This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft File: DKcf-Varj49-f1nUCax696KwqGQ.mft (raw, json) Hash identifier: N4klG5qzhT6g+jmOxrYFkAPEl0V9J+gVThCAfzuhics= Subject key identifier: 11:4D:68:23:46:8B:AB:1B:85:A4:1A:34:43:0A:C8:D6:DE:2A:CF:03 Authority key identifier: 0C:A7:1F:F9:56:AB:8F:8F:7E:7F:59:D4:09:AC:7A:F7:A2:B0:A8:64 Certificate issuer: /CN=0ca71ff956ab8f8f7e7f59d409ac7af7a2b0a864 Certificate serial: 019B383376F5FCFBBEAE5177A7F971596195 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 20:00:55 +0000 Manifest this update: Fri 19 Dec 2025 20:00:55 +0000 Manifest next update: Sat 20 Dec 2025 20:00:55 +0000 Files and hashes: 1: DKcf-Varj49-f1nUCax696KwqGQ.crl (hash: urdxsZOz/cFlg4SPCRILD4C924wEiXgvLXYGnilg2iQ=) 2: OsEqbh-MgAhZY6dEETKTLoVhiek.roa (hash: 8l+J0cXRIwFphYGIY8ShZlRzu2XOdk8YK7YXmH85akQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:33:76:f5:fc:fb:be:ae:51:77:a7:f9:71:59:61:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ca71ff956ab8f8f7e7f59d409ac7af7a2b0a864 Validity Not Before: Dec 19 20:00:55 2025 GMT Not After : Dec 20 20:00:55 2025 GMT Subject: CN=114d6823468bab1b85a41a34430ac8d6de2acf03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ed:fa:33:a5:d6:ff:83:d8:b3:95:94:61:82: 96:85:e5:8a:41:d2:59:73:21:d6:a9:da:4f:32:1b: 91:69:de:fa:8d:5f:8d:9c:17:ba:c4:af:8c:1c:08: 5c:d8:05:e0:50:62:b4:97:bf:6d:fc:a0:cd:7f:b7: 09:ef:d4:af:cc:66:77:1a:05:18:eb:4a:66:bc:62: ef:fd:31:45:83:28:4f:f3:f9:33:57:b0:8f:c2:4e: b1:4e:8f:d2:52:1a:bc:9a:36:66:9f:d3:3b:81:db: b5:a1:09:cf:89:ae:c1:6c:21:39:ce:3e:02:81:48: d4:6c:ea:71:31:89:71:3e:e4:b2:df:dc:79:55:bc: 7c:99:78:f5:55:ca:76:94:3a:0f:e7:0f:81:70:40: f8:44:68:17:97:0d:c0:e0:86:e5:bd:16:02:20:43: de:c1:20:57:1a:9a:7d:51:ae:75:69:3a:36:26:ce: 29:5f:7d:3b:38:98:f5:81:6e:dd:63:8b:7a:8b:51: b2:1d:23:98:9b:8e:57:cc:82:db:19:2d:26:0a:1d: 84:8f:12:62:08:cf:13:0d:1f:50:36:2e:e7:f2:90: 83:ec:d6:3c:06:30:4b:66:73:3f:02:37:3b:f5:13: 35:9a:39:09:d8:6f:19:bb:57:7b:6c:b0:f3:6b:f2: 29:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:4D:68:23:46:8B:AB:1B:85:A4:1A:34:43:0A:C8:D6:DE:2A:CF:03 X509v3 Authority Key Identifier: keyid:0C:A7:1F:F9:56:AB:8F:8F:7E:7F:59:D4:09:AC:7A:F7:A2:B0:A8:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:e3:aa:65:f1:fe:21:61:b5:bb:a2:62:2c:c0:9d:a2:a3:9f: a2:4c:28:19:d5:8b:7e:de:23:9f:93:6b:24:ad:d9:1e:88:af: c8:30:da:04:cf:78:56:76:77:c8:e3:a5:c6:4c:61:e6:01:ba: 1d:57:df:de:2a:6c:b5:d0:fe:ad:65:2e:1e:9a:57:eb:76:43: 4d:72:20:c1:8a:a6:5f:08:e4:7b:12:b6:24:3c:8d:e0:8d:4c: 13:a1:90:93:0c:7c:c2:9c:e9:ff:8b:c5:0f:f5:f1:a5:b3:09: 83:8f:93:36:6c:ad:f6:cb:85:cd:22:4e:95:b4:41:c3:18:66: e6:bb:88:38:af:34:53:d0:76:23:5c:af:11:d9:cc:57:1e:99: 29:fc:e6:a8:25:96:db:83:8f:b5:a0:de:60:6f:f6:cd:da:2f: 29:c1:85:bd:d1:41:f1:37:45:39:d0:99:69:6e:bf:32:31:44: 79:e2:2e:87:c3:3a:97:55:36:f4:e6:35:c5:f5:e1:42:77:ad: 42:7f:8c:c4:5c:3a:14:7f:97:b1:30:d3:ab:4a:2c:e2:0b:06: 6d:57:7f:8f:3d:69:77:5e:b1:91:1c:94:17:a3:f2:3b:58:3e: 1d:a9:ee:ee:fc:2e:a0:23:d5:42:e0:c8:83:a7:22:c8:fe:57: 1d:8d:99:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4M3b1/Pu+rlF3p/lxWWGVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjYTcxZmY5NTZhYjhmOGY3ZTdmNTlkNDA5YWM3YWY3YTJi MGE4NjQwHhcNMjUxMjE5MjAwMDU1WhcNMjUxMjIwMjAwMDU1WjAzMTEwLwYDVQQD EygxMTRkNjgyMzQ2OGJhYjFiODVhNDFhMzQ0MzBhYzhkNmRlMmFjZjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArO36M6XW/4PYs5WUYYKWheWKQdJZ cyHWqdpPMhuRad76jV+NnBe6xK+MHAhc2AXgUGK0l79t/KDNf7cJ79SvzGZ3GgUY 60pmvGLv/TFFgyhP8/kzV7CPwk6xTo/SUhq8mjZmn9M7gdu1oQnPia7BbCE5zj4C gUjUbOpxMYlxPuSy39x5Vbx8mXj1Vcp2lDoP5w+BcED4RGgXlw3A4IblvRYCIEPe wSBXGpp9Ua51aTo2Js4pX307OJj1gW7dY4t6i1GyHSOYm45XzILbGS0mCh2EjxJi CM8TDR9QNi7n8pCD7NY8BjBLZnM/Ajc79RM1mjkJ2G8Zu1d7bLDza/IpewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBFNaCNGi6sbhaQaNEMKyNbeKs8DMB8GA1UdIwQY MBaAFAynH/lWq4+Pfn9Z1AmseveisKhkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREtjZi1WYXJqNDktZjFuVUNheDY5Nkt3cUdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC82ZWI4NWUtYmJiMC00ZGE3LWE0ZTAt ZDJlYTYwMDRkNTUzLzEvREtjZi1WYXJqNDktZjFuVUNheDY5Nkt3cUdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC82ZWI4NWUtYmJiMC00ZGE3LWE0ZTAtZDJlYTYwMDRkNTUz LzEvREtjZi1WYXJqNDktZjFuVUNheDY5Nkt3cUdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE+OqZfH+ IWG1u6JiLMCdoqOfokwoGdWLft4jn5NrJK3ZHoivyDDaBM94VnZ3yOOlxkxh5gG6 HVff3ipstdD+rWUuHppX63ZDTXIgwYqmXwjkexK2JDyN4I1ME6GQkwx8wpzp/4vF D/XxpbMJg4+TNmyt9suFzSJOlbRBwxhm5ruIOK80U9B2I1yvEdnMVx6ZKfzmqCWW 24OPtaDeYG/2zdovKcGFvdFB8TdFOdCZaW6/MjFEeeIuh8M6l1U29OY1xfXhQnet Qn+MxFw6FH+XsTDTq0os4gsGbVd/jz1pd16xkRyUF6PyO1g+Hanu7vwuoCPVQuDI g6ciyP5XHY2Z2A== -----END CERTIFICATE-----Generated at Sat Dec 20 00:15:56 2025 by rpki-client