This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft File: DvJQ9m3TDDt1RDCoXVMjbxczG38.mft (raw, json) Hash identifier: Vi5CdRAhrpEAaQRiGozTmG22ki4myXztTNOUQzgxMIc= Subject key identifier: 97:B5:E3:42:F5:4E:3C:0E:16:07:0E:EE:86:BF:44:43:3A:63:2A:14 Authority key identifier: 0E:F2:50:F6:6D:D3:0C:3B:75:44:30:A8:5D:53:23:6F:17:33:1B:7F Certificate issuer: /CN=0ef250f66dd30c3b754430a85d53236f17331b7f Certificate serial: 019B3A912DEC18D40797159C5AD6E3058E05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvJQ9m3TDDt1RDCoXVMjbxczG38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft Manifest number: 0425 Signing time: Sat 20 Dec 2025 07:02:31 +0000 Manifest this update: Sat 20 Dec 2025 07:02:31 +0000 Manifest next update: Sun 21 Dec 2025 07:02:31 +0000 Files and hashes: 1: DvJQ9m3TDDt1RDCoXVMjbxczG38.crl (hash: dQbbtF9ocu1q+RrnlFQb+Dno+2KH91l2+VqLUrMBsG0=) 2: wz1d87RRsH1wKxGmJq_DN0PXswY.roa (hash: UbFzX/CxroLQPhe2c4ynViKTu15Zs0MKcqpj4a9goDk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft rsync://rpki.ripe.net/repository/DEFAULT/DvJQ9m3TDDt1RDCoXVMjbxczG38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:02:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:91:2d:ec:18:d4:07:97:15:9c:5a:d6:e3:05:8e:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ef250f66dd30c3b754430a85d53236f17331b7f Validity Not Before: Dec 20 07:02:31 2025 GMT Not After : Dec 21 07:02:31 2025 GMT Subject: CN=97b5e342f54e3c0e16070eee86bf44433a632a14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7a:07:92:78:c1:c9:67:d3:36:7b:3b:c6:64: 16:59:90:84:02:c0:e4:e7:56:f6:4d:d0:e9:09:62: 70:03:3e:d0:ab:8c:5c:94:6e:e2:e5:cf:ba:fc:b6: 79:c3:22:e7:30:2f:e3:6b:0c:9b:ea:e7:3d:57:23: 08:0a:4e:ec:1d:33:7a:22:ec:ea:4b:ab:13:f5:aa: b5:d1:21:3a:20:03:ff:b5:92:70:c4:b8:ef:ed:3a: 9b:d8:be:4e:b4:f8:39:ab:c3:7f:d0:79:27:ca:25: 30:f7:90:d4:b8:78:5f:3e:78:23:d1:52:0b:c8:ba: 14:0e:23:f3:57:cc:93:45:ec:26:06:98:75:5c:6f: 7e:3e:69:61:35:87:55:d4:f1:67:85:81:a9:20:38: 74:93:59:12:dd:d3:ae:97:ab:e6:78:23:67:1d:11: 32:7c:58:81:85:7a:7d:11:25:ea:35:f7:57:a3:48: cc:cd:ae:b6:f8:c2:6f:fd:84:b2:52:b3:1e:98:04: 80:7a:73:25:06:cf:22:d7:b7:84:6f:6e:1d:02:df: 10:c5:09:3b:db:52:3f:8f:d8:8b:e2:6c:78:f7:18: 2e:1b:9e:b1:9f:7f:03:12:ce:4a:16:ab:d3:1e:d1: 30:ff:65:7c:3c:f3:b6:d3:af:18:60:f1:61:f5:81: d7:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:B5:E3:42:F5:4E:3C:0E:16:07:0E:EE:86:BF:44:43:3A:63:2A:14 X509v3 Authority Key Identifier: keyid:0E:F2:50:F6:6D:D3:0C:3B:75:44:30:A8:5D:53:23:6F:17:33:1B:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvJQ9m3TDDt1RDCoXVMjbxczG38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:1a:8e:94:25:f4:17:c4:66:45:18:fa:99:50:37:f8:8d:4d: 23:29:77:45:05:38:75:a5:30:7e:5b:bb:6b:7d:6d:34:e9:89: 4a:75:09:31:77:65:ad:59:2d:ea:f1:d6:e4:56:65:76:e0:d7: de:00:d6:34:c2:21:72:bc:30:1d:02:1a:75:6e:e3:05:59:ed: a7:c6:97:f0:64:2d:a9:3e:e7:ac:7b:4a:b5:01:9f:7a:81:2e: 33:1b:c7:87:70:72:83:75:a5:cb:e3:f3:5f:2d:75:a2:ce:c7: 4e:76:6d:a2:fe:a1:29:4d:09:07:10:59:a5:a7:da:79:a9:83: b0:e8:d5:5e:95:d2:9d:44:f8:4b:b4:f5:3e:38:fc:5c:fa:29: 9f:27:13:fc:ed:39:8c:83:9b:87:90:6d:ca:d1:13:b9:e4:16: 26:7d:90:bb:fd:b0:19:dc:c6:81:38:9a:11:25:73:a7:16:6c: be:aa:30:8e:8a:f9:fa:42:42:b1:81:f7:94:79:11:c4:87:3d: 13:bb:f5:36:0d:7c:71:80:cd:f6:c3:5a:97:3b:cf:60:29:66: f3:7a:02:e7:ee:8e:63:61:97:85:a5:61:46:78:10:6e:70:ca: b7:06:54:e3:f6:c7:90:62:bd:e5:fe:2a:2a:e3:63:e5:fc:2d: 88:10:f8:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kS3sGNQHlxWcWtbjBY4FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlZjI1MGY2NmRkMzBjM2I3NTQ0MzBhODVkNTMyMzZmMTcz MzFiN2YwHhcNMjUxMjIwMDcwMjMxWhcNMjUxMjIxMDcwMjMxWjAzMTEwLwYDVQQD Eyg5N2I1ZTM0MmY1NGUzYzBlMTYwNzBlZWU4NmJmNDQ0MzNhNjMyYTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03oHknjByWfTNns7xmQWWZCEAsDk 51b2TdDpCWJwAz7Qq4xclG7i5c+6/LZ5wyLnMC/jawyb6uc9VyMICk7sHTN6Iuzq S6sT9aq10SE6IAP/tZJwxLjv7Tqb2L5OtPg5q8N/0HknyiUw95DUuHhfPngj0VIL yLoUDiPzV8yTRewmBph1XG9+PmlhNYdV1PFnhYGpIDh0k1kS3dOul6vmeCNnHREy fFiBhXp9ESXqNfdXo0jMza62+MJv/YSyUrMemASAenMlBs8i17eEb24dAt8QxQk7 21I/j9iL4mx49xguG56xn38DEs5KFqvTHtEw/2V8PPO2068YYPFh9YHX0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJe140L1TjwOFgcO7oa/REM6YyoUMB8GA1UdIwQY MBaAFA7yUPZt0ww7dUQwqF1TI28XMxt/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHZKUTltM1RERHQxUkRDb1hWTWpieGN6RzM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85OTlkZDMtODhmNy00MmMyLWFmZjUt ODFkNWFhYzAzNDk2LzEvRHZKUTltM1RERHQxUkRDb1hWTWpieGN6RzM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy85OTlkZDMtODhmNy00MmMyLWFmZjUtODFkNWFhYzAzNDk2 LzEvRHZKUTltM1RERHQxUkRDb1hWTWpieGN6RzM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApRqOlCX0 F8RmRRj6mVA3+I1NIyl3RQU4daUwflu7a31tNOmJSnUJMXdlrVkt6vHW5FZlduDX 3gDWNMIhcrwwHQIadW7jBVntp8aX8GQtqT7nrHtKtQGfeoEuMxvHh3Byg3Wly+Pz Xy11os7HTnZtov6hKU0JBxBZpafaeamDsOjVXpXSnUT4S7T1Pjj8XPopnycT/O05 jIObh5BtytETueQWJn2Qu/2wGdzGgTiaESVzpxZsvqowjor5+kJCsYH3lHkRxIc9 E7v1Ng18cYDN9sNalzvPYClm83oC5+6OY2GXhaVhRngQbnDKtwZU4/bHkGK95f4q KuNj5fwtiBD4EQ== -----END CERTIFICATE-----Generated at Sat Dec 20 17:14:12 2025 by rpki-client