This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft File: DghrZ9iYllO662i40kq56b0Mryo.mft (raw, json) Hash identifier: OfpzhQwe/2lL85xpzMZsW5OPAr5SMVJfhTZyj8VgMlQ= Subject key identifier: CE:11:06:BE:2D:14:96:C9:B8:4E:93:52:57:ED:73:4F:97:56:4A:71 Authority key identifier: 0E:08:6B:67:D8:98:96:53:BA:EB:68:B8:D2:4A:B9:E9:BD:0C:AF:2A Certificate issuer: /CN=0e086b67d8989653baeb68b8d24ab9e9bd0caf2a Certificate serial: 019B3DFE9131A766D024A3BB82A447E77DE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft Manifest number: 1203 Signing time: Sat 20 Dec 2025 23:00:51 +0000 Manifest this update: Sat 20 Dec 2025 23:00:51 +0000 Manifest next update: Sun 21 Dec 2025 23:00:51 +0000 Files and hashes: 1: DghrZ9iYllO662i40kq56b0Mryo.crl (hash: JxwpAPXb708uTfKZR8iaOyzQvlQWrrmIsq4vD77njr0=) 2: XKbuE11HMiW-d3-7SHwE1VaECgw.roa (hash: iROyh9ucuOmjws3pOPkYjHDlUGlInLoKUEPjUvuWoZE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:91:31:a7:66:d0:24:a3:bb:82:a4:47:e7:7d:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e086b67d8989653baeb68b8d24ab9e9bd0caf2a Validity Not Before: Dec 20 23:00:51 2025 GMT Not After : Dec 21 23:00:51 2025 GMT Subject: CN=ce1106be2d1496c9b84e935257ed734f97564a71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:45:4a:7e:ff:58:f2:7f:12:33:35:2c:a8:c1: e8:d8:f1:68:8d:06:3c:76:98:5e:18:15:58:93:a5: d7:13:08:04:b8:f4:2b:e8:4e:98:5e:c6:18:40:5a: b7:9d:5a:98:3a:41:95:d5:73:0b:ae:bd:27:93:f2: 20:d7:af:a5:6b:ea:40:40:bd:99:52:ae:60:a7:dd: ad:f5:02:3c:3a:74:c8:f6:ae:03:4b:0e:ab:0b:bf: bb:54:c8:8f:9b:8c:ed:d6:86:ab:81:8e:3d:f1:6e: 5e:fe:c9:6e:ed:82:cd:9d:0c:24:66:74:b3:53:f0: 79:73:ba:9b:26:e2:24:8b:2d:e1:65:f9:44:65:d9: 72:5f:34:1a:aa:5f:74:1b:e0:a0:7a:7a:a1:26:57: 16:94:38:05:75:6d:c2:62:aa:1a:24:01:5c:d1:69: 6c:94:cb:38:30:d1:df:b0:92:98:5d:a2:cd:43:48: dd:62:2f:75:88:58:c6:e5:44:31:72:ec:f9:6e:a3: 79:ac:be:b3:81:12:bf:b3:d7:2d:9e:39:e5:3f:60: 3d:68:91:c8:13:ee:fd:2c:32:0c:85:95:b2:ce:31: 76:57:d9:a0:01:82:57:72:13:7f:0b:13:a6:72:89: f9:35:68:e4:ad:18:f9:d5:6f:85:6f:60:49:c2:b6: 8f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:11:06:BE:2D:14:96:C9:B8:4E:93:52:57:ED:73:4F:97:56:4A:71 X509v3 Authority Key Identifier: keyid:0E:08:6B:67:D8:98:96:53:BA:EB:68:B8:D2:4A:B9:E9:BD:0C:AF:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:62:bf:e6:38:22:1d:88:35:7c:2b:c9:d4:57:28:1a:57:bb: 