This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.mft File: djizYCRf5EsXV6ael3oV4H-q9ps.mft (raw, json) Hash identifier: BsIns80XMJP3FIGWkSfyvHEOs31w176RvuD7B3IdWu0= Subject key identifier: 61:8F:54:D4:E2:B3:A3:14:55:AA:71:D8:3B:09:05:EF:63:69:35:77 Authority key identifier: 76:38:B3:60:24:5F:E4:4B:17:57:A6:9E:97:7A:15:E0:7F:AA:F6:9B Certificate issuer: /CN=7638b360245fe44b1757a69e977a15e07faaf69b Certificate serial: 019B3B6B3880CC6C8BAE9EF9FD57BAE36450 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/djizYCRf5EsXV6ael3oV4H-q9ps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.mft Manifest number: 02E2 Signing time: Sat 20 Dec 2025 11:00:41 +0000 Manifest this update: Sat 20 Dec 2025 11:00:41 +0000 Manifest next update: Sun 21 Dec 2025 11:00:41 +0000 Files and hashes: 1: djizYCRf5EsXV6ael3oV4H-q9ps.crl (hash: heqQxcLNeEmmIyKtk6G1XafXo7M6NZLSNPf4yvewRnI=) 2: gSGKFe1pn3_5E4Q7YRW3hV9F-dg.roa (hash: Gfi8XtFBl7a2jBdHmK+GtPDHztaG0pAxvqWau8U6T/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.mft rsync://rpki.ripe.net/repository/DEFAULT/djizYCRf5EsXV6ael3oV4H-q9ps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:38:80:cc:6c:8b:ae:9e:f9:fd:57:ba:e3:64:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7638b360245fe44b1757a69e977a15e07faaf69b Validity Not Before: Dec 20 11:00:41 2025 GMT Not After : Dec 21 11:00:41 2025 GMT Subject: CN=618f54d4e2b3a31455aa71d83b0905ef63693577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:87:24:2d:c3:37:4e:bb:d5:94:ec:ff:ef:d9: 65:ed:e5:30:7d:d1:65:2e:e8:bc:9b:43:2f:fc:7b: cf:67:b2:f4:6e:ba:03:cc:7d:58:79:be:3a:c9:74: 67:5f:37:ae:a0:80:37:b2:92:02:ba:65:13:0c:ce: 00:ee:4b:17:b0:9e:98:61:de:ce:be:8d:55:24:30: c2:f2:64:c7:96:77:c5:f2:b1:be:25:cf:c2:8b:cf: dc:c3:ab:ae:df:07:06:d4:80:28:c1:d4:bd:b2:6a: 2b:c0:78:49:86:26:6b:12:39:2d:4c:9a:ab:d6:72: ea:e7:6d:4c:61:cd:14:07:d8:bf:38:20:7a:88:cf: aa:9e:09:8c:70:dc:d6:65:56:f1:ca:0d:be:88:1d: 8d:65:56:9f:d8:39:2c:c8:cb:d5:43:67:38:20:38: 6a:60:e2:e3:a3:36:3a:05:93:2c:3d:58:81:3d:40: 82:4a:cf:b2:15:7a:77:ed:21:af:4c:4e:b3:4b:7b: 2a:b1:df:66:42:2d:31:f9:9a:4f:8a:9a:92:88:48: f0:5b:13:8a:90:44:9f:84:c9:3d:69:8e:bd:5c:d1: 3b:bb:f2:5d:31:59:ec:77:fe:f2:60:bc:e9:59:94: bb:37:14:5c:6a:d4:5e:76:6f:2b:40:71:cc:4b:6b: 3e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:8F:54:D4:E2:B3:A3:14:55:AA:71:D8:3B:09:05:EF:63:69:35:77 X509v3 Authority Key Identifier: