This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft File: DghrZ9iYllO662i40kq56b0Mryo.mft (raw, json) Hash identifier: 6DH+WCrKSPCXuz8fALeDe8Cn7XwDuS5vIW8Y+ARzzBM= Subject key identifier: 78:1E:D4:B5:D1:A8:EC:EE:51:93:5A:9D:78:89:CD:D1:1B:B2:A0:25 Authority key identifier: 0E:08:6B:67:D8:98:96:53:BA:EB:68:B8:D2:4A:B9:E9:BD:0C:AF:2A Certificate issuer: /CN=0e086b67d8989653baeb68b8d24ab9e9bd0caf2a Certificate serial: 019B533CBAE4A0E7A54369F34E3B016E9F12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft Manifest number: 120E Signing time: Thu 25 Dec 2025 02:00:47 +0000 Manifest this update: Thu 25 Dec 2025 02:00:47 +0000 Manifest next update: Fri 26 Dec 2025 02:00:47 +0000 Files and hashes: 1: DghrZ9iYllO662i40kq56b0Mryo.crl (hash: at8D5jNYssWbQJN3tO+PBj0hFrBGytCix+ZuuzoAQIo=) 2: XKbuE11HMiW-d3-7SHwE1VaECgw.roa (hash: iROyh9ucuOmjws3pOPkYjHDlUGlInLoKUEPjUvuWoZE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 02:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:3c:ba:e4:a0:e7:a5:43:69:f3:4e:3b:01:6e:9f:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e086b67d8989653baeb68b8d24ab9e9bd0caf2a Validity Not Before: Dec 25 02:00:47 2025 GMT Not After : Dec 26 02:00:47 2025 GMT Subject: CN=781ed4b5d1a8ecee51935a9d7889cdd11bb2a025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:79:a9:b5:25:5c:9f:53:7f:3b:c6:8a:a5:3e: 21:13:9c:9c:16:16:77:ff:8a:1e:c4:ee:3a:bd:ea: 66:c5:de:ca:f0:24:a4:fc:71:78:ab:e1:55:0f:a7: 81:f6:09:80:7d:a5:1e:1b:78:93:71:35:ce:d5:a5: 19:c4:77:30:7c:b3:70:fd:a3:4b:ed:b3:f7:01:c7: be:3a:88:01:30:d2:ee:7f:51:d9:40:80:87:0c:c5: 47:98:25:a9:1b:9b:94:d4:13:e4:3c:41:53:30:72: b7:e5:f7:33:36:89:db:1b:d8:38:8c:a3:b6:df:6b: 62:35:77:9f:e6:98:7a:40:53:98:1c:2d:0c:a7:3c: 98:80:95:82:a2:33:a2:fa:f5:e4:c7:f7:c2:ec:81: 9f:5b:17:23:e8:2a:59:09:c2:12:17:16:04:af:3b: f9:48:56:6a:54:cb:e3:c0:93:b8:eb:4d:71:a8:58: e4:b2:3f:73:11:97:08:7a:3b:b4:b5:19:55:4d:01: b6:12:c0:4e:3f:9e:cd:ca:5d:77:65:08:6c:f4:df: d4:18:c7:bd:95:3b:46:69:d1:ce:59:8c:0b:05:b3: 2e:79:ae:cb:76:10:7a:dd:69:3c:49:81:01:95:ff: 06:75:a3:f8:99:35:e7:6b:a0:eb:3b:b7:54:ad:3c: 98:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:1E:D4:B5:D1:A8:EC:EE:51:93:5A:9D:78:89:CD:D1:1B:B2:A0:25 X509v3 Authority Key Identifier: