This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft File: D0OG59TvxHLBH-nP7z0zCXSzP2E.mft (raw, json) Hash identifier: 9991lvYJWpvkcAMwDWsQPcJbxogzaKuG3U0AUKoYXkQ= Subject key identifier: 39:5B:C2:3A:77:AD:08:86:06:AA:0F:CC:F5:B8:4D:03:26:99:3E:22 Authority key identifier: 0F:43:86:E7:D4:EF:C4:72:C1:1F:E9:CF:EF:3D:33:09:74:B3:3F:61 Certificate issuer: /CN=0f4386e7d4efc472c11fe9cfef3d330974b33f61 Certificate serial: 019B51BC297C17E71BFF40E8C623B6B903D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0OG59TvxHLBH-nP7z0zCXSzP2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft Manifest number: 0A34 Signing time: Wed 24 Dec 2025 19:00:44 +0000 Manifest this update: Wed 24 Dec 2025 19:00:44 +0000 Manifest next update: Thu 25 Dec 2025 19:00:44 +0000 Files and hashes: 1: D0OG59TvxHLBH-nP7z0zCXSzP2E.crl (hash: OVgGK8ZqzzCNILAgFkb3lgR5Di/f1ua/lgswrWxQCoU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.crl rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft rsync://rpki.ripe.net/repository/DEFAULT/D0OG59TvxHLBH-nP7z0zCXSzP2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bc:29:7c:17:e7:1b:ff:40:e8:c6:23:b6:b9:03:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f4386e7d4efc472c11fe9cfef3d330974b33f61 Validity Not Before: Dec 24 19:00:44 2025 GMT Not After : Dec 25 19:00:44 2025 GMT Subject: CN=395bc23a77ad088606aa0fccf5b84d0326993e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3b:93:42:9b:0b:f0:69:cc:bc:03:ff:9f:8a: 09:e4:c8:c5:20:57:18:f9:62:c2:ba:e8:1d:6c:77: a1:ea:9d:57:29:6d:b4:a1:5c:f9:56:11:c8:5c:2a: 24:cc:a7:5c:0d:9e:ff:35:47:df:d7:5d:42:46:5d: 50:19:7b:a8:63:bf:25:52:63:10:c0:d4:cb:ef:f6: 00:82:b2:cf:3a:88:d5:cd:8b:ae:e9:22:be:f1:2a: 60:c0:ba:a3:c6:53:8d:b5:aa:4b:f8:33:93:16:08: 28:c0:3c:77:a4:52:e0:20:5e:ab:22:a1:04:86:0e: ef:31:61:c6:c5:50:05:52:42:35:ef:b9:02:1b:b8: e2:87:a1:f1:64:ab:7e:e4:2e:f6:0b:6a:7e:1b:46: 02:d0:ef:ce:e2:ea:e1:b7:60:53:c9:14:bd:aa:b8: 26:50:bd:99:b8:6e:05:9b:59:ca:a1:dc:a2:28:6b: 77:ff:2f:d4:b3:e5:f4:88:27:8d:4f:28:76:a7:97: 8b:95:15:59:5f:1c:e3:6c:da:7d:7d:df:64:83:a4: 2b:ed:46:63:ba:78:61:63:b5:8a:71:dc:3e:ac:2a: 7c:6a:63:04:4c:92:5b:5a:a1:8b:be:a6:d5:24:3f: 91:c5:f0:a9:87:6d:a0:17:3c:bb:c6:c1:6a:f6:0c: 41:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:5B:C2:3A:77:AD:08:86:06:AA:0F:CC:F5:B8:4D:03:26:99:3E:22 X509v3 Authority Key Identifier: keyid:0F:43:86:E7:D4:EF:C4:72:C1:1F:E9:CF:EF:3D:33:09:74:B3:3F:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0OG59TvxHLBH-nP7z0zCXSzP2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:43:6f:e6:0e:ac:82:78:e2:b2:75:a3:1b:88:27:7b:24:f9: 