This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft File: DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft (raw, json) Hash identifier: YkEo333dFrjQhiyL/pJh/eV6EWtokNfEN3qORddN+k8= Subject key identifier: B0:09:16:A7:DF:7B:40:EF:9F:73:90:30:04:FA:D8:53:46:63:81:CD Authority key identifier: 0E:B5:10:D7:C9:15:A4:BE:6D:F6:B1:6F:F5:82:FD:2D:6A:D2:36:05 Certificate issuer: /CN=0eb510d7c915a4be6df6b16ff582fd2d6ad23605 Certificate serial: 019B3EA3793A648C4F780B53497F3DDB879F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DrUQ18kVpL5t9rFv9YL9LWrSNgU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 02:00:59 +0000 Manifest this update: Sun 21 Dec 2025 02:00:59 +0000 Manifest next update: Mon 22 Dec 2025 02:00:59 +0000 Files and hashes: 1: DrUQ18kVpL5t9rFv9YL9LWrSNgU.crl (hash: rDD3QuiTun+y9tOZbsrYH79s0GovJehxEW6/ixNAW/4=) 2: rG4uV5FpPy0fw9yTiKRJUxEEj4o.roa (hash: BaS8t7omCzvSgmaV1xikWxIAkO9HyfZ7kCUC9REWlSg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.crl rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft rsync://rpki.ripe.net/repository/DEFAULT/DrUQ18kVpL5t9rFv9YL9LWrSNgU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 02:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:79:3a:64:8c:4f:78:0b:53:49:7f:3d:db:87:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0eb510d7c915a4be6df6b16ff582fd2d6ad23605 Validity Not Before: Dec 21 02:00:59 2025 GMT Not After : Dec 22 02:00:59 2025 GMT Subject: CN=b00916a7df7b40ef9f73903004fad853466381cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:f7:f0:6e:1e:4c:bd:a3:ef:e9:cf:cb:e7:16: f3:c1:5b:8c:9b:13:e9:8f:74:24:47:67:49:d9:75: f5:63:9d:a2:0c:52:8d:82:61:4f:06:69:57:46:26: a3:67:bc:8e:d4:9e:06:84:d1:59:b6:6d:2e:a2:75: 4c:a0:9f:bd:ed:94:43:77:27:a8:fc:8c:8e:b5:9d: 08:b9:55:b8:3f:7c:dc:d1:a7:c0:b3:bb:1b:25:73: b7:d2:be:f0:7f:dd:4b:55:9f:77:4e:b8:06:8b:b4: 4e:eb:d5:d8:43:a3:29:22:db:7f:b1:06:5f:16:77: 3d:25:54:09:6d:b8:8d:d0:29:99:1e:58:28:73:6b: f9:ea:1f:90:88:de:eb:d0:33:b8:f8:cc:9f:d9:6a: 9d:59:23:20:74:87:86:df:8c:d3:85:0e:3e:1e:a9: 6d:96:f3:1f:0f:3a:2d:2f:20:4b:6d:5b:57:af:3f: da:d0:4c:a8:41:c3:8e:67:12:f4:6a:3f:6f:aa:17: df:57:86:68:22:20:56:85:fb:4a:90:a2:b7:46:f1: 44:d0:4d:a7:eb:ee:e5:f6:f0:b3:76:ba:54:68:74: 35:88:0b:95:34:5d:f1:54:6c:05:6e:22:4d:e6:8e: 4e:b5:94:f3:81:7e:a0:b0:94:4d:3a:f3:2f:3b:16: 9c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:09:16:A7:DF:7B:40:EF:9F:73:90:30:04:FA:D8:53:46:63:81:CD X509v3 Authority Key Identifier: