This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft File: DvJQ9m3TDDt1RDCoXVMjbxczG38.mft (raw, json) Hash identifier: XOwhrox4xyzHay8Ctn6xprN7lO//hbOCk4uj2HOAyi8= Subject key identifier: A5:21:2F:DC:F5:C3:E9:BB:21:C5:5F:CF:94:C2:DF:A0:1B:1E:C5:66 Authority key identifier: 0E:F2:50:F6:6D:D3:0C:3B:75:44:30:A8:5D:53:23:6F:17:33:1B:7F Certificate issuer: /CN=0ef250f66dd30c3b754430a85d53236f17331b7f Certificate serial: 019B48149BC0351708EA7FC98DE5C1951836 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvJQ9m3TDDt1RDCoXVMjbxczG38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft Manifest number: 042C Signing time: Mon 22 Dec 2025 22:01:08 +0000 Manifest this update: Mon 22 Dec 2025 22:01:08 +0000 Manifest next update: Tue 23 Dec 2025 22:01:08 +0000 Files and hashes: 1: DvJQ9m3TDDt1RDCoXVMjbxczG38.crl (hash: v7aJxbEuqxFENpjWx2nRmrlAxyxCrq3Xqj980xcDuTA=) 2: wz1d87RRsH1wKxGmJq_DN0PXswY.roa (hash: UbFzX/CxroLQPhe2c4ynViKTu15Zs0MKcqpj4a9goDk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft rsync://rpki.ripe.net/repository/DEFAULT/DvJQ9m3TDDt1RDCoXVMjbxczG38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:14:9b:c0:35:17:08:ea:7f:c9:8d:e5:c1:95:18:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ef250f66dd30c3b754430a85d53236f17331b7f Validity Not Before: Dec 22 22:01:08 2025 GMT Not After : Dec 23 22:01:08 2025 GMT Subject: CN=a5212fdcf5c3e9bb21c55fcf94c2dfa01b1ec566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:eb:02:16:90:32:dc:c7:ef:05:62:3a:c1:9b: 5f:08:db:82:37:d6:aa:c2:85:59:b1:e0:5f:10:da: b0:a8:78:a1:e4:87:e5:f5:58:bc:8b:78:8b:25:cb: b6:72:73:2b:e1:1c:bc:70:67:74:00:57:11:71:ec: 13:48:da:83:03:07:60:8e:9a:e7:73:30:db:24:2d: d7:d9:a9:c1:cc:16:a7:64:fd:d7:9d:ff:a6:fb:a7: 39:04:66:f9:64:c3:37:44:68:9d:39:8b:fb:13:b3: 4c:92:e4:1a:01:b0:a5:20:b4:76:e2:02:f2:75:07: c5:39:58:ad:b9:7b:45:e2:80:2e:f3:76:f7:0a:8f: e8:66:78:a4:b6:7e:11:31:8b:7b:37:70:67:d2:5f: dd:8b:5d:0d:6a:f5:6e:c7:a0:64:f6:ed:b1:b7:4a: 8b:b3:1a:e2:cb:1f:7d:58:92:14:65:cb:8c:2d:7f: 3a:ec:0e:05:7b:54:38:de:10:e6:79:5c:68:62:3f: a1:0b:f6:c7:d0:43:7b:df:a7:8f:e0:58:c4:52:8b: 6e:fd:07:a3:63:8e:5d:f4:2c:e1:81:a5:e9:ed:f7: 66:a5:c0:8f:76:08:52:e5:b8:17:67:bc:f7:e6:6b: 00:e9:e0:3f:c8:5b:d5:cf:08:c5:5e:b2:c5:01:3e: df:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:21:2F:DC:F5:C3:E9:BB:21:C5:5F:CF:94:C2:DF:A0:1B:1E:C5:66 X509v3 Authority Key Identifier: keyid:0E:F2:50:F6:6D:D3:0C:3B:75:44:30:A8:5D:53:23:6F:17:33:1B:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvJQ9m3TDDt1RDCoXVMjbxczG38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:f1:c4:8f:b3:a8:93:99:e3:23:d1:6a:1c:0a:f7:36:92:36: ba:a6:cf:1a:ff:cc:6e:02:82:17:1c:d3:6c:7e:e9:ed:a1:6a: a4:f2:8a:99:18:be:0e:7e:25:d9:8c:2a:7b:3c:ee:11:7a:35: 1f:3e:ae:87:5d:04:ea:9e:7b:06:f7:e6:d7:35:ef:e8:7a:b4: 59:37:e2:96:42:ba:33:70:82:57:dd:37:b4:ae:21:de:db:d0: 58:b3:7b:f1:ce:d4:34:30:5d:f4:9e:2b:46:3c:71:ac:8d:f3: 67:8c:e1:d1:4c:e9:0c:54:2b:da:73:8f:12:bb:5f:08:ab:dc: f4:38:f4:8c:49:e5:d5:25:19:72:47:f9:0a:0a:81:0d:75:3b: b4:a6:c5:bc:3b:57:b9:36:5f:3b:cc:0b:89:d6:3e:d2:30:b1: ba:78:ff:1f:e3:1b:fb:45:9e:ea:de:9d:3b:05:c2:f0:cc:52: b4:50:47:11:26:84:ed:1a:9d:dc:c7:bb:d8:d9:eb:8f:21:1e: fe:b5:a6:20:b9:e8:cd:bf:3b:4c:58:63:97:76:d0:15:3c:cf: da:95:9c:7e:fb:4c:b5:2b:bc:c1:6d:26:36:67:79:fb:2e:39: 0c:e7:22:ef:b3:44:a1:93:53:34:c6:d7:ae:27:ad:dd:00:7b: 26:26:21:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFJvANRcI6n/JjeXBlRg2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlZjI1MGY2NmRkMzBjM2I3NTQ0MzBhODVkNTMyMzZmMTcz MzFiN2YwHhcNMjUxMjIyMjIwMTA4WhcNMjUxMjIzMjIwMTA4WjAzMTEwLwYDVQQD EyhhNTIxMmZkY2Y1YzNlOWJiMjFjNTVmY2Y5NGMyZGZhMDFiMWVjNTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuesCFpAy3MfvBWI6wZtfCNuCN9aq woVZseBfENqwqHih5Ifl9Vi8i3iLJcu2cnMr4Ry8cGd0AFcRcewTSNqDAwdgjprn czDbJC3X2anBzBanZP3Xnf+m+6c5BGb5ZMM3RGidOYv7E7NMkuQaAbClILR24gLy dQfFOVituXtF4oAu83b3Co/oZniktn4RMYt7N3Bn0l/di10NavVux6Bk9u2xt0qL sxriyx99WJIUZcuMLX867A4Fe1Q43hDmeVxoYj+hC/bH0EN736eP4FjEUotu/Qej Y45d9CzhgaXp7fdmpcCPdghS5bgXZ7z35msA6eA/yFvVzwjFXrLFAT7ftwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKUhL9z1w+m7IcVfz5TC36AbHsVmMB8GA1UdIwQY MBaAFA7yUPZt0ww7dUQwqF1TI28XMxt/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHZKUTltM1RERHQxUkRDb1hWTWpieGN6RzM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85OTlkZDMtODhmNy00MmMyLWFmZjUt ODFkNWFhYzAzNDk2LzEvRHZKUTltM1RERHQxUkRDb1hWTWpieGN6RzM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy85OTlkZDMtODhmNy00MmMyLWFmZjUtODFkNWFhYzAzNDk2 LzEvRHZKUTltM1RERHQxUkRDb1hWTWpieGN6RzM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXvHEj7Oo k5njI9FqHAr3NpI2uqbPGv/MbgKCFxzTbH7p7aFqpPKKmRi+Dn4l2YwqezzuEXo1 Hz6uh10E6p57Bvfm1zXv6Hq0WTfilkK6M3CCV903tK4h3tvQWLN78c7UNDBd9J4r RjxxrI3zZ4zh0UzpDFQr2nOPErtfCKvc9Dj0jEnl1SUZckf5CgqBDXU7tKbFvDtX uTZfO8wLidY+0jCxunj/H+Mb+0We6t6dOwXC8MxStFBHESaE7Rqd3Me72NnrjyEe /rWmILnozb87TFhjl3bQFTzP2pWcfvtMtSu8wW0mNmd5+y45DOci77NEoZNTNMbX riet3QB7JiYhHg== -----END CERTIFICATE-----Generated at Tue Dec 23 05:29:30 2025 by rpki-client