This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.mft File: DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.mft (raw, json) Hash identifier: R3pVUWjNFcruRbowKgNkgq9lZhqVAMKmXaevyvVEHXw= Subject key identifier: 22:2A:D8:2A:CE:FD:64:7A:6A:5C:03:38:50:26:47:AA:31:96:97:6B Authority key identifier: 0E:F4:7D:75:3D:25:28:9F:D9:87:94:97:4A:A0:53:60:10:56:7B:D9 Certificate issuer: /CN=0ef47d753d25289fd98794974aa0536010567bd9 Certificate serial: 019B38D81A07C59DAE6F6B5F137044DDC5F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.mft Manifest number: 1734 Signing time: Fri 19 Dec 2025 23:00:44 +0000 Manifest this update: Fri 19 Dec 2025 23:00:44 +0000 Manifest next update: Sat 20 Dec 2025 23:00:44 +0000 Files and hashes: 1: DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.crl (hash: DpZn9mnujfYNkQcpwfEvUT+KGZ/9onq4HRGx6OMqavQ=) 2: Ep2Tt2fI9ZnXq9dEoGDimlfX8vk.roa (hash: Yxb+HnJ6SVbEvdXrvuy0S0wlJigO7ITirWOkyZwJCfc=) 3: NsbQLlxjRX4R8d6qC52Mg0zJJ8I.roa (hash: 8GOI4hJ7xP6rg0LIYF04KTpO9lNuSPc9P1fdRwgO288=) 4: _Sk86eGU6RbYb2vHgW0Ui6wMfs0.roa (hash: Avs1rLJgkMJRxv1FINcH2aH5zw28kBN1QbSOsvT0vZA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.crl rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.mft rsync://rpki.ripe.net/repository/DEFAULT/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 23:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d8:1a:07:c5:9d:ae:6f:6b:5f:13:70:44:dd:c5:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ef47d753d25289fd98794974aa0536010567bd9 Validity Not Before: Dec 19 23:00:44 2025 GMT Not After : Dec 20 23:00:44 2025 GMT Subject: CN=222ad82acefd647a6a5c0338502647aa3196976b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e1:7b:f8:95:61:fa:85:69:e6:f2:f3:44:3a: 6b:d7:d7:0c:6c:c7:7d:c7:08:a9:a0:5a:06:0b:42: f2:74:5b:09:25:5d:1f:74:4c:cb:1f:d6:ac:50:44: 91:92:4e:9d:5a:be:cf:e5:df:37:96:15:24:5d:69: e8:5b:17:7b:0e:8f:75:a5:46:66:df:ea:f0:ce:30: 8c:dc:bf:31:52:d1:bf:6b:d4:24:a6:a0:71:b7:1b: 07:d3:7f:6e:24:05:4e:33:3c:d9:6a:cf:ac:16:df: a0:2b:38:82:b5:3e:7d:b0:68:f2:c9:fe:0d:13:ac: af:0c:31:8b:f3:93:c9:8c:17:04:53:54:bf:e8:ac: 03:0d:6d:71:e6:bf:a2:70:33:41:ac:c9:c2:e6:d2: d1:3a:5f:bb:24:0c:b9:17:39:fd:4d:be:bf:98:6e: 43:32:d8:ae:87:4a:21:2f:e8:61:7a:1a:a2:b4:b7: ee:85:49:1d:74:ec:57:1a:68:67:38:6f:b7:84:24: 20:e1:bd:44:03:35:d6:d1:5d:ae:d4:d4:1b:e6:11: f7:78:9c:d8:e9:5e:d0:6f:4d:37:17:af:e7:65:84: cb:fb:69:27:3c:b8:94:2e:90:01:c4:3c:4f:c1:63: 83:a3:41:04:c9:cd:60:bd:da:9b:02:7d:bb:79:0b: af:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:2A:D8:2A:CE:FD:64:7A:6A:5C:03:38:50:26:47:AA:31:96:97:6B