This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft File: dJDOa2-PdQ4DWE67172tDxH74xw.mft (raw, json) Hash identifier: gbOh39sfDheM0Uf1zu/BroIYBb2G/yxQUdF7DlX3pOg= Subject key identifier: 15:7D:94:37:30:63:98:5D:C1:37:72:29:07:5A:E5:EA:F7:AE:A6:CC Authority key identifier: 74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C Certificate issuer: /CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c Certificate serial: 019B0E934C5355291618F62AFE37539CA087 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft Manifest number: 10C5 Signing time: Thu 11 Dec 2025 18:01:32 +0000 Manifest this update: Thu 11 Dec 2025 18:01:32 +0000 Manifest next update: Fri 12 Dec 2025 18:01:32 +0000 Files and hashes: 1: DqHnzYWuxMllYj4fNdyjlN5bOt8.roa (hash: Ct+oA/iZNUzEaqp34vmPr/rb2NLctNCZu0gWWKERVjE=) 2: Lf8_T-o7ZHygGu0g3mlzua1_1HA.roa (hash: CQIDTTHcfVlCnxAPq4hAkvv2QsASVNkVlmr+LBxrlLU=) 3: dJDOa2-PdQ4DWE67172tDxH74xw.crl (hash: 6gex8L4yMzZ0SXcM7jKFtewt2CPoWrXzlJDGoUr5HpY=) 4: vYaVLKXY1-Vrl86mKkE3Y-3XdFU.roa (hash: 8y0C99LYt4H2oUrCqNFHSxS/1TMmBVBqFKxb6zfEFoU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:93:4c:53:55:29:16:18:f6:2a:fe:37:53:9c:a0:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c Validity Not Before: Dec 11 18:01:32 2025 GMT Not After : Dec 12 18:01:32 2025 GMT Subject: CN=157d94373063985dc1377229075ae5eaf7aea6cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:11:9f:ba:65:a2:c1:be:b5:2a:24:ab:2b:dc: d5:b7:23:af:45:d3:cb:65:2d:2a:86:b7:3c:e8:72: 95:86:59:21:6b:9e:63:ff:b0:0c:d5:d9:78:f9:22: 4b:ac:c4:ca:39:39:45:50:a8:d9:86:79:7c:48:3c: e4:f6:61:b7:e9:0a:6f:e9:69:29:b0:4c:3a:e5:a9: b7:9b:33:59:89:eb:c6:c3:a0:04:95:b1:2d:ba:f0: bd:0a:ac:9a:4f:8d:e6:af:15:71:db:f5:98:a0:36: 23:4d:86:11:e1:1d:27:4c:60:85:7e:dd:61:fc:f9: a5:31:b9:e3:3f:0b:2f:76:61:1e:05:5b:9a:12:93: d7:0f:09:75:de:2f:68:2f:83:93:47:5e:90:b0:89: 9f:7f:e0:61:db:99:91:70:d2:d0:f8:8c:85:7f:75: 4c:dc:26:29:d7:fa:d5:8e:b0:5e:34:a6:6e:3c:cb: 36:df:e8:35:b0:70:d0:19:be:58:a7:95:a3:ce:76: 4c:e1:70:a8:03:f9:ec:c1:a5:ac:14:c9:d6:11:6c: 74:fb:c8:fe:f8:ab:c0:d8:7a:f2:6a:01:6d:9c:aa: 92:b2:9f:1e:41:cb:ea:41:32:88:39:13:2b:1d:23: fc:0c:f7:04:01:ae:84:be:1d:25:85:48:2c:13:9e: c7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:7D:94:37:30:63:98:5D:C1:37:72:29:07:5A:E5:EA:F7:AE:A6:CC X509v3 Authority Key Identifier: keyid:74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:80:be:1b:19:0b:00:4c:15:71:d9:50:ae:84:9b:60:5c:0b: 