This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft File: DGhZ_rp4NMkyK3xva9gb0771zlE.mft (raw, json) Hash identifier: v6yWTBk+2FYoWisLdcD9YY2nv4fJXLI2E5jt45GUAYI= Subject key identifier: 80:C5:E0:C3:B6:CD:85:42:68:27:3F:B0:67:AC:DA:E3:3B:5D:65:45 Authority key identifier: 0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51 Certificate issuer: /CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51 Certificate serial: 019B7591EAFAAC0ED97468E8820BD172BB40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft Manifest number: 064A Signing time: Wed 31 Dec 2025 18:00:55 +0000 Manifest this update: Wed 31 Dec 2025 18:00:55 +0000 Manifest next update: Thu 01 Jan 2026 18:00:55 +0000 Files and hashes: 1: A_Ig0V6t3ntCxD7PTccbnIguTs8.roa (hash: x63polo4t0dGd0M1xxigrw4CFjSi7R4AExIbYtwQIRY=) 2: DGhZ_rp4NMkyK3xva9gb0771zlE.crl (hash: f3DYG6kZ4KKRqT7YWnEMz/SGW6sOfj6H6PfIX954YUo=) 3: Zj1rmMEpOraplrkaquOM2ubO6Mc.roa (hash: oIS73RHQscBvRjMMzd2FUWBDj9UGJrVmsW4v2M6hJEQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 16:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:75:91:ea:fa:ac:0e:d9:74:68:e8:82:0b:d1:72:bb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51 Validity Not Before: Dec 31 18:00:55 2025 GMT Not After : Jan 1 18:00:55 2026 GMT Subject: CN=80c5e0c3b6cd854268273fb067acdae33b5d6545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:74:dc:fd:f0:57:64:76:93:95:3c:f8:e9:11: 94:bd:36:70:58:ef:38:6b:df:dc:4d:ba:7a:4e:34: eb:bd:90:82:15:3f:a8:94:dd:f1:a9:dd:26:e2:f5: ac:17:e5:15:91:20:fe:86:e6:16:5f:3c:81:a5:b1: 58:e6:ec:7e:ab:86:56:c4:27:ed:89:da:f8:93:b7: 7f:0f:b5:2e:55:67:cc:85:93:b3:22:3d:a3:7e:59: 96:a8:65:3f:81:25:83:f0:a2:91:f1:f4:32:18:11: c7:88:fd:28:94:f6:62:11:9b:a7:c9:bd:c7:05:e2: 3d:24:af:ea:c1:54:21:53:e3:a5:f6:ae:b9:04:2e: 32:f6:e6:dd:a4:19:92:79:da:2c:e4:0d:a4:5e:cd: fb:e5:f0:a6:01:e7:34:29:33:88:60:72:fb:0a:8b: e2:aa:01:1a:17:27:0e:f2:f0:b9:2e:16:3c:36:49: fc:6d:d3:d3:7b:e3:6b:c7:c3:1f:f6:51:af:dc:e0: 04:cf:26:73:1a:d5:de:97:ae:89:6c:50:e6:d7:05: 89:37:c1:f9:2e:81:84:b0:c2:4d:1a:0c:02:63:d0: d8:94:29:e6:26:b2:9c:8f:2d:95:a1:ae:e6:81:c3: a6:57:e6:78:c4:ed:9b:a7:b7:af:a2:79:2f:89:a9: 12:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:C5:E0:C3:B6:CD:85:42:68:27:3F:B0:67:AC:DA:E3:3B:5D:65:45 X509v3 Authority Key Identifier: keyid:0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:b0:2d:f0:7a:70:a6:75:ab:a8:a4:32:88:d2:61:fc:a6:ff: 