This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft File: dfGnY3RcJdrSj0qBFmiOgs4SAos.mft (raw, json) Hash identifier: JQ0r0IQsbsgPWEvnh3VkdaRp9pTZ7YbYR6mLPePs9j0= Subject key identifier: 44:D4:5E:BD:A8:A3:B1:00:4F:00:A9:0B:13:B4:21:E4:03:C9:86:D8 Authority key identifier: 75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B Certificate issuer: /CN=75f1a763745c25dad28f4a8116688e82ce12028b Certificate serial: 019B3C7EBB2159181D00D173346B77AAE27F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft Manifest number: 15AD Signing time: Sat 20 Dec 2025 16:01:36 +0000 Manifest this update: Sat 20 Dec 2025 16:01:36 +0000 Manifest next update: Sun 21 Dec 2025 16:01:36 +0000 Files and hashes: 1: dfGnY3RcJdrSj0qBFmiOgs4SAos.crl (hash: 1rHHL/B66HVTqGaoMN+GWTAzJSKSX4rQD9jrh2qVyO4=) 2: ecFLrFSYazGNpMwtdUC2GTyB7Ls.roa (hash: 9V1D5AZ/eHVRt4YDKcmTOE8v9iNuXaOV/i0Ye/mdU9E=) 3: zeZfDF6FQVXfyXUfk9yRfeoJZIA.roa (hash: DtxqGawsrFVZx4HNzS+S5CsdD6flwYPGqAxKv36rkJ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:bb:21:59:18:1d:00:d1:73:34:6b:77:aa:e2:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75f1a763745c25dad28f4a8116688e82ce12028b Validity Not Before: Dec 20 16:01:36 2025 GMT Not After : Dec 21 16:01:36 2025 GMT Subject: CN=44d45ebda8a3b1004f00a90b13b421e403c986d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:77:15:2f:cf:ba:28:8c:43:e3:47:a1:9e:38: 36:92:0b:08:c9:f2:f8:1b:14:16:d1:90:2d:17:c9: dd:18:45:e8:be:40:4f:ce:1f:a6:03:a9:cb:34:be: 47:b0:de:ef:d6:23:e9:db:3a:c4:3e:57:01:81:16: 38:01:e2:12:ad:49:96:f7:fd:33:0b:06:14:85:73: 29:dc:80:1d:d4:40:0e:7d:7c:c3:3e:9d:9d:5e:31: c3:30:46:7c:3a:de:36:0c:d9:ca:4b:82:e7:ed:c3: e0:93:ac:50:19:26:70:a7:91:ae:d2:8c:f3:ef:f5: fc:07:2f:f5:95:16:0a:4a:fc:ef:ea:2e:b5:96:be: 99:c5:22:d6:df:88:c5:18:73:ef:95:50:97:c1:51: e1:11:df:0f:3d:76:99:ee:01:bd:fd:11:3c:b5:69: 2e:06:d7:f8:36:f7:ba:07:fb:56:83:d8:43:b6:d6: df:bc:ea:72:34:10:7d:06:3f:d9:16:03:36:15:d6: e1:51:f6:00:08:f1:47:ef:2a:f4:73:a3:ad:2f:c5: b7:3c:65:b4:cb:0e:1a:a2:5a:7f:0e:0f:d4:23:1d: 0a:2b:c5:02:f6:83:cd:39:64:25:96:20:8c:a0:9c: 8a:60:17:a4:3c:a2:2d:d4:ce:be:75:f2:47:9c:00: 14:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:D4:5E:BD:A8:A3:B1:00:4F:00:A9:0B:13:B4:21:E4:03:C9:86:D8 X509v3 Authority Key Identifier: keyid:75:F1:A7:63:74:5C:25:DA:D2:8F:4A:81:16:68:8E:82:CE:12:02:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfGnY3RcJdrSj0qBFmiOgs4SAos.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/980e66-3631-4fde-8e2d-c849bc0f359b/1/dfGnY3RcJdrSj0qBFmiOgs4SAos.