This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft File: DOLccfnsGpsngQd_OtKYHEuHKwU.mft (raw, json) Hash identifier: T+QaQ6djm/G15/oANpUlHc93NTcQ7i5OX3Ys6qM3brc= Subject key identifier: EF:96:19:53:D2:F8:CF:7F:D1:BC:4D:EE:87:D8:7D:82:1F:E2:6B:3A Authority key identifier: 0C:E2:DC:71:F9:EC:1A:9B:27:81:07:7F:3A:D2:98:1C:4B:87:2B:05 Certificate issuer: /CN=0ce2dc71f9ec1a9b2781077f3ad2981c4b872b05 Certificate serial: 019B0FA56CF14E97688E46F3575F50A6F5C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft Manifest number: 09FF Signing time: Thu 11 Dec 2025 23:00:58 +0000 Manifest this update: Thu 11 Dec 2025 23:00:58 +0000 Manifest next update: Fri 12 Dec 2025 23:00:58 +0000 Files and hashes: 1: DOLccfnsGpsngQd_OtKYHEuHKwU.crl (hash: 2xnE1Q1tIRtyAjMFKNCswXZPa1GMUfNslSy2/wn3ajY=) 2: lbzZ5Xd-Bxx74-HdFugAtLWfqT0.roa (hash: MO8BCssJP9Ug+UVQ/493gxdacSXvZ1bCntr7vQJ6/Y0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.crl rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:a5:6c:f1:4e:97:68:8e:46:f3:57:5f:50:a6:f5:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce2dc71f9ec1a9b2781077f3ad2981c4b872b05 Validity Not Before: Dec 11 23:00:58 2025 GMT Not After : Dec 12 23:00:58 2025 GMT Subject: CN=ef961953d2f8cf7fd1bc4dee87d87d821fe26b3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0d:ee:8f:cc:f5:cf:0d:23:00:48:9c:1d:15: 0d:f0:b8:ee:62:dc:33:60:c3:fc:22:6a:3a:9c:c8: be:82:c6:98:c5:e0:46:3a:fa:ed:6d:40:01:50:21: fd:06:2e:86:07:a4:d3:ad:68:56:c5:00:aa:18:e0: 3b:d9:b0:77:17:16:d8:69:77:5a:99:1d:26:97:fa: d9:3b:c8:bd:8b:9e:e0:e3:c6:4f:0e:a1:22:94:ab: 72:34:a3:e6:67:af:a4:12:72:00:aa:c7:d1:30:7d: ac:d6:a1:87:fb:ca:13:f6:c4:2b:18:9a:e5:5f:7d: 31:14:49:28:8e:08:1a:c9:35:8f:63:90:e0:91:63: 3b:a2:ff:20:3e:57:58:1a:ac:4c:95:27:05:ff:28: ac:32:07:be:38:44:27:75:2e:b1:c8:d8:1e:20:58: ca:43:67:44:78:8d:23:46:32:85:96:e8:2b:5a:23: 5e:b3:8a:ce:30:0d:3c:43:72:25:5f:49:60:ed:f7: df:25:e3:71:9c:5a:44:c2:d0:8d:f9:9c:1b:fe:9c: cb:4b:64:93:7f:f3:49:20:2e:37:d7:63:80:54:b2: 07:8e:27:26:40:d9:9b:1c:3b:7f:15:cd:03:c7:62: 0f:13:1a:86:82:bd:ae:b4:a0:27:46:92:c0:ad:99: ae:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:96:19:53:D2:F8:CF:7F:D1:BC:4D:EE:87:D8:7D:82:1F:E2:6B:3A X509v3 Authority Key Identifier: keyid:0C:E2:DC:71:F9:EC:1A:9B:27:81:07:7F:3A:D2:98:1C:4B:87:2B:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:63:30:24:59:55:5c:76:64:db:77:80:b3:a1:cd:1a:33:b3: 