This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft File: DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft (raw, json) Hash identifier: d2YZjkSt6DaA03r8ploWyN0A4MaPRNwlqm+pDhQTRE0= Subject key identifier: 06:A7:40:85:91:8E:A2:66:F0:07:C7:38:B9:18:54:89:F4:1B:00:03 Authority key identifier: 0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C Certificate issuer: /CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c Certificate serial: 019B34C45D5CF28A9BFA7712D0237D617AE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 04:00:42 +0000 Manifest this update: Fri 19 Dec 2025 04:00:42 +0000 Manifest next update: Sat 20 Dec 2025 04:00:42 +0000 Files and hashes: 1: DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl (hash: 0isPk3efBsW49sEHX+yFK0EMlIXvHvlX3Uk8zsrri+U=) 2: KX71aYDc7COcBvGYMtW_I8jVEro.roa (hash: m4mYzz0InD89bmwaO+N//OYVwFvsqF8sbCWbylUSfpU=) 3: VLH2ggfYLmRlUNQmOTDaXEZemRU.roa (hash: r81ADMKeWWOVhBZY/dzL8YFhvpB6T7KTTWyAmAeGrA4=) 4: Z31e2uZ4ZUo0ifh9SmP5d6rs9YA.roa (hash: 99LlYSdIOpp68PEiIS1MO6ONGzvLDbJLydlaJmSyBos=) 5: dpvfrInTYFYCDpSNy4nBJ7fMOBk.roa (hash: MFcK6MCir3IwgLRCLZLFYaFpQhejKg3ixDBCQgs5rTk=) 6: iY-7T8h9t9V2urHTmIgGwZIOHVQ.roa (hash: irtz9XTfXBHEHapv6cSGMQPMme8obAG5vt6M1vHm4qQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:5d:5c:f2:8a:9b:fa:77:12:d0:23:7d:61:7a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c Validity Not Before: Dec 19 04:00:42 2025 GMT Not After : Dec 20 04:00:42 2025 GMT Subject: CN=06a74085918ea266f007c738b9185489f41b0003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c9:91:28:24:42:50:80:a5:80:d8:25:d4:09: 54:2b:69:ca:fb:d2:26:53:54:1f:3c:61:e9:2e:3a: 36:70:3d:a0:bf:f4:0d:7f:24:7c:d1:d5:76:b0:bb: bc:96:6a:d8:65:5a:d2:b8:9b:78:93:19:11:03:91: 16:e5:f6:e5:17:78:80:38:1c:08:56:bb:a3:aa:3f: 8f:6e:65:61:33:62:77:2f:6b:1f:fd:48:32:33:0e: 22:19:92:2a:0f:2f:82:49:c1:9a:94:62:19:8a:29: 9f:9f:cb:2b:20:55:78:71:22:7f:8b:ab:72:19:f3: f1:4c:e0:92:63:95:53:d9:a7:a2:24:a6:d3:fc:89: cd:3a:f4:de:2a:b6:e6:de:b4:64:98:20:4e:d3:c3: 31:14:ca:24:c2:e3:92:8d:2c:ce:53:69:97:94:b8: 4b:27:a1:31:b1:c3:b7:84:de:bf:d8:20:82:d6:9b: 13:b5:7d:11:aa:fc:18:cc:ca:4c:1a:09:4e:da:ef: a2:b1:49:ab:92:fd:0e:3b:d7:c7:dd:af:a2:15:14: c1:5c:dc:23:df:67:3d:50:c0:3f:54:2a:93:77:6b: c1:bc:82:cd:cc:57:67:e9:af:64:be:97:60:92:e4: 5e:3c:df:88:a6:19:87:26:c4:1b:b9:17:f5:b6:45: dd:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:A7:40:85:91:8E:A2:66:F0:07:C7:38:B9:18:54:89:F4:1B:00:03 X509v3 Authority Key Identifier: