This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft File: Df5SSMH7abOKMYjflHLozbyFwZM.mft (raw, json) Hash identifier: qYUIPulV0KvQjq/pEWNbHiRKGP2SppcSIyM/AW/KaVc= Subject key identifier: C0:CE:ED:5E:7D:17:B8:AB:8A:93:2B:6A:79:07:4D:94:AB:F3:D3:7D Authority key identifier: 0D:FE:52:48:C1:FB:69:B3:8A:31:88:DF:94:72:E8:CD:BC:85:C1:93 Certificate issuer: /CN=0dfe5248c1fb69b38a3188df9472e8cdbc85c193 Certificate serial: 019B3DFED3B601E63D2AFF89F34785359124 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Df5SSMH7abOKMYjflHLozbyFwZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft Manifest number: 0668 Signing time: Sat 20 Dec 2025 23:01:09 +0000 Manifest this update: Sat 20 Dec 2025 23:01:09 +0000 Manifest next update: Sun 21 Dec 2025 23:01:09 +0000 Files and hashes: 1: Df5SSMH7abOKMYjflHLozbyFwZM.crl (hash: FgLwyuDxBrvJZxV90GSH7NSnmG5Nk6qChNp75NnQNtU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.crl rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft rsync://rpki.ripe.net/repository/DEFAULT/Df5SSMH7abOKMYjflHLozbyFwZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:d3:b6:01:e6:3d:2a:ff:89:f3:47:85:35:91:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe5248c1fb69b38a3188df9472e8cdbc85c193 Validity Not Before: Dec 20 23:01:09 2025 GMT Not After : Dec 21 23:01:09 2025 GMT Subject: CN=c0ceed5e7d17b8ab8a932b6a79074d94abf3d37d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:cd:cb:fd:76:f6:65:49:45:82:39:b5:20:ca: 23:71:70:f2:21:77:58:26:d5:42:fc:d6:94:0d:b3: ba:db:52:73:da:12:ad:27:47:53:fe:68:b5:fd:e2: 49:d9:d5:ea:0a:3b:55:4a:2d:2d:2d:49:38:47:3a: 61:08:03:22:ed:77:e5:6b:51:e1:db:16:f3:a5:51: 9b:a8:78:42:94:23:d2:06:4e:30:c4:67:c2:5b:7f: 81:0a:ab:13:56:83:16:70:5d:98:7a:e2:30:17:d3: 92:5f:88:c4:01:b0:f8:4c:66:ce:18:8b:30:b4:f1: cf:0f:0e:04:5d:c5:76:ab:23:4b:4a:ea:b7:5d:78: 50:77:43:6c:d1:74:48:1b:ec:0b:fa:b6:62:6b:24: f2:2c:cf:0e:77:69:ae:ad:58:a5:73:35:66:10:0e: 42:46:f2:f2:f3:95:7a:53:68:af:d3:29:05:2b:b7: 75:1f:93:f5:de:66:03:a3:f0:7c:0a:3b:cb:ab:0e: e9:1b:31:2a:43:5f:c0:03:fd:dc:32:02:14:be:7b: a9:b8:73:49:f7:12:4f:f7:f5:b8:0e:94:43:12:d1: 99:63:97:82:d9:08:83:69:6a:8a:ae:42:34:1e:28: 36:7c:9c:56:64:29:e6:db:19:0e:fd:b2:34:25:0d: bd:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:CE:ED:5E:7D:17:B8:AB:8A:93:2B:6A:79:07:4D:94:AB:F3:D3:7D X509v3 Authority Key Identifier: keyid:0D:FE:52:48:C1:FB:69:B3:8A:31:88:DF:94:72:E8:CD:BC:85:C1:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Df5SSMH7abOKMYjflHLozbyFwZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:df:a8:23:4e:96:78:14:51:4c:0b:07:41:ce:20:59:35:f2: 