This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft File: DJDDVuKGT0OJSFdENVXYtcA1KBk.mft (raw, json) Hash identifier: KB0vKGjwGPr04zeZgbI2GxcqLunkgyzWOCrSDpFJ0wk= Subject key identifier: C4:B9:06:39:91:E5:2C:64:82:37:A0:50:E2:B9:3F:00:20:CF:81:0E Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819 Certificate serial: 019B3E6C1E6CED3424D9ABF4E56CD446A032 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft Manifest number: 17A9 Signing time: Sun 21 Dec 2025 01:00:31 +0000 Manifest this update: Sun 21 Dec 2025 01:00:31 +0000 Manifest next update: Mon 22 Dec 2025 01:00:31 +0000 Files and hashes: 1: 6EqmJwY45la03_mL9DqzIU_pULc.roa (hash: bAAWeDZY2eZUPUFFXbJVDE3ll20OGhbDr+oRfmrEiVM=) 2: 7Pzqe98aO4BoBrbjEM8VyT6sS1M.roa (hash: njNZ21C9pluyh9z/aL31IWofBM1v+N+fPmyvHPndCq0=) 3: 9GHN6GSMWh16APWbnq7wDsfKnn8.roa (hash: JH6A2KPyYk6kU9S+YXzBoAozjZCx1I1/FQIb22szn8c=) 4: DJDDVuKGT0OJSFdENVXYtcA1KBk.crl (hash: /YzeiC/TpjYpi90E/aHDZTwR1ARUppoaL58QY2wsEBo=) 5: F6MPUcQNDKHw2bq3oVN_CGo8zFY.roa (hash: vT+AkHQSKlQP3frZkuRLI9yF+aC1K32hPaZY72XJWqQ=) 6: QQRJC_YG8r-4Cm4-FiDTcyGseMs.roa (hash: v9L1LzSv9+QS9AJyAVCgrR0utN6Qk2ha4KHx/OIWRBY=) 7: WkrrwVxryAtLhNFR70baemEuAlg.roa (hash: K4NmeKi3Gvie8qG+bJIFQiovPgNvmgaWKizo+ZLILv8=) 8: _eU7wK7pdUxRG2CXsHdjbv2SOXc.roa (hash: ZAIXppKunQur0KGtFLAbnwIeXUabVYHwA+qIIq12IRo=) 9: aTMRrwo9_4SayQ9D7LTyaVFK_Xc.roa (hash: +IcvkZ/Lt7dooQvX8ekK5PfLV+YRr5hiDK4PBIh/lAA=) 10: bMezNCNwdlOYbtIsPbacYgXs4mE.roa (hash: fCSTVZLdEaGUz9Qyuwvw4wOBBUSjrK0cS/P0VURH6XA=) 11: f4tVuHbbEEExw1FgkYA_xiEVeZI.roa (hash: Ra6FxwbKM9pTj1QpToOpemmcz8OHYU34i9ladkCeWIs=) 12: fYrpElZs1NsSNrkwEfo6WNxBdRU.roa (hash: w1Z5VCOxpqbNZVNnJiTQLVLUsMOtA4kiHusU/VADD9E=) 13: rytOjYktSxYttWQbNzKnWNHr8kE.roa (hash: yLxz3XA2NehPKva17aTVpf9d8xx7CPICWNJXYP6IG3U=) 14: wz4Rxi2T5RISNbtekZKZj5gg7co.roa (hash: ZkBZlEwEIE4xANMo9oJsaqTSQA+2tjjnLN93XVxIic4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:1e:6c:ed:34:24:d9:ab:f4:e5:6c:d4:46:a0:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819 Validity Not Before: Dec 21 01:00:31 2025 GMT Not After : Dec 22 01:00:31 2025 GMT Subject: CN=c4b9063991e52c648237a050e2b93f0020cf810e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:e3:aa:57:d5:bf:6f:33:b2:b1:1d:b1:2c:e7: f7:8f:e2:35:f4:5a:1c:ed:4a:10:b0:0c:90:3b:32: 08:96:7c:bd:e6:82:e6:3c:17:b9:93:28:c4:90:be: 3c:d3:c1:27:f3:2f:b8:ae:27:b0:7c:5e:cd:cf:61: 7f:3e:33:9b:03:c7:20:44:14:7b:b4:ea:28:c9:6f: 82:95:93:f2:3b:ac:7a:19:82:ee:80:b3:93:f7:84: e7:c7:4b:68:4b:32:46:03:8f:ec:73:ce:8e:e8:bd: ad:fc:f1:54:82:17:c8:27:fd:c9:df:4c:0e:e2:47: 5f:13:a8:a2:5e:a3:73:34:c4:0b:2a:5c:60:f8:42: cc:3e:a6:2e:0e:a1:56:33:ce:83:23:78:7d:9c:99: 6b:46:c6:73:db:ea:9c:07:8e:b1:c5:29:98:d1:69: 