This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft File: DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft (raw, json) Hash identifier: KctQj9rW8SYZCEWTNOzFCQGiiOXltgRqRX5V16WGRp0= Subject key identifier: A3:20:B0:3D:A3:C7:D8:95:F5:B5:E0:CB:E1:0B:06:3D:7B:CE:85:3E Authority key identifier: 0C:17:DA:E0:44:76:DB:10:16:CA:A4:3E:3E:D9:BC:6B:D6:9F:39:75 Certificate issuer: /CN=0c17dae04476db1016caa43e3ed9bc6bd69f3975 Certificate serial: 019B4D0418EB8B64ABA3C31488454BEB7719 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft Manifest number: 0E2D Signing time: Tue 23 Dec 2025 21:01:12 +0000 Manifest this update: Tue 23 Dec 2025 21:01:12 +0000 Manifest next update: Wed 24 Dec 2025 21:01:12 +0000 Files and hashes: 1: 6Y2-BPBwmi0ajRFfuk-7gjxb3VY.roa (hash: zEnO2OcP02snJFVmokqdabitxnMtngb7RKkC32lY0BQ=) 2: DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl (hash: zV/GnmWxRhe/9kh3ZneMLgVuIxZc0FeoJc33TLBp7IE=) 3: JSDk17ahgjuw722aAK05JMcAXY0.roa (hash: /NFnbJGiq89G5CeYaHNRHk4PJoghq/D0jyLC3XejUq4=) 4: tn_gy-6KAV5ZpTSqYbryoSs6AIA.roa (hash: tZ5/NhO61aB/g/lfOTBKTOhiuBSX3QMZ1HNoyXDOpwg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:04:18:eb:8b:64:ab:a3:c3:14:88:45:4b:eb:77:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c17dae04476db1016caa43e3ed9bc6bd69f3975 Validity Not Before: Dec 23 21:01:12 2025 GMT Not After : Dec 24 21:01:12 2025 GMT Subject: CN=a320b03da3c7d895f5b5e0cbe10b063d7bce853e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:5f:10:e4:d1:9d:9c:be:83:36:ed:e7:21:14: 77:07:ef:5c:a8:42:40:ef:5f:ee:1b:1f:01:b5:b2: 08:5f:73:38:c1:b1:33:41:e3:86:92:0f:2c:f8:7b: 83:a0:25:1b:b2:11:2b:6a:e7:fc:e6:4e:3a:83:54: 9f:36:8f:38:e3:c6:ec:de:39:60:01:23:85:86:b4: 1f:e8:c3:22:86:db:80:55:02:36:14:38:d5:06:9a: 9f:88:d5:21:e4:f5:f2:59:ab:03:23:bf:91:d3:cc: 2e:d7:1d:05:b1:24:07:df:32:ed:40:31:fc:ab:db: 0e:b3:ac:3d:23:83:31:e1:62:47:d1:d8:15:08:b8: 16:84:8e:7a:2a:72:4a:8d:a4:54:84:67:2f:97:2a: ce:d5:5e:2f:48:cc:bc:bf:74:1a:3c:06:a1:78:58: a8:04:7f:3d:98:d0:56:f2:58:80:db:a6:93:b1:a7: 00:7d:f1:21:3a:4d:e8:b4:87:c9:6c:21:f0:a0:6b: 77:ae:e9:4b:58:07:41:f3:22:46:60:04:d8:07:79: 8c:b1:25:b0:87:f1:3f:f5:49:77:08:af:20:db:33: 80:67:21:92:ab:6f:ba:85:98:62:da:ce:18:bc:07: c4:1c:d2:d3:d0:e3:86:d1:07:43:bf:7b:fe:52:2f: 81:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:20:B0:3D:A3:C7:D8:95:F5:B5:E0:CB:E1:0B:06:3D:7B:CE:85:3E X509v3 Authority Key Identifier: keyid:0C:17:DA:E0:44:76:DB:10:16:CA:A4:3E:3E:D9:BC:6B:D6:9F:39:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBfa4ER22xAWyqQ-Ptm8a9afOXU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/81d94d-2e40-4546-8b89-804f17ec245e/1/DBfa4ER22xAWyqQ-Ptm8a9afOXU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:99:f4:d8:f9:95:8d:f6:8a:de:09:08:b9:9c:b2:f4:ac:06: de:e2:23:4f:f0:fa:9d:e6:01:dd:6e:4d:e2:85:8b:60:d1:78: b6:da:15:cc:ef:50:35:db:73:39:5d:6a:df:af:f9:b2:f9:ad: 78:8d:ee:04:99:41:16:4d:1c:17:a7:58:36:3a:24:c2:0e:cd: 84:0c:7b:d8:3f:21:92:78:05:29:cc:68:4d:bd:e9:65:64:f3: e7:54:ab:3f:0a:7b:e5:7f:c7:7a:15:1f:e6:76:56:d7:20:c0: 67:a9:cf:19:e0:e1:ff:d9:51:85:bf:64:04:12:d8:7e:92:44: 34:b3:82:b3:41:54:6f:e4:43:c8:e5:0e:86:8b:ab:93:8f:f0: 77:a8:3f:4c:ab:a5:8a:70:37:5c:b2:fd:34:a6:4f:ff:27:c9: c7:d9:ab:96:aa:19:12:5f:59:30:67:07:bb:d8:39:95:1d:c7: 08:fd:73:9d:a4:b6:f6:2d:c9:ed:6a:ad:6b:60:6a:ce:ac:80: e4:da:1d:a7:ab:31:c4:12:59:af:e8:e5:c1:8f:cb:2e:74:dc: 64:1f:18:d5:90:83:de:18:f1:c0:b2:9d:e0:d4:95:28:2c:85: 31:60:fc:8d:cd:94:dc:57:92:ec:91:68:b9:4d:63:30:02:51: d0:d0:44:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtNBBjri2Sro8MUiEVL63cZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMTdkYWUwNDQ3NmRiMTAxNmNhYTQzZTNlZDliYzZiZDY5 ZjM5NzUwHhcNMjUxMjIzMjEwMTEyWhcNMjUxMjI0MjEwMTEyWjAzMTEwLwYDVQQD EyhhMzIwYjAzZGEzYzdkODk1ZjViNWUwY2JlMTBiMDYzZDdiY2U4NTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiF8Q5NGdnL6DNu3nIRR3B+9cqEJA 71/uGx8BtbIIX3M4wbEzQeOGkg8s+HuDoCUbshErauf85k46g1SfNo8448bs3jlg ASOFhrQf6MMihtuAVQI2FDjVBpqfiNUh5PXyWasDI7+R08wu1x0FsSQH3zLtQDH8 q9sOs6w9I4Mx4WJH0dgVCLgWhI56KnJKjaRUhGcvlyrO1V4vSMy8v3QaPAaheFio BH89mNBW8liA26aTsacAffEhOk3otIfJbCHwoGt3rulLWAdB8yJGYATYB3mMsSWw h/E/9Ul3CK8g2zOAZyGSq2+6hZhi2s4YvAfEHNLT0OOG0QdDv3v+Ui+BpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKMgsD2jx9iV9bXgy+ELBj17zoU+MB8GA1UdIwQY MBaAFAwX2uBEdtsQFsqkPj7ZvGvWnzl1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREJmYTRFUjIyeEFXeXFRLVB0bThhOWFmT1hVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi84MWQ5NGQtMmU0MC00NTQ2LThiODkt ODA0ZjE3ZWMyNDVlLzEvREJmYTRFUjIyeEFXeXFRLVB0bThhOWFmT1hVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi84MWQ5NGQtMmU0MC00NTQ2LThiODktODA0ZjE3ZWMyNDVl LzEvREJmYTRFUjIyeEFXeXFRLVB0bThhOWFmT1hVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZpn02PmV jfaK3gkIuZyy9KwG3uIjT/D6neYB3W5N4oWLYNF4ttoVzO9QNdtzOV1q36/5svmt eI3uBJlBFk0cF6dYNjokwg7NhAx72D8hkngFKcxoTb3pZWTz51SrPwp75X/HehUf 5nZW1yDAZ6nPGeDh/9lRhb9kBBLYfpJENLOCs0FUb+RDyOUOhourk4/wd6g/TKul inA3XLL9NKZP/yfJx9mrlqoZEl9ZMGcHu9g5lR3HCP1znaS29i3J7Wqta2BqzqyA 5Nodp6sxxBJZr+jlwY/LLnTcZB8Y1ZCD3hjxwLKd4NSVKCyFMWD8jc2U3FeS7JFo uU1jMAJR0NBE2g== -----END CERTIFICATE-----Generated at Wed Dec 24 03:37:57 2025 by rpki-client