This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft File: DFLdBfaKoaMkrVvBJHbFuaYevAA.mft (raw, json) Hash identifier: pWwrWYDxDWr3jjyOe11Cmcjps+bT0eFmG1RSX82nDYY= Subject key identifier: 10:5C:4D:02:B3:16:58:E8:2E:43:25:C8:4F:F9:2A:79:7F:F9:6C:70 Authority key identifier: 0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00 Certificate issuer: /CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00 Certificate serial: 019B1049D00907B589C4E13EF45748AF2F46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft Manifest number: 02BE Signing time: Fri 12 Dec 2025 02:00:31 +0000 Manifest this update: Fri 12 Dec 2025 02:00:31 +0000 Manifest next update: Sat 13 Dec 2025 02:00:31 +0000 Files and hashes: 1: 1qnlJEQNpHnPn_lNZ4CHHpUTAqE.roa (hash: Vr0tQvsEhdsTIIzQr8GlHNrOORTAaoDkwB4jUIzgLLo=) 2: DFLdBfaKoaMkrVvBJHbFuaYevAA.crl (hash: KU9XOd8PBOfLNAF7UWZEr+FmOyyi3dtk5Oya1rZPCY8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:49:d0:09:07:b5:89:c4:e1:3e:f4:57:48:af:2f:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00 Validity Not Before: Dec 12 02:00:31 2025 GMT Not After : Dec 13 02:00:31 2025 GMT Subject: CN=105c4d02b31658e82e4325c84ff92a797ff96c70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cd:60:fb:83:dd:ff:b0:cc:8a:de:8a:98:6d: 62:a3:dd:3a:4f:ef:30:e5:5e:06:47:ec:86:9c:65: 58:1a:1f:68:3d:57:de:f8:92:91:2d:df:f3:1c:93: 8b:23:b2:6d:e3:5f:b9:ea:f9:49:3a:d8:a1:be:0a: b4:d9:ca:f6:1d:9b:04:90:fa:85:8c:f2:c2:33:6e: 5d:a5:cb:d9:f2:84:7c:9f:ec:43:7b:e7:84:31:94: 4c:43:09:45:78:b4:7f:21:e3:2f:c2:38:67:68:c8: 34:04:4e:ca:82:7e:d4:48:0f:b3:3f:6e:03:60:f0: d9:2f:5a:25:d6:57:fc:0f:01:e2:d3:ba:4b:18:66: 9d:3d:54:e2:d2:a1:f9:a0:3b:25:06:b0:b8:0f:1d: 89:16:ee:70:ef:3a:5f:45:02:ba:e1:f3:73:f6:33: 77:03:33:5b:8a:34:42:81:ad:83:2a:32:97:bb:99: a9:19:80:e3:82:f9:e4:a3:2f:3e:18:4f:79:6f:e0: 98:a5:86:1c:17:0b:1f:26:b8:f0:39:47:9a:ae:6a: 3f:08:c2:c8:d1:ac:66:dc:9f:24:71:e6:41:3b:f2: fe:6a:c1:86:87:85:68:24:5e:c8:bc:4b:33:77:ce: 7a:19:9d:02:ed:be:c3:ea:4e:7a:44:51:20:59:15: 2a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:5C:4D:02:B3:16:58:E8:2E:43:25:C8:4F:F9:2A:79:7F:F9:6C:70 X509v3 Authority Key Identifier: keyid:0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:fb:a0:ef:bd:b4:3c:58:8a:5c:f5:65:83:65:79:9a:12:da: b6:58:32:cd:b8:86:36:3a:22:df:24:11:4c:ff:23:73:db:61: 