This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft File: DNLKvrHXJOekjdYemn4MUKTpv1A.mft (raw, json) Hash identifier: hdvZS4qPZ0hUluItWUViyISlu39vVPaW6BrpmKMOFTY= Subject key identifier: FA:87:B7:C5:82:F7:DD:8E:A6:19:BF:C9:D5:F5:EA:4C:CB:72:A7:07 Authority key identifier: 0C:D2:CA:BE:B1:D7:24:E7:A4:8D:D6:1E:9A:7E:0C:50:A4:E9:BF:50 Certificate issuer: /CN=0cd2cabeb1d724e7a48dd61e9a7e0c50a4e9bf50 Certificate serial: 019B5FE5F6D083F6CB39E60AFDEFFCFED689 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft Manifest number: 086A Signing time: Sat 27 Dec 2025 13:01:04 +0000 Manifest this update: Sat 27 Dec 2025 13:01:04 +0000 Manifest next update: Sun 28 Dec 2025 13:01:04 +0000 Files and hashes: 1: DNLKvrHXJOekjdYemn4MUKTpv1A.crl (hash: ruIkAPCaLYP/qOsTloARmtCgRD1J0a17g7YsBp6Njtk=) 2: gFGZ2BFs8uwMqzE5e-fa-6VVCNI.roa (hash: RsuEdz61HYwgHfhCVbH78Gqegx1PGZpeCp/nCDSO5do=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:e5:f6:d0:83:f6:cb:39:e6:0a:fd:ef:fc:fe:d6:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cd2cabeb1d724e7a48dd61e9a7e0c50a4e9bf50 Validity Not Before: Dec 27 13:01:04 2025 GMT Not After : Dec 28 13:01:04 2025 GMT Subject: CN=fa87b7c582f7dd8ea619bfc9d5f5ea4ccb72a707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:73:c4:92:2e:79:62:07:55:b0:b5:e6:3e:88: dc:e4:a8:ae:23:6e:6e:15:f9:31:ae:3f:bc:21:f8: d9:61:4d:fd:34:65:a3:ac:5a:2b:97:2f:c1:94:2d: ec:24:13:2e:a5:9c:ba:a0:fb:8d:68:8c:b4:f5:3e: 25:2b:f3:1a:17:fd:a5:06:9e:af:50:ab:fe:91:f1: b5:3c:1b:93:3e:9a:7c:2b:78:03:3a:74:db:6d:02: 36:d6:9f:47:00:66:e6:5c:93:ce:2d:44:4b:90:af: f1:ab:47:72:b6:27:18:ba:9e:8c:5a:18:49:fc:53: dc:f0:86:2d:ac:58:cc:43:de:e1:8b:3c:08:48:28: d2:de:0d:e0:04:b4:68:54:7e:eb:f7:cb:60:fa:1e: d4:ac:fd:8c:6d:c1:0d:aa:92:bb:77:be:04:10:39: 0e:7c:48:eb:0e:9a:09:62:fe:af:b7:e8:35:7e:24: a9:66:97:d9:6f:65:76:c3:28:a7:17:83:a6:7f:0e: 47:bf:ed:04:c0:00:fd:e0:3a:65:86:31:5f:ba:fa: 4d:82:88:e5:5d:ac:53:30:51:75:97:23:30:c4:30: 94:65:00:44:9e:c5:a5:a2:a9:8c:0e:ee:e9:7f:f6: ea:83:a9:e2:20:c2:df:0f:f6:9c:d6:ba:af:14:02: 93:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:87:B7:C5:82:F7:DD:8E:A6:19:BF:C9:D5:F5:EA:4C:CB:72:A7:07 X509v3 Authority Key Identifier: keyid:0C:D2:CA:BE:B1:D7:24:E7:A4:8D:D6:1E:9A:7E:0C:50:A4:E9:BF:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:56:79:a2:5f:10:54:ed:a3:16:ac:6c:0c:ae:74:e6:a4:bd: 