This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft File: DjagX652BpH3DPtbT2JJlHq63oc.mft (raw, json) Hash identifier: DT29ZQ/TbHGXc0eeWNf8Jhz62M95Zbb7lSTIK0652jg= Subject key identifier: CD:92:0A:59:6C:DA:72:52:E1:B4:CB:7E:86:CE:BC:30:00:33:01:C9 Authority key identifier: 0E:36:A0:5F:AE:76:06:91:F7:0C:FB:5B:4F:62:49:94:7A:BA:DE:87 Certificate issuer: /CN=0e36a05fae760691f70cfb5b4f6249947abade87 Certificate serial: 019B3231E2AD58A159C1B2AFB951331C40BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 16:01:28 +0000 Manifest this update: Thu 18 Dec 2025 16:01:28 +0000 Manifest next update: Fri 19 Dec 2025 16:01:28 +0000 Files and hashes: 1: 9hax9lcbcBPwKNzrRoXl7XRGxs0.roa (hash: IRPjVfW8M9ASmZNnOGpHStRGP8SiQ3X0Tpw2PWHs4Gs=) 2: DjagX652BpH3DPtbT2JJlHq63oc.crl (hash: +ECLecmMCX55vMp0LiLQI3MKVPReQHvIC2FaAMYjfNs=) 3: EiGZtAu9plqsBeiA66w6CIaKbMQ.roa (hash: dj8GKcFexedHYt10VTQ4ji9NoWWxtuLzNtXT9+iqLpk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.crl rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 16:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:e2:ad:58:a1:59:c1:b2:af:b9:51:33:1c:40:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e36a05fae760691f70cfb5b4f6249947abade87 Validity Not Before: Dec 18 16:01:28 2025 GMT Not After : Dec 19 16:01:28 2025 GMT Subject: CN=cd920a596cda7252e1b4cb7e86cebc30003301c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6b:e3:09:7f:a9:9a:85:f0:21:c7:27:f8:57: 77:3d:6e:ca:55:6a:08:6b:62:35:4d:a9:fc:f4:dd: 05:e5:8f:e8:a4:85:e3:70:eb:90:b7:ab:1e:80:67: 8c:bc:d2:03:c6:aa:08:27:1c:a3:45:86:4d:a0:7c: a9:9b:14:70:75:6c:79:e3:b0:dd:c0:31:f9:b7:43: 5f:cf:68:19:03:55:42:74:e4:6a:fd:17:81:35:df: 31:bb:3c:2c:bc:32:12:bf:d5:f1:21:19:7e:b0:98: 80:51:cf:77:eb:c8:33:10:51:1f:49:73:ff:21:70: 21:41:50:ce:74:bc:a5:95:1b:86:e6:19:28:fb:27: 1f:60:2c:96:10:66:f1:83:a9:67:cc:f8:f3:14:e3: aa:9d:c2:21:a9:c4:ac:c2:25:b5:05:e2:fc:15:30: 7e:28:e3:92:b7:bb:be:15:a3:3b:59:93:e6:40:2b: 03:fd:fd:73:48:3d:f1:94:51:da:14:9e:9f:ba:2f: 59:12:c3:9b:bd:25:02:6a:aa:a6:f6:49:7e:19:dc: fa:9f:14:b9:30:30:d2:73:02:bd:bb:09:27:14:47: 55:90:16:93:19:cc:2b:cf:1c:88:80:6b:79:4d:48: cb:bc:20:b4:d6:f8:d5:7c:83:f6:a0:97:fc:a7:4a: 7e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:92:0A:59:6C:DA:72:52:E1:B4:CB:7E:86:CE:BC:30:00:33:01:C9 X509v3 Authority Key Identifier: keyid:0E:36:A0:5F:AE:76:06:91:F7:0C:FB:5B:4F:62:49:94:7A:BA:DE:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:f4:fc:61:cf:ac:c9:21:e9:69:86:1a:e2:95:b2:23:e3:40: 