X509v3 Authority Key Identifier: keyid:0E:F4:7D:75:3D:25:28:9F:D9:87:94:97:4A:A0:53:60:10:56:7B:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:bd:bf:32:de:b9:2b:67:ba:6d:ba:3b:3e:91:98:5c:8f:98: d3:43:73:6e:66:f1:70:b8:02:8c:7c:8a:0b:a5:66:10:53:19: bd:fe:ba:59:8d:c7:ee:d9:4a:e0:29:d4:07:6d:65:fe:e0:31: f6:e6:79:0b:69:32:92:4e:be:cc:b5:07:12:f7:df:e4:45:1e: 98:c3:99:c0:93:c0:eb:68:82:bc:5f:93:0d:30:77:f2:b1:47: ec:1b:75:fa:06:92:8c:d0:93:6f:49:fd:5a:01:e5:e0:c4:1f: a8:b5:1e:37:f2:58:9f:c5:bc:f3:8c:0f:5d:04:ef:c6:db:6c: f6:9d:4e:fc:17:05:70:ea:0f:e0:63:8c:ea:e4:d0:09:32:14: b2:45:40:69:77:8e:20:27:f0:f5:be:70:ed:93:00:44:76:34: 48:fb:0a:1f:fe:2a:0a:23:7c:c9:5a:08:b2:ee:11:66:11:b0: d8:95:b0:1b:e8:ac:53:9a:e5:21:36:17:b2:76:b9:ef:29:27: 73:ef:b6:d6:c6:5c:f4:19:d4:2c:39:8e:6a:78:30:17:57:e4: 4c:be:c6:24:07:0e:97:c8:96:7e:bd:0f:70:df:88:51:79:d7: 55:b4:ab:a8:7c:b4:5b:8c:ac:68:c1:44:de:a0:9e:e0:d1:a0: ff:20:db:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs42BoHxZ2ub2tfE3BE3cX4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlZjQ3ZDc1M2QyNTI4OWZkOTg3OTQ5NzRhYTA1MzYwMTA1 NjdiZDkwHhcNMjUxMjE5MjMwMDQ0WhcNMjUxMjIwMjMwMDQ0WjAzMTEwLwYDVQQD EygyMjJhZDgyYWNlZmQ2NDdhNmE1YzAzMzg1MDI2NDdhYTMxOTY5NzZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OF7+JVh+oVp5vLzRDpr19cMbMd9 xwipoFoGC0LydFsJJV0fdEzLH9asUESRkk6dWr7P5d83lhUkXWnoWxd7Do91pUZm 3+rwzjCM3L8xUtG/a9QkpqBxtxsH039uJAVOMzzZas+sFt+gKziCtT59sGjyyf4N E6yvDDGL85PJjBcEU1S/6KwDDW1x5r+icDNBrMnC5tLROl+7JAy5Fzn9Tb6/mG5D Mtiuh0ohL+hhehqitLfuhUkddOxXGmhnOG+3hCQg4b1EAzXW0V2u1NQb5hH3eJzY 6V7Qb003F6/nZYTL+2knPLiULpABxDxPwWODo0EEyc1gvdqbAn27eQuvMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCIq2CrO/WR6alwDOFAmR6oxlpdrMB8GA1UdIwQY MBaAFA70fXU9JSif2YeUl0qgU2AQVnvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHZSOWRUMGxLSl9aaDVTWFNxQlRZQkJXZTlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9kZDhiYzUtODZlZi00MTM1LWJmMWYt YTRjOGQ5ODk1YTQzLzEvRHZSOWRUMGxLSl9aaDVTWFNxQlRZQkJXZTlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9kZDhiYzUtODZlZi00MTM1LWJmMWYtYTRjOGQ5ODk1YTQz LzEvRHZSOWRUMGxLSl9aaDVTWFNxQlRZQkJXZTlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxr2/Mt65 K2e6bbo7PpGYXI+Y00NzbmbxcLgCjHyKC6VmEFMZvf66WY3H7tlK4CnUB21l/uAx 9uZ5C2kykk6+zLUHEvff5EUemMOZwJPA62iCvF+TDTB38rFH7Bt1+gaSjNCTb0n9 WgHl4MQfqLUeN/JYn8W884wPXQTvxtts9p1O/BcFcOoP4GOM6uTQCTIUskVAaXeO ICfw9b5w7ZMARHY0SPsKH/4qCiN8yVoIsu4RZhGw2JWwG+isU5rlITYXsna57ykn c++21sZc9BnULDmOangwF1fkTL7GJAcOl8iWfr0PcN+IUXnXVbSrqHy0W4ysaMFE 3qCe4NGg/yDbqQ== -----END CERTIFICATE-----Generated at Sat Dec 20 04:23:36 2025 by rpki-client