This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft File: DKcf-Varj49-f1nUCax696KwqGQ.mft (raw, json) Hash identifier: ghY73hsHrtcIPx6q7wCOAzafHOgtO8TxrH5dSXDi3MI= Subject key identifier: 68:6C:7F:1B:12:60:2A:4B:43:3C:AD:80:59:C9:24:C5:F7:8F:DD:DC Authority key identifier: 0C:A7:1F:F9:56:AB:8F:8F:7E:7F:59:D4:09:AC:7A:F7:A2:B0:A8:64 Certificate issuer: /CN=0ca71ff956ab8f8f7e7f59d409ac7af7a2b0a864 Certificate serial: 019B62AFC3FE8F2A683A60F20828CB33A900 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft Manifest number: 179C Signing time: Sun 28 Dec 2025 02:00:44 +0000 Manifest this update: Sun 28 Dec 2025 02:00:44 +0000 Manifest next update: Mon 29 Dec 2025 02:00:44 +0000 Files and hashes: 1: DKcf-Varj49-f1nUCax696KwqGQ.crl (hash: zkEbc0+yGVwIPnRZmeUASlmvqaxwMuGrhCzs+llNZ/U=) 2: OsEqbh-MgAhZY6dEETKTLoVhiek.roa (hash: 8l+J0cXRIwFphYGIY8ShZlRzu2XOdk8YK7YXmH85akQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:af:c3:fe:8f:2a:68:3a:60:f2:08:28:cb:33:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ca71ff956ab8f8f7e7f59d409ac7af7a2b0a864 Validity Not Before: Dec 28 02:00:44 2025 GMT Not After : Dec 29 02:00:44 2025 GMT Subject: CN=686c7f1b12602a4b433cad8059c924c5f78fdddc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:45:2d:93:d4:3c:3a:e0:81:2c:74:73:6a:94: 9b:1a:95:fa:d2:17:3b:e4:e1:20:ec:cd:d6:e9:fb: ce:d8:a8:dd:ee:67:ac:77:e8:f4:b6:43:b8:f9:99: 34:9c:f9:b6:fe:91:7d:01:0f:55:68:90:13:d3:5e: 95:ea:76:20:df:67:ab:45:05:78:fd:ef:22:ae:de: ba:8a:ae:05:53:51:ab:19:dd:35:06:f5:eb:43:5a: 63:07:3b:f2:8d:68:6d:37:13:f2:57:cf:c8:df:40: d1:f2:1f:76:86:8a:a1:ab:8a:8e:2b:c7:cd:8b:b4: 03:ff:e1:86:7d:19:9d:d4:c8:c8:cc:89:bf:0c:65: 6e:e2:11:c6:6c:4b:5e:99:1b:b2:cf:8e:c7:c6:5a: 5b:78:61:88:27:16:18:06:27:71:b8:85:76:12:71: 9d:95:e8:a6:9b:32:62:1c:10:36:0d:21:f2:2d:ec: 9a:3f:d6:3b:4b:22:ce:ab:2b:f8:38:86:1e:e0:d9: 99:57:d8:2e:c7:f6:53:e8:97:41:f1:78:76:8f:9d: 76:82:d1:2a:f5:50:1d:d2:fe:a2:64:ab:96:9f:4a: 6b:88:82:bd:43:ad:8e:bb:13:4d:41:d0:b2:5f:cb: eb:06:e9:77:72:79:c1:d5:34:f9:ec:4b:21:80:b9: d8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:6C:7F:1B:12:60:2A:4B:43:3C:AD:80:59:C9:24:C5:F7:8F:DD:DC X509v3 Authority Key Identifier: keyid:0C:A7:1F:F9:56:AB:8F:8F:7E:7F:59:D4:09:AC:7A:F7:A2:B0:A8:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:85:c1:c1:7f:3e:d8:04:c3:d2:7c:17:3a:ef:2c:35:d7:16: 