This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft File: DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft (raw, json) Hash identifier: va2sk0yTDfN8ePD9Z1ggfzev3cBVc5v3N5DzfoKftyY= Subject key identifier: A1:AC:C1:7D:22:92:28:51:FF:52:7F:6E:AA:DB:74:87:5B:7F:26:B3 Authority key identifier: 0E:F8:1D:9E:89:E2:C4:71:32:1D:96:7F:70:92:09:4D:AD:FE:2A:A8 Certificate issuer: /CN=0ef81d9e89e2c471321d967f7092094dadfe2aa8 Certificate serial: 019B3D5A18B5DB24316C8A0858DBE72E95D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft Manifest number: 0EA6 Signing time: Sat 20 Dec 2025 20:01:13 +0000 Manifest this update: Sat 20 Dec 2025 20:01:13 +0000 Manifest next update: Sun 21 Dec 2025 20:01:13 +0000 Files and hashes: 1: 0CytvhJudNwvmE_qIywCHCo6NeE.roa (hash: 88aZ7TRUqfxW9sX6erHIjwQ5v2GdVw5BH0X6fcp/TYs=) 2: DvgdnonixHEyHZZ_cJIJTa3-Kqg.crl (hash: xAq+zhpeDuHyWt6VjfVu6lSI74UKjD1ptfGg6DS3co4=) 3: KrKK6KlWrbwro0xZGJbZRZAIMbY.roa (hash: mLgmMH2GpuH6gYsfQafOR8wiybY64hDgIvWRNRviit8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:18:b5:db:24:31:6c:8a:08:58:db:e7:2e:95:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ef81d9e89e2c471321d967f7092094dadfe2aa8 Validity Not Before: Dec 20 20:01:13 2025 GMT Not After : Dec 21 20:01:13 2025 GMT Subject: CN=a1acc17d22922851ff527f6eaadb74875b7f26b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5d:bf:67:4b:c7:11:c2:14:22:b8:17:b2:0e: fd:56:8c:90:8b:a4:e2:05:7c:1f:bb:ba:45:ae:31: 4a:22:67:e1:bb:2e:87:c5:6b:c2:a6:c1:3a:8d:06: 99:3e:cc:fc:86:81:8b:6c:db:c0:40:35:55:10:74: 1c:c0:0c:fb:69:7a:01:2a:74:55:47:3c:0a:6e:7c: ac:f4:0d:c6:46:0b:10:ca:6e:47:29:64:79:09:76: 15:75:ca:0c:f2:8a:f0:f4:3b:ed:17:ee:b6:77:c6: d2:7c:17:d6:5f:ba:58:3d:5a:4e:a4:f0:dc:2f:c0: 22:fa:87:db:c4:d6:42:b2:50:99:6d:59:9b:01:9f: f4:3b:c2:e2:e0:4a:58:5a:be:4b:fd:82:e6:d6:c9: 12:35:f8:55:bb:58:9d:b8:31:9a:6c:46:e7:38:7a: 82:de:a2:a2:ae:71:02:d6:13:14:56:64:bf:86:3d: d0:85:07:55:e3:56:48:f2:66:f2:89:66:73:29:d4: b5:af:d4:cf:42:eb:65:84:6c:92:b0:bc:cd:8e:b1: 84:b5:07:23:fd:57:01:50:51:0a:d5:0d:cf:0e:00: e9:ba:fe:4a:5f:c0:4c:df:6d:cd:97:c0:ed:d9:87: 3b:f1:af:aa:83:a7:8b:ea:b6:c3:80:c5:70:7b:5c: e1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:AC:C1:7D:22:92:28:51:FF:52:7F:6E:AA:DB:74:87:5B:7F:26:B3 X509v3 Authority Key Identifier: keyid:0E:F8:1D:9E:89:E2:C4:71:32:1D:96:7F:70:92:09:4D:AD:FE:2A:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvgdnonixHEyHZZ_cJIJTa3-Kqg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/5d15a8-22a7-401b-8c5e-075f24e4be71/1/DvgdnonixHEyHZZ_cJIJTa3-Kqg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:1f:22:5f:fe:e5:9e:b2:77:34:4b:be:e2:41:f6:ca:72:a5: 