This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft File: dJDOa2-PdQ4DWE67172tDxH74xw.mft (raw, json) Hash identifier: SOGxuoajgeJu3MsBY79xtNZiPQwZ1jOkUYyV1im41hU= Subject key identifier: 03:36:85:87:7D:C6:EC:8C:B3:AF:15:3F:5D:79:5D:A3:7F:5F:A1:F9 Authority key identifier: 74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C Certificate issuer: /CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c Certificate serial: 019B3CEBE8DC5FAC39975CA4EE7552A74C19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft Manifest number: 10DD Signing time: Sat 20 Dec 2025 18:00:51 +0000 Manifest this update: Sat 20 Dec 2025 18:00:51 +0000 Manifest next update: Sun 21 Dec 2025 18:00:51 +0000 Files and hashes: 1: DqHnzYWuxMllYj4fNdyjlN5bOt8.roa (hash: Ct+oA/iZNUzEaqp34vmPr/rb2NLctNCZu0gWWKERVjE=) 2: Lf8_T-o7ZHygGu0g3mlzua1_1HA.roa (hash: CQIDTTHcfVlCnxAPq4hAkvv2QsASVNkVlmr+LBxrlLU=) 3: dJDOa2-PdQ4DWE67172tDxH74xw.crl (hash: Tw6hVyydvVBZiMJiJDdoZicNLshVazrc6/AdGzBSFSI=) 4: vYaVLKXY1-Vrl86mKkE3Y-3XdFU.roa (hash: 8y0C99LYt4H2oUrCqNFHSxS/1TMmBVBqFKxb6zfEFoU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:e8:dc:5f:ac:39:97:5c:a4:ee:75:52:a7:4c:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7490ce6b6f8f750e03584ebbd7bdad0f11fbe31c Validity Not Before: Dec 20 18:00:51 2025 GMT Not After : Dec 21 18:00:51 2025 GMT Subject: CN=033685877dc6ec8cb3af153f5d795da37f5fa1f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:58:3e:c0:1d:ce:84:a9:b3:29:3a:75:7c:f2: d5:32:81:a9:25:90:23:e4:ae:0f:d5:10:70:90:25: 6e:1f:6a:5b:3e:a3:03:89:73:16:77:70:a2:8d:d8: 61:1f:ad:65:5b:5f:20:61:03:a6:dd:3c:23:92:6e: 15:77:58:55:b0:03:c8:be:db:62:d1:a9:1b:e4:c1: d5:d2:e2:c1:eb:73:e5:d8:09:16:0e:cc:ce:a0:03: 69:7a:38:e8:e2:1e:84:fa:32:34:26:9c:19:04:e2: 0e:ce:80:16:ea:ca:fb:44:7a:78:3e:0a:37:37:4e: 27:5a:b4:19:f9:9c:e1:a3:9c:7d:36:ef:e3:66:23: d2:3d:d6:ea:70:2a:0b:c3:6c:fa:f7:8b:44:88:f8: 8b:a6:35:19:9e:84:4a:83:cb:fa:0e:b5:79:38:b3: f0:51:49:c8:2a:f9:42:44:df:5b:8d:8c:c5:72:0f: c0:e0:b3:c3:59:5b:d6:9a:97:2b:6d:71:15:7b:e4: a7:27:d1:a0:b0:f1:d3:ea:00:74:1a:78:12:4d:3a: 84:52:6b:67:b8:52:5c:df:6e:e4:e5:5c:46:36:3d: b8:ff:8e:1b:e0:85:79:62:e2:81:26:e0:1b:b6:97: 10:76:ee:06:73:64:5c:6f:81:9c:f6:a9:94:93:17: 88:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:36:85:87:7D:C6:EC:8C:B3:AF:15:3F:5D:79:5D:A3:7F:5F:A1:F9 X509v3 Authority Key Identifier: keyid:74:90:CE:6B:6F:8F:75:0E:03:58:4E:BB:D7:BD:AD:0F:11:FB:E3:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJDOa2-PdQ4DWE67172tDxH74xw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/ed8eba-6bd4-4438-b3e0-c496f9cafa83/1/dJDOa2-PdQ4DWE67172tDxH74xw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:17:b8:c6:d8:99:46:53:17:90:34:6e:a8:db:0e:ab:4e:49: 