This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft File: DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft (raw, json) Hash identifier: soYBpsyFGgT9dGC5FHhRhUprGGfd8geRM/4Rh8ddDMg= Subject key identifier: 77:B7:A8:59:B1:9A:42:B4:BE:61:AE:C7:EE:E4:E9:68:CD:82:6E:D0 Authority key identifier: 0C:6F:A1:56:C5:7C:4E:88:5B:9E:6A:F8:23:0B:65:4D:79:6A:56:11 Certificate issuer: /CN=0c6fa156c57c4e885b9e6af8230b654d796a5611 Certificate serial: 019B684447EE3296FF77EA754CBE469F17E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft Manifest number: 143E Signing time: Mon 29 Dec 2025 04:01:03 +0000 Manifest this update: Mon 29 Dec 2025 04:01:03 +0000 Manifest next update: Tue 30 Dec 2025 04:01:03 +0000 Files and hashes: 1: DG-hVsV8Tohbnmr4IwtlTXlqVhE.crl (hash: EewJWwozZFHkL1oijXncm6qYG0obnr9U5XbnsI6mo3g=) 2: cnib18kOQCfp6lVhz4WmJc4Qscg.roa (hash: 29WsgPo6IrtJ1OC04nNW3KGjgpHd3XfgWJen7328b88=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 04:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:44:47:ee:32:96:ff:77:ea:75:4c:be:46:9f:17:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c6fa156c57c4e885b9e6af8230b654d796a5611 Validity Not Before: Dec 29 04:01:03 2025 GMT Not After : Dec 30 04:01:03 2025 GMT Subject: CN=77b7a859b19a42b4be61aec7eee4e968cd826ed0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:bb:19:9c:b1:f2:87:87:1a:f5:a6:61:9b:f6: 25:02:43:8c:03:3b:fb:81:8a:4c:f7:ce:e3:94:8e: 6e:ab:7c:cf:8e:9b:af:be:50:bd:0d:7b:40:a4:28: 9d:37:cc:8b:01:43:96:78:3c:ea:1f:eb:27:99:1b: f6:c7:b3:fa:34:c6:d5:8f:f0:aa:6d:b3:c2:6e:e1: 0f:12:1d:6b:af:bf:b6:33:b0:b0:80:db:42:96:e4: 1a:f4:8e:a9:15:1d:58:35:2d:8c:05:5a:d0:be:a2: 9d:b9:3b:17:41:da:9f:6e:ee:da:46:1e:2f:c2:4c: 57:fe:f5:f6:28:ef:14:f4:de:e7:6e:1c:84:a6:e9: 18:de:60:7c:bb:52:92:66:3f:49:b4:b2:8a:0a:46: 37:0c:9f:e8:b7:00:54:94:40:b6:a1:04:0a:12:15: 6a:d8:18:7b:35:e7:5c:bf:a9:1e:b2:90:ef:e3:b2: 7b:3e:2f:85:25:40:ab:1c:cd:4a:8f:e3:9f:1c:30: 1f:53:72:75:2e:cc:15:f5:ff:18:25:d9:9f:9a:5f: 85:b3:4d:8a:82:a4:d0:ad:d5:05:c1:60:69:2d:13: a3:a3:f0:e0:88:c3:b3:ce:27:6f:a0:3e:a0:64:b0: 14:f8:c1:87:20:88:8f:e7:d2:7a:47:ab:a0:e2:4c: fa:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:B7:A8:59:B1:9A:42:B4:BE:61:AE:C7:EE:E4:E9:68:CD:82:6E:D0 X509v3 Authority Key Identifier: keyid:0C:6F:A1:56:C5:7C:4E:88:5B:9E:6A:F8:23:0B:65:4D:79:6A:56:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:7e:5d:6b:dd:c9:e0:ac:f7:8d:b0:1e:4b:d2:83:04:df:16: 