This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft File: DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft (raw, json) Hash identifier: pCcaUAiqFQTO28/HELXzE0IbaKsfpLWWTWIVLlybsGY= Subject key identifier: 97:13:86:D7:E6:D7:7D:2D:CA:2C:03:F3:E6:CA:E4:B4:2F:18:DB:BF Authority key identifier: 0D:7A:91:25:69:B7:87:D9:2E:53:55:FF:FA:ED:58:1F:E5:0A:29:C0 Certificate issuer: /CN=0d7a912569b787d92e5355fffaed581fe50a29c0 Certificate serial: 019B3720A4C37A14CA3C90B47AEE5DB47CFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft Manifest number: 0D8F Signing time: Fri 19 Dec 2025 15:00:44 +0000 Manifest this update: Fri 19 Dec 2025 15:00:44 +0000 Manifest next update: Sat 20 Dec 2025 15:00:44 +0000 Files and hashes: 1: 1-KvMzZmip20mq_6TE6zao4jxRAY.roa (hash: +e++mFx5okLj8UNvWINUv13IrPw1m2hTZhWWjifAWCI=) 2: DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl (hash: RX0NfpIDfj6SkpBI+hic/jl/cFOXL77Y7hsCiIQuOoM=) 3: o-s15NWoSVwgSNMQIfsWarrXXGg.roa (hash: 6NGLeGFSgaPGE1dmOJNyifUaOXRJYE04QVot2QOuL9c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:20:a4:c3:7a:14:ca:3c:90:b4:7a:ee:5d:b4:7c:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d7a912569b787d92e5355fffaed581fe50a29c0 Validity Not Before: Dec 19 15:00:44 2025 GMT Not After : Dec 20 15:00:44 2025 GMT Subject: CN=971386d7e6d77d2dca2c03f3e6cae4b42f18dbbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:74:98:49:c4:44:39:d9:83:d0:d4:70:9f:ff: 98:e3:37:23:99:25:b4:38:7f:10:71:14:bb:27:c9: 7f:ac:43:23:40:b0:da:eb:7d:3c:50:4b:cf:5b:e1: 45:f0:e4:52:6a:ef:92:f8:d2:fb:bb:ad:d3:14:5c: 0e:e8:6d:80:1a:45:db:e9:08:61:57:50:04:31:f3: 69:97:66:a7:17:a0:93:b0:a4:1e:a3:bf:7b:94:d8: e9:59:02:7f:50:53:0a:7f:bb:a3:b8:03:4a:59:bd: fe:c4:39:20:89:ea:9b:16:18:ec:0d:00:5a:0b:50: 48:cc:df:57:dd:a0:40:da:4a:74:24:1f:7c:06:2b: 19:ef:f3:07:28:4b:f5:fa:ff:41:5a:02:2b:59:fb: a5:29:e0:45:90:31:86:49:7e:a7:bc:28:f1:10:fa: 72:81:4d:42:26:23:63:8e:31:90:df:9e:e6:1f:18: e3:67:c8:df:bb:69:1c:a4:27:22:10:98:ed:a1:6b: 39:a8:e3:94:68:0c:4c:58:75:27:7a:57:c2:81:ff: 6f:0b:88:4c:fb:b0:6f:43:1d:15:bc:3f:4c:16:c5: dc:ee:57:aa:8c:9e:33:7f:81:09:ec:5f:1a:46:98: d2:1b:18:f8:df:85:4d:2e:db:ba:2d:fc:55:1d:34: a3:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:13:86:D7:E6:D7:7D:2D:CA:2C:03:F3:E6:CA:E4:B4:2F:18:DB:BF X509v3 Authority Key Identifier: keyid:0D:7A:91:25:69:B7:87:D9:2E:53:55:FF:FA:ED:58:1F:E5:0A:29:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:d3:4d:a9:df:e4:2b:48:fd:32:81:4e:dd:bf:2f:be:78:ca: 