This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.mft File: dgfMwwkpHcgbGRQ9TT_ijQHGvr0.mft (raw, json) Hash identifier: zxUsPtBAJ/CXKKb2tha6SwP9BhQ7w0djDKzIzzOaCVY= Subject key identifier: 57:6D:CA:93:FC:E0:EA:A2:2C:8F:AD:4E:CD:A5:78:63:25:E8:39:79 Authority key identifier: 76:07:CC:C3:09:29:1D:C8:1B:19:14:3D:4D:3F:E2:8D:01:C6:BE:BD Certificate issuer: /CN=7607ccc309291dc81b19143d4d3fe28d01c6bebd Certificate serial: 019B59E3F7131227545E8CF416DBF58FF570 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.mft Manifest number: 10FA Signing time: Fri 26 Dec 2025 09:01:10 +0000 Manifest this update: Fri 26 Dec 2025 09:01:10 +0000 Manifest next update: Sat 27 Dec 2025 09:01:10 +0000 Files and hashes: 1: Bo8-3iT2LkDa18jomlUWH5mw_LE.roa (hash: 5nJAx1GIzC2LXbuEQ6FRmtjlYW8D/Ir6+ALBKS3Ky+A=) 2: dgfMwwkpHcgbGRQ9TT_ijQHGvr0.crl (hash: EyYdRDbUBVQDo93wAOhff8oNdG0qtF775oz/0iM7jkg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.mft rsync://rpki.ripe.net/repository/DEFAULT/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:f7:13:12:27:54:5e:8c:f4:16:db:f5:8f:f5:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7607ccc309291dc81b19143d4d3fe28d01c6bebd Validity Not Before: Dec 26 09:01:10 2025 GMT Not After : Dec 27 09:01:10 2025 GMT Subject: CN=576dca93fce0eaa22c8fad4ecda5786325e83979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9a:7c:e0:1c:2b:5c:5d:1a:07:10:b1:e1:e4: ed:5c:96:30:29:76:5f:47:c3:21:62:b3:24:3f:fb: 12:ea:3c:6b:2b:35:fa:78:2d:53:83:35:86:81:37: f2:d3:38:70:b5:ce:40:87:5c:07:d5:44:12:3c:80: fa:c3:42:34:df:a4:eb:41:c7:f0:5c:02:91:6d:44: 73:5b:25:9b:23:c5:bd:c1:8b:46:c7:47:40:47:15: 19:65:b0:88:bb:f1:ed:b6:57:50:8d:c8:02:08:b4: 1f:a0:ac:4b:5a:ca:d2:40:aa:ac:24:cb:fb:c3:b5: 4c:56:12:2f:3a:38:f7:08:17:16:ec:fc:3d:bd:46: b2:23:19:d3:fb:1d:9f:92:5e:40:31:21:dc:78:c6: b2:bd:3d:e5:70:f6:43:c3:9f:3d:57:95:83:ab:2f: 43:e8:05:ce:e1:2c:1b:78:c6:03:da:57:13:31:9e: 9a:1a:88:45:12:ae:cc:2b:ef:42:1a:62:aa:03:e3: 39:87:97:ae:d2:a9:0d:3e:a7:7a:8b:83:a3:50:34: 6a:fc:a8:c9:b0:58:05:70:38:75:68:f7:f8:e9:9f: 72:a8:50:37:ea:31:51:52:fe:8c:d2:1d:50:a0:62: 10:7f:c8:c8:16:c5:6a:88:65:54:d6:57:5c:dc:5f: 13:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:6D:CA:93:FC:E0:EA:A2:2C:8F:AD:4E:CD:A5:78:63:25:E8:39:79 X509v3 Authority Key Identifier: keyid:76:07:CC:C3:09:29:1D:C8:1B:19:14:3D:4D:3F:E2:8D:01:C6:BE:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:82:6f:84:58:b0:94:d2:dc:af:82:5a:c0:4e:15:83:a9:c6: d5:7d:92:e2:db:72:bd:c3:be:eb:5a:61:88:f1:56:5e:b5:e4: 52:c8:30:54:b9:93:de:6c:26:7c:3e:67:fb:eb:4d:f6:8c:ae: 63:11:e8:ca:a9:c9:88:11:2d:44:2b:04:e0:10:d2:82:78:58: b0:94:ea:42:14:36:ca:ad:df:0e:78:c8:7d:93:35:67:e5:4a: ca:92:62:8f:fb:b5:8d:50:0f:d9:df:6f:e9:0d:b1:9a:a0:bf: 1c:34:09:eb:1a:ff:46:2f:e3:26:44:b8:37:20:12:ca:7b:88: ea:f5:a2:7c:c8:ff:52:5a:97:41:40:bd:6c:95:6b:4f:2e:bc: 98:86:7d:b0:f1:b3:80:cf:4e:c1:7c:86:f6:a6:fe:06:98:db: 2a:66:b6:17:b0:e7:71:c6:18:54:fc:2d:c5:e7:16:3b:7e:62: fd:e2:b5:8f:4c:f9:76:29:21:be:a0:d6:79:c9:23:a4:92:d2: 7e:79:28:6c:f5:ea:f8:bd:b9:f3:de:c6:53:bf:e8:1e:c0:6d: 98:c0:5b:6b:ee:17:ff:f3:52:3d:00:5f:eb:03:0d:7b:7d:02: 70:7c:45:85:26:9d:8b:6d:07:ce:e8:7a:df:6c:d8:43:34:21: ad:f7:c4:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ4/cTEidUXoz0Ftv1j/VwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2MDdjY2MzMDkyOTFkYzgxYjE5MTQzZDRkM2ZlMjhkMDFj NmJlYmQwHhcNMjUxMjI2MDkwMTEwWhcNMjUxMjI3MDkwMTEwWjAzMTEwLwYDVQQD Eyg1NzZkY2E5M2ZjZTBlYWEyMmM4ZmFkNGVjZGE1Nzg2MzI1ZTgzOTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZp84BwrXF0aBxCx4eTtXJYwKXZf R8MhYrMkP/sS6jxrKzX6eC1TgzWGgTfy0zhwtc5Ah1wH1UQSPID6w0I036TrQcfw XAKRbURzWyWbI8W9wYtGx0dARxUZZbCIu/HttldQjcgCCLQfoKxLWsrSQKqsJMv7 w7VMVhIvOjj3CBcW7Pw9vUayIxnT+x2fkl5AMSHceMayvT3lcPZDw589V5WDqy9D 6AXO4SwbeMYD2lcTMZ6aGohFEq7MK+9CGmKqA+M5h5eu0qkNPqd6i4OjUDRq/KjJ sFgFcDh1aPf46Z9yqFA36jFRUv6M0h1QoGIQf8jIFsVqiGVU1ldc3F8TtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFdtypP84OqiLI+tTs2leGMl6Dl5MB8GA1UdIwQY MBaAFHYHzMMJKR3IGxkUPU0/4o0Bxr69MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGdmTXd3a3BIY2diR1JROVRUX2lqUUhHdnIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9hNjA3NmUtMTUxMC00ODhjLWI3ZmIt Yzk0ZmU0Yzk3MWQ0LzEvZGdmTXd3a3BIY2diR1JROVRUX2lqUUhHdnIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9hNjA3NmUtMTUxMC00ODhjLWI3ZmItYzk0ZmU0Yzk3MWQ0 LzEvZGdmTXd3a3BIY2diR1JROVRUX2lqUUhHdnIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVIJvhFiw lNLcr4JawE4Vg6nG1X2S4ttyvcO+61phiPFWXrXkUsgwVLmT3mwmfD5n++tN9oyu YxHoyqnJiBEtRCsE4BDSgnhYsJTqQhQ2yq3fDnjIfZM1Z+VKypJij/u1jVAP2d9v 6Q2xmqC/HDQJ6xr/Ri/jJkS4NyASynuI6vWifMj/UlqXQUC9bJVrTy68mIZ9sPGz gM9OwXyG9qb+BpjbKma2F7DnccYYVPwtxecWO35i/eK1j0z5dikhvqDWeckjpJLS fnkobPXq+L25897GU7/oHsBtmMBba+4X//NSPQBf6wMNe30CcHxFhSadi20Hzuh6 32zYQzQhrffEEw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:31 2025 by rpki-client