This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft File: DIquGJxjzrVkPLCAMnvKo7Dvilk.mft (raw, json) Hash identifier: MWgPqXpEJlKowxJWvdFY48PmQo41RWc4I6B10eqhI90= Subject key identifier: F8:3D:74:5D:57:D2:E4:84:36:10:BE:C1:43:9A:A9:4E:C9:FF:14:B7 Authority key identifier: 0C:8A:AE:18:9C:63:CE:B5:64:3C:B0:80:32:7B:CA:A3:B0:EF:8A:59 Certificate issuer: /CN=0c8aae189c63ceb5643cb080327bcaa3b0ef8a59 Certificate serial: 019B38D832FB78DCC508C91E80D15D0795F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft Manifest number: 1787 Signing time: Fri 19 Dec 2025 23:00:51 +0000 Manifest this update: Fri 19 Dec 2025 23:00:51 +0000 Manifest next update: Sat 20 Dec 2025 23:00:51 +0000 Files and hashes: 1: DIquGJxjzrVkPLCAMnvKo7Dvilk.crl (hash: gvgsqDJ+hDHMc1Ba9hcwLcO+2RSF54iXX+FZYepBa94=) 2: WtAp0tL-l96y_gbMlR5puzdruQc.roa (hash: xRGTdhiVzbN5no9s0pfriVSMuD8OBdniQOQSDlzn9q8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d8:32:fb:78:dc:c5:08:c9:1e:80:d1:5d:07:95:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c8aae189c63ceb5643cb080327bcaa3b0ef8a59 Validity Not Before: Dec 19 23:00:51 2025 GMT Not After : Dec 20 23:00:51 2025 GMT Subject: CN=f83d745d57d2e4843610bec1439aa94ec9ff14b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1d:11:e1:17:b7:e6:0a:0f:8d:26:9d:37:87: 1f:b7:df:00:f5:b7:55:b2:46:bd:20:b7:28:f0:78: 76:e3:d7:09:57:79:5c:5b:a7:de:e3:c8:26:14:71: 62:fb:ac:51:94:05:fe:b7:4a:2f:62:7f:ce:62:4a: 5e:b6:57:92:b9:27:5a:4b:03:b1:b4:16:76:6f:31: d1:89:63:de:87:ee:88:b5:b2:df:90:61:70:2f:b3: ab:a4:95:9b:f6:a8:ac:50:28:71:21:2d:09:6c:10: 5d:a5:52:05:86:ef:c3:41:24:bc:e1:00:3b:72:e5: d7:07:b7:78:7a:c4:81:38:c9:db:43:6c:65:6e:f1: ef:cd:20:8d:f0:11:5e:b7:81:ae:72:50:0c:0b:81: d7:8e:ef:8a:73:16:d9:5f:f8:2e:13:0d:4e:e2:af: 0d:7a:79:95:ca:29:90:18:d8:9d:30:08:05:2c:7a: b4:3e:a0:0e:fa:84:99:ca:32:b7:cf:d5:02:28:cb: e3:10:30:a9:5f:c1:ab:9a:36:12:b7:36:7c:8a:4d: da:fb:7c:e2:6b:6f:ec:63:6d:4d:b4:89:c6:1d:2d: 23:65:61:2e:a4:e8:2d:8c:15:a5:74:b1:70:cf:97: 1d:0c:f7:08:d8:91:48:fa:22:53:e5:1b:aa:a8:3e: ee:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:3D:74:5D:57:D2:E4:84:36:10:BE:C1:43:9A:A9:4E:C9:FF:14:B7 X509v3 Authority Key Identifier: keyid:0C:8A:AE:18:9C:63:CE:B5:64:3C:B0:80:32:7B:CA:A3:B0:EF:8A:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:ea:ed:c6:54:1a:01:c0:96:1a:e1:fb:4b:eb:ab:e4:da:1d: de:70:cd:72:18:3d:7f:ea:14:af:dc:0f:8b:e3:1d:cc:99:6f: c9:5b:ea:b1:9a:37:76:96:0a:88:27:cf:ab:df:13:f6:95:53: 63:6b:6a:4c:87:82:08:43:eb:4a:5e:78:16:fb:53:70:42:c6: f9:1c:13:77:d9:61:88:cb:f3:18:ef:7f:92:2e:50:15:d0:5a: 6c:ff:7a:00:0d:37:6d:68:db:a6:b2:a8:e1:6c:de:68:c5:89: 76:21:10:29:57:69:d7:d2:b9:46:72:f5:ef:e7:a3:cc:bd:2e: e9:70:ae:a6:a1:29:e9:18:c3:28:98:b3:55:bd:b2:f1:ae:f8: 5c:f2:da:1b:d5:6a:e6:ce:63:ee:a3:ed:33:3c:fc:9d:b7:80: 26:e5:c8:3e:13:70:aa:65:8b:11:8f:92:33:55:14:d3:67:33: 06:9e:70:b1:06:70:ea:52:27:f0:8d:6e:cb:56:31:1c:87:13: c4:4f:cb:7c:de:a3:5c:99:05:11:5c:10:50:61:f3:88:03:ff: b0:26:76:c6:37:cd:33:9f:58:d3:4a:56:e7:b2:95:23:9f:5f: 8b:84:c7:5d:68:5b:73:7d:f0:64:7e:e3:0f:44:88:1f:3f:74: 62:3a:40:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs42DL7eNzFCMkegNFdB5XxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjOGFhZTE4OWM2M2NlYjU2NDNjYjA4MDMyN2JjYWEzYjBl ZjhhNTkwHhcNMjUxMjE5MjMwMDUxWhcNMjUxMjIwMjMwMDUxWjAzMTEwLwYDVQQD EyhmODNkNzQ1ZDU3ZDJlNDg0MzYxMGJlYzE0MzlhYTk0ZWM5ZmYxNGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqh0R4Re35goPjSadN4cft98A9bdV ska9ILco8Hh249cJV3lcW6fe48gmFHFi+6xRlAX+t0ovYn/OYkpetleSuSdaSwOx tBZ2bzHRiWPeh+6ItbLfkGFwL7OrpJWb9qisUChxIS0JbBBdpVIFhu/DQSS84QA7 cuXXB7d4esSBOMnbQ2xlbvHvzSCN8BFet4GuclAMC4HXju+KcxbZX/guEw1O4q8N enmVyimQGNidMAgFLHq0PqAO+oSZyjK3z9UCKMvjEDCpX8GrmjYStzZ8ik3a+3zi a2/sY21NtInGHS0jZWEupOgtjBWldLFwz5cdDPcI2JFI+iJT5RuqqD7urQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPg9dF1X0uSENhC+wUOaqU7J/xS3MB8GA1UdIwQY MBaAFAyKrhicY861ZDywgDJ7yqOw74pZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRElxdUdKeGp6clZrUExDQU1udktvN0R2aWxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81MDE1ZjYtMGJkMC00OWY5LWI4NTQt YjZiYTg2Y2YzMWY5LzEvRElxdUdKeGp6clZrUExDQU1udktvN0R2aWxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy81MDE1ZjYtMGJkMC00OWY5LWI4NTQtYjZiYTg2Y2YzMWY5 LzEvRElxdUdKeGp6clZrUExDQU1udktvN0R2aWxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb+rtxlQa AcCWGuH7S+ur5Nod3nDNchg9f+oUr9wPi+MdzJlvyVvqsZo3dpYKiCfPq98T9pVT Y2tqTIeCCEPrSl54FvtTcELG+RwTd9lhiMvzGO9/ki5QFdBabP96AA03bWjbprKo 4WzeaMWJdiEQKVdp19K5RnL17+ejzL0u6XCupqEp6RjDKJizVb2y8a74XPLaG9Vq 5s5j7qPtMzz8nbeAJuXIPhNwqmWLEY+SM1UU02czBp5wsQZw6lIn8I1uy1YxHIcT xE/LfN6jXJkFEVwQUGHziAP/sCZ2xjfNM59Y00pW57KVI59fi4THXWhbc33wZH7j D0SIHz90YjpAoA== -----END CERTIFICATE-----Generated at Sat Dec 20 03:12:07 2025 by rpki-client