This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft File: DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft (raw, json) Hash identifier: TzBzpaKMSN4Xk4IKVJN3zxjxZcqCyJ0UQeY8oVGl43E= Subject key identifier: 89:B8:EF:B7:61:7D:CE:02:C4:03:57:10:E8:DD:C6:5E:50:87:53:9F Authority key identifier: 0D:1A:31:31:FE:8B:EA:9C:82:58:31:3A:0F:24:BA:2A:56:0B:58:D3 Certificate issuer: /CN=0d1a3131fe8bea9c8258313a0f24ba2a560b58d3 Certificate serial: 019B20629D840E4C21E895DC51F68FB45D4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft Manifest number: 0FE1 Signing time: Mon 15 Dec 2025 05:01:32 +0000 Manifest this update: Mon 15 Dec 2025 05:01:32 +0000 Manifest next update: Tue 16 Dec 2025 05:01:32 +0000 Files and hashes: 1: DRoxMf6L6pyCWDE6DyS6KlYLWNM.crl (hash: Hm8ps5heI5nHjmFGdj8gRKyIpRTyVZBZX8EjxuiRwA0=) 2: ZobxiROg1-GkiBXFARtEezPM_z8.roa (hash: BIGExweVB1y4EbbG2Qn538fyHAdIwqd6x14IhgSUKYw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft rsync://rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 05:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:62:9d:84:0e:4c:21:e8:95:dc:51:f6:8f:b4:5d:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d1a3131fe8bea9c8258313a0f24ba2a560b58d3 Validity Not Before: Dec 15 05:01:32 2025 GMT Not After : Dec 16 05:01:32 2025 GMT Subject: CN=89b8efb7617dce02c4035710e8ddc65e5087539f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e8:4b:95:fd:2f:aa:da:10:a2:9d:f1:ae:4d: 21:bb:69:fa:bd:10:68:23:9c:73:a3:de:85:95:7b: bb:9a:ef:e9:7d:17:73:f9:88:d3:ca:55:8c:41:68: fb:95:7f:ca:ba:c5:f6:b1:a4:1f:2d:04:23:17:bc: 97:e0:e8:ce:f4:31:56:d3:ab:84:53:ef:52:84:3b: 0f:ec:32:b0:a5:5e:0d:04:0a:b0:ed:89:48:23:ed: f6:5f:91:1c:f8:a5:44:75:09:3e:b2:52:ee:c9:72: a3:12:66:34:54:df:8b:32:ae:39:cc:d3:9f:4f:91: 38:5f:2e:c8:c2:a5:1d:cd:a0:1f:1e:f4:1e:cc:4c: 48:f2:9f:ae:ae:a1:da:f4:5a:d3:86:e5:ef:58:78: 41:a8:5a:69:9f:65:67:d2:0d:3f:cc:8f:2b:3a:8f: 42:34:7f:3a:1a:61:51:9a:ff:ce:62:09:e7:f8:3a: f4:a0:06:cc:13:0b:7d:dd:f1:b4:5e:cd:ab:54:80: 7e:1a:a8:f0:08:d3:30:09:59:30:63:03:4f:7e:02: 85:fd:b2:f4:28:10:0d:64:57:f3:41:01:d0:95:5b: c7:42:6a:8d:67:a4:e7:69:3f:18:1d:e5:ee:a7:2c: 97:9c:e1:af:36:21:cd:ee:11:c0:b3:88:60:d4:2d: b1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:B8:EF:B7:61:7D:CE:02:C4:03:57:10:E8:DD:C6:5E:50:87:53:9F X509v3 Authority Key Identifier: keyid:0D:1A:31:31:FE:8B:EA:9C:82:58:31:3A:0F:24:BA:2A:56:0B:58:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:0a:c4:25:3c:1a:e4:0e:eb:00:7d:32:fc:9d:80:ab:a0:17: 