This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft File: DjagX652BpH3DPtbT2JJlHq63oc.mft (raw, json) Hash identifier: CbO+vZHjIz4Q9PA6wyRaj5cpEaBruaUXs9tjw1tvfmY= Subject key identifier: B9:73:E1:6A:AB:75:4D:09:62:18:C3:66:29:CD:DB:2A:E0:49:60:B8 Authority key identifier: 0E:36:A0:5F:AE:76:06:91:F7:0C:FB:5B:4F:62:49:94:7A:BA:DE:87 Certificate issuer: /CN=0e36a05fae760691f70cfb5b4f6249947abade87 Certificate serial: 019B5CADC6BE8E45A31251C8008F584B4639 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 22:00:51 +0000 Manifest this update: Fri 26 Dec 2025 22:00:51 +0000 Manifest next update: Sat 27 Dec 2025 22:00:51 +0000 Files and hashes: 1: 9hax9lcbcBPwKNzrRoXl7XRGxs0.roa (hash: IRPjVfW8M9ASmZNnOGpHStRGP8SiQ3X0Tpw2PWHs4Gs=) 2: DjagX652BpH3DPtbT2JJlHq63oc.crl (hash: UONt9lsH0JgqVIgrlJ5QYj+2Lo0W/o1F9J4LstGxjwg=) 3: EiGZtAu9plqsBeiA66w6CIaKbMQ.roa (hash: dj8GKcFexedHYt10VTQ4ji9NoWWxtuLzNtXT9+iqLpk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.crl rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 22:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:ad:c6:be:8e:45:a3:12:51:c8:00:8f:58:4b:46:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e36a05fae760691f70cfb5b4f6249947abade87 Validity Not Before: Dec 26 22:00:51 2025 GMT Not After : Dec 27 22:00:51 2025 GMT Subject: CN=b973e16aab754d096218c36629cddb2ae04960b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e8:e4:cc:20:cf:8d:c8:d0:8c:69:62:a6:34: f0:96:c8:ed:49:a3:e6:03:01:a4:b8:0f:84:3e:ad: df:03:9f:b9:a6:a1:e4:74:d3:85:57:3c:2a:5f:b1: c2:bc:2c:6c:cc:d2:c2:9d:69:b2:2c:4c:d1:23:97: d6:cd:d4:47:1d:ea:bc:f7:8c:14:09:89:18:d5:43: 3f:73:18:7a:a8:f3:6a:ae:7c:0d:56:f1:0d:98:19: b9:a6:b4:4b:27:1e:2c:36:3d:b8:07:88:5d:d4:16: bf:d4:52:cd:f9:30:74:5b:b4:c4:ce:fd:e1:0e:c4: 87:ac:8f:3a:36:87:e5:9c:6c:d8:2c:6b:10:9a:70: b8:17:11:5a:29:dc:ba:83:0a:32:ed:c2:41:e0:2e: 5f:97:10:91:c4:2b:0f:69:fd:41:93:46:65:3d:99: d5:29:25:cd:00:c5:c1:e4:1e:5d:d6:a1:68:13:38: f8:e5:88:ab:09:0a:d5:97:dc:6c:42:2d:0e:9e:51: 46:09:d1:4c:37:5d:c4:c7:13:73:7d:e3:8b:d6:b7: 04:0e:16:6f:12:60:ce:d8:20:3b:02:54:79:1a:4c: 8d:a6:33:25:9e:a1:23:41:88:a7:34:63:09:25:81: 7b:53:ca:75:18:f0:1e:ea:e6:5d:3a:7c:c5:51:d2: 99:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:73:E1:6A:AB:75:4D:09:62:18:C3:66:29:CD:DB:2A:E0:49:60:B8 X509v3 Authority Key Identifier: keyid:0E:36:A0:5F:AE:76:06:91:F7:0C:FB:5B:4F:62:49:94:7A:BA:DE:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:63:1b:13:32:87:f7:e1:53:95:ae:d7:33:d5:b4:49:9c:79: 