This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft File: DNLKvrHXJOekjdYemn4MUKTpv1A.mft (raw, json) Hash identifier: aw9RBj85nUymcISoL+2bkmudR8De/WODdXj619aNdlc= Subject key identifier: 6D:53:F3:AA:D0:5E:A3:31:9D:78:13:D9:F9:E7:80:08:86:74:7A:8A Authority key identifier: 0C:D2:CA:BE:B1:D7:24:E7:A4:8D:D6:1E:9A:7E:0C:50:A4:E9:BF:50 Certificate issuer: /CN=0cd2cabeb1d724e7a48dd61e9a7e0c50a4e9bf50 Certificate serial: 019B356954FF44B20CCF1627B5FDB8A9C35F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft Manifest number: 0854 Signing time: Fri 19 Dec 2025 07:00:53 +0000 Manifest this update: Fri 19 Dec 2025 07:00:53 +0000 Manifest next update: Sat 20 Dec 2025 07:00:53 +0000 Files and hashes: 1: DNLKvrHXJOekjdYemn4MUKTpv1A.crl (hash: iulxCK/IHV0EW0aJd36totNM6F2Xhk1sW8CIufpCDus=) 2: gFGZ2BFs8uwMqzE5e-fa-6VVCNI.roa (hash: RsuEdz61HYwgHfhCVbH78Gqegx1PGZpeCp/nCDSO5do=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:54:ff:44:b2:0c:cf:16:27:b5:fd:b8:a9:c3:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cd2cabeb1d724e7a48dd61e9a7e0c50a4e9bf50 Validity Not Before: Dec 19 07:00:53 2025 GMT Not After : Dec 20 07:00:53 2025 GMT Subject: CN=6d53f3aad05ea3319d7813d9f9e7800886747a8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2f:1d:15:35:d7:97:58:6f:55:77:bd:1a:d2: 78:f5:2f:a3:5d:77:e2:f9:56:0a:15:18:98:50:08: 39:6b:29:b2:65:57:57:44:06:55:a3:10:18:f5:98: eb:94:f0:95:aa:84:b1:a3:30:94:8a:b3:05:63:64: e9:ca:7b:d3:9c:46:5f:62:d5:db:b8:02:57:82:99: 7d:41:f5:5a:b7:60:2b:fd:dd:38:fb:71:bc:b8:6d: 84:47:e9:a7:e4:f9:c2:cd:dd:26:84:ba:d5:53:b1: c2:d9:32:ef:e9:d5:eb:8c:cb:3f:9b:b3:5e:b2:60: 57:c5:1d:d6:33:ee:ad:30:f9:ac:16:b5:04:cc:2f: 2c:1f:e6:4b:e3:cc:6f:c5:30:01:e9:f3:ad:a8:9e: da:d4:b9:9e:64:ee:fe:d7:70:ee:b8:6e:d3:0d:cc: 9a:8c:a4:8a:69:18:cb:77:96:62:dd:e8:00:b6:bd: 8e:9c:41:00:0e:9c:fd:03:98:17:8f:01:f6:97:42: a9:22:ae:b8:b5:92:e4:b7:67:62:a6:6a:6e:27:a2: b9:96:62:83:fa:e3:43:74:6c:10:d3:a7:88:22:4e: f0:e1:e4:33:f3:4e:07:af:0e:59:3e:62:36:ba:29: 7b:df:be:3a:7c:3f:68:aa:84:da:3b:41:d5:52:ed: 39:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:53:F3:AA:D0:5E:A3:31:9D:78:13:D9:F9:E7:80:08:86:74:7A:8A X509v3 Authority Key Identifier: keyid:0C:D2:CA:BE:B1:D7:24:E7:A4:8D:D6:1E:9A:7E:0C:50:A4:E9:BF:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:29:27:eb:66:21:f7:fb:89:3c:e9:90:84:fa:0f:3d:87:6c: 