This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft File: DcIGFAWVaZPMY6YNsPljUl01dzE.mft (raw, json) Hash identifier: yt3fof0nNORXlrmaUhHx543PCLdCaTsUfEM3EWw6ltc= Subject key identifier: 1D:A0:A2:7B:96:90:53:50:ED:97:B1:C1:15:CA:BD:CD:47:18:E4:14 Authority key identifier: 0D:C2:06:14:05:95:69:93:CC:63:A6:0D:B0:F9:63:52:5D:35:77:31 Certificate issuer: /CN=0dc2061405956993cc63a60db0f963525d357731 Certificate serial: 019B4513F2FD26312DDDCEAD91B585357EF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft Manifest number: 178D Signing time: Mon 22 Dec 2025 08:01:33 +0000 Manifest this update: Mon 22 Dec 2025 08:01:33 +0000 Manifest next update: Tue 23 Dec 2025 08:01:33 +0000 Files and hashes: 1: DcIGFAWVaZPMY6YNsPljUl01dzE.crl (hash: E0r2tStwUHlZXwCmlexQaUCv2KGfLSupVg2QtbWbcRo=) 2: Spijy9s0dl5Zj39GdhMa_kS4bpQ.roa (hash: yNGOiWMyz1u0T1szDPmkVxet3IhLc4ljiBf05yJrLuA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 08:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:13:f2:fd:26:31:2d:dd:ce:ad:91:b5:85:35:7e:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dc2061405956993cc63a60db0f963525d357731 Validity Not Before: Dec 22 08:01:33 2025 GMT Not After : Dec 23 08:01:33 2025 GMT Subject: CN=1da0a27b96905350ed97b1c115cabdcd4718e414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2d:41:e0:c3:55:77:40:91:15:8e:a6:fa:bc: 5f:be:24:e4:9b:ce:93:c7:74:f0:95:0e:94:44:29: c0:c1:24:cc:72:85:84:76:a4:ae:a0:77:65:5b:2c: 91:1d:47:62:60:e0:18:d5:a3:34:6b:97:80:64:6d: 2d:b2:f1:a3:26:45:85:e4:c0:54:91:77:ff:69:bb: c2:9d:24:4f:ea:ff:cf:fc:d5:eb:60:23:d7:69:56: 22:3b:e3:02:b2:cc:52:d0:5d:c9:77:9a:fb:80:8d: 63:5e:4e:06:51:ea:84:01:49:be:8f:58:d0:e6:26: c2:3b:2f:0c:62:60:ee:ee:45:27:29:45:58:24:86: 90:35:d8:47:cb:fe:5b:4d:d5:54:c2:4f:5d:39:1e: fa:99:eb:d1:52:0e:49:6c:fb:5f:8b:6b:10:d7:6a: f5:7d:ad:86:03:b0:ec:a5:c0:34:1a:2a:f4:66:74: 78:b9:13:ad:1e:2f:44:90:4c:7b:98:f5:4a:1f:29: d1:e2:86:21:70:58:15:6b:53:7a:b4:e4:a4:86:b6: d5:f1:6e:0c:b1:dd:ee:04:85:ce:61:54:86:f8:5f: a0:be:09:c4:03:ef:21:04:27:61:fe:45:0d:a9:ea: cf:92:99:92:7e:f2:a5:31:a7:1a:90:83:ab:3d:60: 57:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:A0:A2:7B:96:90:53:50:ED:97:B1:C1:15:CA:BD:CD:47:18:E4:14 X509v3 Authority Key Identifier: keyid:0D:C2:06:14:05:95:69:93:CC:63:A6:0D:B0:F9:63:52:5D:35:77:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:5c:f0:5a:b8:7d:49:82:26:9a:aa:32:30:01:fd:11:ad:e2: b7:7b:20:f1:48:79:89:8f:22:b3:3c:24:64:fc:aa:ad:8e:3f: 8f:57:9f:bf:8e:63:3b:23:87:ab:a0:1a:5c:6e:8b:9b:d9:3c: ce:ba:4a:5b:c3:52:0c:c7:e6:6c:e9:b0:cf:b5:e7:23:7c:9c: c3:b2:2b:97:a8:7e:9d:aa:7e:29:51:37:90:cd:b4:1f:fc:8e: 6a:a3:b9:e5:69:0b:7e:48:8c:cc:74:44:08:c1:ba:83:6c:ad: de:ad:51:04:74:07:ab:a6:a1:ab:ad:51:38:b0:98:7b:5f:3e: d5:a8:bc:9b:ad:36:0e:77:9a:04:87:9f:05:87:48:7c:c4:39: 98:ff:f2:7e:12:ef:29:b6:92:8c:39:e1:43:ab:98:12:cc:01: b0:72:d1:97:76:20:27:a7:d2:4e:c4:fb:00:ef:4f:1a:d7:76: 27:92:52:cd:64:41:9f:94:d2:ff:e7:60:1c:91:fa:4e:37:91: 42:66:e9:30:a5:6e:8b:8c:d1:c4:68:1e:5e:f1:6a:ab:c1:9f: 4e:5f:65:0e:5b:1f:8a:3d:10:96:44:28:57:91:ab:6e:be:dd: 25:92:12:44:b2:2e:3a:f7:26:a8:35:b2:06:90:17:ad:1e:97: e6:ff:9a:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFE/L9JjEt3c6tkbWFNX70MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYzIwNjE0MDU5NTY5OTNjYzYzYTYwZGIwZjk2MzUyNWQz NTc3MzEwHhcNMjUxMjIyMDgwMTMzWhcNMjUxMjIzMDgwMTMzWjAzMTEwLwYDVQQD EygxZGEwYTI3Yjk2OTA1MzUwZWQ5N2IxYzExNWNhYmRjZDQ3MThlNDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsy1B4MNVd0CRFY6m+rxfviTkm86T x3TwlQ6URCnAwSTMcoWEdqSuoHdlWyyRHUdiYOAY1aM0a5eAZG0tsvGjJkWF5MBU kXf/abvCnSRP6v/P/NXrYCPXaVYiO+MCssxS0F3Jd5r7gI1jXk4GUeqEAUm+j1jQ 5ibCOy8MYmDu7kUnKUVYJIaQNdhHy/5bTdVUwk9dOR76mevRUg5JbPtfi2sQ12r1 fa2GA7DspcA0Gir0ZnR4uROtHi9EkEx7mPVKHynR4oYhcFgVa1N6tOSkhrbV8W4M sd3uBIXOYVSG+F+gvgnEA+8hBCdh/kUNqerPkpmSfvKlMacakIOrPWBX5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB2gonuWkFNQ7ZexwRXKvc1HGOQUMB8GA1UdIwQY MBaAFA3CBhQFlWmTzGOmDbD5Y1JdNXcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGNJR0ZBV1ZhWlBNWTZZTnNQbGpVbDAxZHpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85ZGU3NjctM2EyOC00OWFiLWFlMjgt MjM0OGJhNmZiNGMzLzEvRGNJR0ZBV1ZhWlBNWTZZTnNQbGpVbDAxZHpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy85ZGU3NjctM2EyOC00OWFiLWFlMjgtMjM0OGJhNmZiNGMz LzEvRGNJR0ZBV1ZhWlBNWTZZTnNQbGpVbDAxZHpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa1zwWrh9 SYImmqoyMAH9Ea3it3sg8Uh5iY8iszwkZPyqrY4/j1efv45jOyOHq6AaXG6Lm9k8 zrpKW8NSDMfmbOmwz7XnI3ycw7Irl6h+nap+KVE3kM20H/yOaqO55WkLfkiMzHRE CMG6g2yt3q1RBHQHq6ahq61ROLCYe18+1ai8m602DneaBIefBYdIfMQ5mP/yfhLv KbaSjDnhQ6uYEswBsHLRl3YgJ6fSTsT7AO9PGtd2J5JSzWRBn5TS/+dgHJH6TjeR QmbpMKVui4zRxGgeXvFqq8GfTl9lDlsfij0QlkQoV5Grbr7dJZISRLIuOvcmqDWy BpAXrR6X5v+a2g== -----END CERTIFICATE-----Generated at Mon Dec 22 12:58:10 2025 by rpki-client