This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft File: DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft (raw, json) Hash identifier: kRxRYsU1wVEbN111rz//mCp4yf1CffiNERyKh3rgIFQ= Subject key identifier: 33:8D:99:2C:F4:2C:AE:1C:EB:B9:D8:75:2A:89:19:F0:03:C6:E2:31 Authority key identifier: 0C:5B:E6:05:6E:B0:C3:65:0B:8F:E2:1E:2D:72:6C:1B:83:EC:82:B3 Certificate issuer: /CN=0c5be6056eb0c3650b8fe21e2d726c1b83ec82b3 Certificate serial: 019B3DC7F63ECC33122AE332118B811E28F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 22:01:13 +0000 Manifest this update: Sat 20 Dec 2025 22:01:13 +0000 Manifest next update: Sun 21 Dec 2025 22:01:13 +0000 Files and hashes: 1: DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl (hash: GSZslfP5thdjLCP9yM/3Pt7VV8aoyDAc4CLjZaSZNRE=) 2: ZfyPZAhLEDJfbRWOZTPW6i5uxAs.roa (hash: lVcg5S8ltJ0oxrMYvDgCBMGIQj26liJSgr9Rj1kE0c4=) 3: dywSz8RV6R_zILQ66xhZrS_rEB0.roa (hash: 9q5cK6mUpjjqk6wT4UQLlfFH4bjjllWU5kv3AHNWRgo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 22:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:f6:3e:cc:33:12:2a:e3:32:11:8b:81:1e:28:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c5be6056eb0c3650b8fe21e2d726c1b83ec82b3 Validity Not Before: Dec 20 22:01:13 2025 GMT Not After : Dec 21 22:01:13 2025 GMT Subject: CN=338d992cf42cae1cebb9d8752a8919f003c6e231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d3:d4:8f:c6:02:87:ae:88:cd:e0:47:87:13: 82:38:84:db:71:c2:68:3d:55:4a:38:0a:c8:6b:95: 78:20:99:2d:2a:f6:f4:43:46:7b:44:3d:de:d1:f5: 35:0f:26:aa:88:71:2b:94:ad:2a:ed:cb:71:01:26: c0:8d:f9:90:79:36:d2:10:2c:02:67:ee:f6:cc:44: d6:11:f1:4d:cb:f0:29:77:57:1b:c1:38:0d:7d:49: b7:dc:83:9f:a8:aa:7b:46:a2:f8:d7:6f:c7:61:e7: 96:c8:4a:7d:ba:70:33:ac:7b:16:00:d0:23:3d:51: c9:13:79:e2:20:f7:87:d6:e4:9a:e6:82:3e:f7:9c: 21:e4:1b:13:0b:47:92:20:f2:ef:1b:16:95:ff:b4: 19:5e:41:0b:c4:4b:17:17:de:05:31:79:2b:5c:48: 02:43:2d:c1:13:66:60:a2:a9:1a:23:cd:68:87:d5: 6c:8b:41:6d:f9:28:fb:1b:d0:32:75:a1:68:48:f0: e7:fa:ce:8b:d7:45:d2:bb:cd:83:f3:c3:9c:11:f7: 53:ae:3b:e0:56:43:bd:cc:0d:63:ba:8a:ca:5d:72: 1f:1e:02:54:1e:73:f5:f8:5b:08:57:6a:05:1f:11: e8:d7:8e:17:27:3a:42:8e:d6:12:d9:c6:93:14:46: 08:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:8D:99:2C:F4:2C:AE:1C:EB:B9:D8:75:2A:89:19:F0:03:C6:E2:31 X509v3 Authority Key Identifier: keyid:0C:5B:E6:05:6E:B0:C3:65:0B:8F:E2:1E:2D:72:6C:1B:83:EC:82:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFvmBW6ww2ULj-IeLXJsG4PsgrM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/327a54-6db2-4291-9434-ffc7f2a3198c/1/DFvmBW6ww2ULj-IeLXJsG4PsgrM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:62:dd:ce:64:a0:ee:a4:30:25:e6:43:ce:ec:55:05:59:13: 