This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft File: DnX7T1KoKdE24pqaAlxjbRmuMo4.mft (raw, json) Hash identifier: 115MfkcvmsQIfy/99iKcdl9mpDQ5Tf6Eh6MiyayOCbE= Subject key identifier: 59:7E:E3:D2:AB:8C:E4:3B:54:6D:0F:3C:1F:E4:30:6C:77:9D:0A:AE Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Certificate serial: 019B3757C80C23656F75B9D2DD7D1BC4C2BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft Manifest number: 0AD8 Signing time: Fri 19 Dec 2025 16:00:58 +0000 Manifest this update: Fri 19 Dec 2025 16:00:58 +0000 Manifest next update: Sat 20 Dec 2025 16:00:58 +0000 Files and hashes: 1: 2i2Vy05Tg_e1ak_1Uk12CnilxHg.roa (hash: NqduqZJuAkmB6MV5SKQihh3yDbwkeeFnfpDnTNMY130=) 2: 73x2Y8rtkrW56QrQQDyvuiFLG40.roa (hash: oxRcUfzeJXkoQZbB0gN4SvScUE5rLGzaBI9pXSTycUY=) 3: 9V0vcgO-bdJZakQILqcfcNUVDzs.roa (hash: rTVAfA+3goVyX4gfp8i16RQoEb4IWxA+yVUwUEUJp9c=) 4: 9wVDQpp0z04zwfoESc_S5u9etZ0.roa (hash: +x8r2JMNLKJOL0pGTh/MSwGY9V5+DOeggrdlCFNLMkg=) 5: DEEKMObjh2dv97ksxPHzfvJBIUE.roa (hash: g8hI8D0q/fLifbYomnOLeWF4o33+VutdXsr+kOmxBJU=) 6: DnX7T1KoKdE24pqaAlxjbRmuMo4.crl (hash: mdAKySq50PUOpK592mp2W9VLfsYLvE7+RQ/MFBRIiiI=) 7: F13VMR-AbtuNFors2WcIvfh7S0c.roa (hash: alIy453fzo5rCkQ2zWT1hQS9+f4qzXDbUL2ajOhe4wQ=) 8: GZgpng6Ot_FGRMQou9o62VcEekY.roa (hash: LX9b2Js5i118pOJ0Nzr+pm+rZAe5EZDelGHWiSHQOWA=) 9: KX36I7dSkLFi2aH0eqBcDdn1RlA.roa (hash: uMMjk83OkXZQb4cTo6pJ1weYcZ0/vJkq+xb1gidjyYA=) 10: OjaH7K6CfyojVS6c46fulaH1p-M.roa (hash: +oZE9RnQm2ybyt6c5+lMZS7HBhz+F/aKH1dTBent0OM=) 11: WggPonyi31b-yIkSaCuExsTR9U0.roa (hash: tkUrHPw54S3hnUlb390kJ2ECtbQXaVRTzWQhKus6rlQ=) 12: cJ1rW8VClyRweGHbeEMtWBhnXAQ.roa (hash: xDtfcFeuvoc7H53dx6XMFpyYCc4Qq+FPUImWBrlN+70=) 13: fkiMonxbwz3kZc8YkJyvn2qIywM.roa (hash: fqrrGCyxmQcRYifeeyyNsSENvJ1MUubmLT6QjBEi5nc=) 14: hirG0wCdPPp74UU2BJCRBx2I3xI.roa (hash: NoA4bfTe2eDgcbMz4bkkr7hReCXWcPMZ0ab/qV2+EuU=) 15: yQ91zssiLccRHA5nLDLCbHVrzwY.roa (hash: jHNMPrDscbkXMeLXgNIGaBErBrBnGqdgI+yTuRlxq7Q=) 16: yohJslaqJeqxG9ZdmhfVBivAGaE.roa (hash: SxCXBWVxQCB+hqHsFFhyla2B81f/O/PjbQmRobaYZP8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:57:c8:0c:23:65:6f:75:b9:d2:dd:7d:1b:c4:c2:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Validity Not Before: Dec 19 16:00:58 2025 GMT Not After : Dec 20 16:00:58 2025 GMT Subject: CN=597ee3d2ab8ce43b546d0f3c1fe4306c779d0aae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:24:de:cf:b4:30:ca:19:eb:11:d8:16:b7:c2: 56:57:ac:42:98:68:2f:b4:8c:7c:b9:8f:7e:ce:0e: 3d:10:43:c3:fb:d8:ee:17:6f:8f:f9:d1:3d:3e:c7: a2:e8:c2:6f:74:e2:7a:cf:04:b7:95:74:18:03:c0: 4c:d6:49:27:d1:e8:35:b4:95:3b:c2:af:c5:c6:79: 3c:6e:86:db:dc:c0:16:36:3f:52:ee:f7:89:80:49: 57:c0:31:e6:ce:2c:6a:e0:c1:4b:71:58:ad:42:c9: f8:42:e8:05:04:c7:33:2e:56:ae:bd:a9:9f:46:22: 76:9a:78:c3:1d:16:88:0c:12:55:03:c3:2a:48:2e: 