92:78:35:d0:b4:b5:b9:4d:9f:a1:b6:22:15:60:55:85:91:76: aa:99:8c:60:4e:6c:20:39:bf:9e:e3:0d:80:8d:33:58:3d:05: 70:d6:c5:75:11:51:36:50:51:bb:9e:ee:c7:16:d8:d0:c7:96: a4:7b:bb:2d:79:72:d5:6c:0e:b8:38:36:27:a9:e2:92:18:90: dd:de:2b:df:aa:d8:a1:47:af:30:f4:94:b0:25:4c:b1:9b:ec: 4c:e5:7f:49:5e:5d:4d:a0:e5:75:5a:c3:aa:f0:cb:30:22:da: a9:b7:20:c5:e2:32:46:5b:71:14:67:5c:48:e8:dd:eb:1b:d9: 6c:80:75:aa:2b:13:e3:34:13:c3:10:73:75:4a:db:74:2f:81: df:f8:be:11:03:a3:15:3f:9c:6f:a0:27:71:75:a6:67:77:1d: 14:5f:e0:5f:ac:6d:61:7c:06:bf:45:7d:18:7c:bf:3c:42:e3: af:29:88:ce:35:84:1e:9a:59:8e:15:5b:5b:a0:de:03:0b:31: c8:db:4e:61:e6:27:4a:31:98:0e:90:07:36:85:59:0b:91:72: 00:62:82:e3:5d:45:4c:ec:be:5c:06:43:bc:65:62:97:11:c8: 43:4e:72:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/pExp2bQJKO7gqRH533hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMDg2YjY3ZDg5ODk2NTNiYWViNjhiOGQyNGFiOWU5YmQw Y2FmMmEwHhcNMjUxMjIwMjMwMDUxWhcNMjUxMjIxMjMwMDUxWjAzMTEwLwYDVQQD EyhjZTExMDZiZTJkMTQ5NmM5Yjg0ZTkzNTI1N2VkNzM0Zjk3NTY0YTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0VKfv9Y8n8SMzUsqMHo2PFojQY8 dpheGBVYk6XXEwgEuPQr6E6YXsYYQFq3nVqYOkGV1XMLrr0nk/Ig16+la+pAQL2Z Uq5gp92t9QI8OnTI9q4DSw6rC7+7VMiPm4zt1oargY498W5e/slu7YLNnQwkZnSz U/B5c7qbJuIkiy3hZflEZdlyXzQaql90G+CgenqhJlcWlDgFdW3CYqoaJAFc0Wls lMs4MNHfsJKYXaLNQ0jdYi91iFjG5UQxcuz5bqN5rL6zgRK/s9ctnjnlP2A9aJHI E+79LDIMhZWyzjF2V9mgAYJXchN/CxOmcon5NWjkrRj51W+Fb2BJwraPPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM4RBr4tFJbJuE6TUlftc0+XVkpxMB8GA1UdIwQY MBaAFA4Ia2fYmJZTuutouNJKuem9DK8qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGdoclo5aVlsbE82NjJpNDBrcTU2YjBNcnlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8zNzk2ZmEtYzAyZS00NWY5LWExYTQt NjIyYmI0ODk5ODg3LzEvRGdoclo5aVlsbE82NjJpNDBrcTU2YjBNcnlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8zNzk2ZmEtYzAyZS00NWY5LWExYTQtNjIyYmI0ODk5ODg3 LzEvRGdoclo5aVlsbE82NjJpNDBrcTU2YjBNcnlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzmK/5jgi HYg1fCvJ1FcoGle7kng10LS1uU2fobYiFWBVhZF2qpmMYE5sIDm/nuMNgI0zWD0F cNbFdRFRNlBRu57uxxbY0MeWpHu7LXly1WwOuDg2J6nikhiQ3d4r36rYoUevMPSU sCVMsZvsTOV/SV5dTaDldVrDqvDLMCLaqbcgxeIyRltxFGdcSOjd6xvZbIB1qisT 4zQTwxBzdUrbdC+B3/i+EQOjFT+cb6AncXWmZ3cdFF/gX6xtYXwGv0V9GHy/PELj rymIzjWEHppZjhVbW6DeAwsxyNtOYeYnSjGYDpAHNoVZC5FyAGKC411FTOy+XAZD vGVilxHIQ05yhw== -----END CERTIFICATE-----Generated at Sun Dec 21 04:07:11 2025 by rpki-client