This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft File: DO-ss3RB3RkYO9HLV9te5VR3p6c.mft (raw, json) Hash identifier: MxqBwaY8rQ3+8G+oWxuNG4Tna5Ta5doNUhrphSDlL4w= Subject key identifier: 4B:F4:A5:88:33:89:A8:78:F2:A7:6A:B9:32:A8:7C:B4:8F:1E:B3:BF Authority key identifier: 0C:EF:AC:B3:74:41:DD:19:18:3B:D1:CB:57:DB:5E:E5:54:77:A7:A7 Certificate issuer: /CN=0cefacb37441dd19183bd1cb57db5ee55477a7a7 Certificate serial: 019B4A39DA639B3D4B80E05FB933A8F44182 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft Manifest number: 0B4E Signing time: Tue 23 Dec 2025 08:01:03 +0000 Manifest this update: Tue 23 Dec 2025 08:01:03 +0000 Manifest next update: Wed 24 Dec 2025 08:01:03 +0000 Files and hashes: 1: DO-ss3RB3RkYO9HLV9te5VR3p6c.crl (hash: CLmi/3pU8dwRti9uHZ1uGsIbRtcXbhSLxxQjTDLoOuE=) 2: O7YDGlReH1x3D0s7Ygr1Vy16MbI.roa (hash: WAs5UezYMvac542kW/ZhIkgbBXd8gscxgdqz/AR6xPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:39:da:63:9b:3d:4b:80:e0:5f:b9:33:a8:f4:41:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cefacb37441dd19183bd1cb57db5ee55477a7a7 Validity Not Before: Dec 23 08:01:03 2025 GMT Not After : Dec 24 08:01:03 2025 GMT Subject: CN=4bf4a5883389a878f2a76ab932a87cb48f1eb3bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:49:0e:b3:78:7c:35:9e:98:9f:e5:bc:99:54: b1:83:ab:c2:0b:38:bf:1b:08:18:8d:93:1b:29:06: 5c:e2:77:28:03:fa:d9:01:6f:ce:2a:b1:fc:15:25: 53:17:88:3d:cf:38:bb:c3:61:ca:6e:0c:75:f9:73: b9:df:ba:da:40:29:1a:bd:10:dc:9d:3d:22:c5:d3: d7:5c:20:4b:f1:c5:12:0f:14:df:49:d4:11:51:df: 53:75:ef:d0:fa:0c:b6:26:dc:f7:c6:e1:03:1f:1e: 30:21:a6:ec:f9:a5:2b:ae:fe:87:22:57:cd:bc:65: 4e:3c:74:3a:11:57:dc:c8:b3:bd:5f:bc:cf:1e:8f: f8:17:4f:10:7c:39:83:9f:db:57:a3:dd:9b:65:a9: 9b:d2:fa:72:d5:91:87:23:b4:55:07:96:02:5e:08: 68:21:ed:85:40:f4:e8:06:d4:14:25:ca:a9:96:c1: c9:1e:b4:2a:a9:c8:dc:aa:9c:b8:f6:9b:3f:40:34: 7c:cc:78:ee:d3:f8:ff:83:b8:3b:fc:f3:fd:81:91: c1:f2:55:a4:c1:d7:3a:77:44:54:85:14:c5:ca:4f: e7:b3:57:97:0a:03:55:75:2f:ef:23:a2:79:0b:59: 90:c8:8f:59:87:12:78:7e:70:e1:0e:fc:9b:27:36: 0a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:F4:A5:88:33:89:A8:78:F2:A7:6A:B9:32:A8:7C:B4:8F:1E:B3:BF X509v3 Authority Key Identifier: keyid:0C:EF:AC:B3:74:41:DD:19:18:3B:D1:CB:57:DB:5E:E5:54:77:A7:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:e6:ce:10:9a:2e:d2:56:15:cc:45:87:cd:15:36:ba:10:22: 