This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.mft File: DvgMyei0RaB_7srAr8WeQtxxAmM.mft (raw, json) Hash identifier: jyR51WOgchwg74PfD3r3LqzjPnd/KvR5J9rJ17PcPbE= Subject key identifier: 2F:29:39:14:2E:DC:E2:22:0E:EB:68:38:5C:56:7B:30:70:DE:7C:51 Authority key identifier: 0E:F8:0C:C9:E8:B4:45:A0:7F:EE:CA:C0:AF:C5:9E:42:DC:71:02:63 Certificate issuer: /CN=0ef80cc9e8b445a07feecac0afc59e42dc710263 Certificate serial: 019B1D990A4C5D6E9AD109F7E4064ABF2DD8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvgMyei0RaB_7srAr8WeQtxxAmM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.mft Manifest number: 04C8 Signing time: Sun 14 Dec 2025 16:02:07 +0000 Manifest this update: Sun 14 Dec 2025 16:02:07 +0000 Manifest next update: Mon 15 Dec 2025 16:02:07 +0000 Files and hashes: 1: DvgMyei0RaB_7srAr8WeQtxxAmM.crl (hash: MfmqL9h+4yxbcVVSu+QLB9MEj9iiX/ipwrC8MixxgIU=) 2: GkiYUK0j2nxxbWMqhxnhdq_0Enc.roa (hash: NOyHUSRyn/zm35BU84aYQfd0YAX7k067uz4v2RofCv8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.mft rsync://rpki.ripe.net/repository/DEFAULT/DvgMyei0RaB_7srAr8WeQtxxAmM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:99:0a:4c:5d:6e:9a:d1:09:f7:e4:06:4a:bf:2d:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ef80cc9e8b445a07feecac0afc59e42dc710263 Validity Not Before: Dec 14 16:02:07 2025 GMT Not After : Dec 15 16:02:07 2025 GMT Subject: CN=2f2939142edce2220eeb68385c567b3070de7c51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:96:8a:04:d7:db:35:52:2f:bb:1a:19:27:79: d8:c0:c4:aa:98:ca:e1:17:0a:a4:25:19:2e:47:be: 98:c0:7e:06:46:8d:ec:7d:db:d7:ab:23:a4:26:39: 18:1f:b1:69:57:f4:15:73:82:ea:b7:56:1b:d9:a8: cc:a6:f5:1c:f7:19:10:f0:b7:c8:cf:03:bf:1e:76: e2:f1:75:7b:a5:98:62:9b:ec:69:38:e9:08:01:25: b9:87:2d:a2:9b:00:c0:67:3e:33:5e:da:1b:b1:b5: 0e:49:90:52:40:6c:05:69:ae:a3:30:c2:2b:c3:ac: c3:41:cb:71:ef:58:09:f6:99:cb:17:11:52:3d:c9: 21:9f:1b:c8:db:47:71:05:de:aa:63:44:21:29:e6: 89:7e:a8:21:dc:91:da:56:45:7c:55:cd:a4:e9:b1: dd:a7:13:a9:9a:83:4c:9b:f1:f7:ec:a9:59:09:e6: b9:e0:e1:71:f2:bd:db:7d:12:72:0b:5d:b5:35:18: bb:cb:a0:27:b2:5f:9e:54:d6:27:89:bb:75:27:a9: 5f:04:f5:ab:f6:a7:ee:7f:aa:9a:3f:74:07:70:c4: da:2d:87:a6:dc:8a:62:93:5c:ee:ec:ff:05:72:df: 9c:1e:af:58:45:01:d1:74:4d:6c:e9:57:98:21:5c: 8c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:29:39:14:2E:DC:E2:22:0E:EB:68:38:5C:56:7B:30:70:DE:7C:51 X509v3 Authority Key Identifier: keyid:0E:F8:0C:C9:E8:B4:45:A0:7F:EE:CA:C0:AF:C5:9E:42:DC:71:02:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvgMyei0RaB_7srAr8WeQtxxAmM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:71:f2:2c:38:aa:37:e7:4d:7a:b1:6f:63:81:ff:c1:58:be: 54:c5:1b:e1:1d:7d:2e:fa:60:76:5b:44:63:07:18:04:17:d1: 39:f2:f9:90:a8:0c:d3:5e:cb:25:91:e2:f9:e0:af:2d:6d:13: c8:21:f2:60:4a:5b:cb:f1:33:e1:80:72:15:b9:88:4a:44:a3: bf:62:1f:99:0f:90:88:9e:36:f0:cf:c0:b4:98:93:37:b9:11: d2:93:aa:16:0b:7f:30:3b:e9:c4:4c:29:8b:4b:bb:91:4e:43: e8:7e:92:e5:3e:d8:8b:ed:ab:39:ca:25:75:6a:86:ec:94:87: 2d:73:91:d2:6e:d8:94:94:dc:ba:49:82:e1:7d:f5:c2:c1:e8: 3f:8f:e9:9a:f7:59:9c:72:32:44:00:8f:28:e8:55:99:d4:20: 44:a6:77:f5:9c:10:20:7c:57:5b:32:01:89:2d:48:19:c8:35: 40:84:61:3f:27:34:98:6b:13:9a:20:9f:99:83:00:1c:9f:5f: 75:93:b2:2a:8e:81:a4:ad:1c:22:a4:b5:fe:e7:67:33:ac:0f: 64:5c:46:8d:86:1f:40:b0:75:17:f3:68:e7:6e:7a:e6:30:9f: 8f:03:5c:f9:76:46:c7:7c:bf:ef:01:67:da:f1:87:07:3a:e1: 43:83:9b:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsdmQpMXW6a0Qn35AZKvy3YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlZjgwY2M5ZThiNDQ1YTA3ZmVlY2FjMGFmYzU5ZTQyZGM3 MTAyNjMwHhcNMjUxMjE0MTYwMjA3WhcNMjUxMjE1MTYwMjA3WjAzMTEwLwYDVQQD EygyZjI5MzkxNDJlZGNlMjIyMGVlYjY4Mzg1YzU2N2IzMDcwZGU3YzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpaKBNfbNVIvuxoZJ3nYwMSqmMrh FwqkJRkuR76YwH4GRo3sfdvXqyOkJjkYH7FpV/QVc4Lqt1Yb2ajMpvUc9xkQ8LfI zwO/Hnbi8XV7pZhim+xpOOkIASW5hy2imwDAZz4zXtobsbUOSZBSQGwFaa6jMMIr w6zDQctx71gJ9pnLFxFSPckhnxvI20dxBd6qY0QhKeaJfqgh3JHaVkV8Vc2k6bHd pxOpmoNMm/H37KlZCea54OFx8r3bfRJyC121NRi7y6Ansl+eVNYnibt1J6lfBPWr 9qfuf6qaP3QHcMTaLYem3Ipik1zu7P8Fct+cHq9YRQHRdE1s6VeYIVyMWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC8pORQu3OIiDutoOFxWezBw3nxRMB8GA1UdIwQY MBaAFA74DMnotEWgf+7KwK/FnkLccQJjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHZnTXllaTBSYUJfN3NyQXI4V2VRdHh4QW1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8wODZiZGEtYTQ2NC00NGQ4LThkMWIt ODY2ZTVkNGM2ZWRiLzEvRHZnTXllaTBSYUJfN3NyQXI4V2VRdHh4QW1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi8wODZiZGEtYTQ2NC00NGQ4LThkMWItODY2ZTVkNGM2ZWRi LzEvRHZnTXllaTBSYUJfN3NyQXI4V2VRdHh4QW1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACnHyLDiq N+dNerFvY4H/wVi+VMUb4R19LvpgdltEYwcYBBfROfL5kKgM017LJZHi+eCvLW0T yCHyYEpby/Ez4YByFbmISkSjv2IfmQ+QiJ428M/AtJiTN7kR0pOqFgt/MDvpxEwp i0u7kU5D6H6S5T7Yi+2rOcoldWqG7JSHLXOR0m7YlJTcukmC4X31wsHoP4/pmvdZ nHIyRACPKOhVmdQgRKZ39ZwQIHxXWzIBiS1IGcg1QIRhPyc0mGsTmiCfmYMAHJ9f dZOyKo6BpK0cIqS1/udnM6wPZFxGjYYfQLB1F/No52565jCfjwNc+XZGx3y/7wFn 2vGHBzrhQ4Obxg== -----END CERTIFICATE-----Generated at Sun Dec 14 21:34:43 2025 by rpki-client