This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft File: DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft (raw, json) Hash identifier: 69qsZy2ASzVrz2eASvMdpd7kaFHDBI8xYiJaM7gcbSU= Subject key identifier: 38:C0:24:AC:7C:88:B6:BB:34:9E:01:4D:5B:2E:7D:5D:2C:7E:4D:59 Authority key identifier: 0D:7A:91:25:69:B7:87:D9:2E:53:55:FF:FA:ED:58:1F:E5:0A:29:C0 Certificate issuer: /CN=0d7a912569b787d92e5355fffaed581fe50a29c0 Certificate serial: 019B3EDA55C5C09881D8889DFA381833A147 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft Manifest number: 0D93 Signing time: Sun 21 Dec 2025 03:00:54 +0000 Manifest this update: Sun 21 Dec 2025 03:00:54 +0000 Manifest next update: Mon 22 Dec 2025 03:00:54 +0000 Files and hashes: 1: 1-KvMzZmip20mq_6TE6zao4jxRAY.roa (hash: +e++mFx5okLj8UNvWINUv13IrPw1m2hTZhWWjifAWCI=) 2: DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl (hash: 8mm82ZoCKBDKFxFB19LGJrWjtlq6e8BTW/b0W/csbQI=) 3: o-s15NWoSVwgSNMQIfsWarrXXGg.roa (hash: 6NGLeGFSgaPGE1dmOJNyifUaOXRJYE04QVot2QOuL9c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:55:c5:c0:98:81:d8:88:9d:fa:38:18:33:a1:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d7a912569b787d92e5355fffaed581fe50a29c0 Validity Not Before: Dec 21 03:00:54 2025 GMT Not After : Dec 22 03:00:54 2025 GMT Subject: CN=38c024ac7c88b6bb349e014d5b2e7d5d2c7e4d59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:41:f1:4f:6f:e0:fb:40:ea:bf:6d:f6:30:11: b8:05:4b:1d:80:67:60:c2:46:84:f1:60:ba:2b:47: a9:06:33:43:21:2a:17:e6:0b:36:14:bc:60:5c:8f: d1:9e:38:ce:8c:fa:51:62:31:84:cd:9f:70:d0:4a: d9:fd:80:06:7f:7f:e3:ca:0b:06:31:51:f5:20:04: aa:d1:3b:1a:9a:e9:c6:e4:5f:a4:83:8a:91:cb:44: 59:8b:30:cc:ad:0f:dc:bf:e4:61:05:48:46:3c:2d: 65:61:cd:03:29:f0:41:41:7e:82:39:1b:67:59:55: 7a:0f:fc:a7:b6:28:8d:8b:de:b2:dc:92:15:1d:02: 67:ce:53:a7:5b:85:3c:10:c5:9f:07:28:69:9b:f0: d1:32:09:d5:12:87:bd:24:89:63:df:86:aa:6d:b1: ed:9e:3e:32:d7:f3:00:ea:da:e8:25:25:ff:4d:3d: a8:8e:a0:3d:4f:4e:51:21:12:88:b7:3b:36:d2:7e: e7:26:02:53:25:e4:09:f5:8c:43:ab:9f:d9:86:41: e5:db:df:96:25:11:b6:f3:1d:86:0b:f9:f3:1f:72: a3:0d:bd:71:2e:da:18:c2:95:88:a1:d0:53:c1:23: 39:09:bc:ce:b4:90:72:1d:d8:32:5c:84:0b:91:07: af:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:C0:24:AC:7C:88:B6:BB:34:9E:01:4D:5B:2E:7D:5D:2C:7E:4D:59 X509v3 Authority Key Identifier: keyid:0D:7A:91:25:69:B7:87:D9:2E:53:55:FF:FA:ED:58:1F:E5:0A:29:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:d2:9f:a6:dc:b2:60:28:13:12:fd:58:06:52:f1:5c:3c:f3: