This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft File: DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft (raw, json) Hash identifier: 2/pOcDaC+6m3H7d8ZF5bmxK5ZRQAH4wtI9vDLXx9RbQ= Subject key identifier: CF:57:1E:E9:02:76:3A:3E:9E:32:00:31:66:C4:84:A4:B9:A1:8A:C6 Authority key identifier: 0D:78:4B:D9:6A:44:BC:36:1D:13:34:4D:54:C8:BC:51:FF:67:A8:02 Certificate issuer: /CN=0d784bd96a44bc361d13344d54c8bc51ff67a802 Certificate serial: 019B345666351BC5434A45F0FA7098C81F2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft Manifest number: 0EE7 Signing time: Fri 19 Dec 2025 02:00:36 +0000 Manifest this update: Fri 19 Dec 2025 02:00:36 +0000 Manifest next update: Sat 20 Dec 2025 02:00:36 +0000 Files and hashes: 1: DXhL2WpEvDYdEzRNVMi8Uf9nqAI.crl (hash: q0IggzWmGPH3yAzeF38EC6SdQKgSycaF7xO/YLF341Y=) 2: zo9Y2aPXtg0v5rw18Mi_WOQc36Y.roa (hash: v9STSvD6P0pmUA0gxCp1HPZofea00hykboqUh1BCCCs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.crl rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft rsync://rpki.ripe.net/repository/DEFAULT/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 02:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:56:66:35:1b:c5:43:4a:45:f0:fa:70:98:c8:1f:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d784bd96a44bc361d13344d54c8bc51ff67a802 Validity Not Before: Dec 19 02:00:36 2025 GMT Not After : Dec 20 02:00:36 2025 GMT Subject: CN=cf571ee902763a3e9e32003166c484a4b9a18ac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d0:02:bc:dc:0b:b9:7f:ea:62:fd:ba:1d:44: 75:ad:d7:ab:24:44:1e:35:d8:a8:9f:71:ee:9e:18: ae:0d:0d:12:79:cd:f2:20:d9:ee:4a:77:f2:c4:f7: cc:42:00:8e:13:6b:29:1f:2e:9c:a5:ea:44:2f:30: 4f:43:97:53:2c:3c:b7:2e:34:3a:07:66:28:3a:b1: ec:e8:60:d5:be:15:f3:16:3b:6d:04:5f:82:be:e3: bf:72:ec:d2:cc:eb:d2:f6:ef:cf:0c:ef:66:85:a3: fc:67:1f:3e:0f:d0:b2:13:dc:7c:7d:6d:3c:5d:ed: 20:79:ca:35:9a:bc:06:f9:d0:7a:ad:0a:43:cf:9f: a8:e2:f8:e8:bc:ce:c2:ce:d2:de:4b:c6:af:c4:1e: 0d:12:fe:ca:cf:50:b1:6e:fc:ee:1a:87:9c:28:68: e5:2f:93:19:a6:1f:8b:14:c6:db:28:55:b6:53:36: d9:af:80:79:ca:5e:57:b3:f5:9c:1d:f3:c6:c4:eb: 6f:04:41:96:99:09:22:ed:be:09:59:cb:ee:ce:04: a8:e6:25:7c:fb:89:b5:ec:61:fd:8e:9f:05:27:9b: cb:22:be:16:32:8b:70:20:7c:84:80:d0:b4:64:b1: f0:d3:ca:cd:d3:f0:53:0c:35:25:ce:3c:8f:88:e6: 7f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:57:1E:E9:02:76:3A:3E:9E:32:00:31:66:C4:84:A4:B9:A1:8A:C6 X509v3 Authority Key Identifier: keyid:0D:78:4B:D9:6A:44:BC:36:1D:13:34:4D:54:C8:BC:51:FF:67:A8:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:0e:b7:c4:ef:30:86:86:c1:a1:16:ad:2e:1d:77:b8:b1:5f: 13:d0:c0:22:df:32:08:12:aa:3c:26:22:1d:c5:98:c5:6b:9b: ae:1e:1c:9f:fd:a8:7d:bf:26:46:1e:38:3b:f7:df:04:21:ba: 97:62:e1:b4:5d:39:3a:b2:a3:79:f8:52:51:a0:45:42:28:92: 5e:9a:de:cb:49:98:2e:f7:d3:a5:9b:60:e4:46:f9:2e:af:52: e4:7c:36:8f:0f:18:8a:59:9c:b6:08:5e:98:67:a5:78:38:5a: 89:05:0a:92:92:21:ea:f6:a1:3a:c2:c5:63:73:9a:ad:05:d8: ac:00:dc:c3:bb:65:39:95:3e:f9:3c:8a:1f:64:75:69:f7:1d: 3b:6a:93:1c:95:21:42:d6:10:22:ca:4e:cb:be:10:7c:4b:49: f9:5f:15:6a:b0:6d:b1:93:a8:3d:f5:60:66:17:ef:f6:cd:10: c5:16:c8:91:b6:c3:df:9b:9d:93:ef:e5:9d:4f:51:2e:fd:5c: 20:1f:c0:22:a6:cc:26:b0:47:ff:e6:02:5b:a2:c0:96:c3:5f: b6:7d:09:3a:ea:96:09:3a:6a:2c:06:3f:3b:ba:e3:90:1c:8a: 91:62:e8:53:f8:ff:90:8f:fa:cd:a4:82:57:a9:70:2c:fb:d0: 17:cd:76:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0VmY1G8VDSkXw+nCYyB8rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzg0YmQ5NmE0NGJjMzYxZDEzMzQ0ZDU0YzhiYzUxZmY2 N2E4MDIwHhcNMjUxMjE5MDIwMDM2WhcNMjUxMjIwMDIwMDM2WjAzMTEwLwYDVQQD EyhjZjU3MWVlOTAyNzYzYTNlOWUzMjAwMzE2NmM0ODRhNGI5YTE4YWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tACvNwLuX/qYv26HUR1rderJEQe Ndion3HunhiuDQ0Sec3yINnuSnfyxPfMQgCOE2spHy6cpepELzBPQ5dTLDy3LjQ6 B2YoOrHs6GDVvhXzFjttBF+CvuO/cuzSzOvS9u/PDO9mhaP8Zx8+D9CyE9x8fW08 Xe0geco1mrwG+dB6rQpDz5+o4vjovM7CztLeS8avxB4NEv7Kz1CxbvzuGoecKGjl L5MZph+LFMbbKFW2UzbZr4B5yl5Xs/WcHfPGxOtvBEGWmQki7b4JWcvuzgSo5iV8 +4m17GH9jp8FJ5vLIr4WMotwIHyEgNC0ZLHw08rN0/BTDDUlzjyPiOZ/NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM9XHukCdjo+njIAMWbEhKS5oYrGMB8GA1UdIwQY MBaAFA14S9lqRLw2HRM0TVTIvFH/Z6gCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhoTDJXcEV2RFlkRXpSTlZNaThVZjlucUFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80MjVjMjQtYmZlMC00NzkwLWIyNTAt ZDRjNjZmNGYzYjZlLzEvRFhoTDJXcEV2RFlkRXpSTlZNaThVZjlucUFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80MjVjMjQtYmZlMC00NzkwLWIyNTAtZDRjNjZmNGYzYjZl LzEvRFhoTDJXcEV2RFlkRXpSTlZNaThVZjlucUFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOQ63xO8w hobBoRatLh13uLFfE9DAIt8yCBKqPCYiHcWYxWubrh4cn/2ofb8mRh44O/ffBCG6 l2LhtF05OrKjefhSUaBFQiiSXprey0mYLvfTpZtg5Eb5Lq9S5Hw2jw8Yilmctghe mGeleDhaiQUKkpIh6vahOsLFY3OarQXYrADcw7tlOZU++TyKH2R1afcdO2qTHJUh QtYQIspOy74QfEtJ+V8VarBtsZOoPfVgZhfv9s0QxRbIkbbD35udk+/lnU9RLv1c IB/AIqbMJrBH/+YCW6LAlsNftn0JOuqWCTpqLAY/O7rjkByKkWLoU/j/kI/6zaSC V6lwLPvQF812XQ== -----END CERTIFICATE-----Generated at Fri Dec 19 12:38:09 2025 by rpki-client