8e:fe:76:f8:0f:ca:0e:f7:4d:8b:8a:04:a0:bc:0d:c5:fd:f5: 8a:b7:48:13:95:32:7f:5f:10:b4:ad:1a:78:61:36:ac:f7:cc: b5:0f:83:d8:4e:14:66:ae:ed:c6:f3:a2:15:ad:52:3f:63:c3: 71:dd:a4:f1:cb:89:b0:5d:4f:04:a2:45:8d:d5:40:e1:4b:28: e7:c0:8d:e5:9d:b1:8d:f3:b6:1b:85:32:d6:82:48:43:b0:7f: a5:b4:72:3a:ae:f9:ec:9f:a1:3f:ae:6b:7a:23:1d:d0:78:e4: 53:b0:25:7c:6a:36:15:8b:d1:48:5d:17:eb:64:ec:2f:84:31: 71:f1:58:9e:5d:b3:b0:19:d3:d0:a0:86:88:7b:56:8e:43:e4: a6:b1:29:16:98:7d:a1:f3:e9:ec:9b:bc:68:1c:96:ff:5c:c1: 8c:9c:44:55:4f:d0:ae:22:18:b7:4a:b1:6a:30:e1:bd:6e:cf: 38:67:73:f9:81:90:02:35:c2:73:42:ab:c4:f9:5d:19:b2:1a: c2:2a:51:0b:8f:31:51:af:89:a8:38:80:f5:e6:f5:60:42:e1: 80:aa:96:77:dc:47:b0:d8:53:17:d5:65:d3:77:6d:64:08:b4: 64:3d:f4:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOk0xTVSkWGPYq/jdTnKCHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTBjZTZiNmY4Zjc1MGUwMzU4NGViYmQ3YmRhZDBmMTFm YmUzMWMwHhcNMjUxMjExMTgwMTMyWhcNMjUxMjEyMTgwMTMyWjAzMTEwLwYDVQQD EygxNTdkOTQzNzMwNjM5ODVkYzEzNzcyMjkwNzVhZTVlYWY3YWVhNmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthGfumWiwb61KiSrK9zVtyOvRdPL ZS0qhrc86HKVhlkha55j/7AM1dl4+SJLrMTKOTlFUKjZhnl8SDzk9mG36Qpv6Wkp sEw65am3mzNZievGw6AElbEtuvC9CqyaT43mrxVx2/WYoDYjTYYR4R0nTGCFft1h /PmlMbnjPwsvdmEeBVuaEpPXDwl13i9oL4OTR16QsImff+Bh25mRcNLQ+IyFf3VM 3CYp1/rVjrBeNKZuPMs23+g1sHDQGb5Yp5WjznZM4XCoA/nswaWsFMnWEWx0+8j+ +KvA2HryagFtnKqSsp8eQcvqQTKIORMrHSP8DPcEAa6Evh0lhUgsE57HXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBV9lDcwY5hdwTdyKQda5er3rqbMMB8GA1UdIwQY MBaAFHSQzmtvj3UOA1hOu9e9rQ8R++McMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpET2EyLVBkUTREV0U2NzE3MnREeEg3NHh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9lZDhlYmEtNmJkNC00NDM4LWIzZTAt YzQ5NmY5Y2FmYTgzLzEvZEpET2EyLVBkUTREV0U2NzE3MnREeEg3NHh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9lZDhlYmEtNmJkNC00NDM4LWIzZTAtYzQ5NmY5Y2FmYTgz LzEvZEpET2EyLVBkUTREV0U2NzE3MnREeEg3NHh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOYC+GxkL AEwVcdlQroSbYFwLjv52+A/KDvdNi4oEoLwNxf31irdIE5Uyf18QtK0aeGE2rPfM tQ+D2E4UZq7txvOiFa1SP2PDcd2k8cuJsF1PBKJFjdVA4Uso58CN5Z2xjfO2G4Uy 1oJIQ7B/pbRyOq757J+hP65reiMd0HjkU7AlfGo2FYvRSF0X62TsL4QxcfFYnl2z sBnT0KCGiHtWjkPkprEpFph9ofPp7Ju8aByW/1zBjJxEVU/QriIYt0qxajDhvW7P OGdz+YGQAjXCc0KrxPldGbIawipRC48xUa+JqDiA9eb1YELhgKqWd9xHsNhTF9Vl 03dtZAi0ZD30sg== -----END CERTIFICATE-----Generated at Fri Dec 12 01:00:33 2025 by rpki-client