17:11:7d:e2:9a:84:af:d8:a3:50:ae:8d:3a:2d:12:1c:64:1c: b5:ec:9d:94:63:04:7a:6e:ad:ef:2b:17:15:55:84:1d:d5:b9: a8:09:1f:1d:3d:f2:b5:d9:9d:e8:70:bc:e6:f1:6a:84:49:94: 18:b1:2d:50:65:2d:50:d4:b7:0e:56:08:dd:b8:72:a6:cd:a3: b6:7f:42:23:a9:a8:43:0b:97:5e:eb:a7:d6:ba:2b:78:e8:3e: 37:e2:ba:9a:18:ea:38:cc:db:2d:1c:82:df:b3:54:1b:5c:9f: e0:bd:86:0f:76:cf:87:47:ec:3f:df:08:d5:d6:46:36:7f:b0: df:fc:20:f2:e6:48:2f:00:02:69:63:a0:b9:0b:ae:ff:dd:c6: af:14:db:8f:30:15:a8:29:cd:ca:db:4a:5b:1a:80:84:e5:e6: ce:12:32:f0:0a:0c:9d:96:6c:8b:f2:f1:be:f1:cc:0c:b7:f3: 16:0f:92:89:0b:29:27:12:c4:5c:e6:23:d8:b5:2c:9a:42:e0: 44:3b:eb:66:41:91:ff:bf:5c:4a:65:d7:1d:84:29:69:27:ac: c2:ce:ba:d2:fe:02:e7:a1:fa:a4:8a:c4:06:5c:92:9d:06:88: 87:69:9b:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/tO2AeY9Kv+J80eFNZEkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZmU1MjQ4YzFmYjY5YjM4YTMxODhkZjk0NzJlOGNkYmM4 NWMxOTMwHhcNMjUxMjIwMjMwMTA5WhcNMjUxMjIxMjMwMTA5WjAzMTEwLwYDVQQD EyhjMGNlZWQ1ZTdkMTdiOGFiOGE5MzJiNmE3OTA3NGQ5NGFiZjNkMzdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3s3L/Xb2ZUlFgjm1IMojcXDyIXdY JtVC/NaUDbO621Jz2hKtJ0dT/mi1/eJJ2dXqCjtVSi0tLUk4RzphCAMi7Xfla1Hh 2xbzpVGbqHhClCPSBk4wxGfCW3+BCqsTVoMWcF2YeuIwF9OSX4jEAbD4TGbOGIsw tPHPDw4EXcV2qyNLSuq3XXhQd0Ns0XRIG+wL+rZiayTyLM8Od2murVilczVmEA5C RvLy85V6U2iv0ykFK7d1H5P13mYDo/B8CjvLqw7pGzEqQ1/AA/3cMgIUvnupuHNJ 9xJP9/W4DpRDEtGZY5eC2QiDaWqKrkI0Hig2fJxWZCnm2xkO/bI0JQ29nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMDO7V59F7iripMrankHTZSr89N9MB8GA1UdIwQY MBaAFA3+UkjB+2mzijGI35Ry6M28hcGTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGY1U1NNSDdhYk9LTVlqZmxITG96YnlGd1pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82YTc1Y2UtM2MxNi00MzAwLWEzMzIt NTQ4ZDA4NWI0NTVkLzEvRGY1U1NNSDdhYk9LTVlqZmxITG96YnlGd1pNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS82YTc1Y2UtM2MxNi00MzAwLWEzMzItNTQ4ZDA4NWI0NTVk LzEvRGY1U1NNSDdhYk9LTVlqZmxITG96YnlGd1pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABd+oI06W eBRRTAsHQc4gWTXyFxF94pqEr9ijUK6NOi0SHGQcteydlGMEem6t7ysXFVWEHdW5 qAkfHT3ytdmd6HC85vFqhEmUGLEtUGUtUNS3DlYI3bhyps2jtn9CI6moQwuXXuun 1roreOg+N+K6mhjqOMzbLRyC37NUG1yf4L2GD3bPh0fsP98I1dZGNn+w3/wg8uZI LwACaWOguQuu/93GrxTbjzAVqCnNyttKWxqAhOXmzhIy8AoMnZZsi/LxvvHMDLfz Fg+SiQspJxLEXOYj2LUsmkLgRDvrZkGR/79cSmXXHYQpaSesws660v4C56H6pIrE BlySnQaIh2mbEw== -----END CERTIFICATE-----Generated at Sun Dec 21 02:59:13 2025 by rpki-client