This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft File: DcIGFAWVaZPMY6YNsPljUl01dzE.mft (raw, json) Hash identifier: wliPv1NrFGzY0trP8gwAa8JUkd7B0HeUw16G0QUjmGA= Subject key identifier: 54:A0:19:84:27:E5:F8:5F:69:13:5F:8E:03:DF:49:77:09:4F:24:64 Authority key identifier: 0D:C2:06:14:05:95:69:93:CC:63:A6:0D:B0:F9:63:52:5D:35:77:31 Certificate issuer: /CN=0dc2061405956993cc63a60db0f963525d357731 Certificate serial: 019B5A520BE00D06ADCAF4729AB32722665C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 11:01:24 +0000 Manifest this update: Fri 26 Dec 2025 11:01:24 +0000 Manifest next update: Sat 27 Dec 2025 11:01:24 +0000 Files and hashes: 1: DcIGFAWVaZPMY6YNsPljUl01dzE.crl (hash: qA+j3xPSXDV2cqEH1DHdPfg6MxNElXEMbqABsUpdldo=) 2: Spijy9s0dl5Zj39GdhMa_kS4bpQ.roa (hash: yNGOiWMyz1u0T1szDPmkVxet3IhLc4ljiBf05yJrLuA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:52:0b:e0:0d:06:ad:ca:f4:72:9a:b3:27:22:66:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dc2061405956993cc63a60db0f963525d357731 Validity Not Before: Dec 26 11:01:24 2025 GMT Not After : Dec 27 11:01:24 2025 GMT Subject: CN=54a0198427e5f85f69135f8e03df4977094f2464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:29:37:3f:83:ef:a8:ae:0f:6b:d1:d6:e7:34: 95:66:16:8c:12:0e:1f:60:44:8c:3a:6e:5d:9b:54: 13:ea:ea:49:4a:ab:db:2c:90:ca:f9:3e:b8:4e:f1: 30:6e:a2:b5:92:24:e8:70:c1:c1:d3:2e:98:a6:d5: 20:67:ac:42:7f:10:ae:07:68:16:69:de:83:bc:c0: de:7e:de:6c:c6:34:80:8b:10:c4:2e:e0:5a:4d:c5: 9b:a8:84:a6:ca:de:fc:41:29:50:a6:2b:bc:9f:c8: 8e:59:13:9e:f9:64:b9:ad:c0:27:b6:42:84:57:83: 7c:f6:25:ad:5e:4c:7d:05:99:5e:fb:e7:c2:80:0b: 33:64:af:37:43:71:f8:69:ba:95:92:c0:17:e0:b6: 4c:13:ed:d0:5d:49:e0:15:ae:1f:74:28:ad:bc:df: 66:be:55:85:3f:69:dc:6b:3b:28:68:92:1c:3f:f2: dc:d8:4c:85:09:20:41:05:8b:8f:93:02:d4:12:70: 5e:7e:72:da:14:d9:80:b9:1e:15:44:f7:54:94:3f: 54:87:3f:12:8e:f6:f2:c0:42:e7:77:17:5f:08:7d: e4:97:b8:40:5c:7a:73:46:85:92:05:52:86:77:a0: 6b:7d:07:f4:d7:b7:01:c1:7b:e8:bc:26:78:0c:a6: 95:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:A0:19:84:27:E5:F8:5F:69:13:5F:8E:03:DF:49:77:09:4F:24:64 X509v3 Authority Key Identifier: keyid:0D:C2:06:14:05:95:69:93:CC:63:A6:0D:B0:F9:63:52:5D:35:77:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:a3:0d:39:64:97:34:ef:6a:f8:fd:dc:9a:1a:aa:95:4b:f3: 86:c2:a9:99:a0:54:8a:2f:f6:d8:dd:b4:68:d6:e1:90:ca:97: 