This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft File: DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft (raw, json) Hash identifier: On7m5WcJ8Ncu6fkXMaSEQnAlcvaQ1kkd4se2Vilpj1k= Subject key identifier: C6:43:BD:29:B7:BA:40:50:FA:76:01:9E:F5:96:03:3D:11:62:8D:90 Authority key identifier: 0D:F1:0C:8A:58:05:43:F9:2D:19:FD:5F:8F:56:4B:EE:AA:48:CA:1E Certificate issuer: /CN=0df10c8a580543f92d19fd5f8f564beeaa48ca1e Certificate serial: 019B3CEBF06C3254C59060101D0E6D063EAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft Manifest number: 05D3 Signing time: Sat 20 Dec 2025 18:00:53 +0000 Manifest this update: Sat 20 Dec 2025 18:00:53 +0000 Manifest next update: Sun 21 Dec 2025 18:00:53 +0000 Files and hashes: 1: DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl (hash: fNxUyrtUhNyubLh87jkiICbFQafNRa6hIE24w2Vcdlo=) 2: YO9Rv4O7mqZvQ72FaV8J_c91SqM.roa (hash: 2QIlFXVhcWVwoyEM0B/+slqeXVtc2ygy29IyQzPmBpA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:f0:6c:32:54:c5:90:60:10:1d:0e:6d:06:3e:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0df10c8a580543f92d19fd5f8f564beeaa48ca1e Validity Not Before: Dec 20 18:00:53 2025 GMT Not After : Dec 21 18:00:53 2025 GMT Subject: CN=c643bd29b7ba4050fa76019ef596033d11628d90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:45:b7:ab:f4:5a:fa:86:4c:c0:6d:69:3f:25: de:32:70:53:60:4c:dc:15:16:aa:84:d6:94:c3:33: 88:a6:d5:d0:35:e6:10:12:d8:d7:92:1e:c1:25:2a: 98:71:89:11:a5:94:f2:d6:2e:63:e1:65:ec:ef:ec: aa:92:b4:a8:1b:cc:5b:64:d7:60:e8:fd:ad:cf:c4: 3a:cc:3f:23:bd:e3:b0:8a:58:a6:b5:9f:68:81:33: 30:95:54:8b:79:db:44:41:01:f5:a6:4f:80:4a:82: af:ba:7b:1c:85:33:4d:82:65:65:df:1b:02:ff:06: 82:9b:0b:2c:ce:8b:6d:55:15:05:e9:ff:7c:15:4d: a1:0c:3c:27:b7:db:5b:26:7a:d2:3f:fb:ad:89:36: df:bd:d0:62:28:ce:f6:cd:b5:4f:4e:cd:fc:35:f1: e3:61:e3:bb:c8:d8:d3:ce:71:39:67:b5:9c:a8:6d: a5:7a:01:84:b2:33:61:27:a0:cf:e9:e2:3f:d3:b6: 87:21:f8:3a:e6:9e:45:22:d6:b3:23:5b:be:ac:47: 3b:b9:55:00:a6:9e:b1:fa:91:7a:a4:e8:9a:98:c7: 10:2a:56:a6:e1:ec:2f:6c:2c:12:9a:23:59:c6:b3: fa:fa:d2:05:be:e3:1c:cd:bd:36:b1:a0:6d:69:de: be:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:43:BD:29:B7:BA:40:50:FA:76:01:9E:F5:96:03:3D:11:62:8D:90 X509v3 Authority Key Identifier: keyid:0D:F1:0C:8A:58:05:43:F9:2D:19:FD:5F:8F:56:4B:EE:AA:48:CA:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:fd:58:e0:19:17:d0:b5:0f:1e:3f:8d:56:dd:65:4d:0c:62: 