This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft File: Df9Jns244Vczu3EQlZlZrA4WYAg.mft (raw, json) Hash identifier: Gg+WClEKRJf8ObUSN9zZhbPUolGKhk/VYk4P0MA1K5g= Subject key identifier: C8:E6:FB:81:E9:3D:12:13:FC:96:DC:BB:97:EC:11:AC:49:2C:52:E9 Authority key identifier: 0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08 Certificate issuer: /CN=0dff499ecdb8e15733bb7110959959ac0e166008 Certificate serial: 019B68E9A5E0B32F76BD2666EB6B5E66091E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft Manifest number: 0F16 Signing time: Mon 29 Dec 2025 07:01:41 +0000 Manifest this update: Mon 29 Dec 2025 07:01:41 +0000 Manifest next update: Tue 30 Dec 2025 07:01:41 +0000 Files and hashes: 1: Df9Jns244Vczu3EQlZlZrA4WYAg.crl (hash: tCyn3xJL/jyETKM7FWn9xgPu1J8/GL+a0kn8I4eYo/M=) 2: u2KSOkA9Tk7vaFv7OCby2G46AIs.roa (hash: QpVj8Qnda9R0uaJPbddZ05OYdtwL9DiuDJMuscNQj0k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 07:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:e9:a5:e0:b3:2f:76:bd:26:66:eb:6b:5e:66:09:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dff499ecdb8e15733bb7110959959ac0e166008 Validity Not Before: Dec 29 07:01:41 2025 GMT Not After : Dec 30 07:01:41 2025 GMT Subject: CN=c8e6fb81e93d1213fc96dcbb97ec11ac492c52e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1e:97:0d:9e:18:eb:a5:14:98:9f:e1:b8:b8: 62:6d:f5:2a:42:16:83:c7:86:13:19:42:ea:31:65: 17:d8:dd:0a:60:c9:35:26:75:31:a9:2a:31:d0:2e: bd:95:35:d9:5d:53:65:4d:dc:1a:44:75:f7:fe:58: c2:b1:47:16:08:c2:70:76:8b:55:a8:af:b3:27:3c: ce:57:0e:7e:f7:c3:c6:b8:a4:54:4d:fb:4c:9b:af: 1e:34:aa:8c:03:17:d5:6f:24:6e:a3:a4:37:36:19: 4e:80:3e:2e:88:6e:14:6c:75:df:02:ed:c3:6d:c6: fb:d1:bf:f3:0a:ed:3f:a3:44:e0:1e:6c:90:01:56: 37:61:a8:ce:22:e0:53:22:13:12:3a:be:48:4a:93: 92:18:20:2f:32:c4:83:61:d9:7c:07:f0:c8:99:be: a0:75:21:e8:bc:9a:7f:7d:f2:c3:1f:1e:e3:92:01: dd:47:b3:c2:11:a3:41:de:30:49:93:87:d6:07:96: 41:30:16:5f:a5:d6:4d:32:e5:c2:2a:07:df:f0:2c: ce:00:6e:4f:5d:52:a7:d9:15:6f:80:7d:a6:3c:da: cc:17:39:e4:f4:dd:1b:7b:8c:fe:16:8f:58:4d:4e: d3:4b:81:1a:c8:4e:2a:e5:40:f3:1e:ee:dc:79:86: 47:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:E6:FB:81:E9:3D:12:13:FC:96:DC:BB:97:EC:11:AC:49:2C:52:E9 X509v3 Authority Key Identifier: keyid:0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:20:a9:95:5b:db:72:46:50:c6:f8:69:5b:40:73:2e:67:ae: e6:6d:04:0c:1d:19:d8:f7:83:82:ca:78:4e:ec:92:25:5f:08: b4:8c:93:96:d0:b7:98:3c:03:1e:b1:30:74:e5:d9:80:a1:34: 74:ad:27:08:a8:cb:82:b1:a2:5e:55:21:02:b2:c9:f9:f6:05: f3:28:3b:54:b9:75:25:ac:c2:15:76:5c:fe:a7:25:d7:91:69: 59:2a:ed:e9:d8:d5:0f:7d:44:5b:a9:3a:39:58:e1:b6:58:08: bd:de:a1:84:aa:9c:9a:cf:40:7b:d5:f9:97:73:27:fb:ad:56: c8:56:8a:47:6a:ad:ae:53:ad:5c:bd:cc:65:30:b2:0b:7a:1d: bc:d4:7f:cf:2b:37:58:19:80:ac:a3:2c:88:70:c0:02:40:22: dd:57:bc:15:03:e0:25:8d:99:a7:9b:a5:1e:fd:51:b4:64:59: dc:d7:d5:63:d1:ec:5d:c1:f0:f2:30:43:ad:78:33:fb:91:c6: 8e:ad:6d:14:24:27:21:2d:01:f4:b7:81:79:2f:a7:b6:67:1a: f7:9c:63:f4:4e:28:da:ce:6c:16:f2:35:58:82:ef:14:aa:1f: 85:70:67:da:3b:b7:08:e6:7d:8c:d7:27:aa:ff:64:67:f9:56: 15:28:ff:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZto6aXgsy92vSZm62teZgkeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZmY0OTllY2RiOGUxNTczM2JiNzExMDk1OTk1OWFjMGUx NjYwMDgwHhcNMjUxMjI5MDcwMTQxWhcNMjUxMjMwMDcwMTQxWjAzMTEwLwYDVQQD EyhjOGU2ZmI4MWU5M2QxMjEzZmM5NmRjYmI5N2VjMTFhYzQ5MmM1MmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuh6XDZ4Y66UUmJ/huLhibfUqQhaD x4YTGULqMWUX2N0KYMk1JnUxqSox0C69lTXZXVNlTdwaRHX3/ljCsUcWCMJwdotV qK+zJzzOVw5+98PGuKRUTftMm68eNKqMAxfVbyRuo6Q3NhlOgD4uiG4UbHXfAu3D bcb70b/zCu0/o0TgHmyQAVY3YajOIuBTIhMSOr5ISpOSGCAvMsSDYdl8B/DImb6g dSHovJp/ffLDHx7jkgHdR7PCEaNB3jBJk4fWB5ZBMBZfpdZNMuXCKgff8CzOAG5P XVKn2RVvgH2mPNrMFznk9N0be4z+Fo9YTU7TS4EayE4q5UDzHu7ceYZHoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMjm+4HpPRIT/Jbcu5fsEaxJLFLpMB8GA1UdIwQY MBaAFA3/SZ7NuOFXM7txEJWZWawOFmAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGY5Sm5zMjQ0VmN6dTNFUWxabFpyQTRXWUFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi81OTYxMjAtYjI1ZC00Mjc5LThlYTEt NmY3YzBlYzkxZDhhLzEvRGY5Sm5zMjQ0VmN6dTNFUWxabFpyQTRXWUFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi81OTYxMjAtYjI1ZC00Mjc5LThlYTEtNmY3YzBlYzkxZDhh LzEvRGY5Sm5zMjQ0VmN6dTNFUWxabFpyQTRXWUFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAayCplVvb ckZQxvhpW0BzLmeu5m0EDB0Z2PeDgsp4TuySJV8ItIyTltC3mDwDHrEwdOXZgKE0 dK0nCKjLgrGiXlUhArLJ+fYF8yg7VLl1JazCFXZc/qcl15FpWSrt6djVD31EW6k6 OVjhtlgIvd6hhKqcms9Ae9X5l3Mn+61WyFaKR2qtrlOtXL3MZTCyC3odvNR/zys3 WBmArKMsiHDAAkAi3Ve8FQPgJY2Zp5ulHv1RtGRZ3NfVY9HsXcHw8jBDrXgz+5HG jq1tFCQnIS0B9LeBeS+ntmca95xj9E4o2s5sFvI1WILvFKofhXBn2ju3COZ9jNcn qv9kZ/lWFSj/nQ== -----END CERTIFICATE-----Generated at Mon Dec 29 13:25:53 2025 by rpki-client