04:d3:45:23:83:14:6c:66:09:6f:98:11:46:47:68:c5:39:5c: 22:8c:f7:88:cc:78:0b:0d:cf:51:3e:23:bd:65:63:a0:92:06: cc:68:a3:4a:55:f6:11:d5:06:d2:d0:cf:88:d1:9a:46:c3:e4: 98:c1:0d:d8:60:e0:2c:7e:8d:ef:9d:67:32:02:e7:57:f1:ea: 92:f9:e5:00:bc:ce:3e:14:c2:a6:60:ad:f0:eb:88:c6:6a:ea: 18:a2:0a:5a:68:10:67:0d:46:ac:80:b6:85:76:27:14:f8:07: 96:0e:cb:de:b0:87:60:68:78:9a:53:70:40:6f:e9:84:a5:4e: db:72:68:62:e8:7e:6f:5b:42:d5:51:2b:20:76:55:86:50:ba: 72:1b:72:ee:e6:a5:cc:94:f7:a7:8a:7a:62:a1:c4:64:db:04: 68:e2:a4:63:f8:d5:49:cd:84:af:df:df:55:e1:0b:85:25:ff: 2b:4a:19:80:1c:98:31:25:a4:a4:b8:d1:4d:38:3f:e8:f5:3e: 98:f0:20:8c:c7:0e:29:31:6d:7d:1d:37:07:2b:a9:62:1a:4e: ab:ba:0b:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUgvgDQatyvRymrMnImZcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYzIwNjE0MDU5NTY5OTNjYzYzYTYwZGIwZjk2MzUyNWQz NTc3MzEwHhcNMjUxMjI2MTEwMTI0WhcNMjUxMjI3MTEwMTI0WjAzMTEwLwYDVQQD Eyg1NGEwMTk4NDI3ZTVmODVmNjkxMzVmOGUwM2RmNDk3NzA5NGYyNDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ck3P4PvqK4Pa9HW5zSVZhaMEg4f YESMOm5dm1QT6upJSqvbLJDK+T64TvEwbqK1kiTocMHB0y6YptUgZ6xCfxCuB2gW ad6DvMDeft5sxjSAixDELuBaTcWbqISmyt78QSlQpiu8n8iOWROe+WS5rcAntkKE V4N89iWtXkx9BZle++fCgAszZK83Q3H4abqVksAX4LZME+3QXUngFa4fdCitvN9m vlWFP2ncazsoaJIcP/Lc2EyFCSBBBYuPkwLUEnBefnLaFNmAuR4VRPdUlD9Uhz8S jvbywELndxdfCH3kl7hAXHpzRoWSBVKGd6BrfQf017cBwXvovCZ4DKaVuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFSgGYQn5fhfaRNfjgPfSXcJTyRkMB8GA1UdIwQY MBaAFA3CBhQFlWmTzGOmDbD5Y1JdNXcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGNJR0ZBV1ZhWlBNWTZZTnNQbGpVbDAxZHpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85ZGU3NjctM2EyOC00OWFiLWFlMjgt MjM0OGJhNmZiNGMzLzEvRGNJR0ZBV1ZhWlBNWTZZTnNQbGpVbDAxZHpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy85ZGU3NjctM2EyOC00OWFiLWFlMjgtMjM0OGJhNmZiNGMz LzEvRGNJR0ZBV1ZhWlBNWTZZTnNQbGpVbDAxZHpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbaMNOWSX NO9q+P3cmhqqlUvzhsKpmaBUii/22N20aNbhkMqXBNNFI4MUbGYJb5gRRkdoxTlc Ioz3iMx4Cw3PUT4jvWVjoJIGzGijSlX2EdUG0tDPiNGaRsPkmMEN2GDgLH6N751n MgLnV/HqkvnlALzOPhTCpmCt8OuIxmrqGKIKWmgQZw1GrIC2hXYnFPgHlg7L3rCH YGh4mlNwQG/phKVO23JoYuh+b1tC1VErIHZVhlC6chty7ualzJT3p4p6YqHEZNsE aOKkY/jVSc2Er9/fVeELhSX/K0oZgByYMSWkpLjRTTg/6PU+mPAgjMcOKTFtfR03 ByupYhpOq7oL1A== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:45 2025 by rpki-client