This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft File: DG8YKAS1blCKo3LAPM63PvjCxos.mft (raw, json) Hash identifier: dAXn95O1Lc0qO55RD+V7Y59pIET/d8PW4R4eEc4LESg= Subject key identifier: FB:CB:4D:21:0D:57:4D:1D:04:A6:E0:32:63:2D:06:A6:93:D4:73:44 Authority key identifier: 0C:6F:18:28:04:B5:6E:50:8A:A3:72:C0:3C:CE:B7:3E:F8:C2:C6:8B Certificate issuer: /CN=0c6f182804b56e508aa372c03cceb73ef8c2c68b Certificate serial: 019B41369BE6D202F153A2122C08D2000024 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft Manifest number: 1792 Signing time: Sun 21 Dec 2025 14:00:56 +0000 Manifest this update: Sun 21 Dec 2025 14:00:56 +0000 Manifest next update: Mon 22 Dec 2025 14:00:56 +0000 Files and hashes: 1: CboN5GI28SiyUWI4MOyyBBarnSE.roa (hash: IuQeN17ie/CZAm40U/UBsK+jP36giHzi+QWUvQDTrTI=) 2: DG8YKAS1blCKo3LAPM63PvjCxos.crl (hash: BaRMFGpaJozjbs1uINztmmF0QCmw4wqvpiuF8j6ML0M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:9b:e6:d2:02:f1:53:a2:12:2c:08:d2:00:00:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c6f182804b56e508aa372c03cceb73ef8c2c68b Validity Not Before: Dec 21 14:00:56 2025 GMT Not After : Dec 22 14:00:56 2025 GMT Subject: CN=fbcb4d210d574d1d04a6e032632d06a693d47344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:74:22:68:c3:45:2f:1b:4c:3a:45:46:ae:47: 3d:7c:2a:4b:85:cb:9a:d7:ab:36:37:6b:63:1d:e9: 29:34:7b:6e:1e:7f:2d:63:55:e4:4a:14:32:80:09: 6d:26:86:f9:89:4d:f5:2f:67:dd:02:47:48:35:01: 2f:5d:61:2d:e7:d5:8d:54:10:57:db:9c:54:ee:29: 64:46:3f:f9:c3:63:e8:fa:7e:c2:73:d1:bf:51:00: 5d:5e:fc:15:e2:ee:f9:7e:27:d8:ff:0a:be:04:b5: 4f:4d:e9:c4:13:de:8a:d4:6d:24:ca:00:a3:46:71: 05:21:24:bc:70:28:31:4a:cd:b8:c1:d9:7c:17:0a: db:30:87:55:0c:d2:33:a1:15:d4:02:85:4c:da:c0: b6:78:82:ec:33:20:6e:db:ca:67:1a:2f:de:fc:6a: 64:1c:83:19:fc:f7:f9:a1:db:c8:e8:d1:32:b8:c0: 14:46:78:99:dc:8d:26:88:6b:3c:2c:c4:68:49:53: e8:bf:9e:6a:cd:12:82:60:9c:4e:c4:bc:97:e6:2a: e2:f0:1c:10:51:f1:dc:9a:8a:7c:8e:c4:77:86:a2: 82:d8:c7:d8:9f:93:46:2f:72:f8:0b:7c:aa:d6:9d: a2:a4:6e:7d:4d:c9:dd:bd:f7:d9:9b:e0:dc:4e:5b: 49:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:CB:4D:21:0D:57:4D:1D:04:A6:E0:32:63:2D:06:A6:93:D4:73:44 X509v3 Authority Key Identifier: keyid:0C:6F:18:28:04:B5:6E:50:8A:A3:72:C0:3C:CE:B7:3E:F8:C2:C6:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DG8YKAS1blCKo3LAPM63PvjCxos.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/6c0e22-fb61-49db-b065-993cd8388fd5/1/DG8YKAS1blCKo3LAPM63PvjCxos.