This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft File: DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft (raw, json) Hash identifier: RIlSBK7dwhu0Dnpbcx9VTB1Piw7A7ngGbmPYhlaoXK4= Subject key identifier: E7:7B:BC:58:CD:E2:92:58:1A:C7:E9:5A:F4:16:45:51:77:A3:43:36 Authority key identifier: 0C:5C:F7:07:30:51:2A:EF:A7:03:07:66:2C:F5:92:88:E8:CD:26:4C Certificate issuer: /CN=0c5cf70730512aefa70307662cf59288e8cd264c Certificate serial: 019B2F67651CAB007463B6853207915AC945 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft Manifest number: 0474 Signing time: Thu 18 Dec 2025 03:01:03 +0000 Manifest this update: Thu 18 Dec 2025 03:01:03 +0000 Manifest next update: Fri 19 Dec 2025 03:01:03 +0000 Files and hashes: 1: DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl (hash: A5su+PsRgfAhAzTViTEkUpIyvzXAEeDiIZa1Khxbtas=) 2: ZRyYFoPWFr4LTQ9gIPHP5w-ddzQ.roa (hash: GUrbPOCAIn4PH8GnCdvd1SlQ4fdh24I+//UmwqdbMWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:65:1c:ab:00:74:63:b6:85:32:07:91:5a:c9:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c5cf70730512aefa70307662cf59288e8cd264c Validity Not Before: Dec 18 03:01:03 2025 GMT Not After : Dec 19 03:01:03 2025 GMT Subject: CN=e77bbc58cde292581ac7e95af416455177a34336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:53:14:9c:52:2b:2e:9f:74:73:6a:48:5f:92: d5:5f:72:66:f0:af:73:ca:88:ed:6d:cb:4f:dc:5c: dd:71:38:22:dd:76:04:10:b8:b3:67:bc:52:b3:54: e7:a7:6b:d4:26:64:b2:be:58:6e:c6:3f:5e:83:f0: a2:b8:9c:80:6a:ab:89:f2:c5:f4:68:5c:c3:70:4d: 0d:90:e8:fc:4f:01:62:80:36:80:10:b5:94:d6:b7: 10:95:7b:bb:32:cd:08:7f:2e:f4:27:56:cc:2e:70: 3d:59:51:ff:8c:61:2d:70:a5:2e:48:c5:44:25:70: a2:95:42:88:1c:5a:a0:5b:9f:ce:29:b4:17:64:f7: 06:b0:4f:a4:d5:50:24:85:5d:e4:b9:bf:8a:74:1c: 82:2f:ad:16:3f:c1:ee:21:e7:09:8b:c1:90:08:26: 68:28:f4:6e:c4:67:fd:02:ef:62:ed:2d:9d:8a:8e: 01:30:73:d1:06:ee:f3:70:4d:70:39:ae:b6:d4:c8: 91:be:88:60:78:7b:3b:2f:d7:f7:0e:e0:77:33:10: dc:7c:a7:37:ec:f1:0e:40:20:34:1d:38:59:5d:9e: 88:68:19:49:29:bb:ea:2b:3f:b1:ee:eb:de:fe:41: cb:ca:db:4b:d3:f2:c0:13:4c:f9:dc:07:2d:f1:f7: d2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:7B:BC:58:CD:E2:92:58:1A:C7:E9:5A:F4:16:45:51:77:A3:43:36 X509v3 Authority Key Identifier: keyid:0C:5C:F7:07:30:51:2A:EF:A7:03:07:66:2C:F5:92:88:E8:CD:26:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:80:d9:9e:ed:5a:47:c2:60:f4:7a:b2:df:11:94:cc:49:c7: 