06:a7:52:f9:bf:fa:ca:12:bc:0b:dd:a6:b7:d5:ec:0e:9b:37: f7:5d:3e:ec:ce:37:b3:48:d8:46:eb:b4:34:ef:e0:69:55:5e: eb:54:1f:ab:a4:ef:06:3b:5f:90:57:b9:7b:1e:ae:b4:b5:8c: 19:fd:04:12:c2:ff:59:43:1c:84:41:a7:d1:5e:36:ee:e5:ee: 46:06:69:a0:73:47:d9:4a:bc:50:ce:3e:dc:d5:ca:55:33:a5: 60:af:cc:11:ee:4d:45:8a:1d:0d:92:d3:b4:ad:9c:b4:a2:6e: 2a:c0:76:79:4e:bc:cf:c8:ca:3c:09:e3:64:b4:3e:f2:96:03: 14:b5:dc:c3:00:d3:4c:20:71:a2:4a:83:d7:d9:d4:5f:d8:4c: bc:87:19:4f:91:29:3f:b6:29:fc:28:1b:21:35:ed:c9:b7:61: 19:8e:1a:40:53:4f:5c:f2:ce:6c:4c:1c:c5:db:b2:41:a0:5d: cf:d3:37:e7:4d:ba:f7:41:a7:84:b8:b2:bc:6e:bd:1a:e1:9a: 22:1f:19:cc:e2:af:ec:b7:00:26:dc:84:08:02:95:9d:a4:2f: 90:4c:58:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQSdAJB7WJxOE+9FdIry9GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNTJkZDA1ZjY4YWExYTMyNGFkNWJjMTI0NzZjNWI5YTYx ZWJjMDAwHhcNMjUxMjEyMDIwMDMxWhcNMjUxMjEzMDIwMDMxWjAzMTEwLwYDVQQD EygxMDVjNGQwMmIzMTY1OGU4MmU0MzI1Yzg0ZmY5MmE3OTdmZjk2YzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt81g+4Pd/7DMit6KmG1io906T+8w 5V4GR+yGnGVYGh9oPVfe+JKRLd/zHJOLI7Jt41+56vlJOtihvgq02cr2HZsEkPqF jPLCM25dpcvZ8oR8n+xDe+eEMZRMQwlFeLR/IeMvwjhnaMg0BE7Kgn7USA+zP24D YPDZL1ol1lf8DwHi07pLGGadPVTi0qH5oDslBrC4Dx2JFu5w7zpfRQK64fNz9jN3 AzNbijRCga2DKjKXu5mpGYDjgvnkoy8+GE95b+CYpYYcFwsfJrjwOUearmo/CMLI 0axm3J8kceZBO/L+asGGh4VoJF7IvEszd856GZ0C7b7D6k56RFEgWRUqSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBBcTQKzFljoLkMlyE/5Knl/+WxwMB8GA1UdIwQY MBaAFAxS3QX2iqGjJK1bwSR2xbmmHrwAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZMZEJmYUtvYU1rclZ2QkpIYkZ1YVlldkFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xYjRlNTctNWViNC00YjlkLWJjMjYt NzA3NDllN2E0ZDk0LzEvREZMZEJmYUtvYU1rclZ2QkpIYkZ1YVlldkFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS8xYjRlNTctNWViNC00YjlkLWJjMjYtNzA3NDllN2E0ZDk0 LzEvREZMZEJmYUtvYU1rclZ2QkpIYkZ1YVlldkFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfPug7720 PFiKXPVlg2V5mhLatlgyzbiGNjoi3yQRTP8jc9thBqdS+b/6yhK8C92mt9XsDps3 910+7M43s0jYRuu0NO/gaVVe61Qfq6TvBjtfkFe5ex6utLWMGf0EEsL/WUMchEGn 0V427uXuRgZpoHNH2Uq8UM4+3NXKVTOlYK/MEe5NRYodDZLTtK2ctKJuKsB2eU68 z8jKPAnjZLQ+8pYDFLXcwwDTTCBxokqD19nUX9hMvIcZT5EpP7Yp/CgbITXtybdh GY4aQFNPXPLObEwcxduyQaBdz9M3502690GnhLiyvG69GuGaIh8ZzOKv7LcAJtyE CAKVnaQvkExYuQ== -----END CERTIFICATE-----Generated at Fri Dec 12 04:00:51 2025 by rpki-client