This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft File: DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft (raw, json) Hash identifier: 0MVIjbNwDcOTN8pIttegQ+XdSy2qYk8NxhFvsuQGRXQ= Subject key identifier: CE:C9:20:F4:A4:85:85:3F:89:F1:0D:30:71:E3:F3:1B:E9:BF:5A:DA Authority key identifier: 0C:5E:87:0D:31:CA:70:19:95:13:70:CB:22:1F:18:F1:F0:9F:A5:8A Certificate issuer: /CN=0c5e870d31ca7019951370cb221f18f1f09fa58a Certificate serial: 019B5C772953D031792FABFE59365B3446CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft Manifest number: 1799 Signing time: Fri 26 Dec 2025 21:01:11 +0000 Manifest this update: Fri 26 Dec 2025 21:01:11 +0000 Manifest next update: Sat 27 Dec 2025 21:01:11 +0000 Files and hashes: 1: DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl (hash: i+13ebTWbzYmI6N58oFiqkY3/jMJ3QbLkb4odr/4Kv8=) 2: ej_BjAFbZm6hQCW3kEzJ6VoPdPc.roa (hash: U8mMSnb2Uo3FLs8ZgRPpDiQ27ni+P67f58AC/CHMeBI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:77:29:53:d0:31:79:2f:ab:fe:59:36:5b:34:46:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c5e870d31ca7019951370cb221f18f1f09fa58a Validity Not Before: Dec 26 21:01:11 2025 GMT Not After : Dec 27 21:01:11 2025 GMT Subject: CN=cec920f4a485853f89f10d3071e3f31be9bf5ada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:6d:be:76:c9:b2:c6:0a:bf:c9:16:01:3c:cf: 01:d6:04:8e:93:62:cd:de:e5:17:90:d5:fd:47:93: f0:64:9d:3b:d5:cc:fa:2f:37:27:e6:0b:64:4a:05: 84:85:ab:22:08:14:ef:3d:df:1a:98:af:d5:6d:5c: dd:ec:e2:21:28:08:f2:15:32:d0:19:a3:a7:21:11: a4:59:c5:fd:a4:fd:25:92:77:41:9f:d1:52:22:d9: 19:e6:6e:b3:27:4b:10:57:c8:d3:4a:59:c3:20:f6: a3:d2:0c:67:5c:db:3d:a1:2b:da:ad:46:ca:84:e2: be:10:ff:32:4f:15:2c:3e:51:fe:a3:b7:02:13:27: a3:12:da:ce:5e:a4:eb:97:fe:ad:af:a4:1c:f3:b8: e9:05:5f:8a:d5:5a:d0:38:4e:11:8c:26:f6:64:6d: fc:9b:15:f1:dd:2c:b8:3f:37:77:ab:a9:27:d7:21: bd:b7:90:6e:b7:aa:c9:be:0d:02:28:e5:73:f8:ca: dd:e5:4b:74:69:21:14:74:8b:c1:f4:e2:7b:12:2c: 36:eb:8d:52:99:43:63:5e:02:ae:65:71:be:e7:af: 55:1a:97:aa:11:bf:d2:ea:12:2e:b7:ec:4d:ad:e5: 50:ff:9d:9c:cb:68:73:35:81:53:28:a4:ea:f9:b0: 9d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:C9:20:F4:A4:85:85:3F:89:F1:0D:30:71:E3:F3:1B:E9:BF:5A:DA X509v3 Authority Key Identifier: keyid:0C:5E:87:0D:31:CA:70:19:95:13:70:CB:22:1F:18:F1:F0:9F:A5:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:53:25:cb:6b:e5:5f:c9:4e:3f:61:a6:21:98:a3:62:4d:1f: 