This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft File: Df9Jns244Vczu3EQlZlZrA4WYAg.mft (raw, json) Hash identifier: 7axNW8pX8Xyf6yNL7ph9Ize31yZBw56xBTZS5GD0iPc= Subject key identifier: 57:9C:E0:2B:40:F4:65:B4:4E:C2:B5:8F:30:FC:15:C9:F4:BC:D5:B8 Authority key identifier: 0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08 Certificate issuer: /CN=0dff499ecdb8e15733bb7110959959ac0e166008 Certificate serial: 019B3E6CBDD63921DB4A025779E9DEDCAE2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft Manifest number: 0F00 Signing time: Sun 21 Dec 2025 01:01:12 +0000 Manifest this update: Sun 21 Dec 2025 01:01:12 +0000 Manifest next update: Mon 22 Dec 2025 01:01:12 +0000 Files and hashes: 1: Df9Jns244Vczu3EQlZlZrA4WYAg.crl (hash: 7YwNHxDCL+mV0JVEn+3vJ3Y4jZiq04VWxK5J4mbkM0w=) 2: u2KSOkA9Tk7vaFv7OCby2G46AIs.roa (hash: QpVj8Qnda9R0uaJPbddZ05OYdtwL9DiuDJMuscNQj0k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:bd:d6:39:21:db:4a:02:57:79:e9:de:dc:ae:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dff499ecdb8e15733bb7110959959ac0e166008 Validity Not Before: Dec 21 01:01:12 2025 GMT Not After : Dec 22 01:01:12 2025 GMT Subject: CN=579ce02b40f465b44ec2b58f30fc15c9f4bcd5b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3c:12:59:4a:e6:7a:a0:f8:62:22:30:4f:bd: c3:62:35:78:2d:d5:2f:8e:7c:5c:4f:a1:5f:95:62: e9:9d:4d:4d:47:fd:de:ee:21:d3:23:82:83:1c:0d: 56:e4:07:a7:2e:bd:13:58:1a:b9:7b:d8:48:45:ec: 68:70:f7:3e:8d:e1:53:e6:a8:5e:7e:95:78:24:e8: 5e:ce:a4:1c:ef:a6:9d:a2:90:a7:be:1e:51:51:17: 8a:67:24:c7:0d:99:6c:99:bd:fd:97:06:99:6f:8f: 5b:69:c2:1a:d3:e7:2c:0e:2e:25:5d:ba:97:0a:25: c9:ca:ea:3e:9e:ec:cb:59:2b:ea:86:db:6e:67:e8: e4:f5:3c:bf:01:0f:a1:bb:17:94:50:b5:f5:78:05: 8a:c2:c0:47:7a:4f:8c:0f:11:9b:31:86:fd:ca:4f: 4a:9d:e0:65:05:17:92:55:2a:43:20:2b:57:de:b1: 56:cd:a4:49:7c:30:af:f3:c8:44:dc:cb:0c:58:00: ac:3c:10:14:bc:78:10:e4:9d:4c:bd:bc:b9:65:6a: 46:34:05:95:a3:35:64:9a:76:fb:8b:e5:07:9a:35: 26:c5:f9:a8:66:56:8b:3d:00:20:72:85:03:cc:77: 82:13:cc:16:1b:43:ba:ea:13:fd:cd:ee:61:39:3c: 88:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:9C:E0:2B:40:F4:65:B4:4E:C2:B5:8F:30:FC:15:C9:F4:BC:D5:B8 X509v3 Authority Key Identifier: keyid:0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:21:ac:22:a6:df:2e:75:24:8d:2b:89:cf:6a:5d:40:97:02: ed:06:0e:1f:4f:c0:09:99:95:20:0b:63:6a:50:01:59:c7:db: 