This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft File: DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft (raw, json) Hash identifier: TAUs1s2IvGdCtM5835BUh1NIn8UD5our1wExRwQ14qM= Subject key identifier: E7:E2:D8:BD:C9:8B:41:DF:36:47:FF:27:39:DF:1F:BD:43:A8:0A:73 Authority key identifier: 0C:5B:E6:05:6E:B0:C3:65:0B:8F:E2:1E:2D:72:6C:1B:83:EC:82:B3 Certificate issuer: /CN=0c5be6056eb0c3650b8fe21e2d726c1b83ec82b3 Certificate serial: 019B39EA8BC94C761723E43021196C117F8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 04:00:31 +0000 Manifest this update: Sat 20 Dec 2025 04:00:31 +0000 Manifest next update: Sun 21 Dec 2025 04:00:31 +0000 Files and hashes: 1: DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl (hash: PNStYfoMYWxpAV06fAtYX+q4xjKd2rrlk5vH1cYE3f8=) 2: ZfyPZAhLEDJfbRWOZTPW6i5uxAs.roa (hash: lVcg5S8ltJ0oxrMYvDgCBMGIQj26liJSgr9Rj1kE0c4=) 3: dywSz8RV6R_zILQ66xhZrS_rEB0.roa (hash: 9q5cK6mUpjjqk6wT4UQLlfFH4bjjllWU5kv3AHNWRgo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:ea:8b:c9:4c:76:17:23:e4:30:21:19:6c:11:7f:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c5be6056eb0c3650b8fe21e2d726c1b83ec82b3 Validity Not Before: Dec 20 04:00:31 2025 GMT Not After : Dec 21 04:00:31 2025 GMT Subject: CN=e7e2d8bdc98b41df3647ff2739df1fbd43a80a73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a5:31:cf:5c:23:16:6f:df:1d:10:f9:59:b5: 71:d7:fd:a4:07:20:21:51:4f:a2:72:6e:46:85:32: e1:14:79:94:a6:6c:bf:a1:a1:19:26:da:34:81:15: b6:1d:75:16:9c:05:fd:e9:cb:8a:f4:81:d5:3f:cf: ef:f8:2f:1c:3a:e3:bf:36:80:8d:23:62:fe:b1:2c: eb:9c:ed:6d:00:ee:07:2a:ee:8b:77:e2:62:52:4e: 85:ea:fc:a6:8d:9e:4f:28:93:14:90:fa:d1:2f:59: 06:a3:e9:f3:05:d9:03:b2:b0:43:93:55:01:7a:b3: dd:17:68:ff:57:4c:3c:7b:40:d2:19:96:fd:05:5f: e9:86:5b:64:ce:44:cd:9a:93:7c:74:c4:9f:a6:63: 02:d9:9e:21:8c:64:d9:be:5a:67:95:65:ee:ce:28: a6:d5:fa:52:51:a4:9c:41:f1:ba:e7:9b:91:90:37: 12:49:72:99:87:ef:12:48:ac:1d:1f:13:a3:ce:d0: 19:ea:a0:b7:b2:2f:f3:81:fc:1f:0a:21:b7:8e:6c: 7d:a3:04:ff:c0:07:fc:f6:e8:13:0b:18:bb:40:aa: e1:ce:a4:e4:bb:fd:db:37:2a:4f:da:fb:9a:b6:26: eb:b8:7d:a1:85:cf:c7:a1:3d:02:4e:fa:75:54:f6: 27:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:E2:D8:BD:C9:8B:41:DF:36:47:FF:27:39:DF:1F:BD:43:A8:0A:73 X509v3 Authority Key Identifier: keyid:0C:5B:E6:05:6E:B0:C3:65:0B:8F:E2:1E:2D:72:6C:1B:83:EC:82:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:a3:aa:f3:29:14:20:fa:62:f7:94:71:21:41:30:fd:14:54: 