92:02:75:84:09:57:6a:47:c2:a2:3a:45:3e:28:4f: e1:90:45:2b:34:a3:d0:9c:0c:64:1b:81:6a:cb:14: 83:cd:4d:ce:86:0a:d8:32:04:d1:5a:ae:52:89:3a: 0e:58:40:37:3f:a5:28:51:67:8f:f9:88:17:04:01: 88:9c:df:85:5c:84:9f:f2:1d:fc:22:db:65:3d:92: a6:9a:89:c2:bf:39:4d:33:ad:31:48:cf:e5:e1:b3: d8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B9:06:39:91:E5:2C:64:82:37:A0:50:E2:B9:3F:00:20:CF:81:0E X509v3 Authority Key Identifier: keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:3c:ec:e9:c9:7e:af:99:f9:98:8a:7d:40:d2:ba:fb:e0:3b: 13:30:74:42:4c:1f:7c:3a:4d:5f:81:22:c0:52:db:8c:48:72: ed:91:e8:6b:ee:33:fd:8b:59:a7:f0:d6:ec:35:73:9c:45:71: 08:44:5b:2f:16:5e:ec:63:0e:b7:ed:73:04:95:07:97:db:58: 81:33:d8:96:a3:61:c3:94:29:6e:a4:40:b0:36:72:6c:7c:0d: 01:e4:cf:bd:e5:49:cf:13:fc:10:ed:0d:b0:23:e8:25:40:1a: 6b:a2:63:3a:bb:a0:64:0f:06:3a:93:61:b3:c2:93:b6:b9:4c: 16:59:42:aa:65:44:e6:92:cd:04:33:f6:d1:cf:56:9b:a5:82: d2:c2:72:57:a7:e9:ed:67:8c:90:f2:3f:d9:47:36:3c:0d:7e: 7a:78:c5:bd:76:9f:ee:f7:53:b3:17:74:57:ae:7d:f3:ff:2b: 46:44:12:6f:42:52:52:ba:d7:13:22:11:07:e8:fd:ad:07:3a: 28:50:36:22:24:16:74:2f:6a:1e:c2:ce:9a:b9:a4:93:7b:da: 9e:fa:08:1b:02:23:2f:a6:54:ce:b7:1f:c3:ea:eb:d2:be:ba: 46:ee:1c:a3:80:c7:69:09:45:9b:90:8a:82:c6:bc:1d:61:e7: 2e:09:ce:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bB5s7TQk2av05WzURqAyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjOTBjMzU2ZTI4NjRmNDM4OTQ4NTc0NDM1NTVkOGI1YzAz NTI4MTkwHhcNMjUxMjIxMDEwMDMxWhcNMjUxMjIyMDEwMDMxWjAzMTEwLwYDVQQD EyhjNGI5MDYzOTkxZTUyYzY0ODIzN2EwNTBlMmI5M2YwMDIwY2Y4MTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7uOqV9W/bzOysR2xLOf3j+I19Foc 7UoQsAyQOzIIlny95oLmPBe5kyjEkL4808En8y+4riewfF7Nz2F/PjObA8cgRBR7 tOooyW+ClZPyO6x6GYLugLOT94Tnx0toSzJGA4/sc86O6L2t/PFUghfIJ/3J30wO 4kdfE6iiXqNzNMQLKlxg+ELMPqYuDqFWM86DI3h9nJlrRsZz2+qcB46xxSmY0WmS AnWECVdqR8KiOkU+KE/hkEUrNKPQnAxkG4FqyxSDzU3OhgrYMgTRWq5SiToOWEA3 P6UoUWeP+YgXBAGInN+FXISf8h38IttlPZKmmonCvzlNM60xSM/l4bPYjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMS5BjmR5SxkgjegUOK5PwAgz4EOMB8GA1UdIwQY MBaAFAyQw1bihk9DiUhXRDVV2LXANSgZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDct ZTM3OTlhZGU5ZGZlLzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDctZTM3OTlhZGU5ZGZl LzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABTzs6cl+ r5n5mIp9QNK6++A7EzB0QkwffDpNX4EiwFLbjEhy7ZHoa+4z/YtZp/DW7DVznEVx CERbLxZe7GMOt+1zBJUHl9tYgTPYlqNhw5QpbqRAsDZybHwNAeTPveVJzxP8EO0N sCPoJUAaa6JjOrugZA8GOpNhs8KTtrlMFllCqmVE5pLNBDP20c9Wm6WC0sJyV6fp 7WeMkPI/2Uc2PA1+enjFvXaf7vdTsxd0V6598/8rRkQSb0JSUrrXEyIRB+j9rQc6 KFA2IiQWdC9qHsLOmrmkk3vanvoIGwIjL6ZUzrcfw+rr0r66Ru4co4DHaQlFm5CK gsa8HWHnLgnO6g== -----END CERTIFICATE-----Generated at Sun Dec 21 04:56:04 2025 by rpki-client