This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft File: DA96BN1ySaXRS33gVCpBlzgABsw.mft (raw, json) Hash identifier: b9V2N5lGr2oJ9RoJ1iSIUEwfEtN24mAcmqEJOu0w7zE= Subject key identifier: EF:E7:32:F0:8F:54:74:AC:F1:65:80:97:6A:E4:F6:BE:55:AB:CF:AE Authority key identifier: 0C:0F:7A:04:DD:72:49:A5:D1:4B:7D:E0:54:2A:41:97:38:00:06:CC Certificate issuer: /CN=0c0f7a04dd7249a5d14b7de0542a4197380006cc Certificate serial: 019B3DFEE6A4646C48D951CCD1E745EE224E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DA96BN1ySaXRS33gVCpBlzgABsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft Manifest number: 132C Signing time: Sat 20 Dec 2025 23:01:13 +0000 Manifest this update: Sat 20 Dec 2025 23:01:13 +0000 Manifest next update: Sun 21 Dec 2025 23:01:13 +0000 Files and hashes: 1: DA96BN1ySaXRS33gVCpBlzgABsw.crl (hash: YUwQGNXa5OrDe3Rve2tcFl2oLVKzPOQczMNb7TQAsUA=) 2: DnlnaiUOn3bGRjdw-Yb1fkUsNto.roa (hash: E1ibhwBfmIcFn7h/JxzOSZ/iplWkTSQE9ZGFZ1Ek2Kg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft rsync://rpki.ripe.net/repository/DEFAULT/DA96BN1ySaXRS33gVCpBlzgABsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:e6:a4:64:6c:48:d9:51:cc:d1:e7:45:ee:22:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c0f7a04dd7249a5d14b7de0542a4197380006cc Validity Not Before: Dec 20 23:01:13 2025 GMT Not After : Dec 21 23:01:13 2025 GMT Subject: CN=efe732f08f5474acf16580976ae4f6be55abcfae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2f:c1:8e:f6:5d:03:b4:19:02:69:05:d2:35: 03:c7:bf:4d:0c:aa:84:94:60:55:4c:8a:0a:bc:a4: 40:8d:56:1b:d3:11:8b:cd:25:bb:1f:7b:ba:69:cc: 0a:4e:ed:21:ae:90:eb:8f:46:e9:db:3d:4c:15:df: 57:7b:fd:8d:7e:5a:e7:88:22:93:99:b9:15:ed:86: ea:44:8d:b3:7a:b7:cd:67:98:e9:f0:1e:60:f2:4c: 1f:42:cf:ca:0d:e1:7b:6c:5d:50:98:7e:48:23:04: 8f:15:5b:0c:7e:c3:13:b7:c5:d5:24:59:8e:de:e3: fe:1e:11:2c:42:df:17:7d:55:4a:c4:51:d3:3d:27: 47:32:09:77:46:f7:6f:64:c1:bb:74:c6:0b:4e:44: 35:16:8c:83:f5:26:90:ac:c4:55:4e:7c:1c:a7:70: 3a:ff:46:ed:46:20:2a:86:18:18:93:4a:a0:41:5e: 74:29:aa:74:c7:49:fb:4e:50:48:67:0b:d1:9a:1f: be:b7:f4:50:7b:e9:fd:40:1d:06:db:0c:36:11:39: c5:5d:6b:9a:04:1c:3c:1d:b2:b4:89:da:a1:75:33: 81:58:58:64:86:cf:ae:72:ee:e4:bd:b4:95:7d:77: d4:03:0b:0d:6d:c4:8c:df:fc:64:e0:dd:30:52:5f: 6c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:E7:32:F0:8F:54:74:AC:F1:65:80:97:6A:E4:F6:BE:55:AB:CF:AE X509v3 Authority Key Identifier: keyid:0C:0F:7A:04:DD:72:49:A5:D1:4B:7D:E0:54:2A:41:97:38:00:06:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DA96BN1ySaXRS33gVCpBlzgABsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/11db14-e845-4e4f-a692-a3cbefff7777/1/DA96BN1ySaXRS33gVCpBlzgABsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:e8:18:db:9d:fc:12:57:e6:aa:48:3f:17:26:3b:14:a5:80: 