This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft File: DFLdBfaKoaMkrVvBJHbFuaYevAA.mft (raw, json) Hash identifier: 9fe8fbHKoc83Bbey0SHz89D7VMEo/YENY+7PekhrLX0= Subject key identifier: 0E:F1:02:61:B2:84:F0:ED:8C:7F:79:01:56:5D:04:54:BE:67:37:4E Authority key identifier: 0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00 Certificate issuer: /CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00 Certificate serial: 019B3CB4BBEA3823F7C5FD97C8ED4DABBA46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft Manifest number: 02D5 Signing time: Sat 20 Dec 2025 17:00:36 +0000 Manifest this update: Sat 20 Dec 2025 17:00:36 +0000 Manifest next update: Sun 21 Dec 2025 17:00:36 +0000 Files and hashes: 1: 1qnlJEQNpHnPn_lNZ4CHHpUTAqE.roa (hash: Vr0tQvsEhdsTIIzQr8GlHNrOORTAaoDkwB4jUIzgLLo=) 2: DFLdBfaKoaMkrVvBJHbFuaYevAA.crl (hash: JQ6Gt5TtNWnRDKOHWBbypmGj8gOjVnts0Ci/ClfIRgo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:bb:ea:38:23:f7:c5:fd:97:c8:ed:4d:ab:ba:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00 Validity Not Before: Dec 20 17:00:36 2025 GMT Not After : Dec 21 17:00:36 2025 GMT Subject: CN=0ef10261b284f0ed8c7f7901565d0454be67374e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:68:ef:ab:67:8d:20:b2:70:dd:56:60:6b:c7: f1:9c:13:8f:a1:52:8e:01:6c:84:14:e9:44:0f:6c: d0:cf:2d:07:9c:74:5e:3c:b2:39:c4:21:de:4e:85: ab:88:1d:a2:25:ac:f4:c4:4a:e3:e8:79:54:3f:6d: c1:20:56:78:51:60:94:13:99:3c:34:ab:50:91:a3: f6:7f:3f:3c:a7:0b:ce:44:48:3d:5d:50:a9:46:89: 30:4b:d3:b7:33:fd:e9:c6:ba:c4:30:4a:55:83:90: 75:c2:9a:87:bb:3f:4e:bb:fc:7b:be:d4:13:38:ba: 46:4b:53:ef:11:3a:3f:b7:9d:0b:fc:04:99:a1:10: 70:df:5e:d3:37:53:f0:16:b1:be:9e:e3:b0:9d:ef: 4d:1b:cb:54:83:d1:cc:6b:6a:79:72:17:4e:61:b9: 99:c0:78:57:3c:31:13:45:b2:ed:cf:36:ac:5f:e9: 17:2b:e1:1f:e9:86:e3:53:9b:40:c3:4e:8f:26:8f: 2d:cd:2a:00:17:0b:86:a1:72:10:c0:0d:af:6f:df: 41:3f:05:e8:db:a7:65:0c:e9:bd:e3:87:9a:85:d4: da:0a:ab:00:83:c4:1b:23:19:31:96:a5:4f:de:6d: f8:86:1d:71:03:9d:08:22:87:df:ff:f2:ff:c2:50: ef:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:F1:02:61:B2:84:F0:ED:8C:7F:79:01:56:5D:04:54:BE:67:37:4E X509v3 Authority Key Identifier: keyid:0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:38:07:c0:7d:f6:c4:3d:9a:7d:43:53:dd:8e:6c:70:67:a8: b5:e6:9e:09:9f:1f:02:d5:c4:09:06:2e:d2:31:b9:82:8b:af: fd:88:f4:35:e2:b0:5c:89:fe:e1:4e:83:5b:8f:a3:05:26:06: aa:76:a8:48:ac:3d:14:4c:ca:02:73:db:23:6c:7e:10:01:f8: 29:56:8a:53:cd:b9:f8:a4:4d:dc:cf:8c:41:e6:52:ce:01:28: f0:75:5a:25:db:13:89:8f:72:33:6c:75:1a:b4:c2:dc:27:96: 5f:55:c2:52:48:d4:73:e4:84:2f:3d:b1:7f:42:5d:5a:a1:13: fb:4c:b6:21:c2:15:48:2a:81:00:58:b2:fc:42:99:b8:88:1f: 7a:f4:f6:c4:39:33:84:8d:32:99:90:55:f2:59:7f:1f:14:b6: 03:18:b2:f7:d0:06:e6:be:f0:a3:33:e1:42:77:a2:4f:b3:52: 62:37:74:1e:95:67:4a:4e:ad:02:e2:a5:70:74:bd:9f:63:48: 90:2c:05:74:f3:09:65:39:06:c2:4e:cb:1f:8e:7e:7d:b8:82: 36:8e:40:8a:c1:78:e6:93:f0:6e:d6:78:c4:ab:64:e8:7f:79: e2:c4:74:d8:2c:72:7a:ef:54:c2:8d:8c:dc:30:44:d3:9f:30: a8:99:ee:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tLvqOCP3xf2XyO1Nq7pGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNTJkZDA1ZjY4YWExYTMyNGFkNWJjMTI0NzZjNWI5YTYx ZWJjMDAwHhcNMjUxMjIwMTcwMDM2WhcNMjUxMjIxMTcwMDM2WjAzMTEwLwYDVQQD EygwZWYxMDI2MWIyODRmMGVkOGM3Zjc5MDE1NjVkMDQ1NGJlNjczNzRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2jvq2eNILJw3VZga8fxnBOPoVKO AWyEFOlED2zQzy0HnHRePLI5xCHeToWriB2iJaz0xErj6HlUP23BIFZ4UWCUE5k8 NKtQkaP2fz88pwvOREg9XVCpRokwS9O3M/3pxrrEMEpVg5B1wpqHuz9Ou/x7vtQT OLpGS1PvETo/t50L/ASZoRBw317TN1PwFrG+nuOwne9NG8tUg9HMa2p5chdOYbmZ wHhXPDETRbLtzzasX+kXK+Ef6YbjU5tAw06PJo8tzSoAFwuGoXIQwA2vb99BPwXo 26dlDOm944eahdTaCqsAg8QbIxkxlqVP3m34hh1xA50IIoff//L/wlDvnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA7xAmGyhPDtjH95AVZdBFS+ZzdOMB8GA1UdIwQY MBaAFAxS3QX2iqGjJK1bwSR2xbmmHrwAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZMZEJmYUtvYU1rclZ2QkpIYkZ1YVlldkFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xYjRlNTctNWViNC00YjlkLWJjMjYt NzA3NDllN2E0ZDk0LzEvREZMZEJmYUtvYU1rclZ2QkpIYkZ1YVlldkFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS8xYjRlNTctNWViNC00YjlkLWJjMjYtNzA3NDllN2E0ZDk0 LzEvREZMZEJmYUtvYU1rclZ2QkpIYkZ1YVlldkFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbTgHwH32 xD2afUNT3Y5scGeoteaeCZ8fAtXECQYu0jG5gouv/Yj0NeKwXIn+4U6DW4+jBSYG qnaoSKw9FEzKAnPbI2x+EAH4KVaKU825+KRN3M+MQeZSzgEo8HVaJdsTiY9yM2x1 GrTC3CeWX1XCUkjUc+SELz2xf0JdWqET+0y2IcIVSCqBAFiy/EKZuIgfevT2xDkz hI0ymZBV8ll/HxS2Axiy99AG5r7wozPhQneiT7NSYjd0HpVnSk6tAuKlcHS9n2NI kCwFdPMJZTkGwk7LH45+fbiCNo5AisF45pPwbtZ4xKtk6H954sR02Cxyeu9Uwo2M 3DBE058wqJnugQ== -----END CERTIFICATE-----Generated at Sat Dec 20 23:55:45 2025 by rpki-client