This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft File: DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft (raw, json) Hash identifier: Dtoyb/Fnv/F7109nsA9utvQqAkFb/d9HGZ6YPy78xgs= Subject key identifier: EF:B0:9D:30:47:D6:96:61:AC:06:38:CF:9E:35:2B:67:9E:FB:12:D2 Authority key identifier: 0D:18:53:2B:AA:2F:D8:65:83:A2:63:BB:1F:BC:CB:C8:0D:40:D9:90 Certificate issuer: /CN=0d18532baa2fd86583a263bb1fbccbc80d40d990 Certificate serial: 019B3EDAABD59BE3CCE2CEAF11895BFCBB48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft Manifest number: 13AA Signing time: Sun 21 Dec 2025 03:01:16 +0000 Manifest this update: Sun 21 Dec 2025 03:01:16 +0000 Manifest next update: Mon 22 Dec 2025 03:01:16 +0000 Files and hashes: 1: DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl (hash: +KNW3kgTKWwuz4E9C6PWg2cUFpLYLXg6EvfNuePj1E8=) 2: GU3WIEeqeryj-R-zsa0cMuUQBHM.roa (hash: P0OhDT05+JAj4QXmTS/0O2Bzhb6RhdbVqJWFN0gOpmE=) 3: cIkzHkYil73CUQBJR_lXOc-rvck.roa (hash: rY7DgjrJWLfJoJzDxWf7uBXP1TGyTLjuDroDK6Z0PGQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:ab:d5:9b:e3:cc:e2:ce:af:11:89:5b:fc:bb:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d18532baa2fd86583a263bb1fbccbc80d40d990 Validity Not Before: Dec 21 03:01:16 2025 GMT Not After : Dec 22 03:01:16 2025 GMT Subject: CN=efb09d3047d69661ac0638cf9e352b679efb12d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:12:b2:66:f3:4b:f0:b4:40:80:ef:92:d1:97: 85:20:94:9b:01:3a:26:58:59:0d:e3:fb:b3:c7:c7: e2:eb:7b:1d:e2:2b:2c:e9:04:c1:27:9c:5d:e1:4f: 44:38:94:00:57:12:ec:df:71:71:3c:5b:59:1e:ce: 0e:b3:f5:59:3d:9c:d9:e7:4a:6b:3e:f8:c3:5b:ce: 1a:5d:ce:8b:ed:57:20:3b:fd:09:0c:6a:1a:5c:cf: 02:c5:13:bb:94:dc:de:ef:de:60:09:f2:51:94:fc: b6:15:b1:44:62:af:12:88:32:31:b2:1b:7e:ec:dd: 44:a8:85:b3:78:fd:a1:51:07:04:ee:39:11:85:2c: 5d:8d:bf:c6:f8:be:b4:44:f3:69:a1:cd:3a:df:30: 2d:64:cf:5a:ee:09:d4:ce:5e:ca:4f:92:70:42:9c: e7:3a:d1:b3:2f:72:c9:47:63:2f:8c:9f:b2:29:26: 06:22:f9:b7:b6:f7:b6:14:8a:ea:95:3e:bd:03:59: 77:c0:aa:bd:ef:4c:a9:22:9f:9d:0b:91:14:13:6d: d0:27:9f:53:ce:21:01:2d:1d:6f:8a:6b:11:14:e3: c2:a2:e6:9e:66:9e:c4:a1:40:f4:f1:de:ca:93:0c: f6:0b:91:1c:6f:20:d0:42:49:a0:29:be:8e:08:94: 1f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:B0:9D:30:47:D6:96:61:AC:06:38:CF:9E:35:2B:67:9E:FB:12:D2 X509v3 Authority Key Identifier: keyid:0D:18:53:2B:AA:2F:D8:65:83:A2:63:BB:1F:BC:CB:C8:0D:40:D9:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRhTK6ov2GWDomO7H7zLyA1A2ZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b8b5bd-8adf-43ef-8abd-2b3a159ca2ef/1/DRhTK6ov2GWDomO7H7zLyA1A2ZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:c8:69:82:37:02:e7:40:0f:36:1f:6f:ec:09:c2:c1:f8:0d: 