This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.mft File: DvFUKKS1vl5z59IoK1HIGa6jj5s.mft (raw, json) Hash identifier: sKSNNe9Gg0gdmmcbQ9gNHL0ycXVXHV1HRDbKUtFAxAk= Subject key identifier: 23:3A:42:B3:93:E0:91:8F:35:C9:0C:2D:1D:E3:E0:53:C8:66:5A:85 Authority key identifier: 0E:F1:54:28:A4:B5:BE:5E:73:E7:D2:28:2B:51:C8:19:AE:A3:8F:9B Certificate issuer: /CN=0ef15428a4b5be5e73e7d2282b51c819aea38f9b Certificate serial: 019B42B765BD6407F6D139B220F86DC09631 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvFUKKS1vl5z59IoK1HIGa6jj5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.mft Manifest number: 1185 Signing time: Sun 21 Dec 2025 21:01:13 +0000 Manifest this update: Sun 21 Dec 2025 21:01:13 +0000 Manifest next update: Mon 22 Dec 2025 21:01:13 +0000 Files and hashes: 1: DvFUKKS1vl5z59IoK1HIGa6jj5s.crl (hash: 3diB8Vq4PKpqEgKTvU2pRgqsZ/DPSZOSH9w5g02EWc8=) 2: RPI004Nflusi7FfUJpmrxTwPQuQ.roa (hash: +Ae0xcW4fJMWdAq7n5EIK34ZCifbX83L0SoWJBas4kw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.mft rsync://rpki.ripe.net/repository/DEFAULT/DvFUKKS1vl5z59IoK1HIGa6jj5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:65:bd:64:07:f6:d1:39:b2:20:f8:6d:c0:96:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ef15428a4b5be5e73e7d2282b51c819aea38f9b Validity Not Before: Dec 21 21:01:13 2025 GMT Not After : Dec 22 21:01:13 2025 GMT Subject: CN=233a42b393e0918f35c90c2d1de3e053c8665a85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:16:15:fe:68:5a:a9:b2:09:26:6b:5f:49:d7: af:b7:50:69:53:a9:68:17:46:fb:e8:0e:18:43:4f: e1:92:dc:41:cd:c6:28:12:42:83:f5:f7:57:14:1c: 17:0b:41:3b:42:16:43:92:45:7e:56:cd:14:61:d7: d5:68:8a:b9:05:0e:88:ee:aa:90:f7:ad:92:ef:8a: 45:ee:6b:e7:0c:2d:d5:17:ff:fd:c5:60:71:ad:56: fa:65:e2:87:3f:49:d2:60:dd:20:ee:d0:15:d9:d2: 6d:5e:25:72:97:29:5e:c4:22:c5:96:93:f9:e5:07: 2d:90:9e:aa:b3:ca:23:11:4d:aa:6e:1d:74:52:10: d6:c0:b9:d2:e9:cd:d0:71:b6:37:6d:f7:85:4d:6d: 34:63:9b:ea:cb:4b:a0:b1:38:e4:b3:8c:e6:89:8b: 93:9a:cb:ab:2d:19:2d:0b:42:e6:5b:64:f7:3c:84: 44:32:3f:b0:a1:0a:98:6d:68:7c:49:d1:4d:06:36: 9a:e5:5d:c4:81:22:31:86:d4:ab:58:62:1a:c0:32: 23:f6:a9:f9:83:74:08:63:ef:ba:22:e2:1d:b3:02: fb:20:22:4a:8a:f8:98:7b:6e:f5:9d:86:a7:97:1d: 4b:39:08:81:5a:5a:db:5f:ca:2b:55:c0:7b:a4:81: 48:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:3A:42:B3:93:E0:91:8F:35:C9:0C:2D:1D:E3:E0:53:C8:66:5A:85 X509v3 Authority Key Identifier: keyid:0E:F1:54:28:A4:B5:BE:5E:73:E7:D2:28:2B:51:C8:19:AE:A3:8F:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvFUKKS1vl5z59IoK1HIGa6jj5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:9c:ca:39:46:9b:f7:80:49:0a:0d:8d:fd:f1:ff:bf:60:27: 3d:20:55:c5:11:5c:f1:6b:31:45:44:4c:c2:8a:36:18:e8:b2: 80:43:5f:86:6f:05:6b:ad:5c:b3:cb:ef:e6:6c:60:bc:4b:59: ba:37:c9:35:57:9a:af:9d:07:36:70:fa:39:66:6f:8a:17:a0: b0:cc:a7:fb:80:27:8d:64:40:42:75:16:3b:92:ff:78:b5:e7: 1a:13:46:3d:3e:e3:8c:31:12:f1:32:6c:40:79:80:dc:6a:f9: 71:b8:f4:b1:b8:97:8a:1d:5a:0e:88:99:ee:f1:e3:70:89:89: 2d:40:f8:b9:b8:ef:2e:ce:e0:e1:39:4c:11:28:f8:5f:09:0e: f9:77:db:58:75:29:e1:4d:93:f5:04:ad:be:a0:09:f4:b7:34: 19:b5:14:63:57:2f:3a:09:6f:75:d5:b0:67:d8:0e:85:f1:a9: 90:1e:2c:e4:00:91:c8:2c:23:d1:4d:10:e9:8d:ea:19:ea:10: d8:65:69:d9:b2:75:c8:ea:0a:73:5a:b2:b2:89:46:6a:eb:23: 8b:0e:c9:f0:4d:da:29:3a:00:f0:04:ef:e9:86:50:35:77:f7: 65:50:f5:e1:aa:07:e6:ca:4d:a0:5b:a0:da:3e:1f:47:7a:e2: 20:6c:97:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCt2W9ZAf20TmyIPhtwJYxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlZjE1NDI4YTRiNWJlNWU3M2U3ZDIyODJiNTFjODE5YWVh MzhmOWIwHhcNMjUxMjIxMjEwMTEzWhcNMjUxMjIyMjEwMTEzWjAzMTEwLwYDVQQD EygyMzNhNDJiMzkzZTA5MThmMzVjOTBjMmQxZGUzZTA1M2M4NjY1YTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BYV/mhaqbIJJmtfSdevt1BpU6lo F0b76A4YQ0/hktxBzcYoEkKD9fdXFBwXC0E7QhZDkkV+Vs0UYdfVaIq5BQ6I7qqQ 962S74pF7mvnDC3VF//9xWBxrVb6ZeKHP0nSYN0g7tAV2dJtXiVylylexCLFlpP5 5QctkJ6qs8ojEU2qbh10UhDWwLnS6c3QcbY3bfeFTW00Y5vqy0ugsTjks4zmiYuT msurLRktC0LmW2T3PIREMj+woQqYbWh8SdFNBjaa5V3EgSIxhtSrWGIawDIj9qn5 g3QIY++6IuIdswL7ICJKiviYe271nYanlx1LOQiBWlrbX8orVcB7pIFIiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCM6QrOT4JGPNckMLR3j4FPIZlqFMB8GA1UdIwQY MBaAFA7xVCiktb5ec+fSKCtRyBmuo4+bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHZGVUtLUzF2bDV6NTlJb0sxSElHYTZqajVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS84MDUzNTYtOTU5Zi00MWM1LTk5YjYt OTI3NDkyMGRjYWExLzEvRHZGVUtLUzF2bDV6NTlJb0sxSElHYTZqajVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS84MDUzNTYtOTU5Zi00MWM1LTk5YjYtOTI3NDkyMGRjYWEx LzEvRHZGVUtLUzF2bDV6NTlJb0sxSElHYTZqajVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAepzKOUab 94BJCg2N/fH/v2AnPSBVxRFc8WsxRURMwoo2GOiygENfhm8Fa61cs8vv5mxgvEtZ ujfJNVear50HNnD6OWZvihegsMyn+4AnjWRAQnUWO5L/eLXnGhNGPT7jjDES8TJs QHmA3Gr5cbj0sbiXih1aDoiZ7vHjcImJLUD4ubjvLs7g4TlMESj4XwkO+XfbWHUp 4U2T9QStvqAJ9Lc0GbUUY1cvOglvddWwZ9gOhfGpkB4s5ACRyCwj0U0Q6Y3qGeoQ 2GVp2bJ1yOoKc1qysolGausjiw7J8E3aKToA8ATv6YZQNXf3ZVD14aoH5spNoFug 2j4fR3riIGyX1g== -----END CERTIFICATE-----Generated at Mon Dec 22 04:26:53 2025 by rpki-client