83:33:26:a8:e8:d4:6f:c8:35:f3:1c:6d:24:a8:f1:02:bb:00: 52:cb:a9:36:91:11:24:74:2f:97:04:07:c5:a6:81:33:df:ec: 86:e6:96:78:9f:ef:ff:dd:05:5b:e4:6b:f7:84:a4:8a:33:e1: 77:18:1a:54:6c:e7:b7:1a:2d:6d:6a:9d:b2:df:48:9d:57:ff: 2a:a1:4d:a6:ce:11:ff:e9:44:cb:45:f8:be:ed:0b:f4:60:23: 7e:5b:a9:d0:38:c7:c1:76:ba:a1:fd:89:9f:18:ff:94:63:76: e0:99:8c:b1:de:18:b9:5a:f9:05:63:49:32:1c:95:ef:26:6c: c9:70:d0:af:95:c3:8e:19:c2:86:50:ce:85:93:dc:c2:f2:5b: 4d:66:f8:1a:14:74:f3:7d:63:50:40:d1:2c:7f:d4:19:21:7b: 26:0a:58:bc:84:c8:94:75:54:9d:ff:f6:53:4c:b6:f2:30:e8: 7e:b5:4f:2c:5d:06:bc:85:cb:4d:f7:35:76:66:51:95:03:cb: e4:df:27:09:fc:28:43:88:3c:c0:f4:e1:87:8a:ae:47:ad:74: 2d:e6:25:c3:3a:ef:fa:17:2b:66:be:35:b2:28:ee:73:02:03: 51:a0:80:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs86+jcX6w5l1yk7nVSp0wZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTBjZTZiNmY4Zjc1MGUwMzU4NGViYmQ3YmRhZDBmMTFm YmUzMWMwHhcNMjUxMjIwMTgwMDUxWhcNMjUxMjIxMTgwMDUxWjAzMTEwLwYDVQQD EygwMzM2ODU4NzdkYzZlYzhjYjNhZjE1M2Y1ZDc5NWRhMzdmNWZhMWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlg+wB3OhKmzKTp1fPLVMoGpJZAj 5K4P1RBwkCVuH2pbPqMDiXMWd3CijdhhH61lW18gYQOm3Twjkm4Vd1hVsAPIvtti 0akb5MHV0uLB63Pl2AkWDszOoANpejjo4h6E+jI0JpwZBOIOzoAW6sr7RHp4Pgo3 N04nWrQZ+Zzho5x9Nu/jZiPSPdbqcCoLw2z694tEiPiLpjUZnoRKg8v6DrV5OLPw UUnIKvlCRN9bjYzFcg/A4LPDWVvWmpcrbXEVe+SnJ9GgsPHT6gB0GngSTTqEUmtn uFJc327k5VxGNj24/44b4IV5YuKBJuAbtpcQdu4Gc2Rcb4Gc9qmUkxeImwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAM2hYd9xuyMs68VP115XaN/X6H5MB8GA1UdIwQY MBaAFHSQzmtvj3UOA1hOu9e9rQ8R++McMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpET2EyLVBkUTREV0U2NzE3MnREeEg3NHh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9lZDhlYmEtNmJkNC00NDM4LWIzZTAt YzQ5NmY5Y2FmYTgzLzEvZEpET2EyLVBkUTREV0U2NzE3MnREeEg3NHh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9lZDhlYmEtNmJkNC00NDM4LWIzZTAtYzQ5NmY5Y2FmYTgz LzEvZEpET2EyLVBkUTREV0U2NzE3MnREeEg3NHh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmhe4xtiZ RlMXkDRuqNsOq05JgzMmqOjUb8g18xxtJKjxArsAUsupNpERJHQvlwQHxaaBM9/s huaWeJ/v/90FW+Rr94SkijPhdxgaVGzntxotbWqdst9InVf/KqFNps4R/+lEy0X4 vu0L9GAjflup0DjHwXa6of2Jnxj/lGN24JmMsd4YuVr5BWNJMhyV7yZsyXDQr5XD jhnChlDOhZPcwvJbTWb4GhR0831jUEDRLH/UGSF7JgpYvITIlHVUnf/2U0y28jDo frVPLF0GvIXLTfc1dmZRlQPL5N8nCfwoQ4g8wPThh4quR610LeYlwzrv+hcrZr41 sijucwIDUaCAag== -----END CERTIFICATE-----Generated at Sat Dec 20 22:37:01 2025 by rpki-client