63:4d:9e:b4:dd:86:c5:4c:a8:ce:77:59:29:9d:da:89:5c:27: 6d:b2:a6:12:e1:b0:3d:95:07:37:8e:d8:1f:b9:c1:25:8e:f7: ce:da:9d:ea:d2:cb:1d:97:e1:5a:ae:63:54:73:ab:65:65:08: f8:c1:47:a1:7b:22:10:b6:b0:20:cd:25:13:f2:ef:1e:dc:f8: b3:04:19:7b:d0:3a:be:86:8f:f5:76:51:a1:71:cc:a1:5e:c1: 60:13:40:f9:c4:0b:dd:2c:1c:ba:f8:d0:f4:96:3f:04:49:41: 1a:94:80:db:66:c4:7f:dd:23:e0:2b:ca:54:5a:02:99:df:61: b2:ab:c1:20:5f:33:e6:d0:fc:11:f7:5a:30:d0:d9:1a:ce:fa: 8a:b3:9b:7e:d7:e2:50:fd:d3:66:f6:64:e0:6e:2d:5a:6e:7e: af:7a:40:7a:e4:90:72:34:03:49:7f:15:48:46:05:77:a4:ee: 4d:19:40:52:1b:9c:fe:64:2e:ea:5e:e1:94:a1:f1:f9:76:9f: cd:f4:ae:36:f8:ea:80:fd:61:6a:88:f1:a9:38:49:4e:50:70: 2b:ac:a2:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bL3WOSHbSgJXeene3K4sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZmY0OTllY2RiOGUxNTczM2JiNzExMDk1OTk1OWFjMGUx NjYwMDgwHhcNMjUxMjIxMDEwMTEyWhcNMjUxMjIyMDEwMTEyWjAzMTEwLwYDVQQD Eyg1NzljZTAyYjQwZjQ2NWI0NGVjMmI1OGYzMGZjMTVjOWY0YmNkNWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTwSWUrmeqD4YiIwT73DYjV4LdUv jnxcT6FflWLpnU1NR/3e7iHTI4KDHA1W5AenLr0TWBq5e9hIRexocPc+jeFT5qhe fpV4JOhezqQc76adopCnvh5RUReKZyTHDZlsmb39lwaZb49bacIa0+csDi4lXbqX CiXJyuo+nuzLWSvqhttuZ+jk9Ty/AQ+huxeUULX1eAWKwsBHek+MDxGbMYb9yk9K neBlBReSVSpDICtX3rFWzaRJfDCv88hE3MsMWACsPBAUvHgQ5J1Mvby5ZWpGNAWV ozVkmnb7i+UHmjUmxfmoZlaLPQAgcoUDzHeCE8wWG0O66hP9ze5hOTyIQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFec4CtA9GW0TsK1jzD8Fcn0vNW4MB8GA1UdIwQY MBaAFA3/SZ7NuOFXM7txEJWZWawOFmAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGY5Sm5zMjQ0VmN6dTNFUWxabFpyQTRXWUFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi81OTYxMjAtYjI1ZC00Mjc5LThlYTEt NmY3YzBlYzkxZDhhLzEvRGY5Sm5zMjQ0VmN6dTNFUWxabFpyQTRXWUFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi81OTYxMjAtYjI1ZC00Mjc5LThlYTEtNmY3YzBlYzkxZDhh LzEvRGY5Sm5zMjQ0VmN6dTNFUWxabFpyQTRXWUFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKSGsIqbf LnUkjSuJz2pdQJcC7QYOH0/ACZmVIAtjalABWcfbY02etN2GxUyozndZKZ3aiVwn bbKmEuGwPZUHN47YH7nBJY73ztqd6tLLHZfhWq5jVHOrZWUI+MFHoXsiELawIM0l E/LvHtz4swQZe9A6voaP9XZRoXHMoV7BYBNA+cQL3SwcuvjQ9JY/BElBGpSA22bE f90j4CvKVFoCmd9hsqvBIF8z5tD8EfdaMNDZGs76irObftfiUP3TZvZk4G4tWm5+ r3pAeuSQcjQDSX8VSEYFd6TuTRlAUhuc/mQu6l7hlKHx+XafzfSuNvjqgP1haojx qThJTlBwK6yieA== -----END CERTIFICATE-----Generated at Sun Dec 21 06:08:58 2025 by rpki-client