This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft File: DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft (raw, json) Hash identifier: H98eVnvwwVHdkqCE65V3UPePI7F1Yjy1LhNgFYGE1Fs= Subject key identifier: 4B:6D:87:BD:C6:93:C2:0D:03:39:25:63:B6:13:BF:46:71:D6:24:84 Authority key identifier: 0E:11:7A:3E:0D:0D:05:D4:B0:AB:82:30:80:E7:BF:6C:FD:4B:37:76 Certificate issuer: /CN=0e117a3e0d0d05d4b0ab823080e7bf6cfd4b3776 Certificate serial: 019B5976A70D8C4632404CB9D77ACF1648DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft Manifest number: 04D7 Signing time: Fri 26 Dec 2025 07:01:46 +0000 Manifest this update: Fri 26 Dec 2025 07:01:46 +0000 Manifest next update: Sat 27 Dec 2025 07:01:46 +0000 Files and hashes: 1: DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.crl (hash: WdDj6JrkXrwGLn6pEDNDvn7WhKEDuSCLKY6ibCy4DaY=) 2: WBCctmrLBY9TZchWHVefCJRpgwo.roa (hash: ha4SM2FYKNPb6uYgJ7O/6N/bp7uHsy7szwwtLn89ZkM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft rsync://rpki.ripe.net/repository/DEFAULT/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:a7:0d:8c:46:32:40:4c:b9:d7:7a:cf:16:48:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e117a3e0d0d05d4b0ab823080e7bf6cfd4b3776 Validity Not Before: Dec 26 07:01:46 2025 GMT Not After : Dec 27 07:01:46 2025 GMT Subject: CN=4b6d87bdc693c20d03392563b613bf4671d62484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:eb:5b:29:73:a1:68:85:89:85:b9:cc:fc:ae: b7:08:f4:08:c8:2f:17:01:5a:df:06:2b:e4:c9:bd: 68:58:e8:ae:f6:ea:fe:ba:24:8d:23:f0:10:62:f1: d3:28:41:0b:c1:e0:3d:1d:73:5b:c2:1a:1b:f0:e9: 4a:9d:75:5c:32:6e:20:bd:df:0f:f6:89:03:66:1c: 14:04:c2:06:75:d2:be:b9:23:1d:62:08:89:62:e4: c0:b1:32:b3:0a:8c:be:bc:38:cc:34:7c:d7:0d:48: c4:39:e5:52:4b:fb:bf:6a:e0:38:22:b8:d6:b5:42: c1:8e:3e:d7:3e:f2:6b:39:ca:46:35:67:0d:e6:ed: 02:d5:47:98:fc:ec:f7:6d:75:88:51:25:77:ff:cb: 87:35:eb:51:33:1b:77:ae:c4:fa:7f:0c:f3:58:ee: 0d:18:00:e1:2f:e3:bb:70:48:b3:8e:fe:3d:d0:3a: 1d:3e:5a:ac:cb:45:bf:04:10:48:4e:6b:c1:f2:56: d9:ed:49:47:1d:48:be:93:7f:ff:22:82:7d:eb:a5: a7:78:64:cf:e6:fa:f3:54:d7:ce:d8:5b:0b:91:29: 92:a6:e4:8c:73:29:ad:9e:59:a0:48:08:17:6b:bc: c1:5d:11:61:29:83:76:94:65:d4:fc:d2:64:f2:c6: 82:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:6D:87:BD:C6:93:C2:0D:03:39:25:63:B6:13:BF:46:71:D6:24:84 X509v3 Authority Key Identifier: keyid:0E:11:7A:3E:0D:0D:05:D4:B0:AB:82:30:80:E7:BF:6C:FD:4B:37:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:ca:c1:a8:5f:fc:2e:af:49:58:df:5d:ca:ce:d0:bc:52:48: c0:fe:ce:60:b8:c9:cc:2b:25:18:1f:bc:50:3e:11:b2:35:a1: 9f:1d:b5:9d:ac:4e:93:da:a8:ea:13:b7:db:c3:7a:9d:3d:1b: 13:8c:24:56:76:39:d0:f8:08:da:1d:3c:c7:5e:3f:8b:5f:01: 79:7e:02:cc:0d:f4:32:d6:84:8e:d1:04:39:6f:80:7f:0f:34: 1a:94:bb:63:6a:af:a6:ed:c7:97:bd:1c:be:a0:86:be:64:59: 15:64:ee:aa:79:63:18:f2:36:99:66:00:b1:6c:69:bd:9f:91: 42:2e:5e:3c:73:a7:c9:d0:6c:ea:00:eb:0e:21:69:c5:ea:54: d9:1f:c3:7d:d9:65:b4:da:8d:dd:d6:74:48:97:10:58:a4:9a: a0:1b:6b:8b:3f:8c:59:c4:01:2a:5f:3c:04:6e:c9:64:28:06: 2b:e6:e6:ab:4b:a1:43:b5:a2:3f:d9:db:4e:97:5a:70:1a:d5: dd:c2:d1:1e:9d:0d:38:1c:ea:2c:1e:e1:84:16:5c:e4:e5:16: 8a:ab:11:a3:44:64:12:7a:5d:db:ca:d4:b7:4c:e8:8c:0d:12: 57:fe:55:9f:c4:a8:94:f6:ca:99:dd:37:56:74:82:ba:dd:a9: c0:9a:27:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdqcNjEYyQEy513rPFkjeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMTE3YTNlMGQwZDA1ZDRiMGFiODIzMDgwZTdiZjZjZmQ0 YjM3NzYwHhcNMjUxMjI2MDcwMTQ2WhcNMjUxMjI3MDcwMTQ2WjAzMTEwLwYDVQQD Eyg0YjZkODdiZGM2OTNjMjBkMDMzOTI1NjNiNjEzYmY0NjcxZDYyNDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+tbKXOhaIWJhbnM/K63CPQIyC8X AVrfBivkyb1oWOiu9ur+uiSNI/AQYvHTKEELweA9HXNbwhob8OlKnXVcMm4gvd8P 9okDZhwUBMIGddK+uSMdYgiJYuTAsTKzCoy+vDjMNHzXDUjEOeVSS/u/auA4IrjW tULBjj7XPvJrOcpGNWcN5u0C1UeY/Oz3bXWIUSV3/8uHNetRMxt3rsT6fwzzWO4N GADhL+O7cEizjv490DodPlqsy0W/BBBITmvB8lbZ7UlHHUi+k3//IoJ966WneGTP 5vrzVNfO2FsLkSmSpuSMcymtnlmgSAgXa7zBXRFhKYN2lGXU/NJk8saCNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEtth73Gk8INAzklY7YTv0Zx1iSEMB8GA1UdIwQY MBaAFA4Rej4NDQXUsKuCMIDnv2z9Szd2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGhGNlBnME5CZFN3cTRJd2dPZV9iUDFMTjNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8xNDIyZmEtZTgyYi00YzBiLWIyM2It ZDg0NzVmMTg0NjRlLzEvRGhGNlBnME5CZFN3cTRJd2dPZV9iUDFMTjNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS8xNDIyZmEtZTgyYi00YzBiLWIyM2ItZDg0NzVmMTg0NjRl LzEvRGhGNlBnME5CZFN3cTRJd2dPZV9iUDFMTjNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX8rBqF/8 Lq9JWN9dys7QvFJIwP7OYLjJzCslGB+8UD4RsjWhnx21naxOk9qo6hO328N6nT0b E4wkVnY50PgI2h08x14/i18BeX4CzA30MtaEjtEEOW+Afw80GpS7Y2qvpu3Hl70c vqCGvmRZFWTuqnljGPI2mWYAsWxpvZ+RQi5ePHOnydBs6gDrDiFpxepU2R/Dfdll tNqN3dZ0SJcQWKSaoBtriz+MWcQBKl88BG7JZCgGK+bmq0uhQ7WiP9nbTpdacBrV 3cLRHp0NOBzqLB7hhBZc5OUWiqsRo0RkEnpd28rUt0zojA0SV/5Vn8SolPbKmd03 VnSCut2pwJonaQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:05:26 2025 by rpki-client