This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft File: DJDDVuKGT0OJSFdENVXYtcA1KBk.mft (raw, json) Hash identifier: rJ9n+wtnnGhaQ+gUVsA950lw2DJawteURlkCP3DpP1o= Subject key identifier: 69:4A:39:3E:17:04:30:19:51:2A:64:43:12:21:80:C3:C9:2A:05:03 Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819 Certificate serial: 019B3A90E3D4A607C2643601BE8269ADB5B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft Manifest number: 17A7 Signing time: Sat 20 Dec 2025 07:02:12 +0000 Manifest this update: Sat 20 Dec 2025 07:02:12 +0000 Manifest next update: Sun 21 Dec 2025 07:02:12 +0000 Files and hashes: 1: 6EqmJwY45la03_mL9DqzIU_pULc.roa (hash: bAAWeDZY2eZUPUFFXbJVDE3ll20OGhbDr+oRfmrEiVM=) 2: 7Pzqe98aO4BoBrbjEM8VyT6sS1M.roa (hash: njNZ21C9pluyh9z/aL31IWofBM1v+N+fPmyvHPndCq0=) 3: 9GHN6GSMWh16APWbnq7wDsfKnn8.roa (hash: JH6A2KPyYk6kU9S+YXzBoAozjZCx1I1/FQIb22szn8c=) 4: DJDDVuKGT0OJSFdENVXYtcA1KBk.crl (hash: oqMojjFiL3XIQFpK+G3iNQGTV5MsV7aAuyNaG+vS3ac=) 5: F6MPUcQNDKHw2bq3oVN_CGo8zFY.roa (hash: vT+AkHQSKlQP3frZkuRLI9yF+aC1K32hPaZY72XJWqQ=) 6: QQRJC_YG8r-4Cm4-FiDTcyGseMs.roa (hash: v9L1LzSv9+QS9AJyAVCgrR0utN6Qk2ha4KHx/OIWRBY=) 7: WkrrwVxryAtLhNFR70baemEuAlg.roa (hash: K4NmeKi3Gvie8qG+bJIFQiovPgNvmgaWKizo+ZLILv8=) 8: _eU7wK7pdUxRG2CXsHdjbv2SOXc.roa (hash: ZAIXppKunQur0KGtFLAbnwIeXUabVYHwA+qIIq12IRo=) 9: aTMRrwo9_4SayQ9D7LTyaVFK_Xc.roa (hash: +IcvkZ/Lt7dooQvX8ekK5PfLV+YRr5hiDK4PBIh/lAA=) 10: bMezNCNwdlOYbtIsPbacYgXs4mE.roa (hash: fCSTVZLdEaGUz9Qyuwvw4wOBBUSjrK0cS/P0VURH6XA=) 11: f4tVuHbbEEExw1FgkYA_xiEVeZI.roa (hash: Ra6FxwbKM9pTj1QpToOpemmcz8OHYU34i9ladkCeWIs=) 12: fYrpElZs1NsSNrkwEfo6WNxBdRU.roa (hash: w1Z5VCOxpqbNZVNnJiTQLVLUsMOtA4kiHusU/VADD9E=) 13: rytOjYktSxYttWQbNzKnWNHr8kE.roa (hash: yLxz3XA2NehPKva17aTVpf9d8xx7CPICWNJXYP6IG3U=) 14: wz4Rxi2T5RISNbtekZKZj5gg7co.roa (hash: ZkBZlEwEIE4xANMo9oJsaqTSQA+2tjjnLN93XVxIic4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:e3:d4:a6:07:c2:64:36:01:be:82:69:ad:b5:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819 Validity Not Before: Dec 20 07:02:12 2025 GMT Not After : Dec 21 07:02:12 2025 GMT Subject: CN=694a393e17043019512a6443122180c3c92a0503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fb:b0:3e:6d:87:58:aa:60:61:c3:0e:57:98: 76:09:83:a5:45:0d:38:0b:7c:79:d9:6a:98:77:4f: 05:bd:f5:5f:e8:52:83:00:27:94:27:dd:93:ee:a7: d9:d7:e9:33:49:dc:4c:f4:e6:70:06:ae:8c:6a:ea: 83:b1:69:33:e6:ec:f8:59:4a:a3:41:19:f0:66:19: 42:56:f3:0e:c5:86:25:27:89:6c:ee:3b:f3:4c:fb: f5:b0:a0:44:df:5d:d9:0f:72:fa:61:c3:f6:be:f8: 22:e6:26:8f:33:b2:cd:de:74:ba:fb:31:dc:8e:9a: e6:2e:53:f7:c7:79:37:b1:ec:f6:db:70:61:a0:a8: e0:8f:f0:26:51:2a:de:dc:fe:8d:ab:37:06:c5:bc: 83:be:b8:84:d4:f2:85:37:1a:e8:6f:70:02:df:21: d0:6f:71:d7:37:e7:1c:1f:57:5a:f5:b8:60:7a:2c: 99:10:9e:da:dc:2b:55:d7:0f:54:f7:e7:d9:64:81: 61:9e:b8:11:bd:06:3e:be:96:8f:da:29:a4:95:9c: 3f:3d:45:81:68:53:d1:ea:3e:e6:1c:80:35:e0:96: d9:99:47:a9:88:4c:a4:ce:c2:80:c9:ff:5b:f2:3b: 6b:94:29:b0:1d:ae:ce:29:57:8a:85:03:38:a1:b0: 77:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:4A:39:3E:17:04:30:19:51:2A:64:43:12:21:80:C3:C9:2A:05:03 X509v3 Authority Key Identifier: keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:ed:70:20:f9:ca:e4:e0:68:31:3b:cc:02:7a:9c:b7:8d:70: f6:6a:f0:25:82:90:c4:12:56:78:72:fd:8f:91:52:b2:96:08: 3f:93:7c:9c:e0:c3:49:6c:ca:a4:19:9e:b3:83:34:f7:62:ab: 69:8a:f5:8a:a0:cc:e8:58:68:b8:62:db:9e:8b:bd:76:ad:39: 8d:b4:9b:a2:21:88:69:f1:ba:32:5f:d5:d5:11:d4:a8:0e:11: be:b0:e9:51:07:13:da:fd:18:b9:29:08:40:b9:a3:fc:ad:49: 61:fa:29:cb:a2:2f:9f:bd:ae:cb:34:a0:0b:4b:aa:c8:49:8d: 95:94:b3:2f:33:d8:f2:a8:d4:fa:07:5f:2e:4a:9b:ad:58:42: a9:b6:16:e8:f0:8e:98:6f:fe:9e:26:6c:4c:0f:fe:4f:a0:22: e0:97:86:1f:27:24:dd:99:0a:e1:24:ae:49:94:00:eb:68:d4: af:93:6f:b0:9c:82:10:9c:7e:c0:20:12:43:e3:de:83:74:7b: 73:65:bb:96:2e:2b:71:a3:3a:c2:ef:cb:26:ed:3f:25:b4:b0: 69:c3:ee:98:81:58:8f:e7:6c:6f:13:32:92:db:8e:1b:66:ae: 36:8b:2a:e8:62:1d:34:05:2a:00:fb:0d:52:fc:e9:cc:f0:5c: df:7d:f2:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kOPUpgfCZDYBvoJprbWwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjOTBjMzU2ZTI4NjRmNDM4OTQ4NTc0NDM1NTVkOGI1YzAz NTI4MTkwHhcNMjUxMjIwMDcwMjEyWhcNMjUxMjIxMDcwMjEyWjAzMTEwLwYDVQQD Eyg2OTRhMzkzZTE3MDQzMDE5NTEyYTY0NDMxMjIxODBjM2M5MmEwNTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/uwPm2HWKpgYcMOV5h2CYOlRQ04 C3x52WqYd08FvfVf6FKDACeUJ92T7qfZ1+kzSdxM9OZwBq6MauqDsWkz5uz4WUqj QRnwZhlCVvMOxYYlJ4ls7jvzTPv1sKBE313ZD3L6YcP2vvgi5iaPM7LN3nS6+zHc jprmLlP3x3k3sez223BhoKjgj/AmUSre3P6NqzcGxbyDvriE1PKFNxrob3AC3yHQ b3HXN+ccH1da9bhgeiyZEJ7a3CtV1w9U9+fZZIFhnrgRvQY+vpaP2imklZw/PUWB aFPR6j7mHIA14JbZmUepiEykzsKAyf9b8jtrlCmwHa7OKVeKhQM4obB3IQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGlKOT4XBDAZUSpkQxIhgMPJKgUDMB8GA1UdIwQY MBaAFAyQw1bihk9DiUhXRDVV2LXANSgZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDct ZTM3OTlhZGU5ZGZlLzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDctZTM3OTlhZGU5ZGZl LzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAne1wIPnK 5OBoMTvMAnqct41w9mrwJYKQxBJWeHL9j5FSspYIP5N8nODDSWzKpBmes4M092Kr aYr1iqDM6FhouGLbnou9dq05jbSboiGIafG6Ml/V1RHUqA4RvrDpUQcT2v0YuSkI QLmj/K1JYfopy6Ivn72uyzSgC0uqyEmNlZSzLzPY8qjU+gdfLkqbrVhCqbYW6PCO mG/+niZsTA/+T6Ai4JeGHyck3ZkK4SSuSZQA62jUr5NvsJyCEJx+wCASQ+Peg3R7 c2W7li4rcaM6wu/LJu0/JbSwacPumIFYj+dsbxMyktuOG2auNosq6GIdNAUqAPsN UvzpzPBc333ymQ== -----END CERTIFICATE-----Generated at Sat Dec 20 17:12:44 2025 by rpki-client