93:29:73:31:38:e6:f3:0f:5c:42:28:3a:81:93:52:ce:eb:eb: d3:d9:67:f1:28:eb:91:0e:5a:22:53:15:8b:83:e3:f3:09:6f: c4:eb:3a:0d:a6:b5:5e:94:7f:09:64:03:00:f9:7b:d6:1f:26: b7:80:ee:67:79:cc:d8:0b:d9:60:ce:c1:ef:c9:7a:56:d5:39: e2:52:a3:8b:df:e4:37:ef:aa:0e:d6:82:05:87:36:e7:e8:67: 14:b8:b6:27:19:c8:2b:76:62:86:d0:43:47:20:6b:47:90:87: 08:4d:29:c1:8f:47:f7:19:6b:6e:5a:ac:8a:f8:a6:ea:60:95: 89:c3:4c:c1:15:c2:8f:85:91:a0:b2:af:28:cd:16:4a:5b:e1: ff:cf:c2:7e:33:78:65:99:8f:c0:5f:01:4c:00:48:06:0f:a6: 9a:c6:49:a7:79:d7:cb:df:64:b5:90:f8:09:e6:d5:bf:9b:07: 0a:38:39:61:e3:30:25:bd:68:dd:c3:53:8b:0c:87:54:dd:71: 02:0d:7a:ed:58:b6:47:95:dd:cb:aa:29:50:b6:63:ee:f1:64: b5:53:14:53:60:14:08:bd:c5:3a:97:85:94:be:02:3f:57:96: 8c:39:33:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKOdpjmz1LgOBfuTOo9EGCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZWZhY2IzNzQ0MWRkMTkxODNiZDFjYjU3ZGI1ZWU1NTQ3 N2E3YTcwHhcNMjUxMjIzMDgwMTAzWhcNMjUxMjI0MDgwMTAzWjAzMTEwLwYDVQQD Eyg0YmY0YTU4ODMzODlhODc4ZjJhNzZhYjkzMmE4N2NiNDhmMWViM2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEkOs3h8NZ6Yn+W8mVSxg6vCCzi/ GwgYjZMbKQZc4ncoA/rZAW/OKrH8FSVTF4g9zzi7w2HKbgx1+XO537raQCkavRDc nT0ixdPXXCBL8cUSDxTfSdQRUd9Tde/Q+gy2Jtz3xuEDHx4wIabs+aUrrv6HIlfN vGVOPHQ6EVfcyLO9X7zPHo/4F08QfDmDn9tXo92bZamb0vpy1ZGHI7RVB5YCXgho Ie2FQPToBtQUJcqplsHJHrQqqcjcqpy49ps/QDR8zHju0/j/g7g7/PP9gZHB8lWk wdc6d0RUhRTFyk/ns1eXCgNVdS/vI6J5C1mQyI9ZhxJ4fnDhDvybJzYKeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEv0pYgziah48qdquTKofLSPHrO/MB8GA1UdIwQY MBaAFAzvrLN0Qd0ZGDvRy1fbXuVUd6enMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE8tc3MzUkIzUmtZTzlITFY5dGU1VlIzcDZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82M2RhOGEtZGU2Zi00YjEyLWE4NjQt ZTNkZDUyNzk5YmRhLzEvRE8tc3MzUkIzUmtZTzlITFY5dGU1VlIzcDZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82M2RhOGEtZGU2Zi00YjEyLWE4NjQtZTNkZDUyNzk5YmRh LzEvRE8tc3MzUkIzUmtZTzlITFY5dGU1VlIzcDZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGObOEJou 0lYVzEWHzRU2uhAikylzMTjm8w9cQig6gZNSzuvr09ln8SjrkQ5aIlMVi4Pj8wlv xOs6Daa1XpR/CWQDAPl71h8mt4DuZ3nM2AvZYM7B78l6VtU54lKji9/kN++qDtaC BYc25+hnFLi2JxnIK3ZihtBDRyBrR5CHCE0pwY9H9xlrblqsivim6mCVicNMwRXC j4WRoLKvKM0WSlvh/8/CfjN4ZZmPwF8BTABIBg+mmsZJp3nXy99ktZD4CebVv5sH Cjg5YeMwJb1o3cNTiwyHVN1xAg167Vi2R5Xdy6opULZj7vFktVMUU2AUCL3FOpeF lL4CP1eWjDkzxg== -----END CERTIFICATE-----Generated at Tue Dec 23 09:03:24 2025 by rpki-client