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:57:03:98:f6:ec:7c:ff:bf:ba:8a:af:dd:6c:72:d7:29:6b: 4f:67:ad:15:93:12:a6:18:e6:26:7a:cd:e7:66:b3:f9:a8:7e: 65:43:ef:7e:bd:f7:9f:be:42:35:a6:d9:cc:03:57:04:4d:48: 74:99:71:ba:90:a6:79:34:2a:63:13:2a:f2:49:03:eb:3a:78: ca:8c:bc:e7:11:f8:fd:a0:68:cc:9c:82:70:24:49:1f:84:9d: ad:d6:4f:c9:02:fe:f0:c8:1c:35:64:7d:fd:5e:b0:62:23:32: ea:96:fc:e5:86:50:66:85:6a:3a:ee:0f:39:db:5f:da:17:1e: 86:cc:87:ac:82:5a:77:e2:f8:fc:73:0d:b5:27:8e:89:61:de: d3:9e:7c:a1:3e:c9:e2:7e:f1:1f:2c:e6:9f:e0:e5:70:23:eb: 57:db:13:b6:f7:ef:2c:ad:64:b2:f5:40:19:55:15:56:2c:87: 14:ea:79:9f:d3:6f:37:e1:f6:a4:14:d3:df:82:b9:82:2d:dc: eb:f6:fa:01:78:bc:0b:fc:c8:64:47:01:9d:a4:92:96:96:e8: 5b:4f:ad:6b:8d:9c:a0:33:b7:ec:81:cd:c6:ee:cf:8e:51:d5: ac:84:ae:d7:80:98:c3:e9:5d:9c:71:ad:c7:d4:ac:84:38:ab: 09:0b:18:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8frshWRgdANFzNGt3quJ/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1ZjFhNzYzNzQ1YzI1ZGFkMjhmNGE4MTE2Njg4ZTgyY2Ux MjAyOGIwHhcNMjUxMjIwMTYwMTM2WhcNMjUxMjIxMTYwMTM2WjAzMTEwLwYDVQQD Eyg0NGQ0NWViZGE4YTNiMTAwNGYwMGE5MGIxM2I0MjFlNDAzYzk4NmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXcVL8+6KIxD40ehnjg2kgsIyfL4 GxQW0ZAtF8ndGEXovkBPzh+mA6nLNL5HsN7v1iPp2zrEPlcBgRY4AeISrUmW9/0z CwYUhXMp3IAd1EAOfXzDPp2dXjHDMEZ8Ot42DNnKS4Ln7cPgk6xQGSZwp5Gu0ozz 7/X8By/1lRYKSvzv6i61lr6ZxSLW34jFGHPvlVCXwVHhEd8PPXaZ7gG9/RE8tWku Btf4Nve6B/tWg9hDttbfvOpyNBB9Bj/ZFgM2FdbhUfYACPFH7yr0c6OtL8W3PGW0 yw4aolp/Dg/UIx0KK8UC9oPNOWQlliCMoJyKYBekPKIt1M6+dfJHnAAUbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFETUXr2oo7EATwCpCxO0IeQDyYbYMB8GA1UdIwQY MBaAFHXxp2N0XCXa0o9KgRZojoLOEgKLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGZHblkzUmNKZHJTajBxQkZtaU9nczRTQW9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi85ODBlNjYtMzYzMS00ZmRlLThlMmQt Yzg0OWJjMGYzNTliLzEvZGZHblkzUmNKZHJTajBxQkZtaU9nczRTQW9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi85ODBlNjYtMzYzMS00ZmRlLThlMmQtYzg0OWJjMGYzNTli LzEvZGZHblkzUmNKZHJTajBxQkZtaU9nczRTQW9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjFcDmPbs fP+/uoqv3Wxy1ylrT2etFZMSphjmJnrN52az+ah+ZUPvfr33n75CNabZzANXBE1I dJlxupCmeTQqYxMq8kkD6zp4yoy85xH4/aBozJyCcCRJH4SdrdZPyQL+8MgcNWR9 /V6wYiMy6pb85YZQZoVqOu4POdtf2hcehsyHrIJad+L4/HMNtSeOiWHe0558oT7J 4n7xHyzmn+DlcCPrV9sTtvfvLK1ksvVAGVUVViyHFOp5n9NvN+H2pBTT34K5gi3c 6/b6AXi8C/zIZEcBnaSSlpboW0+ta42coDO37IHNxu7PjlHVrISu14CYw+ldnHGt x9SshDirCQsYuw== -----END CERTIFICATE-----Generated at Sat Dec 20 18:55:47 2025 by rpki-client