This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft File: dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft (raw, json) Hash identifier: 156CCq2hqxPfB3lZTnCgF3pbjUjoqLW4c2537bYoEYs= Subject key identifier: 54:F8:E0:AC:FF:D8:8C:DF:8A:B4:D7:84:D3:95:63:92:91:01:DF:1C Authority key identifier: 74:24:88:F0:D9:B4:B1:71:A2:E2:F0:FA:55:9B:43:F9:A5:B3:2E:26 Certificate issuer: /CN=742488f0d9b4b171a2e2f0fa559b43f9a5b32e26 Certificate serial: 019B2F679BCBC53407A05796DC415084E906 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft Manifest number: 06EF Signing time: Thu 18 Dec 2025 03:01:17 +0000 Manifest this update: Thu 18 Dec 2025 03:01:17 +0000 Manifest next update: Fri 19 Dec 2025 03:01:17 +0000 Files and hashes: 1: dCSI8Nm0sXGi4vD6VZtD-aWzLiY.crl (hash: Kk6XAKGNkkQ+uRgKpMifgv9j34Yakr/8gGJGhPPZyXg=) 2: wTSz4RaVBPCmK0HhyQREVFlvLYM.roa (hash: wdXTmnLgaVa+d8xmW5YsOirXRbVi1BqCeeIaYwQr+Us=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.crl rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft rsync://rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:9b:cb:c5:34:07:a0:57:96:dc:41:50:84:e9:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=742488f0d9b4b171a2e2f0fa559b43f9a5b32e26 Validity Not Before: Dec 18 03:01:17 2025 GMT Not After : Dec 19 03:01:17 2025 GMT Subject: CN=54f8e0acffd88cdf8ab4d784d39563929101df1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:11:9c:e0:66:e1:8a:35:bf:95:b8:09:0f:f7: d2:50:9c:1a:b9:f6:84:7e:35:b2:7e:f0:f6:2e:69: 70:32:77:f9:c6:3c:81:29:d0:f2:a2:f2:93:c0:a4: 48:a9:d7:ca:7b:07:01:c9:07:b8:6b:55:d4:c3:a2: 40:f1:c8:cc:71:fc:34:97:ff:ab:e9:7c:51:1a:3d: 74:52:1b:67:71:93:12:f0:45:ba:63:28:7b:fc:aa: d0:ce:a8:55:9a:c1:68:74:21:a1:f7:63:66:e8:4e: 71:dd:0f:17:7c:0c:2e:db:ee:6b:b3:0d:b6:22:4c: 83:9c:2b:9b:c2:05:3a:08:7d:0f:fb:63:89:5f:ee: cd:4c:ad:fb:4a:88:d1:73:4c:5a:1d:21:56:8f:07: 8f:60:fb:11:1b:87:a3:1d:7d:78:da:74:1f:9e:1a: f5:33:0c:3b:f9:3f:03:5f:6a:1b:e0:58:dd:25:dd: 40:6e:1d:82:7a:39:2e:16:65:c1:5b:0e:ac:fe:15: 57:44:b9:a6:b2:37:f6:a2:9c:55:81:b2:54:37:0a: ed:dd:1b:d9:a4:42:6d:a2:6c:1c:38:b4:e6:74:03: 4b:ef:7a:96:91:98:ac:4c:cc:53:5e:03:ff:c6:c9: 6c:b5:2b:24:a6:38:c1:11:27:9c:89:54:7b:19:a3: c1:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:F8:E0:AC:FF:D8:8C:DF:8A:B4:D7:84:D3:95:63:92:91:01:DF:1C X509v3 Authority Key Identifier: keyid:74:24:88:F0:D9:B4:B1:71:A2:E2:F0:FA:55:9B:43:F9:A5:B3:2E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:92:b8:c8:01:b6:67:7f:ac:5a:ab:5e:37:81:80:1e:00:2d: bd:74:b0:de:c1:5e:87:4d:31:97:df:45:18:e7:70:be:3b:ad: 6d:b6:0a:50:f7:52:cd:0b:fb:05:97:a7:57:8d:16:a4:bd:f4: 93:3f:b3:9c:d9:30:d1:6d:10:c3:08:98:93:37:bd:fd:bf:5b: f5:d9:b8:00:d0:8d:3c:30:85:f1:f5:7f:03:27:e7:db:2a:5c: 02:e2:e6:db:50:40:1a:27:5c:b0:4e:31:b4:1d:97:f8:7d:12: 80:72:df:70:74:98:ad:23:02:20:94:d8:39:08:05:dd:d1:03: 8a:51:a2:24:ed:0b:b5:bc:0c:f1:b2:72:18:53:a2:7f:56:04: 38:fb:2c:3b:ef:11:a8:ee:16:b9:67:68:15:33:0d:37:68:02: 77:4e:8c:b3:46:68:82:13:ae:34:17:cd:98:12:70:c0:06:28: 84:52:a3:fa:f7:23:3b:3b:d2:92:a0:6e:1a:21:04:05:26:67: 1e:6f:8d:f7:68:3a:a2:40:70:ea:1f:3a:05:84:4d:c2:8a:59: cc:47:a2:fc:d4:ea:6f:c3:1a:96:e2:a5:70:1e:5c:16:24:c0: 68:ae:84:ac:f6:af:6b:0a:37:43:e7:56:e6:60:8a:5e:0b:12: b4:e5:d9:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ5vLxTQHoFeW3EFQhOkGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0MjQ4OGYwZDliNGIxNzFhMmUyZjBmYTU1OWI0M2Y5YTVi MzJlMjYwHhcNMjUxMjE4MDMwMTE3WhcNMjUxMjE5MDMwMTE3WjAzMTEwLwYDVQQD Eyg1NGY4ZTBhY2ZmZDg4Y2RmOGFiNGQ3ODRkMzk1NjM5MjkxMDFkZjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRGc4GbhijW/lbgJD/fSUJwaufaE fjWyfvD2LmlwMnf5xjyBKdDyovKTwKRIqdfKewcByQe4a1XUw6JA8cjMcfw0l/+r 6XxRGj10UhtncZMS8EW6Yyh7/KrQzqhVmsFodCGh92Nm6E5x3Q8XfAwu2+5rsw22 IkyDnCubwgU6CH0P+2OJX+7NTK37SojRc0xaHSFWjwePYPsRG4ejHX142nQfnhr1 Mww7+T8DX2ob4FjdJd1Abh2CejkuFmXBWw6s/hVXRLmmsjf2opxVgbJUNwrt3RvZ pEJtomwcOLTmdANL73qWkZisTMxTXgP/xslstSskpjjBESeciVR7GaPBeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFT44Kz/2IzfirTXhNOVY5KRAd8cMB8GA1UdIwQY MBaAFHQkiPDZtLFxouLw+lWbQ/mlsy4mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZENTSThObTBzWEdpNHZENlZadEQtYVd6TGlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iYzRjMjMtZjdjZS00MmYxLTg4MTkt ZjJiYmZiYTcxYTI4LzEvZENTSThObTBzWEdpNHZENlZadEQtYVd6TGlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9iYzRjMjMtZjdjZS00MmYxLTg4MTktZjJiYmZiYTcxYTI4 LzEvZENTSThObTBzWEdpNHZENlZadEQtYVd6TGlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoJK4yAG2 Z3+sWqteN4GAHgAtvXSw3sFeh00xl99FGOdwvjutbbYKUPdSzQv7BZenV40WpL30 kz+znNkw0W0QwwiYkze9/b9b9dm4ANCNPDCF8fV/Ayfn2ypcAuLm21BAGidcsE4x tB2X+H0SgHLfcHSYrSMCIJTYOQgF3dEDilGiJO0LtbwM8bJyGFOif1YEOPssO+8R qO4WuWdoFTMNN2gCd06Ms0ZoghOuNBfNmBJwwAYohFKj+vcjOzvSkqBuGiEEBSZn Hm+N92g6okBw6h86BYRNwopZzEei/NTqb8MaluKlcB5cFiTAaK6ErPavawo3Q+dW 5mCKXgsStOXZnQ== -----END CERTIFICATE-----Generated at Thu Dec 18 12:43:51 2025 by rpki-client