This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft File: DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft (raw, json) Hash identifier: OF9LmMeI3rTJsJRDYdZxjeK8WETGC3Ej1lIsGMOdn6Y= Subject key identifier: 0F:FE:7F:4C:1A:57:36:39:7B:05:41:CF:19:31:08:87:AA:CF:C2:D8 Authority key identifier: 0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06 Certificate issuer: /CN=0c05ca111c0093b56514215be467b515dda56c06 Certificate serial: 019B3F113224794AB60C73328BB240F4CA3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft Manifest number: 0B0E Signing time: Sun 21 Dec 2025 04:00:50 +0000 Manifest this update: Sun 21 Dec 2025 04:00:50 +0000 Manifest next update: Mon 22 Dec 2025 04:00:50 +0000 Files and hashes: 1: AdOd8Jb54cEXRecTsgv4rvZgW2w.roa (hash: XlRu/FC0Vkrd6YTWXK4UeFe1TUsmJeqRlhyiiXPRuFk=) 2: DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl (hash: SmZwk4D8ZTPE2husu46wB5fNsrn1onYQYMtarkh06Zo=) 3: Uf3rnLD2FeTDGBhV4auB-GpHM1s.roa (hash: ECPU9dL14nC9wQ4VpmYN1TfdrxIkC7KfqX1VDc+N1h4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:32:24:79:4a:b6:0c:73:32:8b:b2:40:f4:ca:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c05ca111c0093b56514215be467b515dda56c06 Validity Not Before: Dec 21 04:00:50 2025 GMT Not After : Dec 22 04:00:50 2025 GMT Subject: CN=0ffe7f4c1a5736397b0541cf19310887aacfc2d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9f:be:51:dd:c3:ef:fa:09:2f:23:df:ae:7f: a6:05:f9:ff:dc:10:b3:58:a8:bc:5d:07:7d:ac:6d: 1a:56:b5:7f:96:76:0e:98:eb:3f:74:35:a4:59:14: 75:11:28:1f:8f:c4:25:d6:01:74:6b:72:36:8c:dc: 49:0e:8f:d3:98:ad:e2:9e:e3:ff:27:2d:7b:ed:f1: 61:af:71:f4:81:44:36:e4:02:ef:aa:ee:7b:85:7d: a8:19:22:65:69:7f:5c:17:00:aa:53:85:f6:3d:1f: c3:e8:b7:8c:82:86:29:56:83:38:26:9f:f3:dd:1c: 86:0c:ac:42:01:14:c7:72:df:64:f8:5d:7a:f0:c1: 7d:54:71:23:f7:5c:f6:14:e5:9c:37:9f:83:99:fc: ff:f4:6a:43:b0:41:f7:98:8f:5a:15:c8:b1:4f:a7: df:17:13:eb:db:d6:b3:cc:58:bd:9a:4f:5a:60:2b: 26:a8:14:97:a7:77:c4:db:f5:39:e0:da:be:2d:61: 1c:8a:3b:eb:27:c1:ec:f5:31:64:10:0f:a8:a5:13: 07:b9:c6:29:16:73:66:01:b3:38:d0:80:bf:58:d9: 65:65:17:89:66:bf:31:f6:aa:5f:15:3d:c9:2d:51: 69:39:e8:8c:8d:15:54:71:c5:e6:f2:71:17:ec:d2: 5b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:FE:7F:4C:1A:57:36:39:7B:05:41:CF:19:31:08:87:AA:CF:C2:D8 X509v3 Authority Key Identifier: keyid:0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:bd:76:e3:40:7d:94:77:f4:03:28:50:33:8e:01:bd:32:ed: 