This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft File: Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft (raw, json) Hash identifier: sUdoKy2piiSR7GU2f+GzXmcq00vzeUgCZiPKc0L91rw= Subject key identifier: C1:5B:8F:B1:96:75:9F:8C:EB:26:6A:F0:AE:18:FC:72:9D:65:88:F6 Authority key identifier: 0E:BD:5F:54:90:5E:E8:E4:D2:83:0C:6C:F5:0F:60:D2:64:20:1A:93 Certificate issuer: /CN=0ebd5f54905ee8e4d2830c6cf50f60d264201a93 Certificate serial: 019B4814D41FBDC38C09BA261D5B48FD9991 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft Manifest number: 0BCD Signing time: Mon 22 Dec 2025 22:01:23 +0000 Manifest this update: Mon 22 Dec 2025 22:01:23 +0000 Manifest next update: Tue 23 Dec 2025 22:01:23 +0000 Files and hashes: 1: Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.crl (hash: VXxiQWSi1QG4vNDJcbNxaxYmXwIEYDb9fH6RLOa03aY=) 2: j5fTeizLnlg0u2Mo-sXKcy6aHzU.roa (hash: N7eKHafDgm+sPu3JQlpm/bB7Ce1uPT9byBM0H76oyj4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft rsync://rpki.ripe.net/repository/DEFAULT/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:14:d4:1f:bd:c3:8c:09:ba:26:1d:5b:48:fd:99:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ebd5f54905ee8e4d2830c6cf50f60d264201a93 Validity Not Before: Dec 22 22:01:23 2025 GMT Not After : Dec 23 22:01:23 2025 GMT Subject: CN=c15b8fb196759f8ceb266af0ae18fc729d6588f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ba:38:39:9b:00:43:01:b7:95:e4:da:80:7d: 54:0b:e4:49:c5:ae:1e:1e:52:60:31:13:73:c8:03: 56:79:a4:b4:62:9d:45:8c:99:db:ac:4e:95:62:c6: cf:bb:cd:5d:b2:ee:21:a1:72:c0:da:7c:b3:7c:db: 22:bb:66:c2:b2:13:1f:87:46:07:70:f5:d9:fa:c1: f3:a2:2e:66:6b:e1:b5:05:a2:74:27:d1:4c:27:8a: 5c:45:24:17:16:fb:36:f9:b7:15:db:6f:f5:dd:64: bb:ff:2a:03:9f:b9:78:59:f4:26:ea:83:41:19:53: df:73:ee:8f:fa:68:42:09:90:14:96:c0:d6:3f:6b: 6d:af:54:33:23:43:75:ad:d8:38:fc:2f:ac:1f:9e: 16:54:2b:18:7a:e1:60:2c:e4:bc:d1:e5:d8:f6:1d: e6:ab:10:e5:69:a6:0c:22:eb:da:95:d6:b3:1d:75: 33:64:6d:76:06:7c:d9:1f:01:17:24:97:26:62:9a: ea:bd:2a:44:5c:ed:2f:9f:00:75:45:1e:45:03:85: 22:33:75:6f:a4:71:22:71:71:69:5e:a3:79:0d:f8: bc:22:74:40:c3:f7:e2:9d:80:d3:05:7a:b0:f8:d1: a8:84:58:ab:3a:ed:13:5d:21:eb:08:e2:12:99:82: 4d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:5B:8F:B1:96:75:9F:8C:EB:26:6A:F0:AE:18:FC:72:9D:65:88:F6 X509v3 Authority Key Identifier: keyid:0E:BD:5F:54:90:5E:E8:E4:D2:83:0C:6C:F5:0F:60:D2:64:20:1A:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:e5:93:02:c3:e0:ae:b8:00:1b:9e:0b:36:a3:fe:fd:67:e9: 