This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft File: Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft (raw, json) Hash identifier: 5Mmp+9rkbhGn4gKmyPppRV6tJgHnRPdgCnczwgOcdYA= Subject key identifier: 32:62:3A:92:22:E6:2E:A5:63:03:55:AD:56:C6:73:A9:E2:EE:FE:95 Authority key identifier: 0D:CD:A5:D0:60:BA:93:66:BB:43:25:82:8B:57:03:3B:EF:18:E3:C0 Certificate issuer: /CN=0dcda5d060ba9366bb4325828b57033bef18e3c0 Certificate serial: 019B3268BE5B9F394583A9602F935FCE24CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 17:01:23 +0000 Manifest this update: Thu 18 Dec 2025 17:01:23 +0000 Manifest next update: Fri 19 Dec 2025 17:01:23 +0000 Files and hashes: 1: Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl (hash: neKnhId87r8EI44g9R8Vc+oJo7uTADcj/UDprDF4kQc=) 2: TjtgoaArWXIQWELqrqb3xw0fhW8.roa (hash: U//dwICV6ljEsBioxVlDi+LuHGPP1lPYVY8ZQAvZ64M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 17:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:68:be:5b:9f:39:45:83:a9:60:2f:93:5f:ce:24:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dcda5d060ba9366bb4325828b57033bef18e3c0 Validity Not Before: Dec 18 17:01:23 2025 GMT Not After : Dec 19 17:01:23 2025 GMT Subject: CN=32623a9222e62ea5630355ad56c673a9e2eefe95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d7:1e:75:ac:a7:57:0f:1f:23:10:5c:44:eb: 6a:62:77:fc:57:7c:87:d5:14:aa:60:e3:ed:28:e9: 6e:bd:4c:c9:4d:3e:d9:46:ba:a7:0a:b2:fe:09:b1: 61:7a:d1:12:0d:f7:0f:73:6d:ad:41:4d:b9:68:f0: 08:81:4c:ed:cd:0a:80:55:ac:7f:35:49:69:61:45: 6f:aa:c0:83:26:66:b6:5d:79:ff:58:94:d6:98:3d: 92:c8:67:dd:be:15:e7:45:cd:6e:90:be:f8:61:d5: 44:1c:b4:8a:0d:7c:ca:37:da:f6:5b:33:6a:d3:e8: 47:e4:f3:7c:50:b8:74:a1:25:bc:45:5d:f7:1c:9d: d1:3c:53:60:48:bd:32:a3:fd:20:15:4b:f9:04:66: 0a:95:98:69:d7:68:49:7c:90:d7:05:15:7e:7a:b4: 4a:65:d6:07:d7:e4:3d:4d:55:42:37:5f:0e:1f:07: f2:da:64:fe:31:44:36:68:5d:ec:72:63:96:a1:95: eb:b0:29:cf:46:f1:8a:8e:9e:46:f3:5a:4a:4a:0f: 47:02:99:8a:a8:95:03:85:f4:42:8d:7f:8d:61:98: b1:96:af:56:ee:f0:74:1e:4f:71:34:5a:24:d7:3e: 63:71:d1:17:c2:71:72:8c:66:b7:b7:08:71:4c:03: c7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:62:3A:92:22:E6:2E:A5:63:03:55:AD:56:C6:73:A9:E2:EE:FE:95 X509v3 Authority Key Identifier: keyid:0D:CD:A5:D0:60:BA:93:66:BB:43:25:82:8B:57:03:3B:EF:18:E3:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:d5:e2:1b:39:e8:4f:56:7f:68:f3:22:ac:25:fa:bd:f8:2b: 