This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft File: DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft (raw, json) Hash identifier: FaXO6Gdf5TBAK+elXDxFJjz582LwAnhOCJRHSY0ecek= Subject key identifier: 2F:16:DD:97:8A:E2:9B:BE:80:CB:6E:7F:E9:41:1E:57:82:EF:E7:AA Authority key identifier: 0C:6F:A1:56:C5:7C:4E:88:5B:9E:6A:F8:23:0B:65:4D:79:6A:56:11 Certificate issuer: /CN=0c6fa156c57c4e885b9e6af8230b654d796a5611 Certificate serial: 019B3FB5DC3D81C86F845092F9AE6403EBBF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft Manifest number: 1429 Signing time: Sun 21 Dec 2025 07:00:41 +0000 Manifest this update: Sun 21 Dec 2025 07:00:41 +0000 Manifest next update: Mon 22 Dec 2025 07:00:41 +0000 Files and hashes: 1: DG-hVsV8Tohbnmr4IwtlTXlqVhE.crl (hash: 2dXOjYLlS7ncQ5Sj6jgU+34RznuJLca4a9JOvrWfHfA=) 2: cnib18kOQCfp6lVhz4WmJc4Qscg.roa (hash: 29WsgPo6IrtJ1OC04nNW3KGjgpHd3XfgWJen7328b88=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b5:dc:3d:81:c8:6f:84:50:92:f9:ae:64:03:eb:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c6fa156c57c4e885b9e6af8230b654d796a5611 Validity Not Before: Dec 21 07:00:41 2025 GMT Not After : Dec 22 07:00:41 2025 GMT Subject: CN=2f16dd978ae29bbe80cb6e7fe9411e5782efe7aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:04:55:96:92:b9:c1:ba:3f:37:87:74:eb:b7: c7:3c:35:4d:9c:31:6f:d2:52:00:52:d0:92:80:3d: a2:34:b1:ab:5d:4e:01:a6:a7:8e:c5:0a:30:a8:d3: df:4f:aa:0d:50:31:4e:b2:e4:b7:5e:67:be:5c:8f: ca:d5:10:d8:80:29:e7:69:1d:bf:c0:c2:a4:ac:1e: 70:5d:6c:cb:b2:8e:33:91:c3:90:d2:58:5a:ee:db: 18:4f:ff:f6:1f:5b:f0:22:71:d2:8a:5f:39:60:12: ed:b7:37:45:94:24:a3:c9:15:a2:52:11:6a:a7:ad: ad:7e:40:83:bc:d1:8a:e7:e5:0e:49:66:b2:37:e3: 4e:2c:3c:d4:98:f7:33:7b:60:9f:ef:3d:56:39:74: c4:d0:82:d5:39:2e:63:06:43:11:40:f3:0b:de:a3: 76:9f:10:aa:b2:f0:fe:3b:b1:b6:a9:4f:84:e5:77: 8a:31:04:84:cf:9d:4f:81:38:5c:c8:93:ca:85:5b: 8f:11:18:72:97:a2:56:ad:41:2e:37:db:b7:e6:09: f4:0e:73:e8:6e:0b:3d:8a:d4:74:cf:2f:54:3d:f0: 52:52:d0:31:f7:a9:eb:56:ef:ea:a4:eb:3a:c8:8a: 0c:3d:13:d1:78:be:98:2d:88:48:69:ae:1a:31:a5: 7f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:16:DD:97:8A:E2:9B:BE:80:CB:6E:7F:E9:41:1E:57:82:EF:E7:AA X509v3 Authority Key Identifier: keyid:0C:6F:A1:56:C5:7C:4E:88:5B:9E:6A:F8:23:0B:65:4D:79:6A:56:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:5e:2f:f4:ba:11:df:e7:4d:c9:ea:2e:c5:6a:33:06:31:f7: 