1d:94:d1:c2:25:27:1e:51:27:5c:58:30:fc:a8:82:27:78:a5: 5b:2c:18:71:50:ae:98:f7:60:be:fd:e0:d8:10:ba:20:af:65: 04:37:9e:1b:e1:94:b4:95:66:c2:5a:97:23:86:14:2f:f1:c6: db:9b:53:c5:7c:fc:3b:f2:06:54:e1:05:f5:0b:48:39:94:0b: 2f:0a:e2:5d:57:40:c6:02:59:b9:3e:95:6a:a8:5f:73:fe:11: b3:5f:df:1e:52:84:9d:63:03:0c:ff:90:5a:09:4a:9a:09:ec: 32:51:2c:0a:30:1c:62:35:31:74:34:e6:f7:ab:64:d3:ff:35: 29:4c:7a:d4:e0:19:8e:f0:d0:67:32:4f:cd:a6:00:72:70:19: 92:1a:a2:32:b4:9e:0b:f2:ea:9c:9c:ad:3d:32:2a:96:b1:4c: d7:f7:47:84:1f:f6:fe:62:c6:a8:5a:a0:1d:76:e2:ee:3b:6d: 35:5e:c8:e9:f2:5b:d0:0c:c7:c0:59:1a:9f:cb:6e:49:06:aa: 60:3f:03:3e:f8:cc:9a:75:be:78:32:52:43:60:c3:18:f0:d1: 5c:54:10:94:6b:0a:c2:e3:5b:f9:e6:c9:1e:b9:c8:24:b3:89: c0:c9:3c:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFNQfvcOMCbomHVtI/ZmRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlYmQ1ZjU0OTA1ZWU4ZTRkMjgzMGM2Y2Y1MGY2MGQyNjQy MDFhOTMwHhcNMjUxMjIyMjIwMTIzWhcNMjUxMjIzMjIwMTIzWjAzMTEwLwYDVQQD EyhjMTViOGZiMTk2NzU5ZjhjZWIyNjZhZjBhZTE4ZmM3MjlkNjU4OGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ro4OZsAQwG3leTagH1UC+RJxa4e HlJgMRNzyANWeaS0Yp1FjJnbrE6VYsbPu81dsu4hoXLA2nyzfNsiu2bCshMfh0YH cPXZ+sHzoi5ma+G1BaJ0J9FMJ4pcRSQXFvs2+bcV22/13WS7/yoDn7l4WfQm6oNB GVPfc+6P+mhCCZAUlsDWP2ttr1QzI0N1rdg4/C+sH54WVCsYeuFgLOS80eXY9h3m qxDlaaYMIuvaldazHXUzZG12BnzZHwEXJJcmYprqvSpEXO0vnwB1RR5FA4UiM3Vv pHEicXFpXqN5Dfi8InRAw/finYDTBXqw+NGohFirOu0TXSHrCOISmYJNeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMFbj7GWdZ+M6yZq8K4Y/HKdZYj2MB8GA1UdIwQY MBaAFA69X1SQXujk0oMMbPUPYNJkIBqTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHIxZlZKQmU2T1RTZ3d4czlROWcwbVFnR3BNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9iNTkzOWItZGFhNy00ZjQ3LTk4NzMt NjRhMjdlOTc3ZmQ5LzEvRHIxZlZKQmU2T1RTZ3d4czlROWcwbVFnR3BNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9iNTkzOWItZGFhNy00ZjQ3LTk4NzMtNjRhMjdlOTc3ZmQ5 LzEvRHIxZlZKQmU2T1RTZ3d4czlROWcwbVFnR3BNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMuWTAsPg rrgAG54LNqP+/WfpHZTRwiUnHlEnXFgw/KiCJ3ilWywYcVCumPdgvv3g2BC6IK9l BDeeG+GUtJVmwlqXI4YUL/HG25tTxXz8O/IGVOEF9QtIOZQLLwriXVdAxgJZuT6V aqhfc/4Rs1/fHlKEnWMDDP+QWglKmgnsMlEsCjAcYjUxdDTm96tk0/81KUx61OAZ jvDQZzJPzaYAcnAZkhqiMrSeC/LqnJytPTIqlrFM1/dHhB/2/mLGqFqgHXbi7jtt NV7I6fJb0AzHwFkan8tuSQaqYD8DPvjMmnW+eDJSQ2DDGPDRXFQQlGsKwuNb+ebJ HrnIJLOJwMk84g== -----END CERTIFICATE-----Generated at Tue Dec 23 02:52:37 2025 by rpki-client