This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/5ca079-f535-4907-882c-1382c01acc48/1/dj5fBqDfthYiD7Vh7AFPFPlqqNo.mft File: dj5fBqDfthYiD7Vh7AFPFPlqqNo.mft (raw, json) Hash identifier: CHZImLQCFNNxj79ADjACkYhGCDTNKQTT7bQwqOwZLps= Subject key identifier: 60:F4:7C:21:EB:F8:07:74:9A:BA:AE:F8:3B:B0:04:D2:54:B0:6B:47 Authority key identifier: 76:3E:5F:06:A0:DF:B6:16:22:0F:B5:61:EC:01:4F:14:F9:6A:A8:DA Certificate issuer: /CN=763e5f06a0dfb616220fb561ec014f14f96aa8da Certificate serial: 019B59ACCF49C9ED4B1EAD61D1E069962C70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dj5fBqDfthYiD7Vh7AFPFPlqqNo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/5ca079-f535-4907-882c-1382c01acc48/1/dj5fBqDfthYiD7Vh7AFPFPlqqNo.mft Manifest number: FF Signing time: Fri 26 Dec 2025 08:00:56 +0000 Manifest this update: Fri 26 Dec 2025 08:00:56 +0000 Manifest next update: Sat 27 Dec 2025 08:00:56 +0000 Files and hashes: 1: dj5fBqDfthYiD7Vh7AFPFPlqqNo.crl (hash: myeDxzI/mHNpV6LENQ+Ska5y1fmuhba0StP/vp12bvo=) 2: jhxw0eIehEqS3OmVKSiDMo0Z8iQ.roa (hash: aqk1SkhMgiFY662QVaJHhd3ujhhP/khjc7OVDJ8gGoI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/5ca079-f535-4907-882c-1382c01acc48/1/dj5fBqDfthYiD7Vh7AFPFPlqqNo.crl rsync://rpki.ripe.net/repository/DEFAULT/88/5ca079-f535-4907-882c-1382c01acc48/1/dj5fBqDfthYiD7Vh7AFPFPlqqNo.mft rsync://rpki.ripe.net/repository/DEFAULT/dj5fBqDfthYiD7Vh7AFPFPlqqNo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:cf:49:c9:ed:4b:1e:ad:61:d1:e0:69:96:2c:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=763e5f06a0dfb616220fb561ec014f14f96aa8da Validity Not Before: Dec 26 08:00:56 2025 GMT Not After : Dec 27 08:00:56 2025 GMT Subject: CN=60f47c21ebf807749abaaef83bb004d254b06b47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ac:24:47:4e:1e:4f:79:af:15:4e:ea:b3:44: 8a:f3:3b:62:d5:bf:01:2e:38:d4:37:e6:5a:9f:59: a4:e6:7b:b9:c6:21:f4:d9:06:2d:0f:6b:eb:a5:bd: 78:b3:de:ad:71:11:6b:9a:ca:19:e5:5a:5a:fc:31: e7:b0:42:4d:77:4d:2a:3f:95:78:31:6e:ca:c5:4d: 87:cc:4c:24:6e:6a:f6:72:15:b2:39:32:6c:2a:de: 49:d3:91:fe:df:a1:39:ae:b6:5f:36:6f:02:9c:f3: 97:d5:a5:6a:10:44:8f:46:10:18:97:f5:2e:69:56: 7a:3c:6d:d4:c1:15:3f:5f:6c:21:07:a2:c5:8a:76: d8:6a:2f:49:3b:e3:69:38:28:2e:97:28:d7:25:4d: 66:a2:51:d7:6d:6b:ce:c6:f7:9d:ea:e3:fe:34:dc: b4:0c:2f:7c:e8:57:8e:21:15:88:2d:d1:83:3b:05: 95:3d:6d:eb:cb:98:13:28:49:a3:dc:38:16:73:b6: 66:d7:62:7b:66:1f:57:40:14:1e:a2:2b:67:f1:0e: 55:09:6b:93:4b:7c:65:c3:74:07:9e:76:8b:93:c8: 95:b3:dc:c1:23:59:4a:c8:2b:89:c3:66:ac:de:ca: 07:25:cc:5f:88:0b:41:fe:2a:db:86:b3:2c:b2:0c: d7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:F4:7C:21:EB:F8:07:74:9A:BA:AE:F8:3B:B0:04:D2:54:B0:6B:47 X509v3 Authority Key Identifier: keyid:76:3E:5F:06:A0:DF:B6:16:22:0F:B5:61:EC:01:4F:14:F9:6A:A8:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dj5fBqDfthYiD7Vh7AFPFPlqqNo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/5ca079-f535-4907-882c-1382c01acc48/1/dj5fBqDfthYiD7Vh7AFPFPlqqNo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/5ca079-f535-4907-882c-1382c01acc48/1/dj5fBqDfthYiD7Vh7AFPFPlqqNo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:21:1c:14:58:56:c4:4e:2b:95:5f:ad:a9:35:37:6e:0a:84: b9:5c:7a:a0:c0:4c:4c:61:7f:0c:90:1d:f0:a7:0f:f7:33:a4: d6:98:47:39:e6:cc:8a:7e:05:8d:e2:92:1a:89:44:57:e4:3f: fe:4f:c9:93:43:97:1e:91:e8:b7:cc:8c:78:6c:7a:7b:e3:fc: 81:38:76:b3:6b:ab:0d:93:0d:ba:9f:17:ae:88:08:1e:5e:0b: 88:6c:ae:7f:4b:ee:d4:e1:e0:32:d7:7f:35:fc:66:3d:b3:a4: 80:30:87:69:e5:05:4e:75:0d:b6:65:93:87:67:51:5e:9e:59: 7e:10:44:db:29:d6:f2:ce:6b:b3:31:21:d3:f1:db:b7:5b:ae: 59:a6:11:f4:16:ea:6f:33:3d:a1:33:e4:4e:e5:1a:80:de:24: 9c:aa:fe:a0:e9:eb:67:f3:87:c9:fc:f1:d4:93:0e:4c:15:4a: a4:ce:14:7d:3b:96:7a:20:c6:99:c2:fc:9f:9e:59:90:5e:3a: 01:57:eb:9d:bf:85:63:11:ea:0c:dd:57:27:c0:de:eb:fb:59: f9:0a:91:a7:a0:f2:97:c3:b1:e2:e4:73:29:0c:e2:71:e9:0b: f5:71:47:de:80:40:36:11:1f:e7:31:e2:25:49:90:f6:d1:c8: 15:d3:e1:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrM9Jye1LHq1h0eBplixwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2M2U1ZjA2YTBkZmI2MTYyMjBmYjU2MWVjMDE0ZjE0Zjk2 YWE4ZGEwHhcNMjUxMjI2MDgwMDU2WhcNMjUxMjI3MDgwMDU2WjAzMTEwLwYDVQQD Eyg2MGY0N2MyMWViZjgwNzc0OWFiYWFlZjgzYmIwMDRkMjU0YjA2YjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6wkR04eT3mvFU7qs0SK8zti1b8B LjjUN+Zan1mk5nu5xiH02QYtD2vrpb14s96tcRFrmsoZ5Vpa/DHnsEJNd00qP5V4 MW7KxU2HzEwkbmr2chWyOTJsKt5J05H+36E5rrZfNm8CnPOX1aVqEESPRhAYl/Uu aVZ6PG3UwRU/X2whB6LFinbYai9JO+NpOCgulyjXJU1molHXbWvOxved6uP+NNy0 DC986FeOIRWILdGDOwWVPW3ry5gTKEmj3DgWc7Zm12J7Zh9XQBQeoitn8Q5VCWuT S3xlw3QHnnaLk8iVs9zBI1lKyCuJw2as3soHJcxfiAtB/irbhrMssgzXuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGD0fCHr+Ad0mrqu+DuwBNJUsGtHMB8GA1UdIwQY MBaAFHY+Xwag37YWIg+1YewBTxT5aqjaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGo1ZkJxRGZ0aFlpRDdWaDdBRlBGUGxxcU5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC81Y2EwNzktZjUzNS00OTA3LTg4MmMt MTM4MmMwMWFjYzQ4LzEvZGo1ZkJxRGZ0aFlpRDdWaDdBRlBGUGxxcU5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC81Y2EwNzktZjUzNS00OTA3LTg4MmMtMTM4MmMwMWFjYzQ4 LzEvZGo1ZkJxRGZ0aFlpRDdWaDdBRlBGUGxxcU5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARCEcFFhW xE4rlV+tqTU3bgqEuVx6oMBMTGF/DJAd8KcP9zOk1phHOebMin4FjeKSGolEV+Q/ /k/Jk0OXHpHot8yMeGx6e+P8gTh2s2urDZMNup8XrogIHl4LiGyuf0vu1OHgMtd/ NfxmPbOkgDCHaeUFTnUNtmWTh2dRXp5ZfhBE2ynW8s5rszEh0/Hbt1uuWaYR9Bbq bzM9oTPkTuUagN4knKr+oOnrZ/OHyfzx1JMOTBVKpM4UfTuWeiDGmcL8n55ZkF46 AVfrnb+FYxHqDN1XJ8De6/tZ+QqRp6Dyl8Ox4uRzKQzicekL9XFH3oBANhEf5zHi JUmQ9tHIFdPh3A== -----END CERTIFICATE-----Generated at Fri Dec 26 14:08:50 2025 by rpki-client