39:48:73:c7:70:83:5a:2a:81:40:5a:51:b7:1f:0e:51:6b:6c: 48:ff:61:37:4d:9c:29:b4:19:49:64:a8:bb:3e:7d:ff:ee:15: ae:40:1d:13:ef:cf:d3:54:a4:77:d0:85:ef:be:4b:3f:33:b5: 17:ba:31:77:3a:ff:4d:71:ba:74:88:ab:92:94:7b:51:8e:ee: 24:db:37:2a:e1:27:95:62:17:4e:7c:2a:e1:ba:d0:26:4f:ba: 55:87:d8:08:e1:7e:67:5e:bb:b1:32:16:6a:5e:b9:24:e0:3b: 4d:b3:ae:b9:80:b9:a0:96:ea:3a:38:34:f7:51:66:32:77:ab: 78:8c:34:aa:63:9e:bd:93:a6:fa:15:00:3a:18:1e:59:50:a7: 24:43:9c:76:cc:e9:5d:05:11:39:ac:3b:59:43:07:1f:9f:c1: 40:4e:4e:3a:53:8b:a0:5c:c8:40:b3:0b:2c:ab:55:59:ff:77: 65:35:72:da:5f:3d:b1:ea:68:8b:f0:f2:84:15:94:f2:98:78: d6:94:2f:f1:c3:80:c1:65:63:62:33:60:95:7f:89:cd:0c:52: 01:44:d7:23:49:9f:66:81:1d:ed:c9:3f:71:a2:28:f0:a5:a5: 3c:56:1a:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tdw9gchvhFCS+a5kA+u/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNmZhMTU2YzU3YzRlODg1YjllNmFmODIzMGI2NTRkNzk2 YTU2MTEwHhcNMjUxMjIxMDcwMDQxWhcNMjUxMjIyMDcwMDQxWjAzMTEwLwYDVQQD EygyZjE2ZGQ5NzhhZTI5YmJlODBjYjZlN2ZlOTQxMWU1NzgyZWZlN2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQRVlpK5wbo/N4d067fHPDVNnDFv 0lIAUtCSgD2iNLGrXU4BpqeOxQowqNPfT6oNUDFOsuS3Xme+XI/K1RDYgCnnaR2/ wMKkrB5wXWzLso4zkcOQ0lha7tsYT//2H1vwInHSil85YBLttzdFlCSjyRWiUhFq p62tfkCDvNGK5+UOSWayN+NOLDzUmPcze2Cf7z1WOXTE0ILVOS5jBkMRQPML3qN2 nxCqsvD+O7G2qU+E5XeKMQSEz51PgThcyJPKhVuPERhyl6JWrUEuN9u35gn0DnPo bgs9itR0zy9UPfBSUtAx96nrVu/qpOs6yIoMPRPReL6YLYhIaa4aMaV/FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC8W3ZeK4pu+gMtuf+lBHleC7+eqMB8GA1UdIwQY MBaAFAxvoVbFfE6IW55q+CMLZU15alYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREctaFZzVjhUb2hibm1yNEl3dGxUWGxxVmhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS80OGM1NmQtNTcyNy00MmJhLTgwYzQt YjhjMzZlY2VkYWQ4LzEvREctaFZzVjhUb2hibm1yNEl3dGxUWGxxVmhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS80OGM1NmQtNTcyNy00MmJhLTgwYzQtYjhjMzZlY2VkYWQ4 LzEvREctaFZzVjhUb2hibm1yNEl3dGxUWGxxVmhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgF4v9LoR 3+dNyeouxWozBjH3OUhzx3CDWiqBQFpRtx8OUWtsSP9hN02cKbQZSWSouz59/+4V rkAdE+/P01Skd9CF775LPzO1F7oxdzr/TXG6dIirkpR7UY7uJNs3KuEnlWIXTnwq 4brQJk+6VYfYCOF+Z167sTIWal65JOA7TbOuuYC5oJbqOjg091FmMnereIw0qmOe vZOm+hUAOhgeWVCnJEOcdszpXQUROaw7WUMHH5/BQE5OOlOLoFzIQLMLLKtVWf93 ZTVy2l89sepoi/DyhBWU8ph41pQv8cOAwWVjYjNglX+JzQxSAUTXI0mfZoEd7ck/ caIo8KWlPFYa/g== -----END CERTIFICATE-----Generated at Sun Dec 21 10:07:04 2025 by rpki-client