24:1d:31:3a:23:3a:bf:eb:a5:20:76:4d:c0:de:db:e3:50:02: d4:3d:24:07:cd:cf:dd:de:f1:87:b8:2b:15:11:15:d6:51:c4: cd:40:07:24:2b:4e:69:da:b1:26:78:00:57:ac:0a:b7:ff:45: 95:3b:65:d2:f1:e5:db:0c:4a:b7:be:20:4f:5c:07:8b:5e:9a: 4e:ae:ac:ce:fe:40:99:d4:6c:b3:e9:7a:80:5d:12:28:be:39: 3b:4d:1e:15:96:9d:29:de:72:41:a3:87:73:7c:65:c0:ff:a7: b0:18:16:00:26:58:a7:4d:36:dd:14:ac:a4:80:89:12:2f:ca: 28:b6:43:90:07:36:76:c3:a9:d2:6c:78:d3:90:23:43:e8:84: a9:85:d2:5d:06:ab:a0:ef:7a:80:cf:f0:bb:ea:a0:c8:73:c4: a0:ff:61:2b:3a:ee:09:4e:46:76:26:51:8b:ce:7e:55:37:5a: c5:d4:f1:df:9a:ab:af:8d:87:b3:36:85:0b:d9:dc:7b:b4:ea: e4:96:f0:0f:6c:e4:a7:44:8c:e2:3c:f7:5d:61:c0:29:df:91: d7:62:ac:5c:89:f6:4a:27:39:c0:f0:87:db:56:ea:30:9e:67: b3:2b:b1:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtoREfuMpb/d+p1TL5GnxfgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNmZhMTU2YzU3YzRlODg1YjllNmFmODIzMGI2NTRkNzk2 YTU2MTEwHhcNMjUxMjI5MDQwMTAzWhcNMjUxMjMwMDQwMTAzWjAzMTEwLwYDVQQD Eyg3N2I3YTg1OWIxOWE0MmI0YmU2MWFlYzdlZWU0ZTk2OGNkODI2ZWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rsZnLHyh4ca9aZhm/YlAkOMAzv7 gYpM987jlI5uq3zPjpuvvlC9DXtApCidN8yLAUOWeDzqH+snmRv2x7P6NMbVj/Cq bbPCbuEPEh1rr7+2M7CwgNtCluQa9I6pFR1YNS2MBVrQvqKduTsXQdqfbu7aRh4v wkxX/vX2KO8U9N7nbhyEpukY3mB8u1KSZj9JtLKKCkY3DJ/otwBUlEC2oQQKEhVq 2Bh7Nedcv6kespDv47J7Pi+FJUCrHM1Kj+OfHDAfU3J1LswV9f8YJdmfml+Fs02K gqTQrdUFwWBpLROjo/DgiMOzzidvoD6gZLAU+MGHIIiP59J6R6ug4kz6EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHe3qFmxmkK0vmGux+7k6WjNgm7QMB8GA1UdIwQY MBaAFAxvoVbFfE6IW55q+CMLZU15alYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREctaFZzVjhUb2hibm1yNEl3dGxUWGxxVmhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS80OGM1NmQtNTcyNy00MmJhLTgwYzQt YjhjMzZlY2VkYWQ4LzEvREctaFZzVjhUb2hibm1yNEl3dGxUWGxxVmhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS80OGM1NmQtNTcyNy00MmJhLTgwYzQtYjhjMzZlY2VkYWQ4 LzEvREctaFZzVjhUb2hibm1yNEl3dGxUWGxxVmhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXn5da93J 4Kz3jbAeS9KDBN8WJB0xOiM6v+ulIHZNwN7b41AC1D0kB83P3d7xh7grFREV1lHE zUAHJCtOadqxJngAV6wKt/9FlTtl0vHl2wxKt74gT1wHi16aTq6szv5AmdRss+l6 gF0SKL45O00eFZadKd5yQaOHc3xlwP+nsBgWACZYp0023RSspICJEi/KKLZDkAc2 dsOp0mx405AjQ+iEqYXSXQaroO96gM/wu+qgyHPEoP9hKzruCU5GdiZRi85+VTda xdTx35qrr42HszaFC9nce7Tq5JbwD2zkp0SM4jz3XWHAKd+R12KsXIn2Sic5wPCH 21bqMJ5nsyuxgQ== -----END CERTIFICATE-----Generated at Mon Dec 29 08:29:00 2025 by rpki-client