This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft File: DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft (raw, json) Hash identifier: TA04ThWYDgxd3WrX5yuqYLe2Zl7OGE97Bj0C/3DM2u0= Subject key identifier: 31:55:E6:6F:35:07:6F:E9:68:98:14:FD:BD:DC:F1:D7:6B:E2:F9:C3 Authority key identifier: 0C:17:DA:E0:44:76:DB:10:16:CA:A4:3E:3E:D9:BC:6B:D6:9F:39:75 Certificate issuer: /CN=0c17dae04476db1016caa43e3ed9bc6bd69f3975 Certificate serial: 019B3F7F4A43F27E3485A7B6A46D180B371B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft Manifest number: 0E26 Signing time: Sun 21 Dec 2025 06:01:05 +0000 Manifest this update: Sun 21 Dec 2025 06:01:05 +0000 Manifest next update: Mon 22 Dec 2025 06:01:05 +0000 Files and hashes: 1: 6Y2-BPBwmi0ajRFfuk-7gjxb3VY.roa (hash: zEnO2OcP02snJFVmokqdabitxnMtngb7RKkC32lY0BQ=) 2: DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl (hash: J+PxmlRF/jpzrfU6A2VFLqczaHdSynLIKR7+JzQDxwM=) 3: JSDk17ahgjuw722aAK05JMcAXY0.roa (hash: /NFnbJGiq89G5CeYaHNRHk4PJoghq/D0jyLC3XejUq4=) 4: tn_gy-6KAV5ZpTSqYbryoSs6AIA.roa (hash: tZ5/NhO61aB/g/lfOTBKTOhiuBSX3QMZ1HNoyXDOpwg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7f:4a:43:f2:7e:34:85:a7:b6:a4:6d:18:0b:37:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c17dae04476db1016caa43e3ed9bc6bd69f3975 Validity Not Before: Dec 21 06:01:05 2025 GMT Not After : Dec 22 06:01:05 2025 GMT Subject: CN=3155e66f35076fe9689814fdbddcf1d76be2f9c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4d:67:de:75:f8:5b:2c:41:e7:94:52:ad:ff: bf:8a:00:ff:90:b4:92:36:dc:c3:31:81:25:a8:00: 60:dc:bf:cf:f4:00:3b:d5:94:79:19:ef:1d:9c:e8: 00:af:98:4b:3e:43:3a:bc:67:4d:be:89:7d:6a:36: 9b:6b:28:1e:23:03:5e:88:17:70:0b:c4:8a:64:aa: c4:21:2c:b0:37:16:ac:f1:72:85:21:da:5e:2b:5b: 86:b3:00:77:7d:d3:6b:af:68:d9:86:ff:01:2c:86: 21:8f:0e:05:20:85:a8:af:c9:75:cb:ea:97:ab:15: 33:a4:7c:5c:56:50:34:3a:42:6a:b3:de:80:bb:0e: fb:19:10:95:d8:76:70:d3:b2:67:33:6a:f8:9c:32: c3:32:ed:a7:46:34:48:77:b8:5b:d8:f2:f3:fc:d5: 42:0d:c9:8f:98:b8:bf:c8:ed:c3:f1:00:f3:dd:72: 6a:ed:a5:1c:08:50:ed:47:92:e5:5c:c0:f7:ae:1b: b6:95:a9:8e:86:2c:0f:3a:17:64:a3:bc:45:15:f8: e8:61:ee:7e:9d:96:3b:a6:4a:e6:ec:8d:02:49:f3: 9b:fc:de:35:80:85:c5:39:a9:65:37:d7:a6:57:88: 4f:a6:9a:1f:69:f2:df:ca:09:70:71:6a:d9:5f:ea: c3:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:55:E6:6F:35:07:6F:E9:68:98:14:FD:BD:DC:F1:D7:6B:E2:F9:C3 X509v3 Authority Key Identifier: keyid:0C:17:DA:E0:44:76:DB:10:16:CA:A4:3E:3E:D9:BC:6B:D6:9F:39:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:b5:c2:6f:6c:2b:c7:29:56:ac:87:6e:e4:d2:72:db:50:b5: 3d:85:68:d8:f9:20:56:fc:ee:94:5e:4a:41:ca:ea:42:b3:48: ac:a6:d0:e7:4d:3f:47:e8:05:ee:f3:58:52:c3:d4:07:d9:58: db:1e:60:b4:fd:51:99:67:46:2c:64:4f:90:c3:b4:b4:9e:88: a0:4f:19:fc:9a:5a:65:d3:c4:12:a9:15:22:4b:e2:f3:8d:18: 03:3e:c0:a2:f7:67:d6:f5:aa:15:35:69:5f:ac:b6:ca:08:83: 10:14:d8:ee:c1:f5:4a:a8:5a:1f:74:45:2b:aa:9c:a2:be:a5: fe:4d:ca:0c:ef:76:dc:2c:b2:74:c0:2f:a1:ce:7f:0c:98:48: ae:8b:86:4f:ed:a9:1b:c5:1f:17:cb:2e:f3:30:34:e5:81:8f: 1d:5a:6d:39:0c:9f:d5:3c:ec:2b:bc:c7:cd:22:d9:5b:ca:60: 40:e8:d5:28:fc:7d:df:27:5d:a6:cf:8f:a7:6f:cc:4a:d0:71: 32:9f:03:30:30:35:de:c4:da:f9:13:37:2f:d1:6f:15:12:b1: b1:93:51:69:4f:1c:60:7b:31:c5:6c:58:eb:38:a8:ab:9b:b4: 7d:40:65:6f:09:0c:9c:6c:52:42:44:d2:96:b1:57:7d:5b:77: 87:7a:c0:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/f0pD8n40hae2pG0YCzcbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMTdkYWUwNDQ3NmRiMTAxNmNhYTQzZTNlZDliYzZiZDY5 ZjM5NzUwHhcNMjUxMjIxMDYwMTA1WhcNMjUxMjIyMDYwMTA1WjAzMTEwLwYDVQQD EygzMTU1ZTY2ZjM1MDc2ZmU5Njg5ODE0ZmRiZGRjZjFkNzZiZTJmOWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsE1n3nX4WyxB55RSrf+/igD/kLSS NtzDMYElqABg3L/P9AA71ZR5Ge8dnOgAr5hLPkM6vGdNvol9ajabaygeIwNeiBdw C8SKZKrEISywNxas8XKFIdpeK1uGswB3fdNrr2jZhv8BLIYhjw4FIIWor8l1y+qX qxUzpHxcVlA0OkJqs96Auw77GRCV2HZw07JnM2r4nDLDMu2nRjRId7hb2PLz/NVC DcmPmLi/yO3D8QDz3XJq7aUcCFDtR5LlXMD3rhu2lamOhiwPOhdko7xFFfjoYe5+ nZY7pkrm7I0CSfOb/N41gIXFOallN9emV4hPppofafLfyglwcWrZX+rDxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDFV5m81B2/paJgU/b3c8ddr4vnDMB8GA1UdIwQY MBaAFAwX2uBEdtsQFsqkPj7ZvGvWnzl1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREJmYTRFUjIyeEFXeXFRLVB0bThhOWFmT1hVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi84MWQ5NGQtMmU0MC00NTQ2LThiODkt ODA0ZjE3ZWMyNDVlLzEvREJmYTRFUjIyeEFXeXFRLVB0bThhOWFmT1hVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi84MWQ5NGQtMmU0MC00NTQ2LThiODktODA0ZjE3ZWMyNDVl LzEvREJmYTRFUjIyeEFXeXFRLVB0bThhOWFmT1hVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVbXCb2wr xylWrIdu5NJy21C1PYVo2PkgVvzulF5KQcrqQrNIrKbQ500/R+gF7vNYUsPUB9lY 2x5gtP1RmWdGLGRPkMO0tJ6IoE8Z/JpaZdPEEqkVIkvi840YAz7Aovdn1vWqFTVp X6y2ygiDEBTY7sH1SqhaH3RFK6qcor6l/k3KDO923CyydMAvoc5/DJhIrouGT+2p G8UfF8su8zA05YGPHVptOQyf1TzsK7zHzSLZW8pgQOjVKPx93yddps+Pp2/MStBx Mp8DMDA13sTa+RM3L9FvFRKxsZNRaU8cYHsxxWxY6zioq5u0fUBlbwkMnGxSQkTS lrFXfVt3h3rApg== -----END CERTIFICATE-----Generated at Sun Dec 21 11:58:12 2025 by rpki-client