d0:b0:03:f3:aa:3c:4a:21:b5:9e:59:1c:77:d8:90:e2:a7:bb: 91:47:90:12:3c:52:7f:84:2f:a7:3f:6b:ce:10:78:47:c7:23: fa:50:21:69:46:b8:40:fa:0c:4a:57:9f:3e:e0:04:ae:c3:d5: 7d:f1:ca:04:04:6e:a1:5d:1c:e7:6c:cb:de:c6:17:91:10:ac: f7:3f:ef:00:3d:0a:e9:a7:d7:85:87:9a:df:46:07:b8:67:45: 9b:d0:9b:a4:99:e6:9b:ea:1d:74:5b:a1:e9:a5:01:14:66:a0: bc:79:3f:46:af:d2:78:16:48:2d:bd:b7:fc:cd:5e:00:60:de: 51:ee:28:59:ab:b6:bf:a1:10:b6:21:d4:28:f9:12:66:c5:f5: 63:16:fe:08:0f:ee:c4:78:7f:03:c2:5e:dc:d1:d9:89:9d:1a: 5e:d9:91:44:00:03:e6:4d:5e:fc:ae:08:86:30:6b:80:4b:70: af:c5:b2:f3:76:cd:73:d6:ca:36:4f:d3:23:c8:56:b2:db:65: 1e:ef:75:04:1a:94:e9:e8:78:b6:9b:10:de:04:61:d7:5f:83: 88:93:4e:c4:8e:22:30:79:f4:47:61:fb:68:97:14:59:6d:e1: be:21:99:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2lXFwJiB2Iid+jgYM6FHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkN2E5MTI1NjliNzg3ZDkyZTUzNTVmZmZhZWQ1ODFmZTUw YTI5YzAwHhcNMjUxMjIxMDMwMDU0WhcNMjUxMjIyMDMwMDU0WjAzMTEwLwYDVQQD EygzOGMwMjRhYzdjODhiNmJiMzQ5ZTAxNGQ1YjJlN2Q1ZDJjN2U0ZDU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UHxT2/g+0Dqv232MBG4BUsdgGdg wkaE8WC6K0epBjNDISoX5gs2FLxgXI/RnjjOjPpRYjGEzZ9w0ErZ/YAGf3/jygsG MVH1IASq0TsamunG5F+kg4qRy0RZizDMrQ/cv+RhBUhGPC1lYc0DKfBBQX6CORtn WVV6D/yntiiNi96y3JIVHQJnzlOnW4U8EMWfByhpm/DRMgnVEoe9JIlj34aqbbHt nj4y1/MA6troJSX/TT2ojqA9T05RIRKItzs20n7nJgJTJeQJ9YxDq5/ZhkHl29+W JRG28x2GC/nzH3KjDb1xLtoYwpWIodBTwSM5CbzOtJByHdgyXIQLkQevNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDjAJKx8iLa7NJ4BTVsufV0sfk1ZMB8GA1UdIwQY MBaAFA16kSVpt4fZLlNV//rtWB/lCinAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhxUkpXbTNoOWt1VTFYXy11MVlILVVLS2NBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8wNTlkMWEtZWY5NC00NzI5LWJmNmQt NDJhZTc1Yjc5NTdkLzEvRFhxUkpXbTNoOWt1VTFYXy11MVlILVVLS2NBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8wNTlkMWEtZWY5NC00NzI5LWJmNmQtNDJhZTc1Yjc5NTdk LzEvRFhxUkpXbTNoOWt1VTFYXy11MVlILVVLS2NBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACdKfptyy YCgTEv1YBlLxXDzz0LAD86o8SiG1nlkcd9iQ4qe7kUeQEjxSf4Qvpz9rzhB4R8cj +lAhaUa4QPoMSlefPuAErsPVffHKBARuoV0c52zL3sYXkRCs9z/vAD0K6afXhYea 30YHuGdFm9CbpJnmm+oddFuh6aUBFGagvHk/Rq/SeBZILb23/M1eAGDeUe4oWau2 v6EQtiHUKPkSZsX1Yxb+CA/uxHh/A8Je3NHZiZ0aXtmRRAAD5k1e/K4IhjBrgEtw r8Wy83bNc9bKNk/TI8hWsttlHu91BBqU6eh4tpsQ3gRh11+DiJNOxI4iMHn0R2H7 aJcUWW3hviGZaA== -----END CERTIFICATE-----Generated at Sun Dec 21 04:58:43 2025 by rpki-client