This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.mft File: DvgMyei0RaB_7srAr8WeQtxxAmM.mft (raw, json) Hash identifier: qPewIcx6+gVZIUrUVz78/hJOjSOlX39PsDHrLxDshuI= Subject key identifier: 43:08:3B:E3:14:68:AB:03:BE:E4:DF:07:20:EF:42:1E:42:F1:0F:00 Authority key identifier: 0E:F8:0C:C9:E8:B4:45:A0:7F:EE:CA:C0:AF:C5:9E:42:DC:71:02:63 Certificate issuer: /CN=0ef80cc9e8b445a07feecac0afc59e42dc710263 Certificate serial: 019B405C66943F83E07A77658D01B0BA9702 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvgMyei0RaB_7srAr8WeQtxxAmM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.mft Manifest number: 04DA Signing time: Sun 21 Dec 2025 10:02:35 +0000 Manifest this update: Sun 21 Dec 2025 10:02:35 +0000 Manifest next update: Mon 22 Dec 2025 10:02:35 +0000 Files and hashes: 1: DvgMyei0RaB_7srAr8WeQtxxAmM.crl (hash: 00+xH9FEDF6NhBTZ3XryyEOGMFeKjypeV0IWP6x8FEo=) 2: GkiYUK0j2nxxbWMqhxnhdq_0Enc.roa (hash: NOyHUSRyn/zm35BU84aYQfd0YAX7k067uz4v2RofCv8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.mft rsync://rpki.ripe.net/repository/DEFAULT/DvgMyei0RaB_7srAr8WeQtxxAmM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5c:66:94:3f:83:e0:7a:77:65:8d:01:b0:ba:97:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ef80cc9e8b445a07feecac0afc59e42dc710263 Validity Not Before: Dec 21 10:02:35 2025 GMT Not After : Dec 22 10:02:35 2025 GMT Subject: CN=43083be31468ab03bee4df0720ef421e42f10f00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b3:8f:ff:f5:b0:06:b4:f9:a7:46:8a:46:fb: f3:ad:c7:ef:ca:1b:93:73:03:67:7a:3e:e9:fa:cb: cf:e2:45:4a:27:23:9b:50:eb:c0:ac:cc:fe:20:f9: b1:68:6c:4d:f3:f8:58:b5:b7:0f:9e:a0:7c:ee:d7: db:30:1a:03:5b:fd:9b:5f:9b:9f:2a:58:14:f9:09: 1c:55:e6:d4:8f:7e:b1:a2:bd:5c:0b:13:a8:d9:42: 2a:bd:6e:61:25:77:a9:b8:a6:3c:56:fa:25:a1:b3: 52:d1:2f:7b:46:2c:eb:ff:66:72:c6:70:bd:52:0c: 73:d1:20:c2:8b:84:92:97:fb:1a:65:6f:2d:3b:72: 38:55:67:24:dc:1a:83:48:48:68:b7:a8:3f:12:89: 35:c8:63:88:21:25:cb:f7:41:e5:bb:d6:fb:74:8f: 8e:05:10:02:07:50:34:6f:49:ce:b8:92:64:15:9c: 36:3d:3b:89:e5:77:05:30:cb:fb:cd:f4:bf:d4:f3: 00:32:ae:2a:63:59:32:b7:24:79:5b:d0:68:d8:37: 75:4d:72:18:ef:2d:f6:ea:38:fd:cb:64:fd:8f:f3: 00:e7:55:b3:2a:46:50:06:95:09:71:91:22:92:ab: a5:10:cc:a8:95:ec:7c:75:f5:ca:46:14:3a:43:00: 84:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:08:3B:E3:14:68:AB:03:BE:E4:DF:07:20:EF:42:1E:42:F1:0F:00 X509v3 Authority Key Identifier: keyid:0E:F8:0C:C9:E8:B4:45:A0:7F:EE:CA:C0:AF:C5:9E:42:DC:71:02:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvgMyei0RaB_7srAr8WeQtxxAmM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:02:9d:ef:46:95:2d:9c:6b:a2:85:68:ed:e6:06:c4:c2:06: 9d:45:5e:91:96:fb:ca:a4:29:25:75:13:f8:6c:f1:e2:c6:33: 2a:89:7b:55:44:89:4c:32:09:03:e6:ba:df:6d:96:0a:73:a9: 6d:13:f1:87:7c:38:44:67:e5:aa:d2:a1:b4:61:a2:b2:ce:cc: 46:4e:16:1b:4d:a5:45:d1:76:b8:ed:07:3d:f6:e9:09:7e:51: bd:1b:db:2c:99:e2:2c:49:3f:c8:90:0a:04:98:a4:d1:32:d2: 12:94:13:02:d3:b6:70:c8:8b:3e:67:79:9c:07:de:26:89:93: 5a:90:d1:fa:47:63:8c:79:35:15:3f:d9:bd:1d:31:bc:7f:51: 09:77:7c:77:0f:47:76:2c:55:53:83:63:88:2e:a8:1e:11:96: 70:9f:30:ce:fd:91:8e:ef:d7:a8:d0:27:77:6c:e0:af:f6:0f: 37:37:68:13:f0:10:3b:82:ac:66:0d:ef:bd:2f:bb:88:67:52: 19:0f:8a:6f:a6:eb:1c:78:93:9b:83:b8:89:87:18:d0:0b:0e: e4:4d:15:6a:37:ad:41:5a:66:80:2f:a9:94:2f:14:0b:7b:39: 8d:06:85:f8:e1:d9:2a:a2:52:db:6e:98:e3:26:8d:42:e1:1f: f7:a3:ec:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAXGaUP4PgendljQGwupcCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlZjgwY2M5ZThiNDQ1YTA3ZmVlY2FjMGFmYzU5ZTQyZGM3 MTAyNjMwHhcNMjUxMjIxMTAwMjM1WhcNMjUxMjIyMTAwMjM1WjAzMTEwLwYDVQQD Eyg0MzA4M2JlMzE0NjhhYjAzYmVlNGRmMDcyMGVmNDIxZTQyZjEwZjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rOP//WwBrT5p0aKRvvzrcfvyhuT cwNnej7p+svP4kVKJyObUOvArMz+IPmxaGxN8/hYtbcPnqB87tfbMBoDW/2bX5uf KlgU+QkcVebUj36xor1cCxOo2UIqvW5hJXepuKY8VvolobNS0S97Rizr/2ZyxnC9 Ugxz0SDCi4SSl/saZW8tO3I4VWck3BqDSEhot6g/Eok1yGOIISXL90Hlu9b7dI+O BRACB1A0b0nOuJJkFZw2PTuJ5XcFMMv7zfS/1PMAMq4qY1kytyR5W9Bo2Dd1TXIY 7y326jj9y2T9j/MA51WzKkZQBpUJcZEikqulEMyolex8dfXKRhQ6QwCEXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEMIO+MUaKsDvuTfByDvQh5C8Q8AMB8GA1UdIwQY MBaAFA74DMnotEWgf+7KwK/FnkLccQJjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHZnTXllaTBSYUJfN3NyQXI4V2VRdHh4QW1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8wODZiZGEtYTQ2NC00NGQ4LThkMWIt ODY2ZTVkNGM2ZWRiLzEvRHZnTXllaTBSYUJfN3NyQXI4V2VRdHh4QW1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi8wODZiZGEtYTQ2NC00NGQ4LThkMWItODY2ZTVkNGM2ZWRi LzEvRHZnTXllaTBSYUJfN3NyQXI4V2VRdHh4QW1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmwKd70aV LZxrooVo7eYGxMIGnUVekZb7yqQpJXUT+Gzx4sYzKol7VUSJTDIJA+a6322WCnOp bRPxh3w4RGflqtKhtGGiss7MRk4WG02lRdF2uO0HPfbpCX5RvRvbLJniLEk/yJAK BJik0TLSEpQTAtO2cMiLPmd5nAfeJomTWpDR+kdjjHk1FT/ZvR0xvH9RCXd8dw9H dixVU4NjiC6oHhGWcJ8wzv2Rju/XqNAnd2zgr/YPNzdoE/AQO4KsZg3vvS+7iGdS GQ+Kb6brHHiTm4O4iYcY0AsO5E0VajetQVpmgC+plC8UC3s5jQaF+OHZKqJS226Y 4yaNQuEf96Ps0A== -----END CERTIFICATE-----Generated at Sun Dec 21 19:03:59 2025 by rpki-client