This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.mft File: djizYCRf5EsXV6ael3oV4H-q9ps.mft (raw, json) Hash identifier: PHJWhdHZQ9xJI0G0QMKYTc8V3ZH6I6KPQ48fm0O2vLM= Subject key identifier: C9:7E:F9:C8:D6:95:E4:D5:7E:44:56:58:C3:CA:50:F6:46:13:F7:61 Authority key identifier: 76:38:B3:60:24:5F:E4:4B:17:57:A6:9E:97:7A:15:E0:7F:AA:F6:9B Certificate issuer: /CN=7638b360245fe44b1757a69e977a15e07faaf69b Certificate serial: 019B5A515533AFEE483B68310EF3160041AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/djizYCRf5EsXV6ael3oV4H-q9ps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.mft Manifest number: 02F2 Signing time: Fri 26 Dec 2025 11:00:38 +0000 Manifest this update: Fri 26 Dec 2025 11:00:38 +0000 Manifest next update: Sat 27 Dec 2025 11:00:38 +0000 Files and hashes: 1: djizYCRf5EsXV6ael3oV4H-q9ps.crl (hash: +14kIFx7TGejwLJE+bwr2S7QY0vzedrbvtj5/LYPj/s=) 2: gSGKFe1pn3_5E4Q7YRW3hV9F-dg.roa (hash: Gfi8XtFBl7a2jBdHmK+GtPDHztaG0pAxvqWau8U6T/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.mft rsync://rpki.ripe.net/repository/DEFAULT/djizYCRf5EsXV6ael3oV4H-q9ps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:55:33:af:ee:48:3b:68:31:0e:f3:16:00:41:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7638b360245fe44b1757a69e977a15e07faaf69b Validity Not Before: Dec 26 11:00:38 2025 GMT Not After : Dec 27 11:00:38 2025 GMT Subject: CN=c97ef9c8d695e4d57e445658c3ca50f64613f761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:8a:07:12:d2:09:46:e4:33:5c:6f:78:bd:2d: c7:93:db:cb:1c:20:1a:95:8f:64:bd:2e:84:c7:73: a8:ec:da:70:7e:dc:33:24:1b:6a:56:82:92:0d:71: cb:d8:c0:2a:d9:42:bc:cf:b7:5f:e2:c3:53:ef:8a: d6:2d:b5:56:df:b0:6c:52:03:d8:78:9d:23:66:13: b5:38:7b:52:6f:ba:f1:76:be:92:e0:5f:2c:b0:0e: d7:cd:4f:23:81:83:56:9e:e9:60:6a:19:4b:c1:71: 81:2c:91:39:63:11:94:64:72:d1:51:90:41:81:4e: 24:e7:72:4e:b6:d7:5b:61:f8:f4:dc:f6:32:3c:bc: 4f:39:3c:0c:1e:4e:fb:34:59:8c:10:16:dd:f3:01: 46:bd:e4:4c:59:40:4c:d9:61:43:56:72:c6:dc:4d: d2:ed:39:3e:fe:a9:e6:ae:91:eb:ea:08:40:25:73: 8e:d1:b9:19:0e:ef:b6:2d:ef:e5:d3:0a:3e:c3:48: 07:d7:3e:29:81:dd:18:b7:19:d0:87:62:ff:5d:69: bb:ce:67:a6:ec:e4:e5:05:c8:6c:ae:ec:07:d8:38: 21:7c:0d:c7:24:07:dd:dc:78:ff:e0:79:af:d1:87: 18:f4:c1:7a:fb:b0:ad:eb:cf:58:e5:37:a2:87:1f: 48:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:7E:F9:C8:D6:95:E4:D5:7E:44:56:58:C3:CA:50:F6:46:13:F7:61 X509v3 Authority Key Identifier: keyid:76:38:B3:60:24:5F:E4:4B:17:57:A6:9E:97:7A:15:E0:7F:AA:F6:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/djizYCRf5EsXV6ael3oV4H-q9ps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:70:a7:bf:08:ec:c7:73:25:e3:34:73:31:0c:55:d0:af:61: 33:de:2b:b5:6b:b3:d5:1d:19:e0:b9:dc:90:63:60:2c:d8:69: 67:7e:08:4c:29:d9:0d:30:a7:b2:2e:8d:05:a1:9d:05:4b:5e: e1:97:99:f4:ec:29:b7:f8:15:12:b1:5e:61:65:37:2f:48:f1: da:a2:8c:6a:8e:5c:ec:0b:51:eb:22:74:44:25:87:37:99:78: e1:fb:a7:7c:9f:6a:bd:a9:15:40:41:f4:81:06:c5:c6:df:55: 6b:9b:11:62:52:16:57:dd:38:48:82:d2:3a:34:2a:5c:ae:8d: 1f:28:e7:45:96:25:83:88:4e:3e:43:9f:90:80:c5:43:34:f1: 10:ef:9b:aa:38:98:48:79:cd:5f:e6:c8:99:6f:38:cf:6b:97: d8:8e:e0:cc:13:19:33:46:3b:9d:9c:8a:04:a5:fa:60:ae:fe: f0:24:c5:89:e1:fd:5c:7d:2b:1d:b8:1d:ef:e1:74:19:63:ed: c2:de:3e:01:80:af:8a:ef:8f:5b:28:b3:75:45:70:7f:83:b4: 40:25:e6:d6:da:35:a1:39:f5:af:66:1c:c2:3c:07:4d:11:b6: 8e:1a:cd:48:fe:bd:c2:47:d1:d5:81:f3:d6:48:d3:9d:18:f8: aa:43:37:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUVUzr+5IO2gxDvMWAEGrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2MzhiMzYwMjQ1ZmU0NGIxNzU3YTY5ZTk3N2ExNWUwN2Zh YWY2OWIwHhcNMjUxMjI2MTEwMDM4WhcNMjUxMjI3MTEwMDM4WjAzMTEwLwYDVQQD EyhjOTdlZjljOGQ2OTVlNGQ1N2U0NDU2NThjM2NhNTBmNjQ2MTNmNzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ooHEtIJRuQzXG94vS3Hk9vLHCAa lY9kvS6Ex3Oo7NpwftwzJBtqVoKSDXHL2MAq2UK8z7df4sNT74rWLbVW37BsUgPY eJ0jZhO1OHtSb7rxdr6S4F8ssA7XzU8jgYNWnulgahlLwXGBLJE5YxGUZHLRUZBB gU4k53JOttdbYfj03PYyPLxPOTwMHk77NFmMEBbd8wFGveRMWUBM2WFDVnLG3E3S 7Tk+/qnmrpHr6ghAJXOO0bkZDu+2Le/l0wo+w0gH1z4pgd0YtxnQh2L/XWm7zmem 7OTlBchsruwH2DghfA3HJAfd3Hj/4Hmv0YcY9MF6+7Ct689Y5Teihx9I7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMl++cjWleTVfkRWWMPKUPZGE/dhMB8GA1UdIwQY MBaAFHY4s2AkX+RLF1emnpd6FeB/qvabMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGppellDUmY1RXNYVjZhZWwzb1Y0SC1xOXBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9lMjI0Y2QtMTcxMi00N2E5LTk3NDAt OGYyNjFkMmZiNjRlLzEvZGppellDUmY1RXNYVjZhZWwzb1Y0SC1xOXBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9lMjI0Y2QtMTcxMi00N2E5LTk3NDAtOGYyNjFkMmZiNjRl LzEvZGppellDUmY1RXNYVjZhZWwzb1Y0SC1xOXBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARXCnvwjs x3Ml4zRzMQxV0K9hM94rtWuz1R0Z4LnckGNgLNhpZ34ITCnZDTCnsi6NBaGdBUte 4ZeZ9Owpt/gVErFeYWU3L0jx2qKMao5c7AtR6yJ0RCWHN5l44funfJ9qvakVQEH0 gQbFxt9Va5sRYlIWV904SILSOjQqXK6NHyjnRZYlg4hOPkOfkIDFQzTxEO+bqjiY SHnNX+bImW84z2uX2I7gzBMZM0Y7nZyKBKX6YK7+8CTFieH9XH0rHbgd7+F0GWPt wt4+AYCviu+PWyizdUVwf4O0QCXm1to1oTn1r2YcwjwHTRG2jhrNSP69wkfR1YHz 1kjTnRj4qkM3wA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:25 2025 by rpki-client