This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft File: DXj57XHKOklrjVS5fxR5GNrbnFQ.mft (raw, json) Hash identifier: h+0EMJMp8IcXunHEWFJHnB4KGhXZqgVQZwNDzXzY7AI= Subject key identifier: 08:BB:78:44:62:30:11:79:31:82:9A:7B:54:B6:E5:FD:99:6B:27:E8 Authority key identifier: 0D:78:F9:ED:71:CA:3A:49:6B:8D:54:B9:7F:14:79:18:DA:DB:9C:54 Certificate issuer: /CN=0d78f9ed71ca3a496b8d54b97f147918dadb9c54 Certificate serial: 019AAC827673F7C4854BFF86600BCA35CC52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft Manifest number: 02D5 Signing time: Sat 22 Nov 2025 17:00:22 +0000 Manifest this update: Sat 22 Nov 2025 17:00:22 +0000 Manifest next update: Sun 23 Nov 2025 17:00:22 +0000 Files and hashes: 1: DXj57XHKOklrjVS5fxR5GNrbnFQ.crl (hash: c10G250Rie5OedLvBG0YZY3SNF60XXfwSUF0Vy4hzeo=) 2: _Lwar98mX_HPuZ6I_iBOIoPweAU.roa (hash: Q4wLDgz1BPTM2gYviJRrmaBtuFqzTEu5NxXR8pya5BA=) 3: uLyoln8iUo21XJeVRG0IGUytncA.roa (hash: rExu+xv1UDsqwxWWN3KFhMpN7PoTmi5ksePI6jLVE7I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:82:76:73:f7:c4:85:4b:ff:86:60:0b:ca:35:cc:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d78f9ed71ca3a496b8d54b97f147918dadb9c54 Validity Not Before: Nov 22 17:00:22 2025 GMT Not After : Nov 23 17:00:22 2025 GMT Subject: CN=08bb78446230117931829a7b54b6e5fd996b27e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:05:e4:6f:d0:11:a0:26:ba:92:c5:8c:47:06: 34:08:33:3d:be:15:40:e6:e4:5d:cb:79:b5:88:da: 29:67:a6:c7:b8:77:aa:88:a1:d4:76:75:3f:65:83: b2:35:4d:12:5a:b3:6b:c5:e7:0c:6a:80:76:ff:22: 2a:66:26:7b:41:65:03:7e:81:39:10:11:b2:42:50: 17:92:70:85:0f:b4:52:14:67:3e:33:9b:27:7c:b1: 04:3d:5e:bf:dd:a0:61:de:e1:0e:45:03:e6:2e:0b: a6:9f:df:79:1f:16:68:4b:c2:88:1a:69:6b:18:5f: 1f:55:33:eb:8b:5a:0a:0a:7c:b9:b3:c6:65:f5:ba: c6:0e:c1:d8:d5:4f:57:c4:33:f7:0c:a3:a5:05:c8: a8:f3:f0:3d:75:96:55:5d:7c:ce:3e:fd:05:7e:cd: e0:50:58:8c:bc:fc:90:fb:bd:6f:92:a4:6a:42:83: 2f:4a:96:cb:70:8f:db:cd:9d:d2:d4:5d:be:6b:65: cc:72:77:f0:22:b1:33:af:f3:68:57:6c:4e:48:6a: a9:c0:94:86:ae:38:a2:5e:2c:36:f7:57:13:9f:1a: d8:1f:b2:95:c4:59:3e:cb:fd:75:26:f8:a0:02:79: e4:b2:5f:43:0b:a7:25:92:da:20:3a:65:c9:ea:96: 29:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:BB:78:44:62:30:11:79:31:82:9A:7B:54:B6:E5:FD:99:6B:27:E8 X509v3 Authority Key Identifier: keyid:0D:78:F9:ED:71:CA:3A:49:6B:8D:54:B9:7F:14:79:18:DA:DB:9C:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXj57XHKOklrjVS5fxR5GNrbnFQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f7d0f0-a571-457c-9154-8e8675cb092f/1/DXj57XHKOklrjVS5fxR5GNrbnFQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:d6:1e:75:30:bb:9f:bd:62:5b:bd:51:52:b1:ec:5a:98:f6: