This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.mft File: DjMedHrdOCkl1soNsipNquqi1h8.mft (raw, json) Hash identifier: bBslswh6+Ot64fbuDO2GHNwmtKKtfetYbmM2/xUhk34= Subject key identifier: 71:83:80:CC:07:2A:67:28:D0:27:E0:0B:13:FA:C8:BA:0A:86:69:96 Authority key identifier: 0E:33:1E:74:7A:DD:38:29:25:D6:CA:0D:B2:2A:4D:AA:EA:A2:D6:1F Certificate issuer: /CN=0e331e747add382925d6ca0db22a4daaeaa2d61f Certificate serial: 019B39EB3D2242134CB582379B81ED5FBF86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DjMedHrdOCkl1soNsipNquqi1h8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.mft Manifest number: 0709 Signing time: Sat 20 Dec 2025 04:01:16 +0000 Manifest this update: Sat 20 Dec 2025 04:01:16 +0000 Manifest next update: Sun 21 Dec 2025 04:01:16 +0000 Files and hashes: 1: DjMedHrdOCkl1soNsipNquqi1h8.crl (hash: +SjpofOe6T5F6ut542+0RD3R8r6fIVGLYUtXbv1mTKg=) 2: zasT7S77DAPKQOFVeIKfsDjd0_c.roa (hash: mAmW2tvrIY64SxqKD2ikITN8N8TKSRkhA6FqSeLDkCI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.crl rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.mft rsync://rpki.ripe.net/repository/DEFAULT/DjMedHrdOCkl1soNsipNquqi1h8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:3d:22:42:13:4c:b5:82:37:9b:81:ed:5f:bf:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e331e747add382925d6ca0db22a4daaeaa2d61f Validity Not Before: Dec 20 04:01:16 2025 GMT Not After : Dec 21 04:01:16 2025 GMT Subject: CN=718380cc072a6728d027e00b13fac8ba0a866996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:3f:c6:1a:40:9f:f2:ff:91:68:fa:fb:7c:5f: 07:bf:61:af:11:5f:d5:98:5a:19:f0:3d:9f:29:5b: a2:c9:9c:63:6c:1e:90:b1:68:14:69:be:ae:d2:8f: 79:dd:b1:e3:6d:c3:c7:a1:a9:af:b1:15:3f:a5:f6: 16:f8:fe:72:3e:9d:17:e5:06:66:8f:ab:d8:a6:6e: 8f:a1:35:f7:b5:43:0f:06:bb:3c:a4:b4:83:53:2a: 37:aa:0f:38:04:b6:40:9d:48:40:37:2d:63:a2:f0: 47:42:f4:1f:b7:e4:59:52:16:f7:99:e5:40:8c:08: 12:f3:98:08:58:99:2c:f1:ea:24:de:cb:d7:f9:df: 4a:be:ca:28:34:26:e9:39:56:6a:a4:3a:67:44:7d: e2:73:93:bd:7b:fb:d7:87:27:55:61:43:6b:78:69: f6:f0:b5:16:24:6e:87:8d:2a:5a:db:3b:d8:1b:4d: be:85:92:17:fd:b4:cf:2b:96:5d:db:62:bd:24:17: 7e:77:9b:fe:9e:42:48:77:60:5a:70:41:1e:3e:21: 3d:26:d6:5f:a3:6f:80:56:c4:07:db:5b:42:ae:0a: 5b:2f:1e:3d:79:0a:68:55:8e:de:8f:38:84:c0:ec: f3:be:39:01:06:30:cc:db:5f:84:a2:7b:63:01:da: 75:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:83:80:CC:07:2A:67:28:D0:27:E0:0B:13:FA:C8:BA:0A:86:69:96 X509v3 Authority Key Identifier: keyid:0E:33:1E:74:7A:DD:38:29:25:D6:CA:0D:B2:2A:4D:AA:EA:A2:D6:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DjMedHrdOCkl1soNsipNquqi1h8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a3bd71-d34e-4c13-b95e-834b14362392/1/DjMedHrdOCkl1soNsipNquqi1h8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:b9:d9:2e:9d:8d:56:a0:16:3b:6b:9a:0d:f3:4d:a6:67:6a: d3:20:4a:ee:cd:e7:89:bd:25:b3:1c:7a:da:eb:68:6f:e8:aa: 93:81:0d:b0:07:ba:b2:31:33:a6:e0:f8:b2:31:cc:05:69:6c: 12:4d:2f:a0:c1:58:3e:4d:67:ec:dc:0d:4e:98:8e:eb:c8:88: 3f:0a:ca:ba:81:40:47:bc:7e:ef:40:b2:32:7c:c7:ec:98:28: 1d:96:67:bd:75:b4:8c:76:2c:05:87:18:b9:fd:3f:ef:5b:77: f6:5b:15:5d:25:6b:d5:ce:e9:a7:f5:f9:a8:7a:dd:d6:66:2c: c2:ba:5c:26:7a:c9:40:3d:37:33:e1:4e:18:ea:b0:62:22:12: b7:22:59:9d:78:bf:18:97:33:2e:d2:0d:1e:ad:4e:19:dc:85: a9:8d:84:5c:3c:68:0a:d1:ca:4d:3b:4d:35:8c:ef:45:8a:2d: 25:0c:df:34:7a:a3:a4:a8:06:71:bd:bd:34:fc:94:34:e4:b3: ab:07:16:4b:5f:73:31:c3:03:50:b7:57:5b:07:f4:ea:d8:77: 06:f5:4c:3c:cd:5b:ce:e6:cb:6a:ae:d2:55:cd:92:26:2a:96: ca:92:fc:ea:e5:f5:e5:d3:66:7a:d1:b1:17:0e:99:c2:61:45: b0:6a:f2:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56z0iQhNMtYI3m4HtX7+GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMzMxZTc0N2FkZDM4MjkyNWQ2Y2EwZGIyMmE0ZGFhZWFh MmQ2MWYwHhcNMjUxMjIwMDQwMTE2WhcNMjUxMjIxMDQwMTE2WjAzMTEwLwYDVQQD Eyg3MTgzODBjYzA3MmE2NzI4ZDAyN2UwMGIxM2ZhYzhiYTBhODY2OTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3D/GGkCf8v+RaPr7fF8Hv2GvEV/V mFoZ8D2fKVuiyZxjbB6QsWgUab6u0o953bHjbcPHoamvsRU/pfYW+P5yPp0X5QZm j6vYpm6PoTX3tUMPBrs8pLSDUyo3qg84BLZAnUhANy1jovBHQvQft+RZUhb3meVA jAgS85gIWJks8eok3svX+d9KvsooNCbpOVZqpDpnRH3ic5O9e/vXhydVYUNreGn2 8LUWJG6HjSpa2zvYG02+hZIX/bTPK5Zd22K9JBd+d5v+nkJId2BacEEePiE9JtZf o2+AVsQH21tCrgpbLx49eQpoVY7ejziEwOzzvjkBBjDM21+EontjAdp1PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHGDgMwHKmco0CfgCxP6yLoKhmmWMB8GA1UdIwQY MBaAFA4zHnR63TgpJdbKDbIqTarqotYfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGpNZWRIcmRPQ2tsMXNvTnNpcE5xdXFpMWg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9hM2JkNzEtZDM0ZS00YzEzLWI5NWUt ODM0YjE0MzYyMzkyLzEvRGpNZWRIcmRPQ2tsMXNvTnNpcE5xdXFpMWg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9hM2JkNzEtZDM0ZS00YzEzLWI5NWUtODM0YjE0MzYyMzky LzEvRGpNZWRIcmRPQ2tsMXNvTnNpcE5xdXFpMWg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACLnZLp2N VqAWO2uaDfNNpmdq0yBK7s3nib0lsxx62utob+iqk4ENsAe6sjEzpuD4sjHMBWls Ek0voMFYPk1n7NwNTpiO68iIPwrKuoFAR7x+70CyMnzH7JgoHZZnvXW0jHYsBYcY uf0/71t39lsVXSVr1c7pp/X5qHrd1mYswrpcJnrJQD03M+FOGOqwYiIStyJZnXi/ GJczLtINHq1OGdyFqY2EXDxoCtHKTTtNNYzvRYotJQzfNHqjpKgGcb29NPyUNOSz qwcWS19zMcMDULdXWwf06th3BvVMPM1bzubLaq7SVc2SJiqWypL86uX15dNmetGx Fw6ZwmFFsGryPA== -----END CERTIFICATE-----Generated at Sat Dec 20 10:42:55 2025 by rpki-client