keyid:0E:B5:10:D7:C9:15:A4:BE:6D:F6:B1:6F:F5:82:FD:2D:6A:D2:36:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DrUQ18kVpL5t9rFv9YL9LWrSNgU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:60:0c:85:a4:35:15:e2:83:09:1d:cc:8d:69:78:4b:b1:61: 29:f4:b7:db:b0:b7:fd:1e:89:fe:26:6c:ff:14:a0:21:6a:66: 75:99:bc:4c:5d:e9:e7:6c:8c:aa:f9:99:84:8d:e8:82:85:d3: f0:c3:70:c3:f9:40:f5:62:90:9e:db:12:66:10:a9:aa:81:76: 38:3b:b8:2b:b6:fb:0b:03:ef:5f:8b:21:a0:0d:c3:b0:86:d5: a6:7a:c7:73:aa:6a:a1:7f:db:d6:88:a7:fb:85:f5:bb:0b:54: 11:25:8f:f9:7b:9b:cc:03:e2:a7:b5:db:ac:a4:40:c8:92:df: 37:a7:40:5b:95:bf:b2:21:8c:23:b7:8c:71:df:9a:67:29:4b: 7f:15:55:ea:64:14:2a:8b:24:51:dc:9e:0b:4e:98:b3:e4:a9: 03:f4:91:fb:98:e7:fc:a9:c9:d0:c6:2e:c8:5d:6f:1d:20:ac: 03:0d:af:09:a8:c7:17:0e:be:4b:d9:da:37:84:55:77:8f:c5: c7:f4:10:e4:44:e1:44:3a:b1:9e:2b:77:f4:f8:c2:c1:ea:82: 52:88:b7:ed:34:22:07:4c:9b:ab:e7:8f:f9:11:ce:d8:b8:85: d9:01:a7:25:dc:b1:ea:78:74:9c:5f:7d:81:fb:f7:ee:45:c1: 8e:f4:f5:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o3k6ZIxPeAtTSX8924efMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlYjUxMGQ3YzkxNWE0YmU2ZGY2YjE2ZmY1ODJmZDJkNmFk MjM2MDUwHhcNMjUxMjIxMDIwMDU5WhcNMjUxMjIyMDIwMDU5WjAzMTEwLwYDVQQD EyhiMDA5MTZhN2RmN2I0MGVmOWY3MzkwMzAwNGZhZDg1MzQ2NjM4MWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7vfwbh5MvaPv6c/L5xbzwVuMmxPp j3QkR2dJ2XX1Y52iDFKNgmFPBmlXRiajZ7yO1J4GhNFZtm0uonVMoJ+97ZRDdyeo /IyOtZ0IuVW4P3zc0afAs7sbJXO30r7wf91LVZ93TrgGi7RO69XYQ6MpItt/sQZf Fnc9JVQJbbiN0CmZHlgoc2v56h+QiN7r0DO4+Myf2WqdWSMgdIeG34zThQ4+Hqlt lvMfDzotLyBLbVtXrz/a0EyoQcOOZxL0aj9vqhffV4ZoIiBWhftKkKK3RvFE0E2n 6+7l9vCzdrpUaHQ1iAuVNF3xVGwFbiJN5o5OtZTzgX6gsJRNOvMvOxaciQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLAJFqffe0Dvn3OQMAT62FNGY4HNMB8GA1UdIwQY MBaAFA61ENfJFaS+bfaxb/WC/S1q0jYFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHJVUTE4a1ZwTDV0OXJGdjlZTDlMV3JTTmdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi85NmJlM2QtZDdkMi00NzUzLWE3ODMt ZDYzOGEzYmU4OGNhLzEvRHJVUTE4a1ZwTDV0OXJGdjlZTDlMV3JTTmdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi85NmJlM2QtZDdkMi00NzUzLWE3ODMtZDYzOGEzYmU4OGNh LzEvRHJVUTE4a1ZwTDV0OXJGdjlZTDlMV3JTTmdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzWAMhaQ1 FeKDCR3MjWl4S7FhKfS327C3/R6J/iZs/xSgIWpmdZm8TF3p52yMqvmZhI3ogoXT 8MNww/lA9WKQntsSZhCpqoF2ODu4K7b7CwPvX4shoA3DsIbVpnrHc6pqoX/b1oin +4X1uwtUESWP+XubzAPip7XbrKRAyJLfN6dAW5W/siGMI7eMcd+aZylLfxVV6mQU KoskUdyeC06Ys+SpA/SR+5jn/KnJ0MYuyF1vHSCsAw2vCajHFw6+S9naN4RVd4/F x/QQ5EThRDqxnit39PjCweqCUoi37TQiB0ybq+eP+RHO2LiF2QGnJdyx6nh0nF99 gfv37kXBjvT1kg== -----END CERTIFICATE-----Generated at Sun Dec 21 10:45:33 2025 by rpki-client