This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.mft File: DVX6KmKDfbmv5EI-TBGelJmyG0M.mft (raw, json) Hash identifier: pNVkPNUpudFBe1lGxJv9zyiMd025cTb+UuviFOpiE5U= Subject key identifier: B8:7C:54:B6:03:23:61:41:49:3B:EB:45:18:28:C9:EB:B3:ED:EA:AF Authority key identifier: 0D:55:FA:2A:62:83:7D:B9:AF:E4:42:3E:4C:11:9E:94:99:B2:1B:43 Certificate issuer: /CN=0d55fa2a62837db9afe4423e4c119e9499b21b43 Certificate serial: 019B52984746D3F2934BB71CE9F553103A21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DVX6KmKDfbmv5EI-TBGelJmyG0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.mft Manifest number: 08FE Signing time: Wed 24 Dec 2025 23:01:09 +0000 Manifest this update: Wed 24 Dec 2025 23:01:09 +0000 Manifest next update: Thu 25 Dec 2025 23:01:09 +0000 Files and hashes: 1: DVX6KmKDfbmv5EI-TBGelJmyG0M.crl (hash: wJ0RahUKu0oDS3APWA/YbMy1HQFQbHWLYMQs4PQEYNU=) 2: GXOLHwEFu0p7gKJgkJ5kY6IvzIE.roa (hash: pAl+GrJaPPBbeJpVI3BoizE0NzXiXcJyNH8QYeo2rB0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.mft rsync://rpki.ripe.net/repository/DEFAULT/DVX6KmKDfbmv5EI-TBGelJmyG0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 23:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:98:47:46:d3:f2:93:4b:b7:1c:e9:f5:53:10:3a:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d55fa2a62837db9afe4423e4c119e9499b21b43 Validity Not Before: Dec 24 23:01:09 2025 GMT Not After : Dec 25 23:01:09 2025 GMT Subject: CN=b87c54b603236141493beb451828c9ebb3edeaaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b1:e6:6f:01:d7:85:09:93:f7:8f:89:b3:dc: 5a:9c:29:26:c1:07:44:e7:24:a6:c6:0d:a0:ea:e3: dc:89:cd:14:f8:d6:af:09:61:39:f5:48:4a:fc:ee: c6:3f:98:d9:d8:82:e6:7e:2a:66:04:fa:21:fe:15: 7f:03:48:67:c2:32:41:1d:06:3e:73:a0:fd:72:3b: 1d:04:a7:53:44:92:ff:e4:19:93:a4:aa:9c:42:40: 87:ab:3f:d7:83:69:4e:8a:f4:e6:99:a3:6e:c2:1b: b7:c9:5a:88:2e:aa:5c:2e:91:5b:e3:50:56:20:b7: 47:29:b2:b4:d0:ea:17:91:c1:ba:a5:48:82:5f:8d: 98:65:ff:e4:9b:40:a6:fd:e4:43:fa:54:05:0d:81: 46:68:31:07:16:e4:37:5d:c5:ce:9f:05:a8:c9:cf: ca:20:3f:04:4a:91:d4:e7:4e:5e:6c:9c:81:fc:b2: d7:91:5b:85:ba:aa:98:e7:f0:9f:7d:23:67:29:52: 40:f8:4c:b0:63:6e:3b:58:31:76:24:22:3d:21:93: be:d2:e2:ef:65:c9:a4:a9:bc:8d:83:13:21:83:f4: b9:86:f3:40:9a:41:8c:1f:70:e7:f5:e7:4c:cd:b3: 50:b6:17:92:53:03:2f:af:70:4d:0c:13:37:2f:02: 95:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:7C:54:B6:03:23:61:41:49:3B:EB:45:18:28:C9:EB:B3:ED:EA:AF X509v3 Authority Key Identifier: keyid:0D:55:FA:2A:62:83:7D:B9:AF:E4:42:3E:4C:11:9E:94:99:B2:1B:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DVX6KmKDfbmv5EI-TBGelJmyG0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:de:d8:6b:8b:cf:b6:4c:73:dd:40:fa:bf:e9:54:9a:69:b7: ce:6a:6e:0f:f6:1a:0d:75:fd:1e:ab:b7:36:54:8b:74:0b:65: 79:7e:e3:f8:5f:f5:14:76:95:f0:8c:83:62:4f:3f:3a:e7:ae: bc:b4:56:e1:34:85:f0:2e:41:ed:3b:ee:19:6d:2a:8d:bc:47: b1:5f:81:4b:82:95:23:9a:4a:a7:37:8a:75:83:99:6a:7f:de: 0a:0c:08:de:fc:85:67:35:9b:f3:df:e1:26:88:38:90:d1:34: 52:d5:aa:e8:18:8c:4c:51:cd:f0:e5:e6:49:7a:17:fe:47:c4: 6c:2e:9f:29:3f:3e:15:a7:55:21:f4:37:06:b2:ba:aa:26:8c: 6d:24:5f:97:b0:ad:51:a2:c8:83:bb:21:c5:34:11:19:e7:cf: ab:e7:0c:4e:a3:07:52:4b:44:b1:59:a5:93:f0:f7:81:21:b1: e6:1f:03:8f:92:83:23:a1:b8:e5:80:73:56:47:c2:15:15:71: 0a:b9:36:f7:16:d8:1a:0e:71:08:42:79:4e:f2:7d:96:d8:cb: 92:25:6b:fb:aa:bc:54:83:09:ba:1d:93:dd:b1:fe:00:17:7b: dd:8e:5d:b7:3b:52:73:63:36:ea:f6:90:70:c5:aa:7e:15:71: 5d:93:70:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSmEdG0/KTS7cc6fVTEDohMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNTVmYTJhNjI4MzdkYjlhZmU0NDIzZTRjMTE5ZTk0OTli MjFiNDMwHhcNMjUxMjI0MjMwMTA5WhcNMjUxMjI1MjMwMTA5WjAzMTEwLwYDVQQD EyhiODdjNTRiNjAzMjM2MTQxNDkzYmViNDUxODI4YzllYmIzZWRlYWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbHmbwHXhQmT94+Js9xanCkmwQdE 5ySmxg2g6uPcic0U+NavCWE59UhK/O7GP5jZ2ILmfipmBPoh/hV/A0hnwjJBHQY+ c6D9cjsdBKdTRJL/5BmTpKqcQkCHqz/Xg2lOivTmmaNuwhu3yVqILqpcLpFb41BW ILdHKbK00OoXkcG6pUiCX42YZf/km0Cm/eRD+lQFDYFGaDEHFuQ3XcXOnwWoyc/K ID8ESpHU505ebJyB/LLXkVuFuqqY5/CffSNnKVJA+EywY247WDF2JCI9IZO+0uLv ZcmkqbyNgxMhg/S5hvNAmkGMH3Dn9edMzbNQtheSUwMvr3BNDBM3LwKVcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLh8VLYDI2FBSTvrRRgoyeuz7eqvMB8GA1UdIwQY MBaAFA1V+ipig325r+RCPkwRnpSZshtDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFZYNkttS0RmYm12NUVJLVRCR2VsSm15RzBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9lNjk5YTMtNGQzNy00OTFhLWI0NjMt ZWYzNmEzMjE3NDlhLzEvRFZYNkttS0RmYm12NUVJLVRCR2VsSm15RzBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC9lNjk5YTMtNGQzNy00OTFhLWI0NjMtZWYzNmEzMjE3NDlh LzEvRFZYNkttS0RmYm12NUVJLVRCR2VsSm15RzBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABt7Ya4vP tkxz3UD6v+lUmmm3zmpuD/YaDXX9Hqu3NlSLdAtleX7j+F/1FHaV8IyDYk8/Oueu vLRW4TSF8C5B7TvuGW0qjbxHsV+BS4KVI5pKpzeKdYOZan/eCgwI3vyFZzWb89/h Jog4kNE0UtWq6BiMTFHN8OXmSXoX/kfEbC6fKT8+FadVIfQ3BrK6qiaMbSRfl7Ct UaLIg7shxTQRGefPq+cMTqMHUktEsVmlk/D3gSGx5h8Dj5KDI6G45YBzVkfCFRVx Crk29xbYGg5xCEJ5TvJ9ltjLkiVr+6q8VIMJuh2T3bH+ABd73Y5dtztSc2M26vaQ cMWqfhVxXZNwiw== -----END CERTIFICATE-----Generated at Thu Dec 25 07:11:11 2025 by rpki-client