This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft File: DrG9MNMZGofH0KRi5nkyQxYz3R4.mft (raw, json) Hash identifier: bHuA+Nv+HWxrYWzO9X7glCxIrmrCZTezhK+zK1JaeS8= Subject key identifier: 7A:F9:DD:AC:DC:DB:2F:FC:65:AF:37:BA:2D:28:E5:F7:11:99:91:37 Authority key identifier: 0E:B1:BD:30:D3:19:1A:87:C7:D0:A4:62:E6:79:32:43:16:33:DD:1E Certificate issuer: /CN=0eb1bd30d3191a87c7d0a462e67932431633dd1e Certificate serial: 019B691FF1A2A43A785AE02F940D84FD762E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft Manifest number: 04B8 Signing time: Mon 29 Dec 2025 08:00:59 +0000 Manifest this update: Mon 29 Dec 2025 08:00:59 +0000 Manifest next update: Tue 30 Dec 2025 08:00:59 +0000 Files and hashes: 1: DrG9MNMZGofH0KRi5nkyQxYz3R4.crl (hash: Vy8qaCVTV+Yu4QgCBZFFGzTGXfz3CjlHw/8UQm/DwsQ=) 2: ogxxjz_eGLDn7LYpHHuvCo9x5ng.roa (hash: B2U5jkd3tbLDGtZHWekj2Yva7wWVjyZDFNXj9MRShj4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:1f:f1:a2:a4:3a:78:5a:e0:2f:94:0d:84:fd:76:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0eb1bd30d3191a87c7d0a462e67932431633dd1e Validity Not Before: Dec 29 08:00:59 2025 GMT Not After : Dec 30 08:00:59 2025 GMT Subject: CN=7af9ddacdcdb2ffc65af37ba2d28e5f711999137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:97:4a:db:17:d6:97:ef:02:49:41:12:4b:78: 48:e1:7d:69:9d:be:c4:5b:59:33:d3:d7:73:6f:1e: 5c:46:f7:23:47:79:64:0c:c4:b4:b7:25:4d:62:89: bb:0f:fb:2c:10:c7:a2:9e:2a:e4:38:03:4e:21:2d: 94:23:6a:b2:5e:be:39:73:8e:72:df:cc:ca:b6:9a: 5b:45:82:55:c7:b5:46:ad:78:53:80:bf:51:81:b2: 32:1a:70:fd:0c:68:85:62:9a:4a:bd:98:83:0d:85: d0:bb:bb:53:64:1a:af:1c:a2:46:79:d0:ea:84:79: 9c:8e:df:27:84:e4:85:95:ee:03:1f:61:9c:3b:77: 93:ff:a4:de:ac:fc:c7:dd:ca:31:22:f5:aa:38:6d: dc:7d:9e:57:e1:f0:ed:99:45:9c:57:d8:1f:de:49: 9f:88:28:5e:03:3c:3f:05:26:05:b8:97:c4:1b:5d: 3a:40:b1:a5:ac:0d:69:3b:67:1d:cb:80:a8:1e:0e: f8:63:bc:28:e7:27:a3:63:82:a6:43:9b:b6:73:08: 7c:11:7a:b6:4c:72:23:56:8e:84:35:36:ca:45:8d: 74:57:07:0c:12:e8:01:17:a3:81:92:d9:91:65:a1: 59:13:0a:a2:4c:50:5a:84:f3:65:df:6c:bd:47:ca: ad:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:F9:DD:AC:DC:DB:2F:FC:65:AF:37:BA:2D:28:E5:F7:11:99:91:37 X509v3 Authority Key Identifier: keyid:0E:B1:BD:30:D3:19:1A:87:C7:D0:A4:62:E6:79:32:43:16:33:DD:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:a4:27:ca:08:fe:5e:08:87:0d:a4:3c:bd:7b:10:f5:d2:5c: 