This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft File: DFLdBfaKoaMkrVvBJHbFuaYevAA.mft (raw, json) Hash identifier: KvCRInriaL9mb2X96k+BRCxJuFUpeUNpwLzR84MGUU0= Subject key identifier: D4:C8:F3:D2:83:39:E8:5F:05:12:11:4D:71:98:05:36:3C:C3:6C:F3 Authority key identifier: 0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00 Certificate issuer: /CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00 Certificate serial: 019B0E5B6D66227798BE8EBA63D54E74CCED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft Manifest number: 02BD Signing time: Thu 11 Dec 2025 17:00:31 +0000 Manifest this update: Thu 11 Dec 2025 17:00:31 +0000 Manifest next update: Fri 12 Dec 2025 17:00:31 +0000 Files and hashes: 1: 1qnlJEQNpHnPn_lNZ4CHHpUTAqE.roa (hash: Vr0tQvsEhdsTIIzQr8GlHNrOORTAaoDkwB4jUIzgLLo=) 2: DFLdBfaKoaMkrVvBJHbFuaYevAA.crl (hash: GrkvdB32IThH5eyxW22UWpS7tnuX9EPyltQqsiBZ2Y8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 17:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5b:6d:66:22:77:98:be:8e:ba:63:d5:4e:74:cc:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00 Validity Not Before: Dec 11 17:00:31 2025 GMT Not After : Dec 12 17:00:31 2025 GMT Subject: CN=d4c8f3d28339e85f0512114d719805363cc36cf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:22:1a:9b:44:a0:42:58:20:26:b4:fc:14:d2: 2f:46:e9:8c:f0:32:76:54:d2:5d:e2:b3:c1:d6:43: 09:e6:45:cc:96:97:db:f4:d2:71:98:8e:81:44:08: 7f:21:1d:86:33:db:a8:85:ee:9d:40:e2:3a:0b:f9: c3:5d:4f:53:b1:06:9e:27:bc:5c:df:67:91:33:33: fb:d5:9f:8a:61:94:3e:9b:ec:73:ca:fd:5f:6d:7a: 39:44:b1:e1:5b:08:a6:28:ef:03:2e:f7:7d:03:ba: 3b:0b:7f:50:c2:0e:fa:76:04:dc:46:49:41:63:e4: c5:6f:f4:db:bb:f6:29:7a:84:0b:14:2f:fc:b1:5e: 4f:8f:1f:9a:30:df:ac:52:a4:5b:51:80:9f:96:4f: 95:44:ec:a7:78:9a:32:1f:2c:18:2b:0f:f8:54:f3: 81:80:20:1b:95:89:eb:9d:a9:7e:3f:39:e2:64:e6: 21:ff:7a:7b:11:a7:4c:83:a5:39:cf:55:4c:15:5d: 80:d9:30:43:e3:74:fe:25:1a:b3:d9:06:b2:3c:ac: a8:17:0c:2c:8b:b5:c3:a5:b0:f6:fb:ab:db:e7:1a: 48:3a:15:90:ac:a3:6a:6c:1b:01:25:f4:5e:22:f3: e3:c9:f3:68:85:be:ca:1d:36:53:b3:d0:74:0d:a5: 19:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:C8:F3:D2:83:39:E8:5F:05:12:11:4D:71:98:05:36:3C:C3:6C:F3 X509v3 Authority Key Identifier: keyid:0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:e2:b8:8d:70:f7:a8:d4:f8:d4:fc:0a:ce:bd:40:1c:a4:48: 61:92:37:3c:4d:08:f3:f5:9d:3e:0c:a2:14:01:ce:6b:9f:59: 