3e:d9:73:f3:26:af:b3:a4:67:77:5e:aa:f8:a9:07:e4:18:97: 1d:c5:1e:ad:bf:23:19:38:a8:11:91:b0:7a:f5:7a:b9:52:01: fe:1a:e8:5a:7b:ce:75:38:06:a2:69:af:bb:e8:0d:ec:63:1f: 7d:4f:d0:0e:ee:bd:b3:a8:52:5e:39:ce:1b:97:16:a2:8b:8e: fb:56:43:c2:b3:9b:3b:aa:da:82:28:91:9d:2a:e4:40:ba:a4: 5a:62:39:f8:0f:50:5f:9d:ee:1d:77:6e:0e:8d:51:aa:c9:61: 87:f1:f9:d1:a2:96:ab:41:9c:48:32:28:2e:58:fe:7a:6f:7b: 84:53:eb:50:05:7e:37:0d:d2:89:b3:b2:30:7a:61:da:0e:07: ed:ee:ba:fb:73:0d:49:21:e0:dc:af:a6:6c:90:91:dc:1f:81: ae:a3:4c:16:09:0c:02:b1:51:b9:51:ac:97:ff:4e:73:46:17: 56:68:eb:51:d9:61:38:3e:34:b7:1d:87:b8:4c:6f:f2:65:a7: 27:4a:7f:d6:13:75:dd:1b:70:65:08:ed:43:88:96:87:dc:af: 57:d6:4f:c4:5e:71:cd:ec:bc:de:3a:da:2a:97:29:79:56:3c: 18:3c:81:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgYp2EDkwh6JXcUfaPtF1OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMWEzMTMxZmU4YmVhOWM4MjU4MzEzYTBmMjRiYTJhNTYw YjU4ZDMwHhcNMjUxMjE1MDUwMTMyWhcNMjUxMjE2MDUwMTMyWjAzMTEwLwYDVQQD Eyg4OWI4ZWZiNzYxN2RjZTAyYzQwMzU3MTBlOGRkYzY1ZTUwODc1MzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+hLlf0vqtoQop3xrk0hu2n6vRBo I5xzo96FlXu7mu/pfRdz+YjTylWMQWj7lX/KusX2saQfLQQjF7yX4OjO9DFW06uE U+9ShDsP7DKwpV4NBAqw7YlII+32X5Ec+KVEdQk+slLuyXKjEmY0VN+LMq45zNOf T5E4Xy7IwqUdzaAfHvQezExI8p+urqHa9FrThuXvWHhBqFppn2Vn0g0/zI8rOo9C NH86GmFRmv/OYgnn+Dr0oAbMEwt93fG0Xs2rVIB+GqjwCNMwCVkwYwNPfgKF/bL0 KBANZFfzQQHQlVvHQmqNZ6TnaT8YHeXupyyXnOGvNiHN7hHAs4hg1C2xdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIm477dhfc4CxANXEOjdxl5Qh1OfMB8GA1UdIwQY MBaAFA0aMTH+i+qcglgxOg8kuipWC1jTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFJveE1mNkw2cHlDV0RFNkR5UzZLbFlMV05NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8xM2IxNjUtMDk4Ni00ZTkzLWIxYjQt YmJmN2M3MGVmNGIzLzEvRFJveE1mNkw2cHlDV0RFNkR5UzZLbFlMV05NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8xM2IxNjUtMDk4Ni00ZTkzLWIxYjQtYmJmN2M3MGVmNGIz LzEvRFJveE1mNkw2cHlDV0RFNkR5UzZLbFlMV05NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALgrEJTwa 5A7rAH0y/J2Aq6AXPtlz8yavs6Rnd16q+KkH5BiXHcUerb8jGTioEZGwevV6uVIB /hroWnvOdTgGommvu+gN7GMffU/QDu69s6hSXjnOG5cWoouO+1ZDwrObO6ragiiR nSrkQLqkWmI5+A9QX53uHXduDo1Rqslhh/H50aKWq0GcSDIoLlj+em97hFPrUAV+ Nw3SibOyMHph2g4H7e66+3MNSSHg3K+mbJCR3B+BrqNMFgkMArFRuVGsl/9Oc0YX VmjrUdlhOD40tx2HuExv8mWnJ0p/1hN13RtwZQjtQ4iWh9yvV9ZPxF5xzey83jra KpcpeVY8GDyBzg== -----END CERTIFICATE-----Generated at Mon Dec 15 13:21:18 2025 by rpki-client