7d:2f:6f:e0:fd:18:f8:24:be:b9:14:a8:d9:6b:28:a8:35:28: 78:6a:24:1c:8c:b2:b2:50:a4:64:27:ad:ae:e8:c3:19:2b:c9: 3a:75:e4:a5:b8:1a:75:d8:34:e5:e8:5e:27:96:62:8e:51:85: af:05:95:1b:00:6d:ba:6b:12:1d:d6:c4:6d:ef:ba:8f:48:59: 4b:f0:16:f5:14:a5:d5:4d:d0:73:8d:54:7b:82:98:88:31:af: 65:c5:79:28:7a:95:18:c1:19:a9:5a:06:aa:08:01:7e:eb:38: 26:af:f3:d3:3d:ce:fd:ca:97:fa:44:f1:8b:da:e7:e6:f5:12: 58:b5:d8:f8:5d:6c:f7:f4:5d:c3:52:0b:5b:50:52:82:b4:79: a6:4d:10:3a:1b:c6:53:ab:12:8b:cd:07:d4:ef:43:ef:ab:31: a2:93:50:3f:01:84:e5:e2:60:cb:28:3b:e3:20:e1:35:58:81: ed:0e:4a:c5:d0:3b:f7:4b:97:56:71:1f:0a:60:e5:5f:9d:ec: 4b:65:31:85:d2:df:ed:8b:f0:5c:5d:08:ec:2f:30:7b:b1:36: a7:66:c6:12:d2:ce:aa:7c:ce:48:83:1c:9d:c2:6d:ed:25:ad: 3a:de:9a:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1aVT/RLIMzxYntf24qcNfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZDJjYWJlYjFkNzI0ZTdhNDhkZDYxZTlhN2UwYzUwYTRl OWJmNTAwHhcNMjUxMjE5MDcwMDUzWhcNMjUxMjIwMDcwMDUzWjAzMTEwLwYDVQQD Eyg2ZDUzZjNhYWQwNWVhMzMxOWQ3ODEzZDlmOWU3ODAwODg2NzQ3YThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqC8dFTXXl1hvVXe9GtJ49S+jXXfi +VYKFRiYUAg5aymyZVdXRAZVoxAY9ZjrlPCVqoSxozCUirMFY2TpynvTnEZfYtXb uAJXgpl9QfVat2Ar/d04+3G8uG2ER+mn5PnCzd0mhLrVU7HC2TLv6dXrjMs/m7Ne smBXxR3WM+6tMPmsFrUEzC8sH+ZL48xvxTAB6fOtqJ7a1LmeZO7+13DuuG7TDcya jKSKaRjLd5Zi3egAtr2OnEEADpz9A5gXjwH2l0KpIq64tZLkt2dipmpuJ6K5lmKD +uNDdGwQ06eIIk7w4eQz804Hrw5ZPmI2uil73746fD9oqoTaO0HVUu05zQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG1T86rQXqMxnXgT2fnngAiGdHqKMB8GA1UdIwQY MBaAFAzSyr6x1yTnpI3WHpp+DFCk6b9QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE5MS3ZySFhKT2VramRZZW1uNE1VS1RwdjFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9iNzk3NzctNGEwNC00ZGFiLWExZGMt MjUzNzQ0OTRjZWVlLzEvRE5MS3ZySFhKT2VramRZZW1uNE1VS1RwdjFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9iNzk3NzctNGEwNC00ZGFiLWExZGMtMjUzNzQ0OTRjZWVl LzEvRE5MS3ZySFhKT2VramRZZW1uNE1VS1RwdjFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATykn62Yh 9/uJPOmQhPoPPYdsfS9v4P0Y+CS+uRSo2WsoqDUoeGokHIyyslCkZCetrujDGSvJ OnXkpbgaddg05eheJ5ZijlGFrwWVGwBtumsSHdbEbe+6j0hZS/AW9RSl1U3Qc41U e4KYiDGvZcV5KHqVGMEZqVoGqggBfus4Jq/z0z3O/cqX+kTxi9rn5vUSWLXY+F1s 9/Rdw1ILW1BSgrR5pk0QOhvGU6sSi80H1O9D76sxopNQPwGE5eJgyyg74yDhNViB 7Q5KxdA790uXVnEfCmDlX53sS2UxhdLf7YvwXF0I7C8we7E2p2bGEtLOqnzOSIMc ncJt7SWtOt6aQQ== -----END CERTIFICATE-----Generated at Fri Dec 19 10:42:46 2025 by rpki-client