This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft File: DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft (raw, json) Hash identifier: QuRX6xI192w2E8Jl62o3r9MJX5E2cnFVEpLDs3+//1c= Subject key identifier: 06:9A:C3:D9:E8:6F:62:D7:A2:0B:A1:59:38:6F:DD:DC:EA:36:E4:CD Authority key identifier: 0C:5E:87:0D:31:CA:70:19:95:13:70:CB:22:1F:18:F1:F0:9F:A5:8A Certificate issuer: /CN=0c5e870d31ca7019951370cb221f18f1f09fa58a Certificate serial: 019B3F7F76FC1758777C71FD74F20C3CA71A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 06:01:16 +0000 Manifest this update: Sun 21 Dec 2025 06:01:16 +0000 Manifest next update: Mon 22 Dec 2025 06:01:16 +0000 Files and hashes: 1: DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl (hash: aen6nUtozyuH+VY22YJO4ouh51ZAlzgFiWU/wdYDfLk=) 2: ej_BjAFbZm6hQCW3kEzJ6VoPdPc.roa (hash: U8mMSnb2Uo3FLs8ZgRPpDiQ27ni+P67f58AC/CHMeBI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 06:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7f:76:fc:17:58:77:7c:71:fd:74:f2:0c:3c:a7:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c5e870d31ca7019951370cb221f18f1f09fa58a Validity Not Before: Dec 21 06:01:16 2025 GMT Not After : Dec 22 06:01:16 2025 GMT Subject: CN=069ac3d9e86f62d7a20ba159386fdddcea36e4cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:92:a3:0d:15:31:e2:ff:3b:f8:e4:e2:d8:79: 94:18:3a:15:bb:e6:7c:b4:b2:6c:b3:22:7b:ce:c4: 62:65:0d:fd:cc:3e:51:b8:4e:48:a8:0a:8e:63:8a: 31:f2:a4:a1:33:ba:46:eb:59:4b:a3:6d:c8:3b:e1: db:9c:08:44:f1:62:51:7e:39:83:f4:20:0d:47:40: 91:4e:ee:f3:65:4b:cb:9f:2e:e4:2d:29:d2:65:9e: 96:c2:90:0e:53:e7:a3:14:f6:f7:f6:94:ad:b3:2d: f7:03:6f:11:28:7e:d8:64:74:14:05:80:23:0b:ff: 44:2f:99:51:f4:1f:1a:4f:ca:9f:e0:82:7d:f1:95: df:53:19:95:83:b2:10:d8:58:99:4d:4e:a9:0b:2c: 76:7e:86:2c:d1:e6:62:ae:ee:5d:ed:d5:b0:e5:da: 87:f9:2c:08:c6:f9:8a:33:0c:88:51:c0:f0:eb:c3: e4:59:f9:be:e9:8f:df:ac:54:f1:6d:17:0a:3a:52: 8a:12:59:34:b4:ab:b4:3f:ee:15:c4:29:d9:7d:78: fd:d6:7f:66:91:ce:01:5d:94:7b:09:bb:c9:4a:a9: 36:3a:12:a9:c7:45:48:69:ff:cd:c6:b7:7d:dc:dd: 33:f0:78:be:b4:26:f2:8d:4e:30:25:48:22:4f:83: 5a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:9A:C3:D9:E8:6F:62:D7:A2:0B:A1:59:38:6F:DD:DC:EA:36:E4:CD X509v3 Authority Key Identifier: keyid:0C:5E:87:0D:31:CA:70:19:95:13:70:CB:22:1F:18:F1:F0:9F:A5:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2cc283-9357-4c95-84d4-35cf770dc8b9/1/DF6HDTHKcBmVE3DLIh8Y8fCfpYo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:83:3b:01:db:f9:07:8e:46:03:ce:6c:61:cb:99:0f:da:23: 