39:05:f7:16:b8:11:24:17:8e:47:f5:8d:58:d1:fe:51:c9:11: 02:23:f6:9a:60:06:f4:b1:45:91:21:b7:ff:b5:bc:30:ce:db: 00:9a:f4:b1:97:30:b1:c0:e9:01:a8:4c:fb:df:77:c7:dd:1b: d7:0f:dc:8d:4e:54:6f:1e:51:c5:cf:e7:a3:15:ba:a0:fe:40: e2:3e:c7:a5:7a:3e:dc:11:03:45:63:4e:32:8c:c8:9c:6e:41: 77:42:d5:6b:0c:cd:fb:d3:08:27:b7:0d:ad:6b:a1:17:82:58: 6f:5f:05:b0:1f:0c:4e:de:ac:cc:8b:f3:91:57:7d:a5:b6:15: ef:48:dc:9a:d4:88:e3:c0:5d:9c:14:3a:36:33:dc:a3:a1:6a: 64:03:3f:31:bf:89:4d:ab:52:5f:38:4c:70:99:db:a3:3e:85: 07:14:75:a1:f6:6f:7d:79:b6:82:69:27:ae:b3:57:da:ec:50: 11:7c:54:1e:fc:dc:01:29:d4:09:5f:7c:eb:fc:64:bf:bd:8b: 60:74:db:09:34:bd:d9:96:87:25:1f:68:57:13:ca:9a:9b:b6: 84:fc:2a:4b:de:ff:d2:9c:39:7a:fc:b8:53:d1:ed:05:5d:c8: fa:2b:46:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyaL5bnzlFg6lgL5NfziTKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkY2RhNWQwNjBiYTkzNjZiYjQzMjU4MjhiNTcwMzNiZWYx OGUzYzAwHhcNMjUxMjE4MTcwMTIzWhcNMjUxMjE5MTcwMTIzWjAzMTEwLwYDVQQD EygzMjYyM2E5MjIyZTYyZWE1NjMwMzU1YWQ1NmM2NzNhOWUyZWVmZTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNcedaynVw8fIxBcROtqYnf8V3yH 1RSqYOPtKOluvUzJTT7ZRrqnCrL+CbFhetESDfcPc22tQU25aPAIgUztzQqAVax/ NUlpYUVvqsCDJma2XXn/WJTWmD2SyGfdvhXnRc1ukL74YdVEHLSKDXzKN9r2WzNq 0+hH5PN8ULh0oSW8RV33HJ3RPFNgSL0yo/0gFUv5BGYKlZhp12hJfJDXBRV+erRK ZdYH1+Q9TVVCN18OHwfy2mT+MUQ2aF3scmOWoZXrsCnPRvGKjp5G81pKSg9HApmK qJUDhfRCjX+NYZixlq9W7vB0Hk9xNFok1z5jcdEXwnFyjGa3twhxTAPHMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDJiOpIi5i6lYwNVrVbGc6ni7v6VMB8GA1UdIwQY MBaAFA3NpdBgupNmu0MlgotXAzvvGOPAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGMybDBHQzZrMmE3UXlXQ2kxY0RPLThZNDhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9lMTYwMDEtNjUyNS00MDRiLTliNDkt YTU3YjFiMzkyMjA1LzEvRGMybDBHQzZrMmE3UXlXQ2kxY0RPLThZNDhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9lMTYwMDEtNjUyNS00MDRiLTliNDktYTU3YjFiMzkyMjA1 LzEvRGMybDBHQzZrMmE3UXlXQ2kxY0RPLThZNDhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn9XiGzno T1Z/aPMirCX6vfgrOQX3FrgRJBeOR/WNWNH+UckRAiP2mmAG9LFFkSG3/7W8MM7b AJr0sZcwscDpAahM+993x90b1w/cjU5Ubx5Rxc/noxW6oP5A4j7HpXo+3BEDRWNO MozInG5Bd0LVawzN+9MIJ7cNrWuhF4JYb18FsB8MTt6szIvzkVd9pbYV70jcmtSI 48BdnBQ6NjPco6FqZAM/Mb+JTatSXzhMcJnboz6FBxR1ofZvfXm2gmknrrNX2uxQ EXxUHvzcASnUCV986/xkv72LYHTbCTS92ZaHJR9oVxPKmpu2hPwqS97/0pw5evy4 U9HtBV3I+itG3Q== -----END CERTIFICATE-----Generated at Fri Dec 19 00:14:45 2025 by rpki-client