01:25:99:d5:03:89:2c:d6:71:1a:84:d0:1d:ea:ca:a8:63:79: f3:a2:63:19:1a:66:22:2e:9c:ae:c5:58:81:18:23:e7:55:ca: d7:84:6e:04:37:69:c5:15:43:23:9f:36:59:4d:c7:6b:58:82: e0:1e:f0:b6:8c:04:83:b3:d7:74:22:be:6a:91:4f:b5:f6:19: 06:e5:50:d5:48:84:9b:f1:73:aa:a0:4f:92:11:af:a8:97:5d: 4e:6a:ea:ec:16:04:cb:ca:ee:70:b1:58:b5:96:9f:dc:31:76: 03:de:5f:22:45:94:58:f2:9c:de:b8:6f:e8:f1:06:e8:a0:42: 35:19:d7:45:40:ad:0c:aa:4c:c3:b6:34:3f:29:6a:a1:47:1b: 42:d9:8b:1d:4f:7e:4b:0c:33:d4:b8:10:4e:28:7e:dc:4c:51: c6:59:2d:5e:0c:82:55:22:48:96:aa:fe:f2:05:07:65:74:56: 38:05:f4:5a:1c:85:83:ee:ca:2f:c3:9d:0b:08:66:fa:77:fe: 32:35:96:ec:af:89:c9:c5:2f:9a:87:11:3d:e3:ce:e2:7b:a6: 1e:4e:13:33:4a:4f:3b:c2:2e:07:f0:6d:dc:31:94:6a:d1:fc: 66:4d:b4:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/ETIkeUq2DHMyi7JA9Mo8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMDVjYTExMWMwMDkzYjU2NTE0MjE1YmU0NjdiNTE1ZGRh NTZjMDYwHhcNMjUxMjIxMDQwMDUwWhcNMjUxMjIyMDQwMDUwWjAzMTEwLwYDVQQD EygwZmZlN2Y0YzFhNTczNjM5N2IwNTQxY2YxOTMxMDg4N2FhY2ZjMmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5++Ud3D7/oJLyPfrn+mBfn/3BCz WKi8XQd9rG0aVrV/lnYOmOs/dDWkWRR1ESgfj8Ql1gF0a3I2jNxJDo/TmK3inuP/ Jy177fFhr3H0gUQ25ALvqu57hX2oGSJlaX9cFwCqU4X2PR/D6LeMgoYpVoM4Jp/z 3RyGDKxCARTHct9k+F168MF9VHEj91z2FOWcN5+Dmfz/9GpDsEH3mI9aFcixT6ff FxPr29azzFi9mk9aYCsmqBSXp3fE2/U54Nq+LWEcijvrJ8Hs9TFkEA+opRMHucYp FnNmAbM40IC/WNllZReJZr8x9qpfFT3JLVFpOeiMjRVUccXm8nEX7NJbmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA/+f0waVzY5ewVBzxkxCIeqz8LYMB8GA1UdIwQY MBaAFAwFyhEcAJO1ZRQhW+RntRXdpWwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREFYS0VSd0FrN1ZsRkNGYjVHZTFGZDJsYkFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wZmJmNDgtNWRiNy00OWZlLWJmNDQt NmEzNjcwNWJiYTZmLzEvREFYS0VSd0FrN1ZsRkNGYjVHZTFGZDJsYkFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wZmJmNDgtNWRiNy00OWZlLWJmNDQtNmEzNjcwNWJiYTZm LzEvREFYS0VSd0FrN1ZsRkNGYjVHZTFGZDJsYkFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmb1240B9 lHf0AyhQM44BvTLtASWZ1QOJLNZxGoTQHerKqGN586JjGRpmIi6crsVYgRgj51XK 14RuBDdpxRVDI582WU3Ha1iC4B7wtowEg7PXdCK+apFPtfYZBuVQ1UiEm/FzqqBP khGvqJddTmrq7BYEy8rucLFYtZaf3DF2A95fIkWUWPKc3rhv6PEG6KBCNRnXRUCt DKpMw7Y0PylqoUcbQtmLHU9+Swwz1LgQTih+3ExRxlktXgyCVSJIlqr+8gUHZXRW OAX0WhyFg+7KL8OdCwhm+nf+MjWW7K+JycUvmocRPePO4numHk4TM0pPO8IuB/Bt 3DGUatH8Zk205w== -----END CERTIFICATE-----Generated at Sun Dec 21 07:38:52 2025 by rpki-client