4e:a4:e5:6b:56:1b:95:ee:d9:da:f4:b0:ec:ff:be:11:81:fa: 85:da:09:f9:db:ca:be:51:40:40:2e:62:0f:fa:71:2a:33:bc: f6:42:33:21:9a:43:30:2a:5b:6b:c2:4b:d5:b3:b5:d6:f1:45: 13:ab:62:89:c1:ed:e4:f7:5b:13:92:47:1f:f2:67:7c:67:85: f1:26:40:2e:c9:bd:6e:99:c3:e8:7e:34:34:6f:2f:25:c8:9f: 3b:f8:01:76:99:5d:0d:2e:97:8c:39:ef:f4:8a:bd:27:f1:b6: c1:aa:b3:4e:e3:75:63:32:1a:ce:bf:fe:98:70:ce:fd:1a:22: a5:3d:ac:6f:a4:f9:c6:69:61:64:a6:f2:7d:28:fc:75:65:6e: 5a:e1:72:bb:c2:26:d0:11:b0:16:5f:59:de:f2:c6:74:40:83: ee:90:f2:3b:1a:73:39:8c:91:7b:9f:9c:63:ce:62:0d:d9:54: ba:28:36:16:64:52:f0:88:e6:eb:4a:9e:fa:c4:20:4a:18:97: af:32:94:33:81:73:93:13:12:1a:b0:17:1f:4d:7a:5f:6d:c8: c2:79:cc:2b:8d:7e:3a:cb:eb:9b:7d:01:65:54:37:d9:3b:1b: 15:98:96:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtf5fbQg/bLOeYK/e/8/taJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZDJjYWJlYjFkNzI0ZTdhNDhkZDYxZTlhN2UwYzUwYTRl OWJmNTAwHhcNMjUxMjI3MTMwMTA0WhcNMjUxMjI4MTMwMTA0WjAzMTEwLwYDVQQD EyhmYTg3YjdjNTgyZjdkZDhlYTYxOWJmYzlkNWY1ZWE0Y2NiNzJhNzA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXPEki55YgdVsLXmPojc5KiuI25u Ffkxrj+8IfjZYU39NGWjrForly/BlC3sJBMupZy6oPuNaIy09T4lK/MaF/2lBp6v UKv+kfG1PBuTPpp8K3gDOnTbbQI21p9HAGbmXJPOLURLkK/xq0dyticYup6MWhhJ /FPc8IYtrFjMQ97hizwISCjS3g3gBLRoVH7r98tg+h7UrP2MbcENqpK7d74EEDkO fEjrDpoJYv6vt+g1fiSpZpfZb2V2wyinF4Omfw5Hv+0EwAD94DplhjFfuvpNgojl XaxTMFF1lyMwxDCUZQBEnsWloqmMDu7pf/bqg6niIMLfD/ac1rqvFAKTvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPqHt8WC992Ophm/ydX16kzLcqcHMB8GA1UdIwQY MBaAFAzSyr6x1yTnpI3WHpp+DFCk6b9QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE5MS3ZySFhKT2VramRZZW1uNE1VS1RwdjFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9iNzk3NzctNGEwNC00ZGFiLWExZGMt MjUzNzQ0OTRjZWVlLzEvRE5MS3ZySFhKT2VramRZZW1uNE1VS1RwdjFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9iNzk3NzctNGEwNC00ZGFiLWExZGMtMjUzNzQ0OTRjZWVl LzEvRE5MS3ZySFhKT2VramRZZW1uNE1VS1RwdjFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaFZ5ol8Q VO2jFqxsDK505qS9TqTla1Yble7Z2vSw7P++EYH6hdoJ+dvKvlFAQC5iD/pxKjO8 9kIzIZpDMCpba8JL1bO11vFFE6tiicHt5PdbE5JHH/JnfGeF8SZALsm9bpnD6H40 NG8vJcifO/gBdpldDS6XjDnv9Iq9J/G2waqzTuN1YzIazr/+mHDO/RoipT2sb6T5 xmlhZKbyfSj8dWVuWuFyu8Im0BGwFl9Z3vLGdECD7pDyOxpzOYyRe5+cY85iDdlU uig2FmRS8Ijm60qe+sQgShiXrzKUM4FzkxMSGrAXH016X23IwnnMK41+Osvrm30B ZVQ32TsbFZiWtg== -----END CERTIFICATE-----Generated at Sat Dec 27 17:48:23 2025 by rpki-client