56:9d:ff:01:00:ff:11:af:8e:d5:41:dc:77:96:33:90:5b:8c: e2:ce:71:e5:6c:83:50:68:d7:61:b5:cc:f8:36:2f:6b:a5:ba: 59:77:2c:36:ea:9e:7d:8b:38:8d:a7:49:fd:69:b4:94:be:4c: 50:16:05:c7:a7:df:51:90:a7:77:0d:b1:9e:62:ae:31:21:93: 98:d4:96:05:52:bb:0f:dd:db:67:8c:97:2a:b7:8b:3a:98:31: 44:a8:0b:ee:15:77:bd:57:1c:ee:27:42:86:f5:ed:b9:37:5c: b5:d2:64:50:a0:e8:ff:52:a1:2a:9d:97:f2:43:6d:71:34:39: 3d:60:25:1a:7d:e0:11:0c:e6:1b:99:9a:ec:82:8b:e2:fd:8f: c2:2c:14:72:28:25:26:03:88:b5:98:89:d2:36:7d:8a:89:9c: 54:6d:3f:94:4b:a0:10:dc:9f:40:35:4d:17:a9:77:83:e9:e0: 9a:aa:b9:39:4f:9c:50:1f:f9:39:05:ec:8d:4b:69:ad:1a:79: 83:eb:ed:e4:e4:1d:9c:3e:b2:24:0b:ed:dd:a2:6c:40:e1:a3: 66:2c:e7:65:f7:6a:c1:1d:4e:12:96:9c:c8:57:6e:2c:93:d2: 53:52:2b:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMeKtWKFZwbKvuVEzHEC+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMzZhMDVmYWU3NjA2OTFmNzBjZmI1YjRmNjI0OTk0N2Fi YWRlODcwHhcNMjUxMjE4MTYwMTI4WhcNMjUxMjE5MTYwMTI4WjAzMTEwLwYDVQQD EyhjZDkyMGE1OTZjZGE3MjUyZTFiNGNiN2U4NmNlYmMzMDAwMzMwMWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWvjCX+pmoXwIccn+Fd3PW7KVWoI a2I1Tan89N0F5Y/opIXjcOuQt6segGeMvNIDxqoIJxyjRYZNoHypmxRwdWx547Dd wDH5t0Nfz2gZA1VCdORq/ReBNd8xuzwsvDISv9XxIRl+sJiAUc9368gzEFEfSXP/ IXAhQVDOdLyllRuG5hko+ycfYCyWEGbxg6lnzPjzFOOqncIhqcSswiW1BeL8FTB+ KOOSt7u+FaM7WZPmQCsD/f1zSD3xlFHaFJ6fui9ZEsObvSUCaqqm9kl+Gdz6nxS5 MDDScwK9uwknFEdVkBaTGcwrzxyIgGt5TUjLvCC01vjVfIP2oJf8p0p+swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM2SClls2nJS4bTLfobOvDAAMwHJMB8GA1UdIwQY MBaAFA42oF+udgaR9wz7W09iSZR6ut6HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGphZ1g2NTJCcEgzRFB0YlQySkpsSHE2M29jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83MzVkMzctMzkxYS00YWEyLWFjODMt MGIzNmFjOGUyM2M3LzEvRGphZ1g2NTJCcEgzRFB0YlQySkpsSHE2M29jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny83MzVkMzctMzkxYS00YWEyLWFjODMtMGIzNmFjOGUyM2M3 LzEvRGphZ1g2NTJCcEgzRFB0YlQySkpsSHE2M29jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPfT8Yc+s ySHpaYYa4pWyI+NAVp3/AQD/Ea+O1UHcd5YzkFuM4s5x5WyDUGjXYbXM+DYva6W6 WXcsNuqefYs4jadJ/Wm0lL5MUBYFx6ffUZCndw2xnmKuMSGTmNSWBVK7D93bZ4yX KreLOpgxRKgL7hV3vVcc7idChvXtuTdctdJkUKDo/1KhKp2X8kNtcTQ5PWAlGn3g EQzmG5ma7IKL4v2PwiwUciglJgOItZiJ0jZ9iomcVG0/lEugENyfQDVNF6l3g+ng mqq5OU+cUB/5OQXsjUtprRp5g+vt5OQdnD6yJAvt3aJsQOGjZiznZfdqwR1OEpac yFduLJPSU1IrZA== -----END CERTIFICATE-----Generated at Fri Dec 19 00:50:46 2025 by rpki-client