This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft File: DNScoZAd8CCTDOlx9lzBgKP8voE.mft (raw, json) Hash identifier: QGyvfUY/xRtMha6jFuOFwhqM7KI1hkfoY7rB7QilFoI= Subject key identifier: AD:DE:A8:C4:3E:A9:7D:00:EC:3E:CB:57:B6:E3:E0:B8:3D:20:64:D8 Authority key identifier: 0C:D4:9C:A1:90:1D:F0:20:93:0C:E9:71:F6:5C:C1:80:A3:FC:BE:81 Certificate issuer: /CN=0cd49ca1901df020930ce971f65cc180a3fcbe81 Certificate serial: 019B6053E5FAA891CCA042BBFDDCC5FEA19A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNScoZAd8CCTDOlx9lzBgKP8voE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft Manifest number: 179A Signing time: Sat 27 Dec 2025 15:01:09 +0000 Manifest this update: Sat 27 Dec 2025 15:01:09 +0000 Manifest next update: Sun 28 Dec 2025 15:01:09 +0000 Files and hashes: 1: DNScoZAd8CCTDOlx9lzBgKP8voE.crl (hash: H6ddCpylpww03eZ7bAB50uBYtIv/OpOge59cpMbdVdg=) 2: IyvCi4bscVz-cDd1e8YDDEn65h8.roa (hash: +ReDdginBUQu4++Dvo5zNIlV1w8CIv08Gg4t44mG608=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft rsync://rpki.ripe.net/repository/DEFAULT/DNScoZAd8CCTDOlx9lzBgKP8voE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 15:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:60:53:e5:fa:a8:91:cc:a0:42:bb:fd:dc:c5:fe:a1:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cd49ca1901df020930ce971f65cc180a3fcbe81 Validity Not Before: Dec 27 15:01:09 2025 GMT Not After : Dec 28 15:01:09 2025 GMT Subject: CN=addea8c43ea97d00ec3ecb57b6e3e0b83d2064d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9b:ba:dd:d4:40:b0:e1:6e:f0:90:81:2a:ae: 5e:86:7a:04:7b:42:94:dd:80:50:d1:60:18:0a:bc: 0d:82:d9:5e:d4:20:58:8a:74:e3:00:cf:6e:10:76: 37:3c:5f:56:83:5d:e5:39:2e:95:0b:79:0b:2c:5f: f4:19:c9:02:99:e4:a3:5f:4f:de:69:56:bd:76:38: 69:c1:88:63:94:d9:12:1e:b1:dc:f9:63:40:72:0f: 0c:d9:9d:d8:bd:81:9b:be:4a:8d:06:ca:a9:60:09: 9a:b9:e1:41:ea:7c:bf:b8:ea:c0:fe:4e:10:03:42: cb:84:77:25:83:d6:e7:34:d4:72:66:ff:1e:6f:09: 90:c7:71:67:4f:f9:4b:09:b5:e8:27:ef:55:f2:3e: a6:9b:7b:45:0e:5d:0b:ab:cf:79:1f:b9:26:03:f6: 1a:de:dc:65:d3:8b:77:ec:e2:5d:48:cd:38:11:f3: d1:04:95:43:dc:98:fe:05:47:14:b0:7e:e7:7f:b6: bb:8b:f5:11:d2:19:2f:5d:46:52:2e:44:bf:a6:0b: 11:18:73:e7:6a:3e:89:ba:3c:04:d9:5e:a5:4f:e2: f3:c0:8e:90:53:41:2d:66:a1:26:76:4f:fd:54:33: 61:1d:b7:e0:ff:f9:81:5c:10:c0:eb:af:ef:44:72: 59:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:DE:A8:C4:3E:A9:7D:00:EC:3E:CB:57:B6:E3:E0:B8:3D:20:64:D8 X509v3 Authority Key Identifier: keyid:0C:D4:9C:A1:90:1D:F0:20:93:0C:E9:71:F6:5C:C1:80:A3:FC:BE:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNScoZAd8CCTDOlx9lzBgKP8voE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c9ccc9-c405-428f-b773-dd23dc4241fa/1/DNScoZAd8CCTDOlx9lzBgKP8voE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:30:8f:e9:8b:d2:ea:12:50:0d:f5:0d:ff:ac:66:7f:49:f5: d6:f8:d5:93:54:02:be:68:8c:4c:73:a8:4b:b4:c8:ee:f8:8a: 44:4d:1e:40:17:1d:10:d1:c4:60:fd:87:98:7f:1a:42:b1:a7: 47:2c:51:e9:22:19:62:00:06:7c:2d:64:b3:0d:12:bc:c5:1c: b4:40:e3:c4:76:51:15:23:d2:42:f5:7d:6a:bf:f9:0f:00:8a: 7e:be:fc:e0:75:01:2a:4d:92:89:e0:49:2d:aa:e6:7b:33:35: 63:ae:58:da:d6:d8:5a:44:05:af:75:75:4e:b4:69:1f:a0:04: 0d:3a:5f:ec:3a:f5:c8:0e:b7:01:61:9d:90:48:86:56:ab:a8: c9:00:db:ba:cb:10:1e:b1:be:87:ad:e1:40:b1:9d:9e:a7:b7: 90:1d:7f:57:66:d3:00:5d:d2:81:2a:20:37:4a:ef:12:3a:38: 7e:52:38:49:d6:dc:48:eb:17:a1:08:cd:0b:66:9d:db:41:3b: 37:67:70:a5:4c:de:30:b6:49:f7:5a:28:93:90:b7:c0:2c:5e: 68:20:d2:f0:63:81:f5:97:10:52:12:8d:f5:53:a8:9a:f2:ca: 19:a3:39:44:5d:07:8f:0e:3e:09:2c:43:9a:7a:c9:eb:00:c7: 23:ae:bb:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtgU+X6qJHMoEK7/dzF/qGaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZDQ5Y2ExOTAxZGYwMjA5MzBjZTk3MWY2NWNjMTgwYTNm Y2JlODEwHhcNMjUxMjI3MTUwMTA5WhcNMjUxMjI4MTUwMTA5WjAzMTEwLwYDVQQD EyhhZGRlYThjNDNlYTk3ZDAwZWMzZWNiNTdiNmUzZTBiODNkMjA2NGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZu63dRAsOFu8JCBKq5ehnoEe0KU 3YBQ0WAYCrwNgtle1CBYinTjAM9uEHY3PF9Wg13lOS6VC3kLLF/0GckCmeSjX0/e aVa9djhpwYhjlNkSHrHc+WNAcg8M2Z3YvYGbvkqNBsqpYAmaueFB6ny/uOrA/k4Q A0LLhHclg9bnNNRyZv8ebwmQx3FnT/lLCbXoJ+9V8j6mm3tFDl0Lq895H7kmA/Ya 3txl04t37OJdSM04EfPRBJVD3Jj+BUcUsH7nf7a7i/UR0hkvXUZSLkS/pgsRGHPn aj6JujwE2V6lT+LzwI6QU0EtZqEmdk/9VDNhHbfg//mBXBDA66/vRHJZUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK3eqMQ+qX0A7D7LV7bj4Lg9IGTYMB8GA1UdIwQY MBaAFAzUnKGQHfAgkwzpcfZcwYCj/L6BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE5TY29aQWQ4Q0NURE9seDlsekJnS1A4dm9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9jOWNjYzktYzQwNS00MjhmLWI3NzMt ZGQyM2RjNDI0MWZhLzEvRE5TY29aQWQ4Q0NURE9seDlsekJnS1A4dm9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9jOWNjYzktYzQwNS00MjhmLWI3NzMtZGQyM2RjNDI0MWZh LzEvRE5TY29aQWQ4Q0NURE9seDlsekJnS1A4dm9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFzCP6YvS 6hJQDfUN/6xmf0n11vjVk1QCvmiMTHOoS7TI7viKRE0eQBcdENHEYP2HmH8aQrGn RyxR6SIZYgAGfC1ksw0SvMUctEDjxHZRFSPSQvV9ar/5DwCKfr784HUBKk2SieBJ LarmezM1Y65Y2tbYWkQFr3V1TrRpH6AEDTpf7Dr1yA63AWGdkEiGVquoyQDbussQ HrG+h63hQLGdnqe3kB1/V2bTAF3SgSogN0rvEjo4flI4SdbcSOsXoQjNC2ad20E7 N2dwpUzeMLZJ91ook5C3wCxeaCDS8GOB9ZcQUhKN9VOomvLKGaM5RF0Hjw4+CSxD mnrJ6wDHI667Bw== -----END CERTIFICATE-----Generated at Sat Dec 27 19:24:50 2025 by rpki-client