keyid:0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:88:cf:50:80:0b:fc:b3:a3:4d:e2:a3:30:db:4e:e8:cd:68: d1:4d:4d:50:e6:bd:21:6b:c9:86:74:40:ff:3b:5a:fa:4e:78: c2:06:27:64:64:26:5b:c6:4f:5f:c1:83:3a:d3:81:43:71:22: 52:79:1c:46:e1:c9:73:4e:36:ee:0d:e3:cb:d2:d6:02:ad:9d: 87:b2:36:65:4d:68:5a:28:5b:57:94:9c:04:74:6d:be:66:d7: ec:dd:d9:49:37:04:ec:fd:7f:a4:e3:c6:f3:d5:61:39:c1:6b: 67:09:b8:dc:d2:f9:3e:c4:82:35:b2:8b:d0:be:ec:b9:f8:3f: 23:94:99:10:5c:94:23:36:ba:9c:da:cf:39:84:24:f4:58:4a: 7a:b5:84:7d:d9:30:7c:b2:4a:5f:e9:32:e8:f0:1b:9c:a2:b3: c0:7f:15:f8:e8:6e:7f:49:e9:c9:eb:92:ff:9c:40:3b:ea:c7: c6:9a:d6:ac:d1:47:78:9b:fb:b0:a3:8d:5f:15:b5:33:5e:cc: ac:00:bb:8d:5b:17:29:f8:23:16:a9:fd:9c:34:d3:96:1e:24: 68:3f:64:fe:83:7b:d2:59:c2:04:fe:89:98:79:ad:6b:76:81: 13:66:dc:2f:1a:8f:cb:08:6f:fa:06:ab:76:a0:d8:88:f7:7c: 68:0c:f6:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xF1c8oqb+ncS0CN9YXrgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMGIwZGNiNmFkMGNhODE2ZDJiZDIwNGUxM2YxZWFmMTEw NDI3NGMwHhcNMjUxMjE5MDQwMDQyWhcNMjUxMjIwMDQwMDQyWjAzMTEwLwYDVQQD EygwNmE3NDA4NTkxOGVhMjY2ZjAwN2M3MzhiOTE4NTQ4OWY0MWIwMDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsmRKCRCUIClgNgl1AlUK2nK+9Im U1QfPGHpLjo2cD2gv/QNfyR80dV2sLu8lmrYZVrSuJt4kxkRA5EW5fblF3iAOBwI Vrujqj+PbmVhM2J3L2sf/UgyMw4iGZIqDy+CScGalGIZiimfn8srIFV4cSJ/i6ty GfPxTOCSY5VT2aeiJKbT/InNOvTeKrbm3rRkmCBO08MxFMokwuOSjSzOU2mXlLhL J6ExscO3hN6/2CCC1psTtX0RqvwYzMpMGglO2u+isUmrkv0OO9fH3a+iFRTBXNwj 32c9UMA/VCqTd2vBvILNzFdn6a9kvpdgkuRePN+IphmHJsQbuRf1tkXddQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAanQIWRjqJm8AfHOLkYVIn0GwADMB8GA1UdIwQY MBaAFA4LDctq0MqBbSvSBOE/Hq8RBCdMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGdzTnkyclF5b0Z0SzlJRTRUOGVyeEVFSjB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9mMTlkMDYtYzdmYS00MGU1LWI4MTMt N2ZlMzk1MWE3MzViLzEvRGdzTnkyclF5b0Z0SzlJRTRUOGVyeEVFSjB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9mMTlkMDYtYzdmYS00MGU1LWI4MTMtN2ZlMzk1MWE3MzVi LzEvRGdzTnkyclF5b0Z0SzlJRTRUOGVyeEVFSjB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1ojPUIAL /LOjTeKjMNtO6M1o0U1NUOa9IWvJhnRA/zta+k54wgYnZGQmW8ZPX8GDOtOBQ3Ei UnkcRuHJc0427g3jy9LWAq2dh7I2ZU1oWihbV5ScBHRtvmbX7N3ZSTcE7P1/pOPG 89VhOcFrZwm43NL5PsSCNbKL0L7sufg/I5SZEFyUIza6nNrPOYQk9FhKerWEfdkw fLJKX+ky6PAbnKKzwH8V+Ohuf0npyeuS/5xAO+rHxprWrNFHeJv7sKONXxW1M17M rAC7jVsXKfgjFqn9nDTTlh4kaD9k/oN70lnCBP6JmHmta3aBE2bcLxqPywhv+gar dqDYiPd8aAz2oA== -----END CERTIFICATE-----Generated at Fri Dec 19 08:27:24 2025 by rpki-client