4a:ca:77:92:60:e6:87:f0:36:1e:e6:a3:76:93:de:62:9b:6d: 9a:c4:72:75:c9:55:fc:b6:fb:f8:e1:ba:03:c3:8f:5f:00:36: 2e:b6:2e:9c:c3:0c:59:89:1d:33:36:73:af:fd:66:ce:3e:8d: b8:b1:92:e0:6e:f2:88:78:a5:b0:e4:56:cb:3b:52:8e:89:4d: 47:9d:0b:01:4d:cd:0c:72:73:ac:a6:cb:30:0a:28:ed:7f:60: f3:73:b3:f2:7b:77:93:42:41:fb:a8:95:6d:11:d3:90:8c:9f: 00:01:44:b1:86:f9:2e:da:f7:bd:a8:27:3f:5a:a8:37:44:d1: a5:df:7a:29:79:54:0c:b4:b3:23:ac:03:76:4f:11:49:29:d1: 72:46:33:a1:8e:a6:42:d2:fb:f0:5a:e1:5b:14:be:8f:d7:bc: 56:d5:01:49:74:70:5c:fc:24:db:11:61:03:64:33:e9:f3:f7: 15:e9:6a:11:5b:17:92:d8:2e:7c:e4:d3:a4:c3:23:33:8e:6e: 61:31:c3:45:74:cd:50:7a:1a:9c:0e:7c:54:df:71:55:49:95: aa:fc:18:b7:8a:19:af:af:ef:47:ce:1e:30:52:70:e9:6a:98: ac:1c:6d:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/f3b8F1h3fHH9dPIMPKcaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNWU4NzBkMzFjYTcwMTk5NTEzNzBjYjIyMWYxOGYxZjA5 ZmE1OGEwHhcNMjUxMjIxMDYwMTE2WhcNMjUxMjIyMDYwMTE2WjAzMTEwLwYDVQQD EygwNjlhYzNkOWU4NmY2MmQ3YTIwYmExNTkzODZmZGRkY2VhMzZlNGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5KjDRUx4v87+OTi2HmUGDoVu+Z8 tLJssyJ7zsRiZQ39zD5RuE5IqAqOY4ox8qShM7pG61lLo23IO+HbnAhE8WJRfjmD 9CANR0CRTu7zZUvLny7kLSnSZZ6WwpAOU+ejFPb39pStsy33A28RKH7YZHQUBYAj C/9EL5lR9B8aT8qf4IJ98ZXfUxmVg7IQ2FiZTU6pCyx2foYs0eZiru5d7dWw5dqH +SwIxvmKMwyIUcDw68PkWfm+6Y/frFTxbRcKOlKKElk0tKu0P+4VxCnZfXj91n9m kc4BXZR7CbvJSqk2OhKpx0VIaf/Nxrd93N0z8Hi+tCbyjU4wJUgiT4Na6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAaaw9nob2LXoguhWThv3dzqNuTNMB8GA1UdIwQY MBaAFAxehw0xynAZlRNwyyIfGPHwn6WKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREY2SERUSEtjQm1WRTNETEloOFk4ZkNmcFlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8yY2MyODMtOTM1Ny00Yzk1LTg0ZDQt MzVjZjc3MGRjOGI5LzEvREY2SERUSEtjQm1WRTNETEloOFk4ZkNmcFlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS8yY2MyODMtOTM1Ny00Yzk1LTg0ZDQtMzVjZjc3MGRjOGI5 LzEvREY2SERUSEtjQm1WRTNETEloOFk4ZkNmcFlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhIM7Adv5 B45GA85sYcuZD9ojSsp3kmDmh/A2HuajdpPeYpttmsRydclV/Lb7+OG6A8OPXwA2 LrYunMMMWYkdMzZzr/1mzj6NuLGS4G7yiHilsORWyztSjolNR50LAU3NDHJzrKbL MAoo7X9g83Oz8nt3k0JB+6iVbRHTkIyfAAFEsYb5Ltr3vagnP1qoN0TRpd96KXlU DLSzI6wDdk8RSSnRckYzoY6mQtL78FrhWxS+j9e8VtUBSXRwXPwk2xFhA2Qz6fP3 FelqEVsXktgufOTTpMMjM45uYTHDRXTNUHoanA58VN9xVUmVqvwYt4oZr6/vR84e MFJw6WqYrBxtVw== -----END CERTIFICATE-----Generated at Sun Dec 21 14:39:23 2025 by rpki-client