81:97:57:da:18:56:1d:41:00:6f:e1:4c:ec:cd:3f: 63:46:bc:91:ee:8e:d5:4d:cb:07:73:06:35:c3:6d: b2:a2:73:d9:cf:db:53:6f:ab:21:77:36:87:27:86: 77:92:3b:09:77:3d:16:14:3f:6d:c9:02:07:59:5a: e4:99:8b:9d:54:ac:cd:35:5a:8d:e3:e9:cb:4f:68: 99:f5:3f:33:30:19:66:b9:d6:b9:fb:3a:32:c4:fa: 2d:fb:e7:3f:8d:77:a4:b7:4c:ef:e3:68:15:1c:90: 57:9e:85:95:a7:93:9d:d2:87:1e:9f:b6:c8:72:78: 3a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:7E:E3:D2:AB:8C:E4:3B:54:6D:0F:3C:1F:E4:30:6C:77:9D:0A:AE X509v3 Authority Key Identifier: keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:25:e2:55:f8:f6:2a:a2:fd:cb:c3:b2:a3:7e:29:3b:dd:be: 17:a8:7f:1f:be:62:25:ed:ce:a1:87:9a:2f:df:f9:4e:37:40: 01:dd:2a:2e:c6:14:a1:27:8b:9f:92:d6:fb:dd:9d:e2:07:32: 63:b1:58:2b:5f:b6:79:81:9c:40:c1:d8:bf:76:d2:d9:02:bc: 64:ca:53:78:d7:c6:a8:ab:90:a8:e2:b1:e5:f3:e2:a6:f5:c7: 88:64:7f:3d:dc:80:c8:5e:27:d2:aa:de:5f:91:93:6e:f8:5f: 4c:23:47:95:8e:d6:18:4a:9d:b9:71:29:d6:a9:88:1d:23:40: 1d:bb:06:12:3e:c0:a0:56:c2:f4:5b:51:11:45:ed:9f:24:ec: ea:66:10:af:6c:79:6e:cf:28:d8:03:70:a5:94:09:82:0a:66: ec:42:09:27:9f:c0:60:01:1e:b4:dd:15:b2:6b:74:b9:ab:a1: 43:1c:4b:c7:4b:3a:a3:3a:0e:c4:d3:15:71:70:6c:c3:6d:d1: bd:b1:52:53:b2:b7:ea:15:62:7a:a0:41:8a:a8:70:ae:12:50: 5a:45:57:da:b9:7e:9c:ff:c6:54:18:f1:5f:66:53:61:49:f8: 9f:fc:c7:3a:70:13:f3:d5:78:70:c7:5c:c5:98:b3:5a:91:f8: 5e:fe:c9:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3V8gMI2VvdbnS3X0bxMK+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNzVmYjRmNTJhODI5ZDEzNmUyOWE5YTAyNWM2MzZkMTlh ZTMyOGUwHhcNMjUxMjE5MTYwMDU4WhcNMjUxMjIwMTYwMDU4WjAzMTEwLwYDVQQD Eyg1OTdlZTNkMmFiOGNlNDNiNTQ2ZDBmM2MxZmU0MzA2Yzc3OWQwYWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCTez7QwyhnrEdgWt8JWV6xCmGgv tIx8uY9+zg49EEPD+9juF2+P+dE9Psei6MJvdOJ6zwS3lXQYA8BM1kkn0eg1tJU7 wq/Fxnk8bobb3MAWNj9S7veJgElXwDHmzixq4MFLcVitQsn4QugFBMczLlauvamf RiJ2mnjDHRaIDBJVA8MqSC6Bl1faGFYdQQBv4UzszT9jRryR7o7VTcsHcwY1w22y onPZz9tTb6shdzaHJ4Z3kjsJdz0WFD9tyQIHWVrkmYudVKzNNVqN4+nLT2iZ9T8z MBlmuda5+zoyxPot++c/jXekt0zv42gVHJBXnoWVp5Od0ocen7bIcng6VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFl+49KrjOQ7VG0PPB/kMGx3nQquMB8GA1UdIwQY MBaAFA51+09SqCnRNuKamgJcY20ZrjKOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYt MzViYTI2N2RlZDNiLzEvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYtMzViYTI2N2RlZDNi LzEvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASyXiVfj2 KqL9y8Oyo34pO92+F6h/H75iJe3OoYeaL9/5TjdAAd0qLsYUoSeLn5LW+92d4gcy Y7FYK1+2eYGcQMHYv3bS2QK8ZMpTeNfGqKuQqOKx5fPipvXHiGR/PdyAyF4n0qre X5GTbvhfTCNHlY7WGEqduXEp1qmIHSNAHbsGEj7AoFbC9FtREUXtnyTs6mYQr2x5 bs8o2ANwpZQJggpm7EIJJ5/AYAEetN0Vsmt0uauhQxxLx0s6ozoOxNMVcXBsw23R vbFSU7K36hVieqBBiqhwrhJQWkVX2rl+nP/GVBjxX2ZTYUn4n/zHOnAT89V4cMdc xZizWpH4Xv7JCA== -----END CERTIFICATE-----Generated at Fri Dec 19 23:29:08 2025 by rpki-client