72:8f:36:22:88:e9:f2:ca:fd:ca:3f:a2:ea:76:4f:98:4b:4c: 42:8a:97:0b:ed:46:da:1c:3f:73:11:67:3f:ca:fa:58:4d:26: 15:05:34:24:e1:77:ce:84:25:a6:41:ea:d5:83:b6:31:c7:08: eb:b6:84:6e:75:ad:b9:9f:35:6a:c5:a1:9f:d6:43:f7:02:74: 25:75:f2:32:a3:a4:a6:1c:4d:5a:d9:cd:23:7d:85:14:34:70: d9:11:0b:91:e6:07:a6:d3:82:60:0c:f1:06:17:b7:33:71:cc: bb:e9:49:3b:ed:53:79:71:b7:3a:e5:b7:da:b7:46:5d:38:a6: 0f:c9:49:54:8b:5c:a7:ec:d1:66:a2:c8:c3:10:8f:eb:cf:09: c4:3f:5c:22:17:ee:a3:42:ff:8b:a9:fb:0e:e3:66:44:96:25: ad:a1:f6:1c:e0:48:a1:a5:fa:b7:12:ef:a8:5e:ff:fc:36:92: 65:6e:e0:56:50:7e:89:6e:df:f6:05:8a:d0:fd:6e:80:8c:bc: 61:19:f5:ee:9e:83:e6:ec:03:91:c6:b0:2f:8d:16:0e:38:9c: f9:d2:74:6e:6d:be:7c:8f:93:24:bb:d9:67:d6:c9:61:17:8c: a4:a8:3f:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3IKTDehTKPJC0eu5dtHz6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkN2E5MTI1NjliNzg3ZDkyZTUzNTVmZmZhZWQ1ODFmZTUw YTI5YzAwHhcNMjUxMjE5MTUwMDQ0WhcNMjUxMjIwMTUwMDQ0WjAzMTEwLwYDVQQD Eyg5NzEzODZkN2U2ZDc3ZDJkY2EyYzAzZjNlNmNhZTRiNDJmMThkYmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHSYScREOdmD0NRwn/+Y4zcjmSW0 OH8QcRS7J8l/rEMjQLDa6308UEvPW+FF8ORSau+S+NL7u63TFFwO6G2AGkXb6Qhh V1AEMfNpl2anF6CTsKQeo797lNjpWQJ/UFMKf7ujuANKWb3+xDkgieqbFhjsDQBa C1BIzN9X3aBA2kp0JB98BisZ7/MHKEv1+v9BWgIrWfulKeBFkDGGSX6nvCjxEPpy gU1CJiNjjjGQ357mHxjjZ8jfu2kcpCciEJjtoWs5qOOUaAxMWHUnelfCgf9vC4hM +7BvQx0VvD9MFsXc7leqjJ4zf4EJ7F8aRpjSGxj434VNLtu6LfxVHTSjiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJcThtfm130tyiwD8+bK5LQvGNu/MB8GA1UdIwQY MBaAFA16kSVpt4fZLlNV//rtWB/lCinAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhxUkpXbTNoOWt1VTFYXy11MVlILVVLS2NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8wNTlkMWEtZWY5NC00NzI5LWJmNmQt NDJhZTc1Yjc5NTdkLzEvRFhxUkpXbTNoOWt1VTFYXy11MVlILVVLS2NBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8wNTlkMWEtZWY5NC00NzI5LWJmNmQtNDJhZTc1Yjc5NTdk LzEvRFhxUkpXbTNoOWt1VTFYXy11MVlILVVLS2NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbtNNqd/k K0j9MoFO3b8vvnjKco82Iojp8sr9yj+i6nZPmEtMQoqXC+1G2hw/cxFnP8r6WE0m FQU0JOF3zoQlpkHq1YO2MccI67aEbnWtuZ81asWhn9ZD9wJ0JXXyMqOkphxNWtnN I32FFDRw2RELkeYHptOCYAzxBhe3M3HMu+lJO+1TeXG3OuW32rdGXTimD8lJVItc p+zRZqLIwxCP688JxD9cIhfuo0L/i6n7DuNmRJYlraH2HOBIoaX6txLvqF7//DaS ZW7gVlB+iW7f9gWK0P1ugIy8YRn17p6D5uwDkcawL40WDjic+dJ0bm2+fI+TJLvZ Z9bJYReMpKg/VA== -----END CERTIFICATE-----Generated at Fri Dec 19 23:48:19 2025 by rpki-client