This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft File: DGhZ_rp4NMkyK3xva9gb0771zlE.mft (raw, json) Hash identifier: F+vB5XVj0/PdTUbTmv60TqQEuIlRCMzLlHsDerh/LBM= Subject key identifier: F2:28:92:DB:B8:17:27:F6:7E:6D:17:2C:D6:85:DD:ED:F3:A8:5E:89 Authority key identifier: 0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51 Certificate issuer: /CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51 Certificate serial: 019B39B3E6768A6B9F9E0EA7717B6C859EE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft Manifest number: 062B Signing time: Sat 20 Dec 2025 03:00:49 +0000 Manifest this update: Sat 20 Dec 2025 03:00:49 +0000 Manifest next update: Sun 21 Dec 2025 03:00:49 +0000 Files and hashes: 1: A_Ig0V6t3ntCxD7PTccbnIguTs8.roa (hash: x63polo4t0dGd0M1xxigrw4CFjSi7R4AExIbYtwQIRY=) 2: DGhZ_rp4NMkyK3xva9gb0771zlE.crl (hash: KS5S8yEwTS70hog11QAQgL4xnkpE57hcRnJ1EFHuzGo=) 3: Zj1rmMEpOraplrkaquOM2ubO6Mc.roa (hash: oIS73RHQscBvRjMMzd2FUWBDj9UGJrVmsW4v2M6hJEQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 03:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b3:e6:76:8a:6b:9f:9e:0e:a7:71:7b:6c:85:9e:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51 Validity Not Before: Dec 20 03:00:49 2025 GMT Not After : Dec 21 03:00:49 2025 GMT Subject: CN=f22892dbb81727f67e6d172cd685ddedf3a85e89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fe:9c:eb:82:6a:e8:c6:5b:c6:e5:dc:6d:03: a0:a2:ed:95:a2:11:c0:e4:dd:d3:7e:cb:70:27:64: 28:31:9e:ac:9f:b0:df:a1:62:87:82:8d:8b:ed:71: ad:ed:7f:51:f1:1c:bc:eb:52:e1:10:e0:9c:5f:30: 83:72:af:6c:24:e1:b7:38:84:8b:4a:a6:cd:fd:9b: 5d:27:9f:77:b9:cc:4d:c3:2f:24:a0:61:70:47:bc: 19:ae:54:d5:60:f1:56:49:b7:28:3a:93:c8:0f:51: 91:53:c1:49:5a:4e:b0:e2:70:a8:d2:71:24:6e:4b: fa:3d:39:01:fa:5c:8f:77:df:5b:c8:11:5e:10:ee: be:65:33:62:9c:4f:c8:45:6b:aa:48:30:fd:05:d2: ac:b6:a8:a7:39:99:ee:83:70:e3:ea:fb:66:f2:5f: 38:5e:3b:95:2c:6b:e7:23:32:cf:28:e3:e4:3c:34: 03:86:7d:ba:b4:a3:19:29:19:11:2b:42:3d:2e:47: 4e:f5:9a:85:e7:93:3a:dd:5b:27:ed:99:41:b6:06: 9d:09:01:2d:53:a6:93:be:21:93:5f:c1:9a:b2:e2: 54:96:9e:c7:b3:8d:a9:ba:23:6e:32:b5:55:bc:ba: dd:65:8f:b0:7d:9b:75:13:12:59:a7:c5:40:04:75: 1c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:28:92:DB:B8:17:27:F6:7E:6D:17:2C:D6:85:DD:ED:F3:A8:5E:89 X509v3 Authority Key Identifier: keyid:0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:50:6c:e8:e5:d8:fe:a5:da:0f:0a:4a:ba:ad:be:05:ad:86: 