:4d:03:71:a8:f2:fa:87: f2:5e:e3:b5:41:99:70:06:ed:1d:54:1a:36:c9:98: 59:a1:bc:93:39:5e:9a:60:1f:e0:ea:c5:b2:dd:0a: d4:fb:11:2e:cb:94:29:d9:4e:91:48:71:06:d6:73: 02:2b:35:fb:4c:82:86:1c:5e:0b:0d:69:ce:de:46: ec:0f:06:c6:31:84:ac:4d:ec:f6:1d:6d:4b:fa:9e: 67:bb:c9:01:fa:00:f9:69:52:d2:a2:71:99:c7:8c: 57:74:bf:f7:6f:dc:02:83:51:71:3d:76:25:e1:86: d2:37:6b:df:12:84:e7:d5:e4:69:b4:bd:88:12:7c: 23:d4:f6:c9:31:53:08:4f:ea:3d:13:45:95:6c:2b: 03:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:0C:0A:87:F5:8B:9D:90:B6:2F:20:FE:84:19:6D:70:57:7B:78:64 X509v3 Authority Key Identifier: keyid:0C:E2:DC:71:F9:EC:1A:9B:27:81:07:7F:3A:D2:98:1C:4B:87:2B:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:05:b0:cf:e1:78:d4:ca:e0:b1:4b:1f:0f:33:f5:ff:a2:70: cd:f1:b2:f2:04:ff:82:ca:ba:52:ac:01:1c:cf:bf:a0:b0:76: e1:84:ea:71:88:03:90:c5:2b:db:8b:bd:65:c2:30:ba:69:0f: 7f:78:ed:59:6c:2a:4f:af:87:0e:60:ca:ac:69:9a:a0:91:89: 1f:0b:6b:b5:df:27:7e:e3:4e:02:94:12:f9:bc:4e:21:ea:c0: 45:c6:ed:64:87:80:87:aa:dc:e5:d0:94:c0:b9:d3:34:e8:64: 0d:ef:96:af:b6:c9:95:b2:1c:f4:f3:d6:8b:a4:d2:06:14:d8: f2:02:03:f4:cf:15:8b:31:cd:46:8a:9e:b3:08:25:07:2a:65: 0a:90:f9:98:59:4a:b3:ee:a8:06:95:74:2e:54:d6:31:5e:ba: 20:84:44:47:21:49:d3:27:3b:4b:b3:40:c0:76:20:c7:bc:ce: 81:1b:27:56:0d:56:3f:33:e6:28:82:b8:e6:62:bf:a0:4b:c8: 18:ed:33:a0:5a:3a:a1:57:81:53:09:6a:ee:66:1d:c3:e2:e1: 29:b7:ea:07:5a:8f:0c:78:b2:26:13:dc:93:75:e6:44:c4:cb: 1c:60:07:e3:4f:71:5a:f5:5d:ba:c4:d6:e5:8b:3b:62:00:69: 8a:36:13:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJlOtSBHl74Y+dKPOLZbYGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTJkYzcxZjllYzFhOWIyNzgxMDc3ZjNhZDI5ODFjNGI4 NzJiMDUwHhcNMjUxMjIzMDUwMDU0WhcNMjUxMjI0MDUwMDU0WjAzMTEwLwYDVQQD EyhlNDBjMGE4N2Y1OGI5ZDkwYjYyZjIwZmU4NDE5NmQ3MDU3N2I3ODY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodPQZJAr20wIeEs9l/Cqi3ThSd+2 5p5Sx4V0r0jMjNTIwn/n/5zZ18F3a+59IgvaEn90aOiDwsSzzp3K9R50xc+V7DR2 Af7kGbZpmoqfyIASfflp4CF71etVNn064DPhcXElszXoF1BWhoIPxEH9y00Dcajy +ofyXuO1QZlwBu0dVBo2yZhZobyTOV6aYB/g6sWy3QrU+xEuy5Qp2U6RSHEG1nMC KzX7TIKGHF4LDWnO3kbsDwbGMYSsTez2HW1L+p5nu8kB+gD5aVLSonGZx4xXdL/3 b9wCg1FxPXYl4YbSN2vfEoTn1eRptL2IEnwj1PbJMVMIT+o9E0WVbCsDIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOQMCof1i52Qti8g/oQZbXBXe3hkMB8GA1UdIwQY MBaAFAzi3HH57BqbJ4EHfzrSmBxLhysFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9MY2NmbnNHcHNuZ1FkX090S1lIRXVIS3dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9kYTY2YmItMTc0Zi00OTE4LTlhM2Et YmE0ZmJkOGQ1ZDhlLzEvRE9MY2NmbnNHcHNuZ1FkX090S1lIRXVIS3dVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9kYTY2YmItMTc0Zi00OTE4LTlhM2EtYmE0ZmJkOGQ1ZDhl LzEvRE9MY2NmbnNHcHNuZ1FkX090S1lIRXVIS3dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkAWwz+F4 1MrgsUsfDzP1/6JwzfGy8gT/gsq6UqwBHM+/oLB24YTqcYgDkMUr24u9ZcIwumkP f3jtWWwqT6+HDmDKrGmaoJGJHwtrtd8nfuNOApQS+bxOIerARcbtZIeAh6rc5dCU wLnTNOhkDe+Wr7bJlbIc9PPWi6TSBhTY8gID9M8VizHNRoqeswglByplCpD5mFlK s+6oBpV0LlTWMV66IIRERyFJ0yc7S7NAwHYgx7zOgRsnVg1WPzPmKIK45mK/oEvI GO0zoFo6oVeBUwlq7mYdw+LhKbfqB1qPDHiyJhPck3XmRMTLHGAH409xWvVdusTW 5Ys7YgBpijYTIQ== -----END CERTIFICATE-----Generated at Tue Dec 23 14:36:33 2025 by rpki-client