4d:ab:49:45:cb:26:6f:5e:31:ea:e9:99:d7:e0:47:71:8c:2d: 4f:74:b0:d3:9d:ca:69:89:38:a6:5a:43:8a:04:d7:25:2b:58: 4c:0b:e6:1c:6a:30:9d:b4:4c:99:c9:2c:06:aa:c0:06:da:26: a2:6a:1a:4c:7a:fe:01:a8:82:cf:27:89:8a:a2:a4:c9:07:01: f2:7b:27:d7:ac:ae:b5:72:07:6a:65:f2:24:53:a7:9e:ed:d7: 71:77:42:03:14:fe:5b:62:62:a8:f9:6b:7b:0a:34:d6:53:6b: 12:e9:34:9d:cc:8e:cc:8d:86:d7:62:f3:ee:a2:ce:23:ad:2a: 0a:31:37:34:b1:04:5e:aa:3c:cd:6b:57:d5:0f:18:26:7d:72: b4:5e:9f:92:68:57:84:39:23:d9:4b:37:08:8d:c3:26:cd:da: 55:5a:6d:dd:48:0e:3e:6d:d5:2e:43:70:aa:6d:de:2d:3b:9d: a0:dc:4e:d4:bf:00:ac:26:14:6e:05:0c:72:7d:46:4c:ea:64: bf:c9:ca:d2:81:da:1c:54:0a:c4:12:6a:67:cf:88:1d:6e:f7: 5f:c7:0a:4c:53:eb:dc:64:b0:c7:73:0b:02:9c:f3:62:bd:d9: 6b:f2:66:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56ovJTHYXI+QwIRlsEX+OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNWJlNjA1NmViMGMzNjUwYjhmZTIxZTJkNzI2YzFiODNl YzgyYjMwHhcNMjUxMjIwMDQwMDMxWhcNMjUxMjIxMDQwMDMxWjAzMTEwLwYDVQQD EyhlN2UyZDhiZGM5OGI0MWRmMzY0N2ZmMjczOWRmMWZiZDQzYTgwYTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4aUxz1wjFm/fHRD5WbVx1/2kByAh UU+icm5GhTLhFHmUpmy/oaEZJto0gRW2HXUWnAX96cuK9IHVP8/v+C8cOuO/NoCN I2L+sSzrnO1tAO4HKu6Ld+JiUk6F6vymjZ5PKJMUkPrRL1kGo+nzBdkDsrBDk1UB erPdF2j/V0w8e0DSGZb9BV/phltkzkTNmpN8dMSfpmMC2Z4hjGTZvlpnlWXuziim 1fpSUaScQfG655uRkDcSSXKZh+8SSKwdHxOjztAZ6qC3si/zgfwfCiG3jmx9owT/ wAf89ugTCxi7QKrhzqTku/3bNypP2vuatibruH2hhc/HoT0CTvp1VPYntwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOfi2L3Ji0HfNkf/JznfH71DqApzMB8GA1UdIwQY MBaAFAxb5gVusMNlC4/iHi1ybBuD7IKzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZ2bUJXNnd3MlVMai1JZUxYSnNHNFBzZ3JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8zMjdhNTQtNmRiMi00MjkxLTk0MzQt ZmZjN2YyYTMxOThjLzEvREZ2bUJXNnd3MlVMai1JZUxYSnNHNFBzZ3JNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8zMjdhNTQtNmRiMi00MjkxLTk0MzQtZmZjN2YyYTMxOThj LzEvREZ2bUJXNnd3MlVMai1JZUxYSnNHNFBzZ3JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmaOq8ykU IPpi95RxIUEw/RRUTatJRcsmb14x6umZ1+BHcYwtT3Sw053KaYk4plpDigTXJStY TAvmHGownbRMmcksBqrABtomomoaTHr+AaiCzyeJiqKkyQcB8nsn16yutXIHamXy JFOnnu3XcXdCAxT+W2JiqPlrewo01lNrEuk0ncyOzI2G12Lz7qLOI60qCjE3NLEE Xqo8zWtX1Q8YJn1ytF6fkmhXhDkj2Us3CI3DJs3aVVpt3UgOPm3VLkNwqm3eLTud oNxO1L8ArCYUbgUMcn1GTOpkv8nK0oHaHFQKxBJqZ8+IHW73X8cKTFPr3GSwx3ML ApzzYr3Za/Jm4g== -----END CERTIFICATE-----Generated at Sat Dec 20 08:56:26 2025 by rpki-client