88:82:22:42:3d:77:0a:f5:25:b6:4b:e0:f1:9c:92:37:2f:c9: 10:de:32:cf:85:9b:ca:bf:47:71:0b:58:47:6c:8a:1b:48:ee: 0f:6c:5f:e6:ba:85:7a:1b:3f:c4:d9:95:13:87:30:46:77:9a: e3:bd:ea:d7:7d:7e:20:60:e3:49:2f:0d:14:16:fb:86:6c:97: 68:5a:1f:99:55:72:e3:b2:7b:f3:4e:53:62:68:a8:03:47:0d: ba:d6:9f:a4:d0:e8:a5:d1:5c:f4:8e:80:b6:97:ec:17:7e:bc: 1a:b0:a0:d3:a8:19:fa:46:33:af:ba:69:19:1b:68:0f:5d:f6: d5:75:f7:ac:f3:04:1d:e7:ce:f1:da:e6:92:61:8f:73:60:dc: 24:57:9d:28:ae:01:93:59:fc:c9:a6:75:60:0c:22:ef:89:17: 82:22:69:78:ab:bb:be:11:cd:c4:0e:66:39:5a:85:3b:34:3b: b4:a2:b0:01:9b:b2:31:f6:33:dd:51:80:36:c3:c4:56:43:9d: d5:18:c3:b9:41:12:2e:b4:46:21:15:f4:16:18:30:d3:dd:a5: 88:6e:12:3e:30:4e:65:ef:df:96:4d:04:cb:ea:45:b3:ba:a5: f8:28:ad:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtir8P+jypoOmDyCCjLM6kAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjYTcxZmY5NTZhYjhmOGY3ZTdmNTlkNDA5YWM3YWY3YTJi MGE4NjQwHhcNMjUxMjI4MDIwMDQ0WhcNMjUxMjI5MDIwMDQ0WjAzMTEwLwYDVQQD Eyg2ODZjN2YxYjEyNjAyYTRiNDMzY2FkODA1OWM5MjRjNWY3OGZkZGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukUtk9Q8OuCBLHRzapSbGpX60hc7 5OEg7M3W6fvO2Kjd7mesd+j0tkO4+Zk0nPm2/pF9AQ9VaJAT016V6nYg32erRQV4 /e8irt66iq4FU1GrGd01BvXrQ1pjBzvyjWhtNxPyV8/I30DR8h92hoqhq4qOK8fN i7QD/+GGfRmd1MjIzIm/DGVu4hHGbEtemRuyz47HxlpbeGGIJxYYBidxuIV2EnGd leimmzJiHBA2DSHyLeyaP9Y7SyLOqyv4OIYe4NmZV9gux/ZT6JdB8Xh2j512gtEq 9VAd0v6iZKuWn0priIK9Q62OuxNNQdCyX8vrBul3cnnB1TT57EshgLnYWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGhsfxsSYCpLQzytgFnJJMX3j93cMB8GA1UdIwQY MBaAFAynH/lWq4+Pfn9Z1AmseveisKhkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREtjZi1WYXJqNDktZjFuVUNheDY5Nkt3cUdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC82ZWI4NWUtYmJiMC00ZGE3LWE0ZTAt ZDJlYTYwMDRkNTUzLzEvREtjZi1WYXJqNDktZjFuVUNheDY5Nkt3cUdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC82ZWI4NWUtYmJiMC00ZGE3LWE0ZTAtZDJlYTYwMDRkNTUz LzEvREtjZi1WYXJqNDktZjFuVUNheDY5Nkt3cUdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOYXBwX8+ 2ATD0nwXOu8sNdcWiIIiQj13CvUltkvg8ZySNy/JEN4yz4Wbyr9HcQtYR2yKG0ju D2xf5rqFehs/xNmVE4cwRnea473q131+IGDjSS8NFBb7hmyXaFofmVVy47J7805T YmioA0cNutafpNDopdFc9I6AtpfsF368GrCg06gZ+kYzr7ppGRtoD1321XX3rPME HefO8drmkmGPc2DcJFedKK4Bk1n8yaZ1YAwi74kXgiJpeKu7vhHNxA5mOVqFOzQ7 tKKwAZuyMfYz3VGANsPEVkOd1RjDuUESLrRGIRX0Fhgw092liG4SPjBOZe/flk0E y+pFs7ql+Cit4Q== -----END CERTIFICATE-----Generated at Sun Dec 28 06:37:52 2025 by rpki-client