87:71:95:7a:cd:0a:da:65:91:2e:30:59:d8:bb:92:ce:0b:1c: b8:b6:df:51:d3:54:20:e5:da:55:ca:7f:8e:dc:0f:c1:93:49: 8d:4c:1c:5f:a5:eb:46:b8:29:89:f8:b6:5b:76:88:11:62:98: 37:59:9d:e6:e7:72:e3:d3:bb:e0:c2:ed:e7:f6:8b:f6:d3:5e: e7:25:12:1e:03:f4:8c:9c:8f:2a:51:94:14:c5:0a:f5:25:a3: e1:99:42:0a:54:f9:f6:a8:f7:5b:18:7b:bf:9d:04:11:06:76: 59:32:ba:3a:ab:88:07:ee:ea:6f:b2:d9:62:7e:ab:3f:1b:22: 2b:00:4a:f6:30:ed:d0:4d:0e:6a:f2:c8:17:61:56:48:4f:fc: 8a:5b:b7:01:af:8f:26:13:e7:2c:8a:bc:d9:1b:82:20:56:5b: ef:e2:b5:60:86:da:79:63:e1:f8:39:c2:f7:f7:bc:f6:6d:ae: 32:9d:85:14:c7:4a:3b:b5:5a:e3:47:81:11:a1:7f:89:0f:34: a0:15:ac:7e:d5:14:c0:6d:49:08:aa:8e:8f:23:3b:2c:f6:40: c6:b6:da:a2:9e:33:16:05:2b:1b:19:8a:da:e7:0b:3e:f5:d0: 00:82:f6:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5s+Z2imufng6ncXtshZ7hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNjg1OWZlYmE3ODM0YzkzMjJiN2M2ZjZiZDgxYmQzYmVm NWNlNTEwHhcNMjUxMjIwMDMwMDQ5WhcNMjUxMjIxMDMwMDQ5WjAzMTEwLwYDVQQD EyhmMjI4OTJkYmI4MTcyN2Y2N2U2ZDE3MmNkNjg1ZGRlZGYzYTg1ZTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/6c64Jq6MZbxuXcbQOgou2VohHA 5N3TfstwJ2QoMZ6sn7DfoWKHgo2L7XGt7X9R8Ry861LhEOCcXzCDcq9sJOG3OISL SqbN/ZtdJ593ucxNwy8koGFwR7wZrlTVYPFWSbcoOpPID1GRU8FJWk6w4nCo0nEk bkv6PTkB+lyPd99byBFeEO6+ZTNinE/IRWuqSDD9BdKstqinOZnug3Dj6vtm8l84 XjuVLGvnIzLPKOPkPDQDhn26tKMZKRkRK0I9LkdO9ZqF55M63Vsn7ZlBtgadCQEt U6aTviGTX8GasuJUlp7Hs42puiNuMrVVvLrdZY+wfZt1ExJZp8VABHUc6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPIoktu4Fyf2fm0XLNaF3e3zqF6JMB8GA1UdIwQY MBaAFAxoWf66eDTJMit8b2vYG9O+9c5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREdoWl9ycDROTWt5SzN4dmE5Z2IwNzcxemxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC84YzNhOGItOTE3MS00NjIwLWIxZTAt NzdmY2E3YTMwYjlmLzEvREdoWl9ycDROTWt5SzN4dmE5Z2IwNzcxemxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC84YzNhOGItOTE3MS00NjIwLWIxZTAtNzdmY2E3YTMwYjlm LzEvREdoWl9ycDROTWt5SzN4dmE5Z2IwNzcxemxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASVBs6OXY /qXaDwpKuq2+Ba2Gh3GVes0K2mWRLjBZ2LuSzgscuLbfUdNUIOXaVcp/jtwPwZNJ jUwcX6XrRrgpifi2W3aIEWKYN1md5udy49O74MLt5/aL9tNe5yUSHgP0jJyPKlGU FMUK9SWj4ZlCClT59qj3Wxh7v50EEQZ2WTK6OquIB+7qb7LZYn6rPxsiKwBK9jDt 0E0OavLIF2FWSE/8ilu3Aa+PJhPnLIq82RuCIFZb7+K1YIbaeWPh+DnC9/e89m2u Mp2FFMdKO7Va40eBEaF/iQ80oBWsftUUwG1JCKqOjyM7LPZAxrbaop4zFgUrGxmK 2ucLPvXQAIL2+g== -----END CERTIFICATE-----Generated at Sat Dec 20 12:39:35 2025 by rpki-client