3e:c1:6c:a6:55:dc:df:17:0a:16:17:8c:87:a5:f8:02:00:aa: b0:9a:ba:eb:1e:fb:e7:25:f2:44:46:66:b8:1a:f2:17:6f:4a: eb:48:34:33:66:ed:a3:cc:8a:dc:ac:f9:41:be:c8:88:50:87: 1e:e5:a9:5e:2a:32:a2:4c:22:ac:46:8a:b5:a6:8c:b7:33:7e: c6:53:9f:0f:2f:71:e2:fd:60:2f:99:f7:43:85:e5:f0:39:c1: b8:d4:f6:e0:77:6f:fd:29:92:18:ce:1d:45:dd:99:53:8b:d1: ef:d0:87:91:30:1c:af:6e:15:78:8d:c7:b4:9b:ea:53:73:52: c0:c0:c1:50:11:9d:dd:b7:b7:02:02:5d:f4:d3:a3:15:67:1d: 0e:8b:24:de:b9:04:bd:1b:87:c8:a8:ed:37:7d:94:c7:08:07: d6:c4:56:b8:76:14:89:a1:5e:a2:9b:33:35:36:c0:a3:0c:5e: ca:fc:ee:ff:57:88:a4:12:47:35:60:db:f0:1a:da:66:e0:5a: 14:1b:b6:14:ac:c7:ff:b9:f6:f8:81:33:67:8f:56:0e:2e:dd: a3:69:33:2e:25:4e:03:c8:01:51:d9:24:45:a2:dc:36:b2:d7: ce:e1:f4:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x/Y+zDMSKuMyEYuBHijzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNWJlNjA1NmViMGMzNjUwYjhmZTIxZTJkNzI2YzFiODNl YzgyYjMwHhcNMjUxMjIwMjIwMTEzWhcNMjUxMjIxMjIwMTEzWjAzMTEwLwYDVQQD EygzMzhkOTkyY2Y0MmNhZTFjZWJiOWQ4NzUyYTg5MTlmMDAzYzZlMjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NPUj8YCh66IzeBHhxOCOITbccJo PVVKOArIa5V4IJktKvb0Q0Z7RD3e0fU1DyaqiHErlK0q7ctxASbAjfmQeTbSECwC Z+72zETWEfFNy/Apd1cbwTgNfUm33IOfqKp7RqL412/HYeeWyEp9unAzrHsWANAj PVHJE3niIPeH1uSa5oI+95wh5BsTC0eSIPLvGxaV/7QZXkELxEsXF94FMXkrXEgC Qy3BE2ZgoqkaI81oh9Vsi0Ft+Sj7G9AydaFoSPDn+s6L10XSu82D88OcEfdTrjvg VkO9zA1juorKXXIfHgJUHnP1+FsIV2oFHxHo144XJzpCjtYS2caTFEYIXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDONmSz0LK4c67nYdSqJGfADxuIxMB8GA1UdIwQY MBaAFAxb5gVusMNlC4/iHi1ybBuD7IKzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZ2bUJXNnd3MlVMai1JZUxYSnNHNFBzZ3JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8zMjdhNTQtNmRiMi00MjkxLTk0MzQt ZmZjN2YyYTMxOThjLzEvREZ2bUJXNnd3MlVMai1JZUxYSnNHNFBzZ3JNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8zMjdhNTQtNmRiMi00MjkxLTk0MzQtZmZjN2YyYTMxOThj LzEvREZ2bUJXNnd3MlVMai1JZUxYSnNHNFBzZ3JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkGLdzmSg 7qQwJeZDzuxVBVkTPsFsplXc3xcKFheMh6X4AgCqsJq66x775yXyREZmuBryF29K 60g0M2bto8yK3Kz5Qb7IiFCHHuWpXioyokwirEaKtaaMtzN+xlOfDy9x4v1gL5n3 Q4Xl8DnBuNT24Hdv/SmSGM4dRd2ZU4vR79CHkTAcr24VeI3HtJvqU3NSwMDBUBGd 3be3AgJd9NOjFWcdDosk3rkEvRuHyKjtN32UxwgH1sRWuHYUiaFeopszNTbAowxe yvzu/1eIpBJHNWDb8BraZuBaFBu2FKzH/7n2+IEzZ49WDi7do2kzLiVOA8gBUdkk RaLcNrLXzuH00g== -----END CERTIFICATE-----Generated at Sun Dec 21 07:00:52 2025 by rpki-client