keyid:76:38:B3:60:24:5F:E4:4B:17:57:A6:9E:97:7A:15:E0:7F:AA:F6:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/djizYCRf5EsXV6ael3oV4H-q9ps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e224cd-1712-47a9-9740-8f261d2fb64e/1/djizYCRf5EsXV6ael3oV4H-q9ps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:4c:8b:b5:1c:3e:6c:b2:9d:75:c9:4e:09:8f:ca:23:2f:31: 50:7b:9a:84:22:25:9a:08:47:ba:61:ab:72:15:d5:87:e3:00: 06:e6:d8:50:93:74:42:00:48:a4:9b:8c:ce:79:e8:d9:62:70: 56:f9:b4:11:01:0b:cf:2a:ce:1a:23:59:04:eb:1e:ed:13:21: 64:33:26:19:6b:8b:8a:46:cf:e5:a7:e3:63:2f:4f:6b:4a:37: d4:9e:dc:3d:23:9e:91:db:2a:69:de:b3:e7:1c:10:6f:ac:92: a3:95:31:3a:57:23:7a:d3:db:1e:1e:4a:de:27:e4:bc:7f:f1: b0:14:fe:85:96:8d:cf:84:71:09:cd:c0:4f:d8:9f:b1:b8:4c: 05:0a:44:6d:f1:a5:7c:6d:b8:4a:ac:f6:2e:41:fc:4c:fa:14: 9c:e3:37:73:97:21:7d:4c:1a:a9:65:45:a2:58:46:2d:31:b6: 1c:8e:38:f9:88:1b:6c:6e:4d:e8:83:8b:a5:0d:fd:bb:4b:3c: 1f:bf:04:80:4a:71:3d:00:ed:c1:47:81:9d:27:de:77:63:a9: 57:61:83:a9:2c:06:05:d8:dd:f4:19:0d:dd:6a:97:53:10:f8: 11:ea:4b:9f:f8:d2:07:97:7a:78:56:0e:54:97:db:b5:98:6c: 27:37:57:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7aziAzGyLrp75/Ve642RQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2MzhiMzYwMjQ1ZmU0NGIxNzU3YTY5ZTk3N2ExNWUwN2Zh YWY2OWIwHhcNMjUxMjIwMTEwMDQxWhcNMjUxMjIxMTEwMDQxWjAzMTEwLwYDVQQD Eyg2MThmNTRkNGUyYjNhMzE0NTVhYTcxZDgzYjA5MDVlZjYzNjkzNTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIckLcM3TrvVlOz/79ll7eUwfdFl Lui8m0Mv/HvPZ7L0broDzH1Yeb46yXRnXzeuoIA3spICumUTDM4A7ksXsJ6YYd7O vo1VJDDC8mTHlnfF8rG+Jc/Ci8/cw6uu3wcG1IAowdS9smorwHhJhiZrEjktTJqr 1nLq521MYc0UB9i/OCB6iM+qngmMcNzWZVbxyg2+iB2NZVaf2DksyMvVQ2c4IDhq YOLjozY6BZMsPViBPUCCSs+yFXp37SGvTE6zS3sqsd9mQi0x+ZpPipqSiEjwWxOK kESfhMk9aY69XNE7u/JdMVnsd/7yYLzpWZS7NxRcatRedm8rQHHMS2s+MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGGPVNTis6MUVapx2DsJBe9jaTV3MB8GA1UdIwQY MBaAFHY4s2AkX+RLF1emnpd6FeB/qvabMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGppellDUmY1RXNYVjZhZWwzb1Y0SC1xOXBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9lMjI0Y2QtMTcxMi00N2E5LTk3NDAt OGYyNjFkMmZiNjRlLzEvZGppellDUmY1RXNYVjZhZWwzb1Y0SC1xOXBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9lMjI0Y2QtMTcxMi00N2E5LTk3NDAtOGYyNjFkMmZiNjRl LzEvZGppellDUmY1RXNYVjZhZWwzb1Y0SC1xOXBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxEyLtRw+ bLKddclOCY/KIy8xUHuahCIlmghHumGrchXVh+MABubYUJN0QgBIpJuMznno2WJw Vvm0EQELzyrOGiNZBOse7RMhZDMmGWuLikbP5afjYy9Pa0o31J7cPSOekdsqad6z 5xwQb6ySo5UxOlcjetPbHh5K3ifkvH/xsBT+hZaNz4RxCc3AT9ifsbhMBQpEbfGl fG24Sqz2LkH8TPoUnOM3c5chfUwaqWVFolhGLTG2HI44+YgbbG5N6IOLpQ39u0s8 H78EgEpxPQDtwUeBnSfed2OpV2GDqSwGBdjd9BkN3WqXUxD4EepLn/jSB5d6eFYO VJfbtZhsJzdXyA== -----END CERTIFICATE-----Generated at Sat Dec 20 12:39:38 2025 by rpki-client