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:fa:f7:95:06:55:7f:a4:13:1a:08:c9:a5:af:04:74:d8:a8: 5a:64:2c:0a:50:5a:2d:5f:05:46:43:82:da:8e:bf:2d:bd:e4: 61:cc:1e:47:c2:e2:5e:5a:9c:5d:45:f4:93:c1:9c:c9:da:19: de:6c:bd:32:e2:15:a4:6d:45:1a:73:c8:6a:ab:13:eb:bc:09: c5:39:08:d2:7f:14:09:c6:1f:19:fd:ed:44:90:72:1e:88:91: 52:5e:b5:38:78:21:7a:8f:a2:87:79:0f:0b:8f:56:fa:95:e4: d6:58:a4:c2:78:db:73:cb:4d:18:15:ee:56:b0:0a:01:a6:c9: f1:00:79:a0:f8:07:09:a7:90:62:cd:60:e0:90:36:e3:e9:9c: 86:9b:bb:76:f6:82:a6:fc:09:e1:a1:3c:a6:dc:b4:e0:f0:26: 6d:0c:6e:2a:50:32:cf:48:d2:06:2e:03:c2:e7:df:12:40:b6: fc:0e:dd:49:19:b4:9b:c1:7b:82:70:01:b3:a9:44:cc:37:9e: 83:bc:15:9e:a3:f6:37:76:05:36:ec:27:6c:21:00:db:ac:fb: 13:14:8b:8e:2f:bd:1f:19:41:af:a0:d0:cc:e6:ac:bb:68:66: b9:57:37:f4:f3:8f:7a:0f:a2:9b:f7:79:d3:0c:b5:08:81:1b: 0e:34:f6:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNpvm0gLxU6ISLAjSAAAkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNmYxODI4MDRiNTZlNTA4YWEzNzJjMDNjY2ViNzNlZjhj MmM2OGIwHhcNMjUxMjIxMTQwMDU2WhcNMjUxMjIyMTQwMDU2WjAzMTEwLwYDVQQD EyhmYmNiNGQyMTBkNTc0ZDFkMDRhNmUwMzI2MzJkMDZhNjkzZDQ3MzQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HQiaMNFLxtMOkVGrkc9fCpLhcua 16s2N2tjHekpNHtuHn8tY1XkShQygAltJob5iU31L2fdAkdINQEvXWEt59WNVBBX 25xU7ilkRj/5w2Po+n7Cc9G/UQBdXvwV4u75fifY/wq+BLVPTenEE96K1G0kygCj RnEFISS8cCgxSs24wdl8FwrbMIdVDNIzoRXUAoVM2sC2eILsMyBu28pnGi/e/Gpk HIMZ/Pf5odvI6NEyuMAURniZ3I0miGs8LMRoSVPov55qzRKCYJxOxLyX5iri8BwQ UfHcmop8jsR3hqKC2MfYn5NGL3L4C3yq1p2ipG59TcndvffZm+DcTltJgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPvLTSENV00dBKbgMmMtBqaT1HNEMB8GA1UdIwQY MBaAFAxvGCgEtW5QiqNywDzOtz74wsaLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREc4WUtBUzFibENLbzNMQVBNNjNQdmpDeG9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC82YzBlMjItZmI2MS00OWRiLWIwNjUt OTkzY2Q4Mzg4ZmQ1LzEvREc4WUtBUzFibENLbzNMQVBNNjNQdmpDeG9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC82YzBlMjItZmI2MS00OWRiLWIwNjUtOTkzY2Q4Mzg4ZmQ1 LzEvREc4WUtBUzFibENLbzNMQVBNNjNQdmpDeG9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMvr3lQZV f6QTGgjJpa8EdNioWmQsClBaLV8FRkOC2o6/Lb3kYcweR8LiXlqcXUX0k8GcydoZ 3my9MuIVpG1FGnPIaqsT67wJxTkI0n8UCcYfGf3tRJByHoiRUl61OHgheo+ih3kP C49W+pXk1likwnjbc8tNGBXuVrAKAabJ8QB5oPgHCaeQYs1g4JA24+mchpu7dvaC pvwJ4aE8pty04PAmbQxuKlAyz0jSBi4DwuffEkC2/A7dSRm0m8F7gnABs6lEzDee g7wVnqP2N3YFNuwnbCEA26z7ExSLji+9HxlBr6DQzOasu2hmuVc39POPeg+im/d5 0wy1CIEbDjT2Zw== -----END CERTIFICATE-----Generated at Sun Dec 21 18:55:14 2025 by rpki-client