This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft File: DFfLOh5T52Ke47nyZy1Fce-F0sg.mft (raw, json) Hash identifier: fx3FK/2RjYd2aCk5D46SIeRLrwXN2Zqy/8Tuh30Nbsc= Subject key identifier: 67:DE:08:BB:46:70:AC:4D:C4:1E:65:D7:7F:31:86:C8:65:5A:24:54 Authority key identifier: 0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8 Certificate issuer: /CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8 Certificate serial: 019B3C7F159853361C09B743DB3E5B058893 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 16:02:00 +0000 Manifest this update: Sat 20 Dec 2025 16:02:00 +0000 Manifest next update: Sun 21 Dec 2025 16:02:00 +0000 Files and hashes: 1: 58PUT6ysZxKBONG9sTIOc1qL5Ls.roa (hash: n7460GeFmYRqG1aJJrfKZDL2a6FFJmjROlobClHOM2Y=) 2: 6BSYpk5RnNsu0NP-8CiJ4A3-eIA.roa (hash: lk5fXZ2Pgc+XIPu3nQ53XeIOSBvgneeeWVb78tjDQes=) 3: DFfLOh5T52Ke47nyZy1Fce-F0sg.crl (hash: X8vh2aI+QA5+JcpopF0vv6Av6xJFprbO0n0/n1cvIXw=) 4: L5CVIsoItTTVw443IuKRnX_6ofc.roa (hash: u0QFKwVPCjoujirXbnFrSGkKMLgZEeDISyY/cSBSGF4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 16:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:15:98:53:36:1c:09:b7:43:db:3e:5b:05:88:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8 Validity Not Before: Dec 20 16:02:00 2025 GMT Not After : Dec 21 16:02:00 2025 GMT Subject: CN=67de08bb4670ac4dc41e65d77f3186c8655a2454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:98:79:02:ca:e9:81:68:c8:1b:0b:bf:86:c8: 1d:69:cc:3b:5b:61:53:5a:18:78:ab:71:06:89:c3: 32:6c:f2:b8:9d:e1:ff:79:f9:17:40:4f:d8:be:cb: b8:b0:db:c6:5b:95:38:2a:73:53:9f:33:b1:eb:04: c2:91:41:c4:2c:6c:a9:fc:17:b7:5f:52:03:a5:9d: a3:2d:7f:a8:a2:1b:db:c4:6d:29:39:93:f2:6d:6f: 0e:27:27:45:68:93:15:8a:fa:97:a1:05:79:1d:1b: fb:84:3f:ee:ca:36:60:89:e6:6c:50:f1:d5:09:16: 57:79:19:07:ed:3a:09:70:e8:cd:9e:a9:20:2e:8f: b8:3d:e5:8a:72:31:3b:9c:02:b8:80:bb:e6:40:34: 2b:34:e9:a6:58:cc:2f:69:f1:e6:47:d1:bd:ad:f1: 2b:13:2c:b7:c1:82:6f:87:de:94:c5:00:64:b2:4f: 8c:52:3f:c4:29:f2:77:03:b1:f7:cf:38:a4:26:6c: d4:28:8b:09:7f:fb:52:d6:47:7e:54:13:16:0f:fc: e1:d4:84:11:70:1d:7d:38:7a:c2:7e:f0:7b:30:98: b2:6d:ad:de:05:b8:0d:61:62:c0:06:f4:13:26:6b: c3:ba:09:e2:8c:9f:90:c4:00:3d:38:b5:c6:72:89: 99:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:DE:08:BB:46:70:AC:4D:C4:1E:65:D7:7F:31:86:C8:65:5A:24:54 X509v3 Authority Key Identifier: keyid:0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:6e:4b:a2:81:24:fa:87:a0:30:7d:18:b5:36:b9:3b:16:a1: 