7e:c6:84:8f:ee:e9:c7:27:36:79:76:41:a5:b0:3b:25:db:71: bf:1d:b0:fe:80:61:51:dc:75:25:eb:89:da:ef:80:98:4a:7f: d0:1c:33:1d:ce:5d:98:0c:ac:e6:83:9f:24:c8:dc:b4:71:dc: 4b:97:99:de:df:0d:77:74:25:64:fe:ee:e5:84:0e:20:73:97: 31:4b:36:ba:9c:78:1e:dc:fc:f9:f6:81:da:b9:9a:41:75:5b: 06:5d:f8:5c:a6:24:2b:f5:6a:5c:68:c3:a9:ba:62:77:5c:b4: c8:cb:8b:c9:3a:af:5e:55:2b:7e:dc:eb:8b:00:89:a4:d6:f6: fa:1b:a8:83:f6:0f:99:62:ca:11:81:da:b3:60:5b:f2:25:9a: 6b:b6:76:8c:70:26:ac:9a:f1:fb:21:25:bd:58:2a:d0:1b:80: 5c:1c:f3:72:60:02:58:fd:ae:d2:16:00:df:62:18:30:23:9c: d7:29:2e:21:1c:ed:2c:22:06:f5:b7:b8:9c:fd:19:a6:25:e7: 3c:10:13:d7:9f:ea:e0:94:fa:34:16:05:15:bf:a6:eb:61:90: 26:00:c7:50:df:18:d0:03:28:42:1f:68:12:dc:33:f6:2e:b7: 28:d0:af:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/uakZGxI2VHM0edF7iJOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMGY3YTA0ZGQ3MjQ5YTVkMTRiN2RlMDU0MmE0MTk3Mzgw MDA2Y2MwHhcNMjUxMjIwMjMwMTEzWhcNMjUxMjIxMjMwMTEzWjAzMTEwLwYDVQQD EyhlZmU3MzJmMDhmNTQ3NGFjZjE2NTgwOTc2YWU0ZjZiZTU1YWJjZmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvi/BjvZdA7QZAmkF0jUDx79NDKqE lGBVTIoKvKRAjVYb0xGLzSW7H3u6acwKTu0hrpDrj0bp2z1MFd9Xe/2NflrniCKT mbkV7YbqRI2zerfNZ5jp8B5g8kwfQs/KDeF7bF1QmH5IIwSPFVsMfsMTt8XVJFmO 3uP+HhEsQt8XfVVKxFHTPSdHMgl3RvdvZMG7dMYLTkQ1FoyD9SaQrMRVTnwcp3A6 /0btRiAqhhgYk0qgQV50Kap0x0n7TlBIZwvRmh++t/RQe+n9QB0G2ww2ETnFXWua BBw8HbK0idqhdTOBWFhkhs+ucu7kvbSVfXfUAwsNbcSM3/xk4N0wUl9sHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO/nMvCPVHSs8WWAl2rk9r5Vq8+uMB8GA1UdIwQY MBaAFAwPegTdckml0Ut94FQqQZc4AAbMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREE5NkJOMXlTYVhSUzMzZ1ZDcEJsemdBQnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8xMWRiMTQtZTg0NS00ZTRmLWE2OTIt YTNjYmVmZmY3Nzc3LzEvREE5NkJOMXlTYVhSUzMzZ1ZDcEJsemdBQnN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8xMWRiMTQtZTg0NS00ZTRmLWE2OTItYTNjYmVmZmY3Nzc3 LzEvREE5NkJOMXlTYVhSUzMzZ1ZDcEJsemdBQnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdegY2538 Elfmqkg/FyY7FKWAfsaEj+7pxyc2eXZBpbA7Jdtxvx2w/oBhUdx1JeuJ2u+AmEp/ 0BwzHc5dmAys5oOfJMjctHHcS5eZ3t8Nd3QlZP7u5YQOIHOXMUs2upx4Htz8+faB 2rmaQXVbBl34XKYkK/VqXGjDqbpid1y0yMuLyTqvXlUrftzriwCJpNb2+huog/YP mWLKEYHas2Bb8iWaa7Z2jHAmrJrx+yElvVgq0BuAXBzzcmACWP2u0hYA32IYMCOc 1ykuIRztLCIG9be4nP0ZpiXnPBAT15/q4JT6NBYFFb+m62GQJgDHUN8Y0AMoQh9o Etwz9i63KNCvwg== -----END CERTIFICATE-----Generated at Sun Dec 21 09:14:41 2025 by rpki-client