1f:4b:e1:6d:cf:f2:8b:cf:3a:05:43:07:0f:41:c7:64:04:13: 4e:8b:28:57:d1:fe:7b:48:ba:89:bc:c9:5e:16:4f:f8:5e:56: 0b:64:b1:e8:f2:8c:12:6f:c2:af:e2:ee:b0:3c:67:63:6b:35: cc:ae:ad:1a:3f:eb:1c:c6:a2:23:48:f8:a0:0f:0b:8a:31:3c: cb:f9:d4:57:1d:6a:11:99:3e:f7:23:a4:27:f0:20:ef:12:fe: 48:b2:a9:7e:37:5d:64:c4:54:83:7b:d0:1c:8f:01:0c:1a:47: 12:55:98:28:b3:c6:54:68:da:8e:b6:2c:51:12:3d:5b:70:0a: 57:ca:58:33:34:da:71:94:a5:f9:81:d7:3c:b5:33:ac:22:37: ed:24:04:5a:3f:6c:ac:03:8e:a3:54:e4:b5:18:a2:5f:58:66: 0b:47:52:27:5e:02:d4:39:a8:ca:76:2a:69:d8:e1:9e:ab:1d: b6:12:8a:13:ce:e7:fd:cb:16:2c:ab:4b:75:98:41:60:01:78: 61:95:8b:37:3e:91:b0:38:47:2b:b6:30:23:d6:9b:c5:c8:be: f2:38:d9:38:fb:f1:f6:ab:a5:49:37:cf:2a:76:99:09:a7:dc: 42:83:a1:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvCl8F+cb/0DoxiO2uQPTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNDM4NmU3ZDRlZmM0NzJjMTFmZTljZmVmM2QzMzA5NzRi MzNmNjEwHhcNMjUxMjI0MTkwMDQ0WhcNMjUxMjI1MTkwMDQ0WjAzMTEwLwYDVQQD EygzOTViYzIzYTc3YWQwODg2MDZhYTBmY2NmNWI4NGQwMzI2OTkzZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjuTQpsL8GnMvAP/n4oJ5MjFIFcY +WLCuugdbHeh6p1XKW20oVz5VhHIXCokzKdcDZ7/NUff111CRl1QGXuoY78lUmMQ wNTL7/YAgrLPOojVzYuu6SK+8SpgwLqjxlONtapL+DOTFggowDx3pFLgIF6rIqEE hg7vMWHGxVAFUkI177kCG7jih6HxZKt+5C72C2p+G0YC0O/O4urht2BTyRS9qrgm UL2ZuG4Fm1nKodyiKGt3/y/Us+X0iCeNTyh2p5eLlRVZXxzjbNp9fd9kg6Qr7UZj unhhY7WKcdw+rCp8amMETJJbWqGLvqbVJD+RxfCph22gFzy7xsFq9gxBhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDlbwjp3rQiGBqoPzPW4TQMmmT4iMB8GA1UdIwQY MBaAFA9DhufU78RywR/pz+89Mwl0sz9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDBPRzU5VHZ4SExCSC1uUDd6MHpDWFN6UDJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS81NmJmYjQtYjNmZS00NjVhLWIzNTct NTJhYmI1M2I3NTEzLzEvRDBPRzU5VHZ4SExCSC1uUDd6MHpDWFN6UDJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS81NmJmYjQtYjNmZS00NjVhLWIzNTctNTJhYmI1M2I3NTEz LzEvRDBPRzU5VHZ4SExCSC1uUDd6MHpDWFN6UDJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMkNv5g6s gnjisnWjG4gneyT5H0vhbc/yi886BUMHD0HHZAQTTosoV9H+e0i6ibzJXhZP+F5W C2Sx6PKMEm/Cr+LusDxnY2s1zK6tGj/rHMaiI0j4oA8LijE8y/nUVx1qEZk+9yOk J/Ag7xL+SLKpfjddZMRUg3vQHI8BDBpHElWYKLPGVGjajrYsURI9W3AKV8pYMzTa cZSl+YHXPLUzrCI37SQEWj9srAOOo1TktRiiX1hmC0dSJ14C1DmoynYqadjhnqsd thKKE87n/csWLKtLdZhBYAF4YZWLNz6RsDhHK7YwI9abxci+8jjZOPvx9qulSTfP KnaZCafcQoOhxQ== -----END CERTIFICATE-----Generated at Wed Dec 24 21:47:15 2025 by rpki-client