2d:6d:bb:f7:e8:9c:bc:13:74:3c:7a:5c:41:d0:30:5a:0e:45: ce:5c:ed:87:98:35:98:04:20:e0:ef:9f:d1:43:4a:30:f8:d6: 8f:07:20:c7:90:24:b1:23:44:5f:50:bc:36:42:74:2b:6f:9c: dd:95:ba:fe:69:53:f5:b8:2d:61:b5:95:d7:4c:b1:d9:16:05: aa:2e:1e:e3:23:2a:e1:2c:74:c1:50:af:75:0f:db:42:5c:36: 90:a6:a6:09:e8:00:6f:02:64:00:06:14:a0:90:4b:3c:5f:4c: f6:e7:26:f9:97:9a:c7:05:c5:03:92:6c:9d:e6:53:fc:bf:99: f4:0c:16:4b:c9:ea:3f:c8:ea:be:02:10:b3:7e:2a:c1:de:fd: bc:67:c8:aa:32:6e:da:ff:09:a5:a3:3c:c0:b2:23:e3:fd:f4: 92:46:d2:6d:59:6e:d4:90:83:b9:75:4a:c6:e0:d1:73:57:0b: ed:32:b5:1a:5c:1d:c7:69:0e:7d:94:0f:9d:30:62:59:7a:62: 83:bd:da:b0:d5:c1:df:1d:40:a2:0f:3c:78:f8:58:f0:54:6c: 9c:af:01:f1:82:89:ee:19:4d:d6:5c:a5:a7:8e:ce:b6:e1:97: c9:94:e5:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs86/BsMlTFkGAQHQ5tBj6uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZjEwYzhhNTgwNTQzZjkyZDE5ZmQ1ZjhmNTY0YmVlYWE0 OGNhMWUwHhcNMjUxMjIwMTgwMDUzWhcNMjUxMjIxMTgwMDUzWjAzMTEwLwYDVQQD EyhjNjQzYmQyOWI3YmE0MDUwZmE3NjAxOWVmNTk2MDMzZDExNjI4ZDkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0W3q/Ra+oZMwG1pPyXeMnBTYEzc FRaqhNaUwzOIptXQNeYQEtjXkh7BJSqYcYkRpZTy1i5j4WXs7+yqkrSoG8xbZNdg 6P2tz8Q6zD8jveOwilimtZ9ogTMwlVSLedtEQQH1pk+ASoKvunschTNNgmVl3xsC /waCmwsszottVRUF6f98FU2hDDwnt9tbJnrSP/utiTbfvdBiKM72zbVPTs38NfHj YeO7yNjTznE5Z7WcqG2legGEsjNhJ6DP6eI/07aHIfg65p5FItazI1u+rEc7uVUA pp6x+pF6pOiamMcQKlam4ewvbCwSmiNZxrP6+tIFvuMczb02saBtad6+tQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMZDvSm3ukBQ+nYBnvWWAz0RYo2QMB8GA1UdIwQY MBaAFA3xDIpYBUP5LRn9X49WS+6qSMoeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGZFTWlsZ0ZRX2t0R2YxZmoxWkw3cXBJeWg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS81YjU1YjctNDRiNi00ZjY0LTliNWEt OWUwYTVhMmY2MWI4LzEvRGZFTWlsZ0ZRX2t0R2YxZmoxWkw3cXBJeWg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS81YjU1YjctNDRiNi00ZjY0LTliNWEtOWUwYTVhMmY2MWI4 LzEvRGZFTWlsZ0ZRX2t0R2YxZmoxWkw3cXBJeWg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdv1Y4BkX 0LUPHj+NVt1lTQxiLW279+icvBN0PHpcQdAwWg5Fzlzth5g1mAQg4O+f0UNKMPjW jwcgx5AksSNEX1C8NkJ0K2+c3ZW6/mlT9bgtYbWV10yx2RYFqi4e4yMq4Sx0wVCv dQ/bQlw2kKamCegAbwJkAAYUoJBLPF9M9ucm+ZeaxwXFA5JsneZT/L+Z9AwWS8nq P8jqvgIQs34qwd79vGfIqjJu2v8JpaM8wLIj4/30kkbSbVlu1JCDuXVKxuDRc1cL 7TK1Glwdx2kOfZQPnTBiWXpig73asNXB3x1Aog88ePhY8FRsnK8B8YKJ7hlN1lyl p47OtuGXyZTlLQ== -----END CERTIFICATE-----Generated at Sat Dec 20 22:07:47 2025 by rpki-client