This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft File: DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft (raw, json) Hash identifier: /c8hKZp4G+/eVhSlGZbfk2hm0MIVrYGY5zXcfQbW8Og= Subject key identifier: 53:6C:35:99:6B:A6:D2:15:40:4E:D2:54:41:11:F3:3C:60:95:6A:D1 Authority key identifier: 0C:6F:A1:56:C5:7C:4E:88:5B:9E:6A:F8:23:0B:65:4D:79:6A:56:11 Certificate issuer: /CN=0c6fa156c57c4e885b9e6af8230b654d796a5611 Certificate serial: 019B1EE1317D34D57EB335695A2A49D4BDB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft Manifest number: 1418 Signing time: Sun 14 Dec 2025 22:00:33 +0000 Manifest this update: Sun 14 Dec 2025 22:00:33 +0000 Manifest next update: Mon 15 Dec 2025 22:00:33 +0000 Files and hashes: 1: DG-hVsV8Tohbnmr4IwtlTXlqVhE.crl (hash: d6KJQrN+YUzRaYMa82/4IcY6BrD5IYoHhBiMhaNLQX0=) 2: cnib18kOQCfp6lVhz4WmJc4Qscg.roa (hash: 29WsgPo6IrtJ1OC04nNW3KGjgpHd3XfgWJen7328b88=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:e1:31:7d:34:d5:7e:b3:35:69:5a:2a:49:d4:bd:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c6fa156c57c4e885b9e6af8230b654d796a5611 Validity Not Before: Dec 14 22:00:33 2025 GMT Not After : Dec 15 22:00:33 2025 GMT Subject: CN=536c35996ba6d215404ed2544111f33c60956ad1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:95:85:db:db:29:b8:fd:a5:6b:46:8c:29:6f: 9f:7d:a4:01:a7:6a:1c:3e:e0:26:d3:6a:dd:6b:f0: ef:3f:6b:71:91:5e:90:73:b6:8c:c2:46:de:c0:a0: 2c:0e:3e:96:90:2a:e1:e9:3d:dc:7f:b8:f4:60:5b: 79:fe:2b:ae:e2:73:57:52:c2:e3:60:d5:c4:f1:f2: 0e:dc:f7:7b:f0:33:eb:aa:4a:f2:24:bd:08:3b:d2: 21:92:69:55:c9:c3:6d:ff:9c:e2:37:76:25:4c:bc: 4d:fd:56:5c:60:b1:85:57:a7:f6:35:30:b3:ec:ac: 13:37:7f:bd:be:24:1d:0c:e1:e4:64:a1:76:6f:db: 29:09:b6:2f:a8:db:58:5f:f6:77:e1:2c:5e:b6:3f: 2f:b7:a2:7f:90:e3:56:b8:6f:22:04:2a:6a:c5:a4: 6d:d6:13:82:f1:01:08:c3:5a:c8:a6:2f:b8:f1:1e: d5:e0:6f:0a:1c:91:d6:3a:2e:54:2f:f3:3d:0e:b9: d8:2d:f9:d4:aa:5d:39:a4:6a:e1:14:80:7c:00:43: 97:b1:04:35:7e:c3:8c:d3:96:ce:1f:54:fb:4d:22: 73:87:9b:4b:1f:aa:49:10:84:57:fb:61:31:0c:a5: 54:ca:fa:a3:18:2e:cf:6b:91:fb:f7:40:e4:a0:29: e0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:6C:35:99:6B:A6:D2:15:40:4E:D2:54:41:11:F3:3C:60:95:6A:D1 X509v3 Authority Key Identifier: keyid:0C:6F:A1:56:C5:7C:4E:88:5B:9E:6A:F8:23:0B:65:4D:79:6A:56:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:62:7b:bc:b8:11:40:5f:a3:07:fb:e1:19:6b:01:7f:67:43: e5:e3:03:05:76:13:7e:8f:16:e2:d4:21:59:4e:a2:71:6a:d0: a1:80:b7:14:93:76:29:b5:c9:5f:dd:db:f8:50:01:ea:96:d0: d9:d9:05:c8:02:06:a0:a0:16:c5:79:5e:ab:41:a8:dd:0c:71: ed:8b:8d:61:28:df:77:86:b3:cf:2e:7c:de:ab:43:2f:2b:12: 34:70:79:44:87:6d:0f:d5:c8:61:61:d4:53:9e:89:5c:52:8d: 6f:d7:00:80:ed:c3:6c:97:c4:e7:1d:21:dc:8f:bd:81:bf:3e: 4d:c4:d2:8d:45:82:59:03:0e:8d:b5:68:19:c2:2e:4a:76:b7: 5c:6e:bb:e3:64:79:fe:bd:ce:c9:6b:e3:f1:06:96:4c:47:5b: 48:4c:3c:14:ce:fc:1f:de:65:07:44:76:ed:e3:22:7d:a7:44: 6c:fd:0e:08:c1:53:76:cd:df:b8:5e:a1:7c:7a:14:dc:b9:c9: 61:8d:9c:38:bf:8e:5f:6e:38:0a:d7:41:83:52:eb:e7:28:db: 32:a9:33:80:67:4c:39:19:22:4c:8b:f8:7e:29:81:6c:da:e1: 0d:28:60:a7:2d:de:64:d5:37:0f:8c:ec:ff:12:9a:04:69:40: ec:d9:ca:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZse4TF9NNV+szVpWipJ1L2wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNmZhMTU2YzU3YzRlODg1YjllNmFmODIzMGI2NTRkNzk2 YTU2MTEwHhcNMjUxMjE0MjIwMDMzWhcNMjUxMjE1MjIwMDMzWjAzMTEwLwYDVQQD Eyg1MzZjMzU5OTZiYTZkMjE1NDA0ZWQyNTQ0MTExZjMzYzYwOTU2YWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5WF29spuP2la0aMKW+ffaQBp2oc PuAm02rda/DvP2txkV6Qc7aMwkbewKAsDj6WkCrh6T3cf7j0YFt5/iuu4nNXUsLj YNXE8fIO3Pd78DPrqkryJL0IO9IhkmlVycNt/5ziN3YlTLxN/VZcYLGFV6f2NTCz 7KwTN3+9viQdDOHkZKF2b9spCbYvqNtYX/Z34Sxetj8vt6J/kONWuG8iBCpqxaRt 1hOC8QEIw1rIpi+48R7V4G8KHJHWOi5UL/M9DrnYLfnUql05pGrhFIB8AEOXsQQ1 fsOM05bOH1T7TSJzh5tLH6pJEIRX+2ExDKVUyvqjGC7Pa5H790DkoCngoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFNsNZlrptIVQE7SVEER8zxglWrRMB8GA1UdIwQY MBaAFAxvoVbFfE6IW55q+CMLZU15alYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREctaFZzVjhUb2hibm1yNEl3dGxUWGxxVmhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS80OGM1NmQtNTcyNy00MmJhLTgwYzQt YjhjMzZlY2VkYWQ4LzEvREctaFZzVjhUb2hibm1yNEl3dGxUWGxxVmhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS80OGM1NmQtNTcyNy00MmJhLTgwYzQtYjhjMzZlY2VkYWQ4 LzEvREctaFZzVjhUb2hibm1yNEl3dGxUWGxxVmhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP2J7vLgR QF+jB/vhGWsBf2dD5eMDBXYTfo8W4tQhWU6icWrQoYC3FJN2KbXJX93b+FAB6pbQ 2dkFyAIGoKAWxXleq0Go3Qxx7YuNYSjfd4azzy583qtDLysSNHB5RIdtD9XIYWHU U56JXFKNb9cAgO3DbJfE5x0h3I+9gb8+TcTSjUWCWQMOjbVoGcIuSna3XG6742R5 /r3OyWvj8QaWTEdbSEw8FM78H95lB0R27eMifadEbP0OCMFTds3fuF6hfHoU3LnJ YY2cOL+OX244CtdBg1Lr5yjbMqkzgGdMORkiTIv4fimBbNrhDShgpy3eZNU3D4zs /xKaBGlA7NnKLg== -----END CERTIFICATE-----Generated at Mon Dec 15 01:39:57 2025 by rpki-client