This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft File: djLJDvGdK9b2aKSCbi0NFWNelH0.mft (raw, json) Hash identifier: fnjyojmgKfr0k7Wy0C+df+2uA82YB/zQbR//qOykDMs= Subject key identifier: 8A:8E:87:0B:59:2A:95:01:98:EB:72:9E:8A:C6:20:C9:3B:AF:FF:E4 Authority key identifier: 76:32:C9:0E:F1:9D:2B:D6:F6:68:A4:82:6E:2D:0D:15:63:5E:94:7D Certificate issuer: /CN=7632c90ef19d2bd6f668a4826e2d0d15635e947d Certificate serial: 019B0EC9F3CD3A0231A78D85648BE90DD005 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/djLJDvGdK9b2aKSCbi0NFWNelH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft Manifest number: 1773 Signing time: Thu 11 Dec 2025 19:01:14 +0000 Manifest this update: Thu 11 Dec 2025 19:01:14 +0000 Manifest next update: Fri 12 Dec 2025 19:01:14 +0000 Files and hashes: 1: djLJDvGdK9b2aKSCbi0NFWNelH0.crl (hash: hXyuxcHTUA/hLwvPMhU2dMMy79eSAee1ptvVHBnLyvE=) 2: wBaE5svUrTDa4cJiCAHlEwrForw.roa (hash: sNv0g7ZzW3+C7EQOHQU5ckniP/nqJPJ/xsRMEfe9338=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.crl rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft rsync://rpki.ripe.net/repository/DEFAULT/djLJDvGdK9b2aKSCbi0NFWNelH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:c9:f3:cd:3a:02:31:a7:8d:85:64:8b:e9:0d:d0:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7632c90ef19d2bd6f668a4826e2d0d15635e947d Validity Not Before: Dec 11 19:01:14 2025 GMT Not After : Dec 12 19:01:14 2025 GMT Subject: CN=8a8e870b592a950198eb729e8ac620c93bafffe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2e:03:a5:6c:a0:2b:af:1d:81:9b:b6:24:73: 46:14:15:31:16:fb:1b:0a:81:70:f4:e2:34:a9:b7: 71:4c:56:4c:3a:27:31:f1:ff:f8:00:cf:da:e3:61: a7:df:dc:3c:52:91:48:ef:15:d3:89:c7:a8:31:3a: 32:b7:fb:b1:f0:4b:8c:3c:1f:f2:17:75:16:4e:76: a9:cb:20:a5:ff:bf:99:3f:71:4d:e2:20:0b:03:6e: 6a:0c:55:00:e0:c3:1d:0a:6f:56:1a:a0:a4:79:fc: 07:e9:fd:0f:d8:83:e0:9e:e3:e0:e8:7a:7d:ce:ee: af:75:39:6f:ee:e7:30:92:c6:f1:ef:d1:74:f7:3b: 42:f0:3d:85:ee:96:31:e8:03:51:bc:9f:6e:b9:96: 0c:56:c3:ff:b8:c8:3f:b3:85:de:74:ee:9f:85:a8: 3a:d1:7c:23:f4:63:ff:56:11:3a:40:0f:53:58:36: c5:1d:8d:06:43:9b:bd:78:a2:41:d1:f5:f9:2d:df: 6b:2f:78:7f:ce:b4:2d:c5:6d:cc:68:09:52:fa:72: f8:2b:ff:2e:ce:35:69:ff:13:5d:8a:3a:b8:9b:26: 65:9e:49:c0:39:4a:44:74:96:4d:2b:1c:23:f3:79: 38:e6:60:f7:71:10:60:88:ef:93:ce:94:7e:21:5a: 3e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:8E:87:0B:59:2A:95:01:98:EB:72:9E:8A:C6:20:C9:3B:AF:FF:E4 X509v3 Authority Key Identifier: keyid:76:32:C9:0E:F1:9D:2B:D6:F6:68:A4:82:6E:2D:0D:15:63:5E:94:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/djLJDvGdK9b2aKSCbi0NFWNelH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9844cd-24f8-4e52-b42b-c7bf021ee664/1/djLJDvGdK9b2aKSCbi0NFWNelH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:ac:48:81:82:4f:3d:88:1f:27:9f:4c:60:c1:f6:6c:11:d6: 7d:ee:d6:fe:c6:b2:a9:a7:f9:ed:7c:17:90:40:fc:96:ff:70: f3:7b:4a:09:69:ea:17:cb:68:18:92:d4:06:e2:85:d3:66:f0: 72:25:7b:a4:c4:20:2d:47:29:be:55:5c:66:00:b8:6a:40:b9: 67:5c:68:3b:8e:9a:ad:ac:49:ac:83:0e:0e:9b:a6:b5:a5:6f: f5:19:48:8b:a8:a2:a0:e2:19:15:92:93:3b:ea:2c:86:b5:13: 9a:92:7a:3e:c3:9d:fc:0f:e7:85:7a:b5:6f:19:73:c6:4b:a0: ef:49:be:02:b5:b1:67:6c:1b:f2:c8:61:92:c3:cc:38:d6:05: 4b:4c:f1:70:30:85:3b:04:49:bd:62:91:65:31:9d:a3:14:5d: 94:ec:a5:52:b4:02:67:44:7c:f4:93:72:69:f3:74:6d:2d:b1: 30:60:99:91:31:77:99:40:23:62:25:37:f1:ee:39:04:96:a6: 44:36:61:5c:fe:a2:ef:2f:54:1c:06:65:e1:2d:5b:71:a9:12: e5:87:77:5e:d0:8c:49:e7:21:8c:09:9c:6d:1c:72:6d:24:a7: d0:38:2b:29:2f:dc:b7:fc:1f:31:53:61:65:ea:45:31:6e:af: 2a:4b:ea:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOyfPNOgIxp42FZIvpDdAFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2MzJjOTBlZjE5ZDJiZDZmNjY4YTQ4MjZlMmQwZDE1NjM1 ZTk0N2QwHhcNMjUxMjExMTkwMTE0WhcNMjUxMjEyMTkwMTE0WjAzMTEwLwYDVQQD Eyg4YThlODcwYjU5MmE5NTAxOThlYjcyOWU4YWM2MjBjOTNiYWZmZmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvi4DpWygK68dgZu2JHNGFBUxFvsb CoFw9OI0qbdxTFZMOicx8f/4AM/a42Gn39w8UpFI7xXTiceoMToyt/ux8EuMPB/y F3UWTnapyyCl/7+ZP3FN4iALA25qDFUA4MMdCm9WGqCkefwH6f0P2IPgnuPg6Hp9 zu6vdTlv7ucwksbx79F09ztC8D2F7pYx6ANRvJ9uuZYMVsP/uMg/s4XedO6fhag6 0Xwj9GP/VhE6QA9TWDbFHY0GQ5u9eKJB0fX5Ld9rL3h/zrQtxW3MaAlS+nL4K/8u zjVp/xNdijq4myZlnknAOUpEdJZNKxwj83k45mD3cRBgiO+TzpR+IVo+twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIqOhwtZKpUBmOtynorGIMk7r//kMB8GA1UdIwQY MBaAFHYyyQ7xnSvW9mikgm4tDRVjXpR9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGpMSkR2R2RLOWIyYUtTQ2JpME5GV05lbEgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC85ODQ0Y2QtMjRmOC00ZTUyLWI0MmIt YzdiZjAyMWVlNjY0LzEvZGpMSkR2R2RLOWIyYUtTQ2JpME5GV05lbEgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC85ODQ0Y2QtMjRmOC00ZTUyLWI0MmItYzdiZjAyMWVlNjY0 LzEvZGpMSkR2R2RLOWIyYUtTQ2JpME5GV05lbEgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANKxIgYJP PYgfJ59MYMH2bBHWfe7W/sayqaf57XwXkED8lv9w83tKCWnqF8toGJLUBuKF02bw ciV7pMQgLUcpvlVcZgC4akC5Z1xoO46araxJrIMODpumtaVv9RlIi6iioOIZFZKT O+oshrUTmpJ6PsOd/A/nhXq1bxlzxkug70m+ArWxZ2wb8shhksPMONYFS0zxcDCF OwRJvWKRZTGdoxRdlOylUrQCZ0R89JNyafN0bS2xMGCZkTF3mUAjYiU38e45BJam RDZhXP6i7y9UHAZl4S1bcakS5Yd3XtCMSechjAmcbRxybSSn0DgrKS/ct/wfMVNh ZepFMW6vKkvq3g== -----END CERTIFICATE-----Generated at Fri Dec 12 01:33:27 2025 by rpki-client