65:ec:95:69:fe:8a:51:c0:47:e8:e7:8b:c8:3c:c8:fd:45:af: eb:70:ad:21:dc:c9:48:82:04:9e:23:d0:40:69:a5:94:e3:6e: ac:f1:8c:da:38:e5:9d:4a:b9:bf:72:f5:a7:db:9c:20:b3:3f: de:0b:02:d1:e0:86:42:61:71:5b:ff:07:31:05:a7:c3:4b:90: 17:3e:3f:b0:73:27:00:76:60:40:62:f1:8e:06:6c:3b:6d:75: e6:ce:e0:46:1a:bf:52:34:35:c6:0e:67:5e:a9:44:fa:1a:3c: a8:be:86:d0:00:e9:9b:5c:63:f3:2a:a6:c0:4d:2a:1a:f8:fb: dd:33:c4:fb:37:94:48:b0:1c:dd:9b:e5:b5:42:3d:a7:5d:f5: 4c:06:eb:cc:fe:4c:20:74:8b:ae:08:c2:8d:27:7d:6c:15:79: b7:87:f4:cd:aa:4c:b5:1e:17:0c:d8:c2:71:ca:08:71:69:57: 22:0a:fd:af:3d:4c:f8:66:8d:67:43:d6:b0:c4:b2:34:39:bc: 48:d8:18:fa:8a:5e:0c:99:f1:ca:b6:d7:b4:6e:60:94:32:e5: a2:22:85:9e:96:ac:f1:9c:0d:d0:da:23:4a:3f:47:58:21:f6: d8:d4:de:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPpWzxTpdojkbzV19QpvXCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTJkYzcxZjllYzFhOWIyNzgxMDc3ZjNhZDI5ODFjNGI4 NzJiMDUwHhcNMjUxMjExMjMwMDU4WhcNMjUxMjEyMjMwMDU4WjAzMTEwLwYDVQQD EyhlZjk2MTk1M2QyZjhjZjdmZDFiYzRkZWU4N2Q4N2Q4MjFmZTI2YjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxg3uj8z1zw0jAEicHRUN8LjuYtwz YMP8Imo6nMi+gsaYxeBGOvrtbUABUCH9Bi6GB6TTrWhWxQCqGOA72bB3FxbYaXda mR0ml/rZO8i9i57g48ZPDqEilKtyNKPmZ6+kEnIAqsfRMH2s1qGH+8oT9sQrGJrl X30xFEkojggayTWPY5DgkWM7ov8gPldYGqxMlScF/yisMge+OEQndS6xyNgeIFjK Q2dEeI0jRjKFlugrWiNes4rOMA08Q3IlX0lg7fffJeNxnFpEwtCN+Zwb/pzLS2ST f/NJIC4312OAVLIHjicmQNmbHDt/Fc0Dx2IPExqGgr2utKAnRpLArZmuMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO+WGVPS+M9/0bxN7ofYfYIf4ms6MB8GA1UdIwQY MBaAFAzi3HH57BqbJ4EHfzrSmBxLhysFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9MY2NmbnNHcHNuZ1FkX090S1lIRXVIS3dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9kYTY2YmItMTc0Zi00OTE4LTlhM2Et YmE0ZmJkOGQ1ZDhlLzEvRE9MY2NmbnNHcHNuZ1FkX090S1lIRXVIS3dVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9kYTY2YmItMTc0Zi00OTE4LTlhM2EtYmE0ZmJkOGQ1ZDhl LzEvRE9MY2NmbnNHcHNuZ1FkX090S1lIRXVIS3dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb2MwJFlV XHZk23eAs6HNGjOzZeyVaf6KUcBH6OeLyDzI/UWv63CtIdzJSIIEniPQQGmllONu rPGM2jjlnUq5v3L1p9ucILM/3gsC0eCGQmFxW/8HMQWnw0uQFz4/sHMnAHZgQGLx jgZsO2115s7gRhq/UjQ1xg5nXqlE+ho8qL6G0ADpm1xj8yqmwE0qGvj73TPE+zeU SLAc3ZvltUI9p131TAbrzP5MIHSLrgjCjSd9bBV5t4f0zapMtR4XDNjCccoIcWlX Igr9rz1M+GaNZ0PWsMSyNDm8SNgY+opeDJnxyrbXtG5glDLloiKFnpas8ZwN0Noj Sj9HWCH22NTe5Q== -----END CERTIFICATE-----Generated at Fri Dec 12 04:04:12 2025 by rpki-client