a2:1d:13:b1:f8:15:d4:18:48:6c:7d:50:59:c1:57:61:49:a6: 30:aa:b9:97:99:90:41:f7:2d:57:ac:2c:dc:3b:e5:46:42:99: f0:dc:55:09:93:37:8b:4b:67:a7:c7:59:bb:6d:39:4f:ba:c5: 92:1b:50:1c:fb:11:76:07:c1:d5:a7:59:93:b7:77:ef:f3:73: 33:27:a2:bc:a2:9f:88:c5:72:b7:8d:b0:ee:5b:5c:48:0e:fa: 1e:00:6e:81:23:9f:01:68:ef:f1:3f:17:e2:62:a4:51:eb:88: 69:3d:fd:98:df:e1:f3:15:56:f1:84:b8:00:56:22:f4:dc:40: f0:ea:10:f4:ad:ed:be:89:12:26:42:68:f7:32:77:b6:d3:34: 8b:e2:65:38:23:22:26:67:ac:2f:87:9a:7c:0f:36:77:2f:b7: 34:b3:19:0e:a9:c5:60:4f:76:a3:a5:40:49:cf:3c:db:67:61: 71:c1:63:72:25:66:94:ad:2a:04:5f:2c:df:23:33:90:0c:2c: e1:09:3f:79:76:08:62:b5:95:df:6d:00:c8:3e:c2:fc:0e:99: b8:c2:e8:d8:be:e2:10:e9:08:3f:25:c5:fb:30:11:36:d3:b6: 66:18:1f:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqsgnZz98SFS/+GYAvKNcxSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzhmOWVkNzFjYTNhNDk2YjhkNTRiOTdmMTQ3OTE4ZGFk YjljNTQwHhcNMjUxMTIyMTcwMDIyWhcNMjUxMTIzMTcwMDIyWjAzMTEwLwYDVQQD EygwOGJiNzg0NDYyMzAxMTc5MzE4MjlhN2I1NGI2ZTVmZDk5NmIyN2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgXkb9ARoCa6ksWMRwY0CDM9vhVA 5uRdy3m1iNopZ6bHuHeqiKHUdnU/ZYOyNU0SWrNrxecMaoB2/yIqZiZ7QWUDfoE5 EBGyQlAXknCFD7RSFGc+M5snfLEEPV6/3aBh3uEORQPmLgumn995HxZoS8KIGmlr GF8fVTPri1oKCny5s8Zl9brGDsHY1U9XxDP3DKOlBcio8/A9dZZVXXzOPv0Ffs3g UFiMvPyQ+71vkqRqQoMvSpbLcI/bzZ3S1F2+a2XMcnfwIrEzr/NoV2xOSGqpwJSG rjiiXiw291cTnxrYH7KVxFk+y/11JvigAnnksl9DC6clktogOmXJ6pYpdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAi7eERiMBF5MYKae1S25f2ZayfoMB8GA1UdIwQY MBaAFA14+e1xyjpJa41UuX8UeRja25xUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhqNTdYSEtPa2xyalZTNWZ4UjVHTnJibkZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mN2QwZjAtYTU3MS00NTdjLTkxNTQt OGU4Njc1Y2IwOTJmLzEvRFhqNTdYSEtPa2xyalZTNWZ4UjVHTnJibkZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9mN2QwZjAtYTU3MS00NTdjLTkxNTQtOGU4Njc1Y2IwOTJm LzEvRFhqNTdYSEtPa2xyalZTNWZ4UjVHTnJibkZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVdYedTC7 n71iW71RUrHsWpj2oh0TsfgV1BhIbH1QWcFXYUmmMKq5l5mQQfctV6ws3DvlRkKZ 8NxVCZM3i0tnp8dZu205T7rFkhtQHPsRdgfB1adZk7d37/NzMyeivKKfiMVyt42w 7ltcSA76HgBugSOfAWjv8T8X4mKkUeuIaT39mN/h8xVW8YS4AFYi9NxA8OoQ9K3t vokSJkJo9zJ3ttM0i+JlOCMiJmesL4eafA82dy+3NLMZDqnFYE92o6VASc8822dh ccFjciVmlK0qBF8s3yMzkAws4Qk/eXYIYrWV320AyD7C/A6ZuMLo2L7iEOkIPyXF +zARNtO2Zhgfwg== -----END CERTIFICATE-----Generated at Sat Nov 22 21:39:51 2025 by rpki-client