20:36:74:4a:b9:71:68:8c:55:7f:de:ee:c1:1a:b7:a3:1a:74: cb:ab:1f:30:27:c3:9d:af:f3:91:45:8e:90:01:3f:80:0b:0f: 2f:27:1e:96:4c:1a:36:01:4e:f5:1c:b0:a4:73:6a:47:15:55: 66:2d:70:be:d4:ef:64:cb:83:f5:40:7d:e1:ff:d6:11:b9:cc: 2c:84:23:a8:bd:e9:5f:7f:be:bc:c6:c0:c8:78:19:e9:a9:fc: 26:a6:dd:e2:7f:0e:f1:6f:7c:0f:ba:07:e4:35:e9:10:62:fe: 01:58:d9:ad:ee:3f:f7:04:61:b6:45:52:7a:b8:4a:d1:f7:89: 91:66:51:46:43:b6:be:f5:c1:d8:f9:1a:4e:a6:e3:ec:c7:b9: 38:ff:f7:b3:38:7f:e9:ec:7d:e8:60:b1:c0:78:01:58:40:6b: a2:e8:60:f7:eb:7d:3f:c0:bc:b1:f0:b2:d7:f0:18:cd:dc:f2: 1a:b9:c4:8c:21:9b:c1:04:72:e4:a7:c4:b3:cb:04:84:94:d2: 2c:26:39:9f:25:14:68:28:d6:89:8f:f4:bf:4b:59:49:f5:bf: c6:47:76:0a:3b:d2:8b:89:5d:f5:12:eb:95:a1:27:82:6f:d9: 42:65:ae:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt1ker6rA7ZdGjoggvRcrtAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNjg1OWZlYmE3ODM0YzkzMjJiN2M2ZjZiZDgxYmQzYmVm NWNlNTEwHhcNMjUxMjMxMTgwMDU1WhcNMjYwMTAxMTgwMDU1WjAzMTEwLwYDVQQD Eyg4MGM1ZTBjM2I2Y2Q4NTQyNjgyNzNmYjA2N2FjZGFlMzNiNWQ2NTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3Tc/fBXZHaTlTz46RGUvTZwWO84 a9/cTbp6TjTrvZCCFT+olN3xqd0m4vWsF+UVkSD+huYWXzyBpbFY5ux+q4ZWxCft idr4k7d/D7UuVWfMhZOzIj2jflmWqGU/gSWD8KKR8fQyGBHHiP0olPZiEZunyb3H BeI9JK/qwVQhU+Ol9q65BC4y9ubdpBmSedos5A2kXs375fCmAec0KTOIYHL7Covi qgEaFycO8vC5LhY8Nkn8bdPTe+Nrx8Mf9lGv3OAEzyZzGtXel66JbFDm1wWJN8H5 LoGEsMJNGgwCY9DYlCnmJrKcjy2Voa7mgcOmV+Z4xO2bp7evonkviakS8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIDF4MO2zYVCaCc/sGes2uM7XWVFMB8GA1UdIwQY MBaAFAxoWf66eDTJMit8b2vYG9O+9c5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREdoWl9ycDROTWt5SzN4dmE5Z2IwNzcxemxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC84YzNhOGItOTE3MS00NjIwLWIxZTAt NzdmY2E3YTMwYjlmLzEvREdoWl9ycDROTWt5SzN4dmE5Z2IwNzcxemxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC84YzNhOGItOTE3MS00NjIwLWIxZTAtNzdmY2E3YTMwYjlm LzEvREdoWl9ycDROTWt5SzN4dmE5Z2IwNzcxemxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhrAt8Hpw pnWrqKQyiNJh/Kb/IDZ0SrlxaIxVf97uwRq3oxp0y6sfMCfDna/zkUWOkAE/gAsP LycelkwaNgFO9RywpHNqRxVVZi1wvtTvZMuD9UB94f/WEbnMLIQjqL3pX3++vMbA yHgZ6an8Jqbd4n8O8W98D7oH5DXpEGL+AVjZre4/9wRhtkVSerhK0feJkWZRRkO2 vvXB2PkaTqbj7Me5OP/3szh/6ex96GCxwHgBWEBrouhg9+t9P8C8sfCy1/AYzdzy GrnEjCGbwQRy5KfEs8sEhJTSLCY5nyUUaCjWiY/0v0tZSfW/xkd2CjvSi4ld9RLr laEngm/ZQmWu1g== -----END CERTIFICATE-----Generated at Wed Dec 31 19:35:45 2025 by rpki-client