This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft File: DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft (raw, json) Hash identifier: +8meSWiHdSyats4l7Qgb723+qPVGFrDv+jCkaNLYl0Q= Subject key identifier: 0C:67:16:E2:7C:92:03:1D:30:11:17:DA:8E:95:41:D0:66:5A:DD:F7 Authority key identifier: 0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06 Certificate issuer: /CN=0c05ca111c0093b56514215be467b515dda56c06 Certificate serial: 019B5A1A4D00199CF478001FCA237721F399 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft Manifest number: 0B1C Signing time: Fri 26 Dec 2025 10:00:31 +0000 Manifest this update: Fri 26 Dec 2025 10:00:31 +0000 Manifest next update: Sat 27 Dec 2025 10:00:31 +0000 Files and hashes: 1: AdOd8Jb54cEXRecTsgv4rvZgW2w.roa (hash: XlRu/FC0Vkrd6YTWXK4UeFe1TUsmJeqRlhyiiXPRuFk=) 2: DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl (hash: HpvcNxeDyiIDS75eY+zfBBXxWD8zhIPhR6hil7T9Y68=) 3: Uf3rnLD2FeTDGBhV4auB-GpHM1s.roa (hash: ECPU9dL14nC9wQ4VpmYN1TfdrxIkC7KfqX1VDc+N1h4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:4d:00:19:9c:f4:78:00:1f:ca:23:77:21:f3:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c05ca111c0093b56514215be467b515dda56c06 Validity Not Before: Dec 26 10:00:31 2025 GMT Not After : Dec 27 10:00:31 2025 GMT Subject: CN=0c6716e27c92031d301117da8e9541d0665addf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:28:0a:d1:63:12:87:29:73:ad:47:9b:1d:fa: 50:d0:9c:55:c6:4d:b6:8b:4b:3f:95:6b:42:4c:2e: c3:d0:00:45:6f:f1:2f:cf:62:7d:bc:ec:4f:96:d3: f5:ee:21:9f:80:f6:25:78:e9:9d:02:b5:65:92:89: 6f:5b:44:ac:9e:4a:ab:c1:13:fc:4e:67:a5:d1:10: 6a:2e:30:49:55:76:3d:47:9b:bf:f8:5e:92:26:e0: cb:27:c6:f4:cf:e2:1a:e2:cb:08:0f:99:07:ab:7e: 4e:c5:13:18:43:77:c1:71:d9:cc:ce:5b:48:c3:86: e6:90:69:59:d3:08:63:ab:0b:68:7a:90:d8:a6:3f: 7a:1a:f4:54:1c:e1:6d:e5:c2:52:89:8f:b7:05:74: 09:48:2c:f7:0e:7f:c5:4b:b8:45:42:ba:7a:3e:bd: ae:c2:4a:98:42:be:88:52:77:44:c7:6f:a5:c7:a3: 60:6f:09:15:48:5c:ac:22:9e:97:52:b7:4d:04:74: a9:3a:0a:58:d5:48:96:02:25:d9:dc:a3:d7:56:a5: 53:14:c2:a3:91:63:4e:8a:43:e5:18:0d:87:fe:47: da:4e:42:94:f8:2e:50:23:cf:f9:c0:43:db:ff:16: 33:9f:16:9b:fc:0c:60:ac:b5:35:16:7e:f7:32:20: de:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:67:16:E2:7C:92:03:1D:30:11:17:DA:8E:95:41:D0:66:5A:DD:F7 X509v3 Authority Key Identifier: keyid:0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:e8:bf:8e:dd:55:14:10:c6:22:63:5a:e1:28:5a:69:df:a2: df:30:eb:ef:8f:35:a1:05:f8:34:8c:98:0b:69:66:ca:80:ef: 5a:40:cc:91:92:02:1b:9b:22:fb:83:38:9f:42:07:18:48:dd: 44:e1:fa:ae:0d:a7:c4:7e:3d:a7:7a:8c:45:5b:6f:95:9f:22: a1:4d:85:2e:03:bf:43:56:6a:ea:20:4e:9a:25:d4:76:e1:d2: b6:06:c0:13:75:af:15:82:94:2e:82:f8:17:0a:b9:8b:51:e7: ca:16:2d:34:4c:52:05:06:ba:96:16:51:c7:7e:21:cf:52:02: 93:49:1b:85:8c:15:af:d9:91:a0:bc:1e:9c:b0:83:12:7b:62: c6:bd:97:67:78:fd:59:e8:a7:a3:61:b0:23:1a:ec:6e:0a:ac: 63:d0:d9:73:89:98:6d:d7:75:b8:d6:e9:1e:59:7c:59:5b:f6: 6b:5c:c0:07:29:de:1c:81:5d:5e:82:c0:e7:ec:e3:28:14:47: c7:04:bd:f8:bb:a9:34:28:1c:71:b8:39:31:c4:19:9f:0d:bc: 8b:06:21:16:12:8a:77:89:34:00:27:18:36:59:8e:60:c2:06: c3:39:1b:62:56:96:d7:ed:21:09:cc:2e:a7:ee:90:2c:c0:b4: 94:69:c8:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGk0AGZz0eAAfyiN3IfOZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMDVjYTExMWMwMDkzYjU2NTE0MjE1YmU0NjdiNTE1ZGRh NTZjMDYwHhcNMjUxMjI2MTAwMDMxWhcNMjUxMjI3MTAwMDMxWjAzMTEwLwYDVQQD EygwYzY3MTZlMjdjOTIwMzFkMzAxMTE3ZGE4ZTk1NDFkMDY2NWFkZGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkygK0WMShylzrUebHfpQ0JxVxk22 i0s/lWtCTC7D0ABFb/Evz2J9vOxPltP17iGfgPYleOmdArVlkolvW0SsnkqrwRP8 Tmel0RBqLjBJVXY9R5u/+F6SJuDLJ8b0z+Ia4ssID5kHq35OxRMYQ3fBcdnMzltI w4bmkGlZ0whjqwtoepDYpj96GvRUHOFt5cJSiY+3BXQJSCz3Dn/FS7hFQrp6Pr2u wkqYQr6IUndEx2+lx6NgbwkVSFysIp6XUrdNBHSpOgpY1UiWAiXZ3KPXVqVTFMKj kWNOikPlGA2H/kfaTkKU+C5QI8/5wEPb/xYznxab/AxgrLU1Fn73MiDeFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAxnFuJ8kgMdMBEX2o6VQdBmWt33MB8GA1UdIwQY MBaAFAwFyhEcAJO1ZRQhW+RntRXdpWwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREFYS0VSd0FrN1ZsRkNGYjVHZTFGZDJsYkFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wZmJmNDgtNWRiNy00OWZlLWJmNDQt NmEzNjcwNWJiYTZmLzEvREFYS0VSd0FrN1ZsRkNGYjVHZTFGZDJsYkFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wZmJmNDgtNWRiNy00OWZlLWJmNDQtNmEzNjcwNWJiYTZm LzEvREFYS0VSd0FrN1ZsRkNGYjVHZTFGZDJsYkFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd+i/jt1V FBDGImNa4Shaad+i3zDr7481oQX4NIyYC2lmyoDvWkDMkZICG5si+4M4n0IHGEjd ROH6rg2nxH49p3qMRVtvlZ8ioU2FLgO/Q1Zq6iBOmiXUduHStgbAE3WvFYKULoL4 Fwq5i1HnyhYtNExSBQa6lhZRx34hz1ICk0kbhYwVr9mRoLwenLCDEntixr2XZ3j9 Weino2GwIxrsbgqsY9DZc4mYbdd1uNbpHll8WVv2a1zAByneHIFdXoLA5+zjKBRH xwS9+LupNCgccbg5McQZnw28iwYhFhKKd4k0ACcYNlmOYMIGwzkbYlaW1+0hCcwu p+6QLMC0lGnITg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:44:07 2025 by rpki-client