78:e3:80:06:43:bc:92:ab:99:4e:18:6a:16:ce:7d:1b:f7:a2: a0:6d:60:9e:a9:8c:40:e8:1a:2d:3d:74:1e:15:6f:ca:b1:61: 8d:79:9e:d6:a3:65:d9:0a:90:ee:db:32:48:9d:32:d5:12:19: 4a:5f:f1:cf:e6:fd:f8:b4:06:d4:e6:07:90:a3:89:51:20:15: 11:38:23:08:d6:54:59:b0:ce:f7:4b:76:cb:ed:52:13:ce:ec: 26:db:d0:48:a0:a9:dc:cb:12:e8:56:fa:2d:be:50:9f:d3:61: 30:6f:16:c3:05:03:6f:23:7e:ed:be:5c:5f:c2:4d:99:74:9b: bb:64:06:cd:66:2d:fb:64:a8:6b:d4:9b:3f:13:57:18:f1:46: f4:4b:50:76:4e:d5:27:d2:46:ff:83:dc:ee:ec:32:2a:19:dc: 8c:88:05:31:d6:8b:be:39:02:f0:b4:56:bf:f4:51:1e:c8:b3: e1:77:0e:57:49:e6:71:5d:c8:84:fc:11:db:eb:1e:24:60:b4: 1a:b4:40:cf:d2:c9:80:42:8a:c8:bb:08:53:d3:ce:e6:c9:02: d3:a9:71:ba:b8:cd:4d:49:fc:8e:92:16:60:29:09:c7:4a:44: 07:7d:13:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtpH/GipDp4WuAvlA2E/XYuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlYjFiZDMwZDMxOTFhODdjN2QwYTQ2MmU2NzkzMjQzMTYz M2RkMWUwHhcNMjUxMjI5MDgwMDU5WhcNMjUxMjMwMDgwMDU5WjAzMTEwLwYDVQQD Eyg3YWY5ZGRhY2RjZGIyZmZjNjVhZjM3YmEyZDI4ZTVmNzExOTk5MTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ZdK2xfWl+8CSUESS3hI4X1pnb7E W1kz09dzbx5cRvcjR3lkDMS0tyVNYom7D/ssEMeinirkOANOIS2UI2qyXr45c45y 38zKtppbRYJVx7VGrXhTgL9RgbIyGnD9DGiFYppKvZiDDYXQu7tTZBqvHKJGedDq hHmcjt8nhOSFle4DH2GcO3eT/6TerPzH3coxIvWqOG3cfZ5X4fDtmUWcV9gf3kmf iCheAzw/BSYFuJfEG106QLGlrA1pO2cdy4CoHg74Y7wo5yejY4KmQ5u2cwh8EXq2 THIjVo6ENTbKRY10VwcMEugBF6OBktmRZaFZEwqiTFBahPNl32y9R8qtRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHr53azc2y/8Za83ui0o5fcRmZE3MB8GA1UdIwQY MBaAFA6xvTDTGRqHx9CkYuZ5MkMWM90eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHJHOU1OTVpHb2ZIMEtSaTVua3lReFl6M1I0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy83MmU5MWEtMDE0Zi00ODNhLWE1NDQt NGUzMzQyN2Y3MzRlLzEvRHJHOU1OTVpHb2ZIMEtSaTVua3lReFl6M1I0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy83MmU5MWEtMDE0Zi00ODNhLWE1NDQtNGUzMzQyN2Y3MzRl LzEvRHJHOU1OTVpHb2ZIMEtSaTVua3lReFl6M1I0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC6Qnygj+ XgiHDaQ8vXsQ9dJceOOABkO8kquZThhqFs59G/eioG1gnqmMQOgaLT10HhVvyrFh jXme1qNl2QqQ7tsySJ0y1RIZSl/xz+b9+LQG1OYHkKOJUSAVETgjCNZUWbDO90t2 y+1SE87sJtvQSKCp3MsS6Fb6Lb5Qn9NhMG8WwwUDbyN+7b5cX8JNmXSbu2QGzWYt +2Soa9SbPxNXGPFG9EtQdk7VJ9JG/4Pc7uwyKhncjIgFMdaLvjkC8LRWv/RRHsiz 4XcOV0nmcV3IhPwR2+seJGC0GrRAz9LJgEKKyLsIU9PO5skC06lxurjNTUn8jpIW YCkJx0pEB30T8w== -----END CERTIFICATE-----Generated at Mon Dec 29 10:13:34 2025 by rpki-client