67:49:0a:4e:99:2c:b7:e3:00:4d:79:ce:2d:e8:70:13:27:71: 8d:1d:9e:d6:d0:7f:c0:fb:82:31:e1:a3:3b:e2:c7:ec:9a:91: cd:fd:da:7e:b9:2f:41:1c:1f:54:51:bf:73:f9:70:ad:29:32: 12:06:bc:1f:13:f2:0e:3f:6f:1f:4a:a1:73:7f:fa:51:26:66: de:ab:4d:a9:b2:7d:68:ab:86:4d:52:f8:d0:7c:f1:c7:4a:ea: ee:00:b8:60:93:1b:c5:64:1e:54:11:9d:40:eb:f8:ef:d6:00: 08:a7:1d:1f:68:f4:f4:e8:e9:2b:09:5d:6d:52:15:d5:c4:c4: bf:e2:b5:7e:c5:d3:d9:09:30:78:8d:8c:5a:28:cf:d7:fb:a2: 37:0d:62:55:27:07:27:68:b6:50:f6:a0:00:34:38:3c:d6:85: 74:c1:f0:bb:c7:ae:1c:11:97:4a:3e:17:f1:4d:79:bd:d3:9f: e5:a0:61:f3:3f:1d:6a:c0:c3:81:9d:79:27:7e:71:7a:5d:a8: 41:92:15:f2:c9:a6:7d:3c:5c:57:92:4d:c7:2c:ec:d8:52:ef: d1:8e:34:fa:c8:89:41:7b:0f:a9:79:9a:86:aa:ed:23:42:28: 0e:a1:80:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ2UcqwB0Y7aFMgeRWslFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNWNmNzA3MzA1MTJhZWZhNzAzMDc2NjJjZjU5Mjg4ZThj ZDI2NGMwHhcNMjUxMjE4MDMwMTAzWhcNMjUxMjE5MDMwMTAzWjAzMTEwLwYDVQQD EyhlNzdiYmM1OGNkZTI5MjU4MWFjN2U5NWFmNDE2NDU1MTc3YTM0MzM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lMUnFIrLp90c2pIX5LVX3Jm8K9z yojtbctP3FzdcTgi3XYEELizZ7xSs1Tnp2vUJmSyvlhuxj9eg/CiuJyAaquJ8sX0 aFzDcE0NkOj8TwFigDaAELWU1rcQlXu7Ms0Ify70J1bMLnA9WVH/jGEtcKUuSMVE JXCilUKIHFqgW5/OKbQXZPcGsE+k1VAkhV3kub+KdByCL60WP8HuIecJi8GQCCZo KPRuxGf9Au9i7S2dio4BMHPRBu7zcE1wOa621MiRvohgeHs7L9f3DuB3MxDcfKc3 7PEOQCA0HThZXZ6IaBlJKbvqKz+x7uve/kHLyttL0/LAE0z53Act8ffSxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOd7vFjN4pJYGsfpWvQWRVF3o0M2MB8GA1UdIwQY MBaAFAxc9wcwUSrvpwMHZiz1kojozSZMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZ6M0J6QlJLdS1uQXdkbUxQV1NpT2pOSmt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi80NDAyMTctYzVhZi00NGFjLTk1ZDMt YWRmYzcyZWYwZGZhLzEvREZ6M0J6QlJLdS1uQXdkbUxQV1NpT2pOSmt3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi80NDAyMTctYzVhZi00NGFjLTk1ZDMtYWRmYzcyZWYwZGZh LzEvREZ6M0J6QlJLdS1uQXdkbUxQV1NpT2pOSmt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeYDZnu1a R8Jg9Hqy3xGUzEnHZ0kKTpkst+MATXnOLehwEydxjR2e1tB/wPuCMeGjO+LH7JqR zf3afrkvQRwfVFG/c/lwrSkyEga8HxPyDj9vH0qhc3/6USZm3qtNqbJ9aKuGTVL4 0Hzxx0rq7gC4YJMbxWQeVBGdQOv479YACKcdH2j09OjpKwldbVIV1cTEv+K1fsXT 2QkweI2MWijP1/uiNw1iVScHJ2i2UPagADQ4PNaFdMHwu8euHBGXSj4X8U15vdOf 5aBh8z8dasDDgZ15J35xel2oQZIV8smmfTxcV5JNxyzs2FLv0Y40+siJQXsPqXma hqrtI0IoDqGAiQ== -----END CERTIFICATE-----Generated at Thu Dec 18 08:01:55 2025 by rpki-client