73:6c:e7:92:61:9e:a8:1c:ab:b1:b6:61:11:99:42:b2:e4:b0: 2e:7f:f6:46:95:e9:26:5a:58:5f:39:6f:b7:d4:32:11:a8:34: 18:3d:0d:63:ce:d5:13:49:67:85:06:b0:1a:55:28:f5:e6:d9: 75:87:63:07:f1:3b:49:5b:5a:12:53:25:06:38:08:9d:a6:7f: 83:87:0b:b9:fe:15:1c:91:3d:7e:cd:97:36:10:1d:4e:1c:4d: a9:5d:fb:77:78:fd:28:c9:ec:ab:f3:55:46:40:a7:90:4f:d9: e7:16:58:cc:8b:90:00:ce:09:5e:ab:a2:66:3d:9d:d6:ed:18: 7f:bc:6e:d4:29:e4:9c:44:36:fa:87:a5:79:a3:1e:cf:cf:56: 46:eb:e6:eb:e9:66:5e:5a:75:23:2e:6c:b6:58:9c:4b:17:11: e4:75:ad:53:dc:32:63:65:73:c0:78:04:0f:36:ff:9a:ee:7a: ac:13:2d:c5:f3:0c:91:65:f2:ec:b8:b3:3e:e0:7c:34:59:53: be:29:56:fb:cf:9d:92:15:24:53:0d:7f:72:89:da:17:b4:0b: 23:c9:87:fd:75:e1:b2:28:de:3d:a3:66:7a:f2:f5:59:fe:df: c0:af:9a:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcdylT0DF5L6v+WTZbNEbPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNWU4NzBkMzFjYTcwMTk5NTEzNzBjYjIyMWYxOGYxZjA5 ZmE1OGEwHhcNMjUxMjI2MjEwMTExWhcNMjUxMjI3MjEwMTExWjAzMTEwLwYDVQQD EyhjZWM5MjBmNGE0ODU4NTNmODlmMTBkMzA3MWUzZjMxYmU5YmY1YWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA222+dsmyxgq/yRYBPM8B1gSOk2LN 3uUXkNX9R5PwZJ071cz6Lzcn5gtkSgWEhasiCBTvPd8amK/VbVzd7OIhKAjyFTLQ GaOnIRGkWcX9pP0lkndBn9FSItkZ5m6zJ0sQV8jTSlnDIPaj0gxnXNs9oSvarUbK hOK+EP8yTxUsPlH+o7cCEyejEtrOXqTrl/6tr6Qc87jpBV+K1VrQOE4RjCb2ZG38 mxXx3Sy4Pzd3q6kn1yG9t5But6rJvg0CKOVz+Mrd5Ut0aSEUdIvB9OJ7Eiw2641S mUNjXgKuZXG+569VGpeqEb/S6hIut+xNreVQ/52cy2hzNYFTKKTq+bCdHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM7JIPSkhYU/ifENMHHj8xvpv1raMB8GA1UdIwQY MBaAFAxehw0xynAZlRNwyyIfGPHwn6WKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREY2SERUSEtjQm1WRTNETEloOFk4ZkNmcFlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8yY2MyODMtOTM1Ny00Yzk1LTg0ZDQt MzVjZjc3MGRjOGI5LzEvREY2SERUSEtjQm1WRTNETEloOFk4ZkNmcFlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS8yY2MyODMtOTM1Ny00Yzk1LTg0ZDQtMzVjZjc3MGRjOGI5 LzEvREY2SERUSEtjQm1WRTNETEloOFk4ZkNmcFlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiFMly2vl X8lOP2GmIZijYk0fc2znkmGeqByrsbZhEZlCsuSwLn/2RpXpJlpYXzlvt9QyEag0 GD0NY87VE0lnhQawGlUo9ebZdYdjB/E7SVtaElMlBjgInaZ/g4cLuf4VHJE9fs2X NhAdThxNqV37d3j9KMnsq/NVRkCnkE/Z5xZYzIuQAM4JXquiZj2d1u0Yf7xu1Cnk nEQ2+oeleaMez89WRuvm6+lmXlp1Iy5stlicSxcR5HWtU9wyY2VzwHgEDzb/mu56 rBMtxfMMkWXy7LizPuB8NFlTvilW+8+dkhUkUw1/conaF7QLI8mH/XXhsijePaNm evL1Wf7fwK+aZw== -----END CERTIFICATE-----Generated at Sat Dec 27 00:57:46 2025 by rpki-client