08:17:13:b6:d4:4c:1c:81:26:f0:8c:d7:92:60:f9:98:12:c0: bc:15:c3:8e:69:1a:1e:f2:42:4e:44:fd:1a:8d:57:fa:85:4d: 6f:f7:ee:98:8d:f4:f6:75:d9:c4:9d:1c:d3:e8:0c:35:77:83: 76:ec:fd:78:36:f1:e5:52:ff:47:1a:54:a7:d3:a9:57:8d:46: a0:fe:bc:f0:9e:66:29:22:ae:2a:d3:ae:6d:a4:be:6b:49:c6: b0:5c:33:b8:85:fa:d6:dc:13:22:7a:c5:aa:fc:6e:6c:9d:ad: ae:58:3c:63:df:00:22:3c:81:87:7e:a3:c7:3e:48:ef:92:96: 4c:82:8c:ae:b5:65:de:29:05:86:f1:ff:85:35:80:66:68:81: 8c:1c:59:7a:1d:db:c1:2b:f4:b8:20:42:9c:0c:27:49:30:3d: c5:66:c0:de:a4:8e:b0:32:b0:7f:8b:a1:a8:73:c9:d7:24:76: 4c:28:9b:1c:a5:47:19:ad:ab:94:4e:75:da:49:6a:4d:d8:74: 3a:d8:ae:65:3b:92:3e:65:db:9a:ec:60:91:2e:92:ef:fe:6b: 24:d3:a1:25:43:d4:04:3c:a9:ba:25:c8:ff:48:8c:31:52:77: 6c:0c:69:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcrca+jkWjElHIAI9YS0Y5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMzZhMDVmYWU3NjA2OTFmNzBjZmI1YjRmNjI0OTk0N2Fi YWRlODcwHhcNMjUxMjI2MjIwMDUxWhcNMjUxMjI3MjIwMDUxWjAzMTEwLwYDVQQD EyhiOTczZTE2YWFiNzU0ZDA5NjIxOGMzNjYyOWNkZGIyYWUwNDk2MGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5OjkzCDPjcjQjGlipjTwlsjtSaPm AwGkuA+EPq3fA5+5pqHkdNOFVzwqX7HCvCxszNLCnWmyLEzRI5fWzdRHHeq894wU CYkY1UM/cxh6qPNqrnwNVvENmBm5prRLJx4sNj24B4hd1Ba/1FLN+TB0W7TEzv3h DsSHrI86NoflnGzYLGsQmnC4FxFaKdy6gwoy7cJB4C5flxCRxCsPaf1Bk0ZlPZnV KSXNAMXB5B5d1qFoEzj45YirCQrVl9xsQi0OnlFGCdFMN13ExxNzfeOL1rcEDhZv EmDO2CA7AlR5GkyNpjMlnqEjQYinNGMJJYF7U8p1GPAe6uZdOnzFUdKZYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLlz4WqrdU0JYhjDZinN2yrgSWC4MB8GA1UdIwQY MBaAFA42oF+udgaR9wz7W09iSZR6ut6HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGphZ1g2NTJCcEgzRFB0YlQySkpsSHE2M29jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83MzVkMzctMzkxYS00YWEyLWFjODMt MGIzNmFjOGUyM2M3LzEvRGphZ1g2NTJCcEgzRFB0YlQySkpsSHE2M29jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny83MzVkMzctMzkxYS00YWEyLWFjODMtMGIzNmFjOGUyM2M3 LzEvRGphZ1g2NTJCcEgzRFB0YlQySkpsSHE2M29jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOWMbEzKH 9+FTla7XM9W0SZx5CBcTttRMHIEm8IzXkmD5mBLAvBXDjmkaHvJCTkT9Go1X+oVN b/fumI309nXZxJ0c0+gMNXeDduz9eDbx5VL/RxpUp9OpV41GoP688J5mKSKuKtOu baS+a0nGsFwzuIX61twTInrFqvxubJ2trlg8Y98AIjyBh36jxz5I75KWTIKMrrVl 3ikFhvH/hTWAZmiBjBxZeh3bwSv0uCBCnAwnSTA9xWbA3qSOsDKwf4uhqHPJ1yR2 TCibHKVHGa2rlE512klqTdh0OtiuZTuSPmXbmuxgkS6S7/5rJNOhJUPUBDypuiXI /0iMMVJ3bAxpSw== -----END CERTIFICATE-----Generated at Sat Dec 27 08:11:38 2025 by rpki-client