7c:1e:cc:63:c3:54:53:68:48:c7:45:32:d8:c9:9e:d2:7a:e1: cc:1a:9c:8f:7c:01:a0:d4:c0:53:97:3e:89:5d:52:f2:de:4d: 27:29:bf:aa:b6:f8:bc:a0:a3:63:8b:ae:6d:75:22:81:83:dc: 7a:3c:12:b1:e2:88:e3:f6:72:c0:3b:83:84:c5:a1:9b:5f:37: bf:b4:2a:27:65:a9:fc:6f:3b:da:e1:03:7c:17:c6:a4:1f:59: 4a:37:b9:29:db:c6:01:c6:8a:e7:e0:c0:c3:48:90:a4:59:cf: 16:66:c5:f9:01:0e:77:78:85:2c:b1:f2:6d:01:2d:e2:b9:73: ce:30:59:51:f6:49:aa:c8:10:93:eb:17:56:7c:3e:79:e3:bb: d6:c2:e5:3e:57:17:89:d6:1a:22:10:1f:e0:73:6d:cc:ce:d4: 8a:73:ac:3c:ec:cb:dd:ad:ba:37:f3:9a:cc:42:70:46:51:ea: 8b:79:8f:5a:55:8f:15:8e:16:cc:91:71:63:fb:64:f4:e6:31: 6d:a4:f3:02:c0:8f:ec:4d:13:9b:8a:0e:ad:d4:3d:43:c9:f5: af:cb:41:6c:e1:33:36:3e:2a:83:70:75:64:df:d1:b9:df:5d: 3c:4a:77:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fxWYUzYcCbdD2z5bBYiTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNTdjYjNhMWU1M2U3NjI5ZWUzYjlmMjY3MmQ0NTcxZWY4 NWQyYzgwHhcNMjUxMjIwMTYwMjAwWhcNMjUxMjIxMTYwMjAwWjAzMTEwLwYDVQQD Eyg2N2RlMDhiYjQ2NzBhYzRkYzQxZTY1ZDc3ZjMxODZjODY1NWEyNDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZh5AsrpgWjIGwu/hsgdacw7W2FT Whh4q3EGicMybPK4neH/efkXQE/Yvsu4sNvGW5U4KnNTnzOx6wTCkUHELGyp/Be3 X1IDpZ2jLX+oohvbxG0pOZPybW8OJydFaJMVivqXoQV5HRv7hD/uyjZgieZsUPHV CRZXeRkH7ToJcOjNnqkgLo+4PeWKcjE7nAK4gLvmQDQrNOmmWMwvafHmR9G9rfEr Eyy3wYJvh96UxQBksk+MUj/EKfJ3A7H3zzikJmzUKIsJf/tS1kd+VBMWD/zh1IQR cB19OHrCfvB7MJiyba3eBbgNYWLABvQTJmvDugnijJ+QxAA9OLXGcomZQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGfeCLtGcKxNxB5l138xhshlWiRUMB8GA1UdIwQY MBaAFAxXyzoeU+dinuO58mctRXHvhdLIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZmTE9oNVQ1MktlNDdueVp5MUZjZS1GMHNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS82YzFlMDEtMTU5NS00N2IwLTllMDMt Y2Y3MjMyZGRlYmVjLzEvREZmTE9oNVQ1MktlNDdueVp5MUZjZS1GMHNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS82YzFlMDEtMTU5NS00N2IwLTllMDMtY2Y3MjMyZGRlYmVj LzEvREZmTE9oNVQ1MktlNDdueVp5MUZjZS1GMHNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYG5LooEk +oegMH0YtTa5OxahfB7MY8NUU2hIx0Uy2Mme0nrhzBqcj3wBoNTAU5c+iV1S8t5N Jym/qrb4vKCjY4uubXUigYPcejwSseKI4/ZywDuDhMWhm183v7QqJ2Wp/G872uED fBfGpB9ZSje5KdvGAcaK5+DAw0iQpFnPFmbF+QEOd3iFLLHybQEt4rlzzjBZUfZJ qsgQk+sXVnw+eeO71sLlPlcXidYaIhAf4HNtzM7UinOsPOzL3a26N/OazEJwRlHq i3mPWlWPFY4WzJFxY/tk9OYxbaTzAsCP7E0Tm4oOrdQ9Q8n1r8tBbOEzNj4qg3B1 ZN/Rud9dPEp3HQ== -----END CERTIFICATE-----Generated at Sun Dec 21 02:00:32 2025 by rpki-client