This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft File: DKcf-Varj49-f1nUCax696KwqGQ.mft (raw, json) Hash identifier: CqSBpJWBvWSDM4JjlPuSeof14tPWVbcUf3lvJy6/Ekc= Subject key identifier: C8:C1:85:0E:F9:2C:D9:4C:2C:C5:94:50:D2:55:25:3F:66:FD:BD:5F Authority key identifier: 0C:A7:1F:F9:56:AB:8F:8F:7E:7F:59:D4:09:AC:7A:F7:A2:B0:A8:64 Certificate issuer: /CN=0ca71ff956ab8f8f7e7f59d409ac7af7a2b0a864 Certificate serial: 019B703422F05356E0DEAC6BBCB69F269254 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft Manifest number: 17A3 Signing time: Tue 30 Dec 2025 17:00:23 +0000 Manifest this update: Tue 30 Dec 2025 17:00:23 +0000 Manifest next update: Wed 31 Dec 2025 17:00:23 +0000 Files and hashes: 1: DKcf-Varj49-f1nUCax696KwqGQ.crl (hash: YtBJwqqKzVQkPM8Fr44bJkCjarAtkFAeDbBCoNRFYR8=) 2: OsEqbh-MgAhZY6dEETKTLoVhiek.roa (hash: 8l+J0cXRIwFphYGIY8ShZlRzu2XOdk8YK7YXmH85akQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 17:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:34:22:f0:53:56:e0:de:ac:6b:bc:b6:9f:26:92:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ca71ff956ab8f8f7e7f59d409ac7af7a2b0a864 Validity Not Before: Dec 30 17:00:23 2025 GMT Not After : Dec 31 17:00:23 2025 GMT Subject: CN=c8c1850ef92cd94c2cc59450d255253f66fdbd5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a0:93:2d:13:05:e6:92:17:4c:34:5f:37:be: 8b:9f:46:f1:0e:2d:77:6b:8d:f9:41:54:f9:b4:5a: 12:0a:af:71:33:e8:f4:ee:80:c1:85:2d:28:60:cc: c4:56:ca:52:41:bb:ff:1d:cc:39:00:27:d8:93:29: 1e:42:e1:a8:cf:c0:ec:2e:e4:46:cf:58:41:5e:28: cb:6a:98:99:b2:37:c0:eb:b1:98:4c:59:e7:8e:5e: 04:3a:4e:d3:31:3d:aa:a4:3a:4d:4f:eb:a0:a2:6e: 66:0c:de:1c:d3:ef:dc:03:df:23:68:1a:f3:10:18: b5:65:30:09:2d:f8:c8:40:52:1b:58:d5:6c:4a:d7: 73:1b:88:a0:87:92:1f:c1:12:1d:b4:60:7f:ff:60: ca:8b:b6:a2:90:68:2d:20:d1:4d:a0:d2:f1:c2:64: e9:72:39:58:3e:5b:7a:b7:32:df:f8:8b:97:ab:5d: 94:e6:59:8d:80:ed:45:f2:80:c2:72:b2:f6:33:0d: d1:87:e4:3b:f1:8a:44:8e:80:57:e5:16:41:19:9a: cc:85:f0:19:f9:cb:fa:66:dd:3d:09:31:1b:23:c8: ff:aa:63:63:63:9f:36:09:19:c9:05:2f:8a:8c:b0: 6e:03:f7:1f:04:b0:3d:53:5c:ed:86:08:d8:f0:d7: 7c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C1:85:0E:F9:2C:D9:4C:2C:C5:94:50:D2:55:25:3F:66:FD:BD:5F X509v3 Authority Key Identifier: keyid:0C:A7:1F:F9:56:AB:8F:8F:7E:7F:59:D4:09:AC:7A:F7:A2:B0:A8:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:3e:12:cd:4d:fb:4b:84:11:a7:9b:2f:1a:8c:78:ac:27:9d: dc:2d:a1:5b:4a:4b:81:b5:fb:5e:23:bd:91:ab:dd:a6:62:04: 5f:28:2a:f1:1e:91:19:ad:e7:8e:8d:c8:c3:8c:95:0b:cb:78: 3d:9f:53:1e:e0:db:f5:a7:bf:f8:33:c7:52:3a:b1:97:cd:cd: bd:7d:9c:85:1c:9f:94:3a:ca:33:e1:93:55:17:64:b5:da:43: 99:1b:af:d7:f5:24:ac:f3:00:63:7c:71:81:ae:d1:dc:03:0c: 4b:32:de:6b:43:51:62:1b:2d:e8:b6:82:2e:f8:f1:80:1a:99: d8:6d:6b:e1:f8:85:25:30:9c:c5:19:73:16:8d:a4:5b:2c:44: 00:3d:30:ea:33:07:3a:88:9d:32:7c:d6:10:a4:aa:a5:67:81: 81:76:fd:47:ae:16:1f:ca:4d:e9:61:d8:ae:5f:9a:9f:75:17: 40:2e:18:89:11:e5:ae:e0:88:fe:d1:70:ad:d7:29:16:be:68: 06:29:8f:6d:c0:72:b3:b3:d7:d8:a3:8a:93:20:8c:17:ed:68: 0e:1b:8d:2a:96:4d:71:86:09:2e:60:eb:0b:c0:aa:58:fc:58: bf:04:65:3c:a9:65:bb:bd:14:00:8d:0b:39:87:03:6e:7e:e6: bc:2b:0a:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtwNCLwU1bg3qxrvLafJpJUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjYTcxZmY5NTZhYjhmOGY3ZTdmNTlkNDA5YWM3YWY3YTJi MGE4NjQwHhcNMjUxMjMwMTcwMDIzWhcNMjUxMjMxMTcwMDIzWjAzMTEwLwYDVQQD EyhjOGMxODUwZWY5MmNkOTRjMmNjNTk0NTBkMjU1MjUzZjY2ZmRiZDVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6CTLRMF5pIXTDRfN76Ln0bxDi13 a435QVT5tFoSCq9xM+j07oDBhS0oYMzEVspSQbv/Hcw5ACfYkykeQuGoz8DsLuRG z1hBXijLapiZsjfA67GYTFnnjl4EOk7TMT2qpDpNT+ugom5mDN4c0+/cA98jaBrz EBi1ZTAJLfjIQFIbWNVsStdzG4igh5IfwRIdtGB//2DKi7aikGgtINFNoNLxwmTp cjlYPlt6tzLf+IuXq12U5lmNgO1F8oDCcrL2Mw3Rh+Q78YpEjoBX5RZBGZrMhfAZ +cv6Zt09CTEbI8j/qmNjY582CRnJBS+KjLBuA/cfBLA9U1zthgjY8Nd83wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMjBhQ75LNlMLMWUUNJVJT9m/b1fMB8GA1UdIwQY MBaAFAynH/lWq4+Pfn9Z1AmseveisKhkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREtjZi1WYXJqNDktZjFuVUNheDY5Nkt3cUdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC82ZWI4NWUtYmJiMC00ZGE3LWE0ZTAt ZDJlYTYwMDRkNTUzLzEvREtjZi1WYXJqNDktZjFuVUNheDY5Nkt3cUdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC82ZWI4NWUtYmJiMC00ZGE3LWE0ZTAtZDJlYTYwMDRkNTUz LzEvREtjZi1WYXJqNDktZjFuVUNheDY5Nkt3cUdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkT4SzU37 S4QRp5svGox4rCed3C2hW0pLgbX7XiO9kavdpmIEXygq8R6RGa3njo3Iw4yVC8t4 PZ9THuDb9ae/+DPHUjqxl83NvX2chRyflDrKM+GTVRdktdpDmRuv1/UkrPMAY3xx ga7R3AMMSzLea0NRYhst6LaCLvjxgBqZ2G1r4fiFJTCcxRlzFo2kWyxEAD0w6jMH OoidMnzWEKSqpWeBgXb9R64WH8pN6WHYrl+an3UXQC4YiRHlruCI/tFwrdcpFr5o BimPbcBys7PX2KOKkyCMF+1oDhuNKpZNcYYJLmDrC8CqWPxYvwRlPKllu70UAI0L OYcDbn7mvCsKVA== -----END CERTIFICATE-----Generated at Wed Dec 31 01:58:43 2025 by rpki-client