This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft File: DJvBsU8NllP1FOwWd3G3dVmsY8w.mft (raw, json) Hash identifier: ssDxya1A3DXD33as2ABA3gQGjWdcovtxY7C9Lx1x7S8= Subject key identifier: 30:AA:92:A8:6B:65:20:8F:D4:AC:75:A4:70:FE:B6:C5:5E:14:4A:AD Authority key identifier: 0C:9B:C1:B1:4F:0D:96:53:F5:14:EC:16:77:71:B7:75:59:AC:63:CC Certificate issuer: /CN=0c9bc1b14f0d9653f514ec167771b77559ac63cc Certificate serial: 019B465D67A03883AAA9AF785DC7B1EEB1FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJvBsU8NllP1FOwWd3G3dVmsY8w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft Manifest number: 178E Signing time: Mon 22 Dec 2025 14:01:25 +0000 Manifest this update: Mon 22 Dec 2025 14:01:25 +0000 Manifest next update: Tue 23 Dec 2025 14:01:25 +0000 Files and hashes: 1: DJvBsU8NllP1FOwWd3G3dVmsY8w.crl (hash: hIu5UmJWbBNn3V3F70K94srTBlVisWFQj8hCD39IYqc=) 2: YeUbav6EAp2mAnn2v72RBK_mFZw.roa (hash: 6lsjmApYWIJWgcJbH7Xr/EBHcstui66uMy/hUDB8r3c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft rsync://rpki.ripe.net/repository/DEFAULT/DJvBsU8NllP1FOwWd3G3dVmsY8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 14:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:5d:67:a0:38:83:aa:a9:af:78:5d:c7:b1:ee:b1:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c9bc1b14f0d9653f514ec167771b77559ac63cc Validity Not Before: Dec 22 14:01:25 2025 GMT Not After : Dec 23 14:01:25 2025 GMT Subject: CN=30aa92a86b65208fd4ac75a470feb6c55e144aad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b8:e4:51:13:93:47:88:03:11:ed:ea:f5:12: 05:66:84:33:b4:be:07:08:23:ab:8e:4c:0e:80:f6: 47:f9:3d:86:0a:69:78:49:0d:42:6c:bd:2f:f6:59: c0:d1:99:84:9f:97:f8:87:4f:81:b7:4c:b4:85:e9: 40:45:0b:b5:bc:70:d7:2a:ac:74:66:17:8b:da:68: d8:06:ff:43:c1:48:16:be:9e:a6:86:28:5a:a5:8c: fa:87:b7:80:7b:9f:79:d1:32:3a:29:ba:4f:61:1e: a2:c1:40:c1:3d:ac:2d:ed:81:07:d3:6b:e7:5e:84: db:40:45:bd:79:03:13:d9:d2:9b:ce:fd:9e:76:05: ca:78:6e:db:d1:b9:16:c3:c7:e5:f8:03:2a:ac:dc: 02:ca:e7:04:42:a6:48:88:49:5e:a9:af:45:b2:3f: 6e:cf:2e:c0:7f:aa:a0:e7:ef:d1:fb:a4:96:0c:aa: 12:04:e1:cc:dd:06:3d:c1:e5:4b:c1:d9:2f:d0:6b: 55:22:f8:5e:24:ca:df:28:6e:7d:f5:84:6b:d2:49: 16:eb:8a:3a:75:4a:47:9a:ed:fa:2e:45:f6:b3:61: 33:64:64:52:21:4c:48:36:41:ff:d0:9b:43:1d:f6: b8:da:3d:99:65:27:ff:ad:76:1e:1b:15:71:cd:5c: 08:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:AA:92:A8:6B:65:20:8F:D4:AC:75:A4:70:FE:B6:C5:5E:14:4A:AD X509v3 Authority Key Identifier: keyid:0C:9B:C1:B1:4F:0D:96:53:F5:14:EC:16:77:71:B7:75:59:AC:63:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJvBsU8NllP1FOwWd3G3dVmsY8w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:2e:c1:ff:c3:60:6f:27:e2:ac:b7:69:c3:94:38:56:4e:3a: d9:f1:09:d8:36:7a:a6:60:3b:1e:d0:1a:49:12:fa:c6:be:9d: fb:02:48:73:3e:97:de:ab:78:cf:e0:5d:2c:da:cb:78:ce:ad: e7:da:35:cd:b6:83:ee:e8:15:f0:04:22:87:1e:d8:8d:cb:1b: 8c:eb:3d:5e:ab:cf:bd:23:85:2c:2d:f1:e5:6c:eb:2e:e0:88: 92:9b:cd:a6:69:dd:be:2b:40:e2:7a:d4:2b:fb:92:86:13:b2: 83:ad:9c:ba:0f:3d:1d:20:1a:db:30:ba:2e:12:26:b2:e9:3a: 89:ab:7a:49:a5:cc:eb:de:56:04:3a:2e:0f:08:a7:2c:27:ff: 14:1d:e3:be:a7:74:e3:af:a4:67:28:e7:69:4d:2c:a8:72:92: 0a:a3:65:bb:42:92:f0:a8:0a:1b:3c:d0:50:3d:87:20:29:4f: 32:f5:80:53:24:19:8a:32:c2:95:74:32:9a:d5:e4:30:43:09: 7d:6f:57:79:59:81:1f:01:fd:a6:a0:61:1c:17:a7:46:be:dd: af:f2:ce:58:80:65:31:5b:6f:67:4e:4e:12:78:24:19:12:01: a3:75:18:c2:04:f2:06:d9:43:d6:67:0e:bf:69:d1:d0:78:88: c5:d0:e9:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGXWegOIOqqa94Xcex7rH+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjOWJjMWIxNGYwZDk2NTNmNTE0ZWMxNjc3NzFiNzc1NTlh YzYzY2MwHhcNMjUxMjIyMTQwMTI1WhcNMjUxMjIzMTQwMTI1WjAzMTEwLwYDVQQD EygzMGFhOTJhODZiNjUyMDhmZDRhYzc1YTQ3MGZlYjZjNTVlMTQ0YWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLjkUROTR4gDEe3q9RIFZoQztL4H CCOrjkwOgPZH+T2GCml4SQ1CbL0v9lnA0ZmEn5f4h0+Bt0y0helARQu1vHDXKqx0 ZheL2mjYBv9DwUgWvp6mhihapYz6h7eAe5950TI6KbpPYR6iwUDBPawt7YEH02vn XoTbQEW9eQMT2dKbzv2edgXKeG7b0bkWw8fl+AMqrNwCyucEQqZIiEleqa9Fsj9u zy7Af6qg5+/R+6SWDKoSBOHM3QY9weVLwdkv0GtVIvheJMrfKG599YRr0kkW64o6 dUpHmu36LkX2s2EzZGRSIUxINkH/0JtDHfa42j2ZZSf/rXYeGxVxzVwICwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDCqkqhrZSCP1Kx1pHD+tsVeFEqtMB8GA1UdIwQY MBaAFAybwbFPDZZT9RTsFndxt3VZrGPMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREp2QnNVOE5sbFAxRk93V2QzRzNkVm1zWTh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YzM4ZjQtNWRhZS00ZDJjLTgyMDgt MWQxOTQ5OWQwOThmLzEvREp2QnNVOE5sbFAxRk93V2QzRzNkVm1zWTh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YzM4ZjQtNWRhZS00ZDJjLTgyMDgtMWQxOTQ5OWQwOThm LzEvREp2QnNVOE5sbFAxRk93V2QzRzNkVm1zWTh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQC7B/8Ng byfirLdpw5Q4Vk462fEJ2DZ6pmA7HtAaSRL6xr6d+wJIcz6X3qt4z+BdLNrLeM6t 59o1zbaD7ugV8AQihx7YjcsbjOs9XqvPvSOFLC3x5WzrLuCIkpvNpmndvitA4nrU K/uShhOyg62cug89HSAa2zC6LhImsuk6iat6SaXM695WBDouDwinLCf/FB3jvqd0 46+kZyjnaU0sqHKSCqNlu0KS8KgKGzzQUD2HIClPMvWAUyQZijLClXQymtXkMEMJ fW9XeVmBHwH9pqBhHBenRr7dr/LOWIBlMVtvZ05OEngkGRIBo3UYwgTyBtlD1mcO v2nR0HiIxdDpuw== -----END CERTIFICATE-----Generated at Mon Dec 22 17:39:55 2025 by rpki-client