This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.mft File: DOxvdimMX1_iax6TKkUFE_zDmzg.mft (raw, json) Hash identifier: A3oGeAlyMwO5GWi7//33VtLWOBQ4LJAKy22XOIROLeM= Subject key identifier: 04:59:04:51:B9:01:99:53:03:66:2B:04:B3:78:70:3A:F0:16:77:DC Authority key identifier: 0C:EC:6F:76:29:8C:5F:5F:E2:6B:1E:93:2A:45:05:13:FC:C3:9B:38 Certificate issuer: /CN=0cec6f76298c5f5fe26b1e932a450513fcc39b38 Certificate serial: 019B5A51F64855EE94FC94DA3DB41D20189F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOxvdimMX1_iax6TKkUFE_zDmzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.mft Manifest number: 1D Signing time: Fri 26 Dec 2025 11:01:19 +0000 Manifest this update: Fri 26 Dec 2025 11:01:19 +0000 Manifest next update: Sat 27 Dec 2025 11:01:19 +0000 Files and hashes: 1: DOxvdimMX1_iax6TKkUFE_zDmzg.crl (hash: 8i+3cPBrqwxSZsoTTO4wEWp0v2SsDdFC6sRJgK+SeZY=) 2: S7EWGXU39HlZ9rPpJeqIzBXH9uQ.roa (hash: 3tCF8lmB/ME/a2yNEsc4TXz+Ect7LfmnbvuaE1Dci8w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.mft rsync://rpki.ripe.net/repository/DEFAULT/DOxvdimMX1_iax6TKkUFE_zDmzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:f6:48:55:ee:94:fc:94:da:3d:b4:1d:20:18:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cec6f76298c5f5fe26b1e932a450513fcc39b38 Validity Not Before: Dec 26 11:01:19 2025 GMT Not After : Dec 27 11:01:19 2025 GMT Subject: CN=04590451b901995303662b04b378703af01677dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:30:eb:bc:4f:ab:aa:f9:bf:3d:7e:c4:71:21: 65:89:0b:e8:76:1b:b8:97:5f:14:dc:ac:70:de:a1: 6f:c4:ad:38:72:19:1f:38:ec:db:28:67:3b:eb:c5: bc:ae:0c:fc:87:cc:05:7a:1c:42:0e:74:e8:be:3c: ae:ed:f5:cf:db:23:79:ce:1f:63:2e:9e:58:c3:7d: 74:38:25:f8:b3:fe:c5:3a:28:a1:90:6d:da:b6:6e: 49:38:92:00:6d:8e:d8:50:01:c7:9f:3b:2a:66:f5: af:71:d4:3d:e9:e8:85:de:35:da:b0:ff:79:f5:18: 0b:df:11:41:c1:74:a0:91:89:81:ec:16:12:7f:a7: 92:a5:7f:52:e7:2a:db:79:74:5b:c1:ca:da:ca:f9: b7:4c:a8:af:96:de:83:22:80:ab:df:d6:17:77:5f: 8c:08:86:53:85:ee:e8:16:38:41:fb:78:ad:26:50: a3:d3:6d:f9:aa:fd:11:60:25:02:8d:a3:74:5a:a6: 1b:20:84:4e:2c:2d:90:9c:3c:af:67:2e:39:bd:6e: 8f:a9:3d:18:2d:10:c8:b3:d0:13:50:d6:b2:8e:b3: a0:e4:07:82:5a:f0:ea:fa:a5:d6:f4:4b:5f:5a:d9: c4:b9:34:ae:b7:47:67:74:b7:b7:c3:a1:d9:26:8a: 6a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:59:04:51:B9:01:99:53:03:66:2B:04:B3:78:70:3A:F0:16:77:DC X509v3 Authority Key Identifier: keyid:0C:EC:6F:76:29:8C:5F:5F:E2:6B:1E:93:2A:45:05:13:FC:C3:9B:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOxvdimMX1_iax6TKkUFE_zDmzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:32:d8:50:7a:d9:49:a9:bb:50:a1:81:24:52:f0:6b:75:70: 31:1f:07:cc:47:c4:41:29:dc:a9:14:d8:e0:c4:19:be:2e:b4: 87:78:51:18:70:1d:cd:e8:8a:30:c5:73:26:8d:14:ee:1b:51: f1:af:71:72:df:18:a6:be:e6:a1:17:a7:f7:27:59:52:c8:7a: a4:52:c3:af:e9:6c:84:f9:18:1f:b6:e5:c9:3c:23:ae:44:d0: 9a:66:f4:4f:53:c3:da:a2:38:5f:0c:29:73:03:0b:ce:44:cc: 55:56:17:80:1a:20:0f:ec:52:42:b6:1a:60:64:81:d1:21:d2: 88:61:94:de:f2:84:cb:15:78:57:0e:23:76:10:93:0a:6c:c9: cd:96:11:5e:c2:28:1d:f3:52:ab:5d:89:ef:06:41:15:12:e8: 90:8e:f0:b9:d4:65:7c:03:1a:9b:fd:91:c7:d0:35:86:44:08: c0:87:a5:d1:28:a0:0e:b7:08:9b:1d:20:c1:6d:c9:56:4c:c7: e8:01:e2:70:d4:34:17:3d:30:d1:8e:c0:74:ad:1f:9d:50:87: 0d:b5:c0:cd:97:88:bb:61:d9:60:25:df:15:c2:f1:6b:04:d8: 03:c5:3e:ed:a3:78:9a:0d:9c:a4:3c:b5:30:44:b1:6b:d4:5d: c4:82:62:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUfZIVe6U/JTaPbQdIBifMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZWM2Zjc2Mjk4YzVmNWZlMjZiMWU5MzJhNDUwNTEzZmNj MzliMzgwHhcNMjUxMjI2MTEwMTE5WhcNMjUxMjI3MTEwMTE5WjAzMTEwLwYDVQQD EygwNDU5MDQ1MWI5MDE5OTUzMDM2NjJiMDRiMzc4NzAzYWYwMTY3N2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDDrvE+rqvm/PX7EcSFliQvodhu4 l18U3Kxw3qFvxK04chkfOOzbKGc768W8rgz8h8wFehxCDnTovjyu7fXP2yN5zh9j Lp5Yw310OCX4s/7FOiihkG3atm5JOJIAbY7YUAHHnzsqZvWvcdQ96eiF3jXasP95 9RgL3xFBwXSgkYmB7BYSf6eSpX9S5yrbeXRbwcrayvm3TKivlt6DIoCr39YXd1+M CIZThe7oFjhB+3itJlCj0235qv0RYCUCjaN0WqYbIIROLC2QnDyvZy45vW6PqT0Y LRDIs9ATUNayjrOg5AeCWvDq+qXW9EtfWtnEuTSut0dndLe3w6HZJopqawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFARZBFG5AZlTA2YrBLN4cDrwFnfcMB8GA1UdIwQY MBaAFAzsb3YpjF9f4msekypFBRP8w5s4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE94dmRpbU1YMV9pYXg2VEtrVUZFX3pEbXpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zODQ0NjctMjA4MS00M2I0LWI0N2Ut ZjlmMzg1NTcyNjk2LzEvRE94dmRpbU1YMV9pYXg2VEtrVUZFX3pEbXpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zODQ0NjctMjA4MS00M2I0LWI0N2UtZjlmMzg1NTcyNjk2 LzEvRE94dmRpbU1YMV9pYXg2VEtrVUZFX3pEbXpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArzLYUHrZ Sam7UKGBJFLwa3VwMR8HzEfEQSncqRTY4MQZvi60h3hRGHAdzeiKMMVzJo0U7htR 8a9xct8Ypr7moRen9ydZUsh6pFLDr+lshPkYH7blyTwjrkTQmmb0T1PD2qI4Xwwp cwMLzkTMVVYXgBogD+xSQrYaYGSB0SHSiGGU3vKEyxV4Vw4jdhCTCmzJzZYRXsIo HfNSq12J7wZBFRLokI7wudRlfAMam/2Rx9A1hkQIwIel0SigDrcImx0gwW3JVkzH 6AHicNQ0Fz0w0Y7AdK0fnVCHDbXAzZeIu2HZYCXfFcLxawTYA8U+7aN4mg2cpDy1 MESxa9RdxIJiVg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:32 2025 by rpki-client