This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft File: DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft (raw, json) Hash identifier: 4OyIAQ8ZhsGFE27gQ2whmsJZw9aE0vmOfGhUIyQcRTk= Subject key identifier: AB:85:5E:CF:84:85:AE:93:E6:87:C6:4D:74:8A:46:AC:F8:45:28:58 Authority key identifier: 0E:F8:1D:9E:89:E2:C4:71:32:1D:96:7F:70:92:09:4D:AD:FE:2A:A8 Certificate issuer: /CN=0ef81d9e89e2c471321d967f7092094dadfe2aa8 Certificate serial: 019B10EF0055AACF396657BFFBD9EB3A11E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft Manifest number: 0E8F Signing time: Fri 12 Dec 2025 05:00:57 +0000 Manifest this update: Fri 12 Dec 2025 05:00:57 +0000 Manifest next update: Sat 13 Dec 2025 05:00:57 +0000 Files and hashes: 1: 0CytvhJudNwvmE_qIywCHCo6NeE.roa (hash: 88aZ7TRUqfxW9sX6erHIjwQ5v2GdVw5BH0X6fcp/TYs=) 2: DvgdnonixHEyHZZ_cJIJTa3-Kqg.crl (hash: z3u4/3gplO0OWcgVJLloqKTGemXNtk2Icz0vNMIQK6U=) 3: KrKK6KlWrbwro0xZGJbZRZAIMbY.roa (hash: mLgmMH2GpuH6gYsfQafOR8wiybY64hDgIvWRNRviit8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 05:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:ef:00:55:aa:cf:39:66:57:bf:fb:d9:eb:3a:11:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ef81d9e89e2c471321d967f7092094dadfe2aa8 Validity Not Before: Dec 12 05:00:57 2025 GMT Not After : Dec 13 05:00:57 2025 GMT Subject: CN=ab855ecf8485ae93e687c64d748a46acf8452858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:dd:0f:3f:28:b0:62:2b:83:cb:bd:b0:f3:f2: 2e:14:5a:e3:8a:22:0f:fb:be:98:f8:5b:94:be:a2: d1:5e:69:aa:d9:97:a5:b5:23:c7:2c:6e:3f:5d:06: c7:72:8a:9e:79:6e:c0:82:32:9c:17:f6:14:2d:ae: b7:88:67:05:5d:ae:6a:ae:32:d8:b0:39:06:f4:0f: 44:33:4f:93:f4:29:27:f8:ba:ee:ea:a0:04:aa:75: 00:4e:53:40:1c:c7:97:09:f4:ad:60:4a:f4:ec:f5: 64:d1:f3:eb:40:62:6a:4f:93:49:25:75:08:d4:e1: d8:78:3f:10:74:f3:90:ad:67:f8:b6:46:ad:27:11: 0c:2b:4e:f8:1c:a2:4e:4e:9c:5f:a6:53:69:01:4a: e2:0f:bd:ff:ba:92:a5:14:47:63:2e:75:d7:b7:42: 4d:06:41:12:3e:ef:92:75:49:51:f0:22:04:e8:76: 28:5c:95:b5:80:f0:64:85:8a:3c:2d:a1:c1:8b:a0: b7:55:27:10:96:03:41:4d:4f:8e:b2:f1:7f:3f:18: c0:4a:6f:67:4a:5f:e0:9e:22:84:01:4f:2b:33:71: 54:3b:61:81:ab:a8:e8:8e:6b:e4:22:21:32:72:a6: b9:e4:4b:76:8f:04:28:76:67:6b:ca:d8:13:06:d7: ec:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:85:5E:CF:84:85:AE:93:E6:87:C6:4D:74:8A:46:AC:F8:45:28:58 X509v3 Authority Key Identifier: keyid:0E:F8:1D:9E:89:E2:C4:71:32:1D:96:7F:70:92:09:4D:AD:FE:2A:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:a7:e7:30:8b:bd:f3:ad:d3:a1:22:c0:24:bc:98:17:19:5e: ea:62:8c:5d:05:20:81:67:b0:a9:31:05:ec:f5:a1:ce:ab:d0: 09:62:2c:c4:92:cc:13:9a:1c:cc:d8:90:1b:1f:40:ab:ca:e0: 99:bc:10:56:06:d1:76:40:c5:ee:6e:f4:15:6d:78:70:d3:20: c1:3f:2e:ca:2b:78:9e:36:e7:82:97:df:66:fc:f1:53:fe:c1: ee:e2:f6:f7:c7:bb:ce:3e:09:35:5b:d3:31:d0:bc:30:df:e2: dc:24:4a:ed:83:8d:5c:c5:57:32:1e:2b:46:7e:f6:e3:25:2d: 68:18:2a:24:35:46:78:f0:8e:b3:6f:b7:d8:b7:3f:f5:0b:33: c2:37:79:b5:ad:9d:62:c8:4c:1f:aa:97:ee:65:dc:95:1b:75: 1f:23:5c:ca:4d:6b:2f:4a:d9:73:6f:d3:8c:36:a8:85:4b:b9: 76:54:97:ca:b5:79:04:09:e3:64:a7:76:c9:78:f1:3e:ad:88: 0a:b2:ee:c5:68:91:39:b6:74:d3:72:ce:26:0a:b5:52:12:18: 04:49:c3:bf:4a:bf:b4:5e:4d:ef:66:37:a4:44:37:a4:4a:84: e6:d5:6e:ed:dc:2f:51:6d:aa:ce:9c:96:3a:c9:ce:7e:8b:92: 47:3d:da:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQ7wBVqs85Zle/+9nrOhHoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlZjgxZDllODllMmM0NzEzMjFkOTY3ZjcwOTIwOTRkYWRm ZTJhYTgwHhcNMjUxMjEyMDUwMDU3WhcNMjUxMjEzMDUwMDU3WjAzMTEwLwYDVQQD EyhhYjg1NWVjZjg0ODVhZTkzZTY4N2M2NGQ3NDhhNDZhY2Y4NDUyODU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq90PPyiwYiuDy72w8/IuFFrjiiIP +76Y+FuUvqLRXmmq2ZeltSPHLG4/XQbHcoqeeW7AgjKcF/YULa63iGcFXa5qrjLY sDkG9A9EM0+T9Ckn+Lru6qAEqnUATlNAHMeXCfStYEr07PVk0fPrQGJqT5NJJXUI 1OHYeD8QdPOQrWf4tkatJxEMK074HKJOTpxfplNpAUriD73/upKlFEdjLnXXt0JN BkESPu+SdUlR8CIE6HYoXJW1gPBkhYo8LaHBi6C3VScQlgNBTU+OsvF/PxjASm9n Sl/gniKEAU8rM3FUO2GBq6jojmvkIiEycqa55Et2jwQodmdrytgTBtfsmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKuFXs+Eha6T5ofGTXSKRqz4RShYMB8GA1UdIwQY MBaAFA74HZ6J4sRxMh2Wf3CSCU2t/iqoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHZnZG5vbml4SEV5SFpaX2NKSUpUYTMtS3FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS81ZDE1YTgtMjJhNy00MDFiLThjNWUt MDc1ZjI0ZTRiZTcxLzEvRHZnZG5vbml4SEV5SFpaX2NKSUpUYTMtS3FnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS81ZDE1YTgtMjJhNy00MDFiLThjNWUtMDc1ZjI0ZTRiZTcx LzEvRHZnZG5vbml4SEV5SFpaX2NKSUpUYTMtS3FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC6fnMIu9 863ToSLAJLyYFxle6mKMXQUggWewqTEF7PWhzqvQCWIsxJLME5oczNiQGx9Aq8rg mbwQVgbRdkDF7m70FW14cNMgwT8uyit4njbngpffZvzxU/7B7uL298e7zj4JNVvT MdC8MN/i3CRK7YONXMVXMh4rRn724yUtaBgqJDVGePCOs2+32Lc/9Qszwjd5ta2d YshMH6qX7mXclRt1HyNcyk1rL0rZc2/TjDaohUu5dlSXyrV5BAnjZKd2yXjxPq2I CrLuxWiRObZ003LOJgq1UhIYBEnDv0q/tF5N72Y3pEQ3pEqE5tVu7dwvUW2qzpyW OsnOfouSRz3abw== -----END CERTIFICATE-----Generated at Fri Dec 12 12:21:46 2025 by rpki-client