39:0a:35:9c:6f:b2:dc:a9:c8:eb:ba:b8:e8:ed:05:64:7a:35: af:30:fe:cc:5b:3b:09:02:38:f4:39:d4:96:ac:f5:78:26:4f: 85:59:cc:1a:6f:cf:1d:5b:e3:77:54:3f:c7:5c:a3:92:18:96: 13:ab:0d:8b:0d:2a:09:57:d9:0a:01:9d:9a:9c:82:ec:98:c7: 66:40:7a:f4:b0:2c:bb:49:da:35:f7:14:88:d0:d0:a4:f9:83: 07:7c:48:b7:cb:93:6f:81:e6:a4:d3:40:89:9f:e4:6e:2b:ea: af:bc:d1:6d:b6:b0:91:9a:3a:3f:8a:32:90:3d:5e:ee:06:86: ea:78:c4:f5:f7:be:b5:60:f1:af:05:6f:81:68:9e:e0:69:11: 50:11:11:2a:e0:b5:ac:aa:46:76:77:bc:02:1a:6c:df:d0:cb: 19:fc:c5:49:34:53:63:ac:45:73:8b:e6:d4:8e:c6:70:68:fe: ac:9b:d5:2a:63:cc:5f:8b:38:56:0d:a1:00:75:e0:7a:6e:90: ba:2d:b5:df:51:57:cb:e3:e3:1a:04:b2:b7:4f:4c:53:d1:d9: d8:a9:50:ff:ec:f4:b3:10:3a:e7:b5:c9:f5:d0:c5:e2:44:a5: e9:c1:20:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2qvVm+PM4s6vEYlb/LtIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMTg1MzJiYWEyZmQ4NjU4M2EyNjNiYjFmYmNjYmM4MGQ0 MGQ5OTAwHhcNMjUxMjIxMDMwMTE2WhcNMjUxMjIyMDMwMTE2WjAzMTEwLwYDVQQD EyhlZmIwOWQzMDQ3ZDY5NjYxYWMwNjM4Y2Y5ZTM1MmI2NzllZmIxMmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BKyZvNL8LRAgO+S0ZeFIJSbATom WFkN4/uzx8fi63sd4iss6QTBJ5xd4U9EOJQAVxLs33FxPFtZHs4Os/VZPZzZ50pr PvjDW84aXc6L7VcgO/0JDGoaXM8CxRO7lNze795gCfJRlPy2FbFEYq8SiDIxsht+ 7N1EqIWzeP2hUQcE7jkRhSxdjb/G+L60RPNpoc063zAtZM9a7gnUzl7KT5JwQpzn OtGzL3LJR2MvjJ+yKSYGIvm3tve2FIrqlT69A1l3wKq970ypIp+dC5EUE23QJ59T ziEBLR1vimsRFOPCouaeZp7EoUD08d7Kkwz2C5EcbyDQQkmgKb6OCJQfGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO+wnTBH1pZhrAY4z541K2ee+xLSMB8GA1UdIwQY MBaAFA0YUyuqL9hlg6Jjux+8y8gNQNmQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFJoVEs2b3YyR1dEb21PN0g3ekx5QTFBMlpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9iOGI1YmQtOGFkZi00M2VmLThhYmQt MmIzYTE1OWNhMmVmLzEvRFJoVEs2b3YyR1dEb21PN0g3ekx5QTFBMlpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9iOGI1YmQtOGFkZi00M2VmLThhYmQtMmIzYTE1OWNhMmVm LzEvRFJoVEs2b3YyR1dEb21PN0g3ekx5QTFBMlpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKchpgjcC 50APNh9v7AnCwfgNOQo1nG+y3KnI67q46O0FZHo1rzD+zFs7CQI49DnUlqz1eCZP hVnMGm/PHVvjd1Q/x1yjkhiWE6sNiw0qCVfZCgGdmpyC7JjHZkB69LAsu0naNfcU iNDQpPmDB3xIt8uTb4HmpNNAiZ/kbivqr7zRbbawkZo6P4oykD1e7gaG6njE9fe+ tWDxrwVvgWie4GkRUBERKuC1rKpGdne8Ahps39DLGfzFSTRTY6xFc4vm1I7GcGj+ rJvVKmPMX4s4Vg2hAHXgem6Qui2131FXy+PjGgSyt09MU9HZ2KlQ/+z0sxA657XJ 9dDF4kSl6cEgbQ== -----END CERTIFICATE-----Generated at Sun Dec 21 05:37:36 2025 by rpki-client