This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft File: DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft (raw, json) Hash identifier: PZH4aQ6P1VGSgPOI5v00FcABTU+12hh+6wHnX+5Nweg= Subject key identifier: 80:9B:E5:95:63:81:D5:21:5A:92:CD:8A:E9:6B:B6:65:92:D0:3F:F5 Authority key identifier: 0D:F1:0C:8A:58:05:43:F9:2D:19:FD:5F:8F:56:4B:EE:AA:48:CA:1E Certificate issuer: /CN=0df10c8a580543f92d19fd5f8f564beeaa48ca1e Certificate serial: 019B44A5747884A75633D2358E8B03E766FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft Manifest number: 05D7 Signing time: Mon 22 Dec 2025 06:00:52 +0000 Manifest this update: Mon 22 Dec 2025 06:00:52 +0000 Manifest next update: Tue 23 Dec 2025 06:00:52 +0000 Files and hashes: 1: DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl (hash: hyQCGfmrgNAWYfAaBbrY+s9tenJjongzacQO7vLly6s=) 2: YO9Rv4O7mqZvQ72FaV8J_c91SqM.roa (hash: 2QIlFXVhcWVwoyEM0B/+slqeXVtc2ygy29IyQzPmBpA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 06:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:a5:74:78:84:a7:56:33:d2:35:8e:8b:03:e7:66:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0df10c8a580543f92d19fd5f8f564beeaa48ca1e Validity Not Before: Dec 22 06:00:52 2025 GMT Not After : Dec 23 06:00:52 2025 GMT Subject: CN=809be5956381d5215a92cd8ae96bb66592d03ff5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:d2:ee:13:26:38:7b:97:f0:d0:4b:7d:ee:bb: 9e:75:b9:ef:41:b1:47:77:6d:2e:9d:41:50:a7:6e: 96:e2:d0:54:fd:43:db:e4:30:8f:60:5e:a4:03:c4: 9e:07:4b:aa:71:00:5f:0a:f9:10:19:d5:c8:88:8c: aa:3b:99:0b:1a:08:65:72:b8:b4:49:df:ee:82:45: be:53:84:86:be:41:40:db:f4:58:05:d9:46:aa:3e: 2d:d6:f6:ce:27:41:9b:ae:a3:2d:0e:bf:88:97:b0: dd:c3:f5:ba:2e:38:97:2e:0a:9a:f8:57:5c:48:2c: b0:57:8a:dc:cb:3a:da:64:42:ec:64:31:68:56:93: 64:52:8b:36:b6:03:d6:9f:34:6f:18:ae:c0:e3:2c: b9:a4:09:a4:47:1b:db:5f:d2:29:8e:ef:a0:35:81: a4:d6:52:f2:42:44:4c:54:32:28:9e:a3:96:e6:ee: 96:91:07:52:a0:dc:60:fb:22:b8:61:ef:b2:ec:6c: 80:46:25:e9:d0:d1:0b:6d:cd:25:f9:09:54:ce:9b: b9:3c:63:d7:e0:77:1b:9d:c6:01:03:9f:79:44:f3: 05:23:16:69:cb:9b:93:27:54:15:a9:f8:d2:2a:59: 3f:62:eb:9c:42:7a:c8:4f:20:eb:eb:43:1f:dc:de: 28:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:9B:E5:95:63:81:D5:21:5A:92:CD:8A:E9:6B:B6:65:92:D0:3F:F5 X509v3 Authority Key Identifier: keyid:0D:F1:0C:8A:58:05:43:F9:2D:19:FD:5F:8F:56:4B:EE:AA:48:CA:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:71:9d:25:fd:27:3f:44:54:44:57:d7:db:c9:f6:7c:4e:38: a2:83:37:6c:4f:8d:bc:e9:d6:7d:4b:8d:c0:88:c8:2b:aa:6a: ad:b0:7c:87:14:21:8b:aa:eb:96:49:97:ba:ff:c2:86:34:b8: 45:4b:f0:0b:25:54:2a:e7:85:02:f1:0d:c8:fc:89:fd:b6:96: 2b:aa:85:2c:b9:63:08:3c:80:1c:b6:fd:7a:ba:1b:42:ee:0d: fa:ba:e5:f4:ea:98:92:b7:97:04:b1:7b:c6:8a:b5:eb:0d:98: 4e:33:be:ca:7a:de:51:23:e3:46:e8:16:52:11:e6:63:b4:00: 99:25:0a:39:4c:9e:c9:e9:61:b9:7f:88:a7:7d:be:70:7a:30: b2:d5:e9:00:e6:09:71:29:4c:cb:66:a0:5a:ac:cf:80:fa:a2: 88:5d:82:3c:30:b3:94:3a:45:b0:c8:a0:08:51:4c:99:7e:96: cf:10:05:d6:8c:af:1e:fd:52:1f:d9:0a:46:de:62:5a:c5:c2: 57:ee:38:4f:1b:fc:dc:20:46:d5:36:33:19:a3:4f:6d:dd:35: 7c:06:8b:fa:0c:7d:ae:cf:4e:87:13:9d:04:ab:69:ef:0c:0c: 8c:16:e6:19:49:e1:88:a4:6b:d3:34:18:8f:83:c3:72:32:e6: 29:40:77:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEpXR4hKdWM9I1josD52b/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZjEwYzhhNTgwNTQzZjkyZDE5ZmQ1ZjhmNTY0YmVlYWE0 OGNhMWUwHhcNMjUxMjIyMDYwMDUyWhcNMjUxMjIzMDYwMDUyWjAzMTEwLwYDVQQD Eyg4MDliZTU5NTYzODFkNTIxNWE5MmNkOGFlOTZiYjY2NTkyZDAzZmY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5dLuEyY4e5fw0Et97ruedbnvQbFH d20unUFQp26W4tBU/UPb5DCPYF6kA8SeB0uqcQBfCvkQGdXIiIyqO5kLGghlcri0 Sd/ugkW+U4SGvkFA2/RYBdlGqj4t1vbOJ0GbrqMtDr+Il7Ddw/W6LjiXLgqa+Fdc SCywV4rcyzraZELsZDFoVpNkUos2tgPWnzRvGK7A4yy5pAmkRxvbX9Ipju+gNYGk 1lLyQkRMVDIonqOW5u6WkQdSoNxg+yK4Ye+y7GyARiXp0NELbc0l+QlUzpu5PGPX 4HcbncYBA595RPMFIxZpy5uTJ1QVqfjSKlk/YuucQnrITyDr60Mf3N4obwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFICb5ZVjgdUhWpLNiulrtmWS0D/1MB8GA1UdIwQY MBaAFA3xDIpYBUP5LRn9X49WS+6qSMoeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGZFTWlsZ0ZRX2t0R2YxZmoxWkw3cXBJeWg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS81YjU1YjctNDRiNi00ZjY0LTliNWEt OWUwYTVhMmY2MWI4LzEvRGZFTWlsZ0ZRX2t0R2YxZmoxWkw3cXBJeWg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS81YjU1YjctNDRiNi00ZjY0LTliNWEtOWUwYTVhMmY2MWI4 LzEvRGZFTWlsZ0ZRX2t0R2YxZmoxWkw3cXBJeWg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL3GdJf0n P0RURFfX28n2fE44ooM3bE+NvOnWfUuNwIjIK6pqrbB8hxQhi6rrlkmXuv/ChjS4 RUvwCyVUKueFAvENyPyJ/baWK6qFLLljCDyAHLb9erobQu4N+rrl9OqYkreXBLF7 xoq16w2YTjO+ynreUSPjRugWUhHmY7QAmSUKOUyeyelhuX+Ip32+cHowstXpAOYJ cSlMy2agWqzPgPqiiF2CPDCzlDpFsMigCFFMmX6WzxAF1oyvHv1SH9kKRt5iWsXC V+44Txv83CBG1TYzGaNPbd01fAaL+gx9rs9OhxOdBKtp7wwMjBbmGUnhiKRr0zQY j4PDcjLmKUB31g== -----END CERTIFICATE-----Generated at Mon Dec 22 10:38:57 2025 by rpki-client