95:2b:a5:d1:3e:16:bc:92:d7:1d:6a:a6:b4:42:06:92:2b:3a: 3d:76:81:2d:05:ff:7c:bc:00:31:f2:2f:82:ed:29:9f:4a:62: 18:5f:69:98:8b:0d:13:5c:f6:8a:82:23:12:63:84:d7:5f:e0: 16:5a:6e:66:85:08:14:4d:12:9b:e0:5f:38:9b:d7:ab:57:9d: c3:0a:a2:77:3a:82:cd:4e:19:d4:48:59:3c:22:cc:8c:05:18: 2c:af:e2:f1:aa:bc:7d:fa:d0:e2:4b:42:e3:72:36:10:98:4b: 09:4e:96:20:3c:ea:32:12:73:ad:b3:cc:e2:62:53:1b:6e:a9: 5a:15:66:ef:8b:e2:bf:c3:5f:7c:31:30:00:80:38:62:a4:3c: 3c:fb:d6:f2:6b:1b:28:f3:d5:f3:2c:a8:be:86:7b:a5:da:74: a0:1f:80:c2:70:80:6c:96:eb:94:56:25:01:d0:10:7b:af:ca: df:85:62:5a:45:20:05:ee:27:6f:6b:bc:9d:ee:31:1f:f7:fa: 15:f0:38:26:fa:ad:e3:14:98:79:49:ca:30:f5:2a:68:dd:25: a7:6f:26:d8:62:fa:d8:52:b3:98:94:1a:fe:64:bb:fb:f2:4d: f9:9d:46:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Whi12yQxbIoIWNvnLpXSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlZjgxZDllODllMmM0NzEzMjFkOTY3ZjcwOTIwOTRkYWRm ZTJhYTgwHhcNMjUxMjIwMjAwMTEzWhcNMjUxMjIxMjAwMTEzWjAzMTEwLwYDVQQD EyhhMWFjYzE3ZDIyOTIyODUxZmY1MjdmNmVhYWRiNzQ4NzViN2YyNmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApl2/Z0vHEcIUIrgXsg79VoyQi6Ti BXwfu7pFrjFKImfhuy6HxWvCpsE6jQaZPsz8hoGLbNvAQDVVEHQcwAz7aXoBKnRV RzwKbnys9A3GRgsQym5HKWR5CXYVdcoM8orw9DvtF+62d8bSfBfWX7pYPVpOpPDc L8Ai+ofbxNZCslCZbVmbAZ/0O8Li4EpYWr5L/YLm1skSNfhVu1iduDGabEbnOHqC 3qKirnEC1hMUVmS/hj3QhQdV41ZI8mbyiWZzKdS1r9TPQutlhGySsLzNjrGEtQcj /VcBUFEK1Q3PDgDpuv5KX8BM323Nl8Dt2Yc78a+qg6eL6rbDgMVwe1zh7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKGswX0ikihR/1J/bqrbdIdbfyazMB8GA1UdIwQY MBaAFA74HZ6J4sRxMh2Wf3CSCU2t/iqoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHZnZG5vbml4SEV5SFpaX2NKSUpUYTMtS3FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS81ZDE1YTgtMjJhNy00MDFiLThjNWUt MDc1ZjI0ZTRiZTcxLzEvRHZnZG5vbml4SEV5SFpaX2NKSUpUYTMtS3FnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS81ZDE1YTgtMjJhNy00MDFiLThjNWUtMDc1ZjI0ZTRiZTcx LzEvRHZnZG5vbml4SEV5SFpaX2NKSUpUYTMtS3FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeh8iX/7l nrJ3NEu+4kH2ynKllSul0T4WvJLXHWqmtEIGkis6PXaBLQX/fLwAMfIvgu0pn0pi GF9pmIsNE1z2ioIjEmOE11/gFlpuZoUIFE0Sm+BfOJvXq1edwwqidzqCzU4Z1EhZ PCLMjAUYLK/i8aq8ffrQ4ktC43I2EJhLCU6WIDzqMhJzrbPM4mJTG26pWhVm74vi v8NffDEwAIA4YqQ8PPvW8msbKPPV8yyovoZ7pdp0oB+AwnCAbJbrlFYlAdAQe6/K 34ViWkUgBe4nb2u8ne4xH/f6FfA4Jvqt4xSYeUnKMPUqaN0lp28m2GL62FKzmJQa /mS7+/JN+Z1GIQ== -----END CERTIFICATE-----Generated at Sun Dec 21 04:24:49 2025 by rpki-client