56:60:70:ec:6f:8e:64:5c:b5:9b:97:99:81:54:0d:c1:ee:9a: 7d:ef:38:40:17:b2:a9:3b:21:f7:bf:62:d9:51:e1:64:8e:f7: e4:05:7b:b5:3b:bc:98:3f:03:9e:b1:0f:e6:d5:7b:75:95:af: 84:61:58:9c:43:61:bb:2a:50:18:bc:3f:78:11:4d:97:a2:53: 9f:3d:3e:9a:fe:0c:65:59:96:e1:03:2a:26:4f:cb:1c:f8:e0: 80:f8:9d:1b:25:68:e1:6c:6d:58:a3:31:20:a5:36:87:3c:42: 9f:a5:e4:02:b1:0d:e0:c8:4c:4f:57:18:5f:42:98:20:32:a2: 97:5d:c3:76:64:4e:31:7e:65:c4:45:99:77:10:4f:59:ee:de: 99:d8:5e:2a:eb:25:44:45:ca:76:d1:77:3f:7d:ed:c0:c9:23: 85:70:c2:d9:e9:40:6f:65:65:de:44:2f:e4:a0:24:91:c3:c9: b6:d5:47:9a:8a:9c:35:2d:99:e8:16:62:a8:00:a9:83:26:7b: 24:35:6e:a4:6a:b6:c5:5a:0b:d9:cb:fc:af:b4:08:0c:ef:e9: 53:e4:ce:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOW21mIneYvo66Y9VOdMztMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNTJkZDA1ZjY4YWExYTMyNGFkNWJjMTI0NzZjNWI5YTYx ZWJjMDAwHhcNMjUxMjExMTcwMDMxWhcNMjUxMjEyMTcwMDMxWjAzMTEwLwYDVQQD EyhkNGM4ZjNkMjgzMzllODVmMDUxMjExNGQ3MTk4MDUzNjNjYzM2Y2YzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSIam0SgQlggJrT8FNIvRumM8DJ2 VNJd4rPB1kMJ5kXMlpfb9NJxmI6BRAh/IR2GM9uohe6dQOI6C/nDXU9TsQaeJ7xc 32eRMzP71Z+KYZQ+m+xzyv1fbXo5RLHhWwimKO8DLvd9A7o7C39Qwg76dgTcRklB Y+TFb/Tbu/YpeoQLFC/8sV5Pjx+aMN+sUqRbUYCflk+VROyneJoyHywYKw/4VPOB gCAblYnrnal+PzniZOYh/3p7EadMg6U5z1VMFV2A2TBD43T+JRqz2QayPKyoFwws i7XDpbD2+6vb5xpIOhWQrKNqbBsBJfReIvPjyfNohb7KHTZTs9B0DaUZ4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNTI89KDOehfBRIRTXGYBTY8w2zzMB8GA1UdIwQY MBaAFAxS3QX2iqGjJK1bwSR2xbmmHrwAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZMZEJmYUtvYU1rclZ2QkpIYkZ1YVlldkFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xYjRlNTctNWViNC00YjlkLWJjMjYt NzA3NDllN2E0ZDk0LzEvREZMZEJmYUtvYU1rclZ2QkpIYkZ1YVlldkFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS8xYjRlNTctNWViNC00YjlkLWJjMjYtNzA3NDllN2E0ZDk0 LzEvREZMZEJmYUtvYU1rclZ2QkpIYkZ1YVlldkFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkOK4jXD3 qNT41PwKzr1AHKRIYZI3PE0I8/WdPgyiFAHOa59ZVmBw7G+OZFy1m5eZgVQNwe6a fe84QBeyqTsh979i2VHhZI735AV7tTu8mD8DnrEP5tV7dZWvhGFYnENhuypQGLw/ eBFNl6JTnz0+mv4MZVmW4QMqJk/LHPjggPidGyVo4WxtWKMxIKU2hzxCn6XkArEN 4MhMT1cYX0KYIDKil13DdmROMX5lxEWZdxBPWe7emdheKuslREXKdtF3P33twMkj hXDC2elAb2Vl3kQv5KAkkcPJttVHmoqcNS2Z6BZiqACpgyZ7JDVupGq2xVoL2cv8 r7QIDO/pU+TOLA== -----END CERTIFICATE-----Generated at Fri Dec 12 02:45:27 2025 by rpki-client