keyid:0E:08:6B:67:D8:98:96:53:BA:EB:68:B8:D2:4A:B9:E9:BD:0C:AF:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:78:b1:4e:ad:c0:3f:7d:51:01:a8:56:d0:2d:55:48:a9:e7: 84:9a:3e:44:32:72:53:09:91:9d:20:f6:dd:6a:6a:f4:d9:ce: 15:a3:58:54:4f:12:e0:e3:22:ac:97:ca:dd:03:00:75:b3:b8: e2:af:85:37:53:0a:3c:09:87:83:b5:bd:f6:cc:a2:3f:c0:ef: 40:dc:78:05:89:97:34:56:0f:d8:f0:ad:c1:d1:3d:85:03:4d: 5a:78:e0:9f:25:f8:63:7f:60:d3:d7:d7:21:9c:24:24:95:94: d4:14:e6:c0:33:ae:7e:dc:95:3a:de:10:d4:f5:00:bc:83:a4: 7d:bc:d2:49:27:fe:d6:e2:c8:c2:47:f4:6d:34:23:9a:a6:f2: e9:b7:a4:28:d3:97:09:87:17:32:cf:45:b8:61:9f:a0:aa:12: 19:f6:de:d1:cf:7a:fb:59:4b:2c:e3:b0:36:97:2b:c5:55:94: 5f:66:d6:19:59:7f:a7:bb:c4:d4:05:98:de:7d:18:dd:e5:e7: bf:a7:38:26:bc:63:99:0b:bb:88:57:a8:eb:11:6a:c3:4e:d5: 36:92:42:9a:c6:c3:a6:2f:0a:ba:44:05:a9:b9:7b:b2:67:32: be:2b:5e:6b:68:85:9b:fb:98:06:f5:36:12:e8:d5:65:d7:c8: 0a:5b:00:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTPLrkoOelQ2nzTjsBbp8SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMDg2YjY3ZDg5ODk2NTNiYWViNjhiOGQyNGFiOWU5YmQw Y2FmMmEwHhcNMjUxMjI1MDIwMDQ3WhcNMjUxMjI2MDIwMDQ3WjAzMTEwLwYDVQQD Eyg3ODFlZDRiNWQxYThlY2VlNTE5MzVhOWQ3ODg5Y2RkMTFiYjJhMDI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXmptSVcn1N/O8aKpT4hE5ycFhZ3 /4oexO46vepmxd7K8CSk/HF4q+FVD6eB9gmAfaUeG3iTcTXO1aUZxHcwfLNw/aNL 7bP3Ace+OogBMNLuf1HZQICHDMVHmCWpG5uU1BPkPEFTMHK35fczNonbG9g4jKO2 32tiNXef5ph6QFOYHC0MpzyYgJWCojOi+vXkx/fC7IGfWxcj6CpZCcISFxYErzv5 SFZqVMvjwJO4601xqFjksj9zEZcIeju0tRlVTQG2EsBOP57Nyl13ZQhs9N/UGMe9 lTtGadHOWYwLBbMuea7LdhB63Wk8SYEBlf8GdaP4mTXna6DrO7dUrTyYzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHge1LXRqOzuUZNanXiJzdEbsqAlMB8GA1UdIwQY MBaAFA4Ia2fYmJZTuutouNJKuem9DK8qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGdoclo5aVlsbE82NjJpNDBrcTU2YjBNcnlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8zNzk2ZmEtYzAyZS00NWY5LWExYTQt NjIyYmI0ODk5ODg3LzEvRGdoclo5aVlsbE82NjJpNDBrcTU2YjBNcnlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8zNzk2ZmEtYzAyZS00NWY5LWExYTQtNjIyYmI0ODk5ODg3 LzEvRGdoclo5aVlsbE82NjJpNDBrcTU2YjBNcnlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaXixTq3A P31RAahW0C1VSKnnhJo+RDJyUwmRnSD23Wpq9NnOFaNYVE8S4OMirJfK3QMAdbO4 4q+FN1MKPAmHg7W99syiP8DvQNx4BYmXNFYP2PCtwdE9hQNNWnjgnyX4Y39g09fX IZwkJJWU1BTmwDOuftyVOt4Q1PUAvIOkfbzSSSf+1uLIwkf0bTQjmqby6bekKNOX CYcXMs9FuGGfoKoSGfbe0c96+1lLLOOwNpcrxVWUX2bWGVl/p7vE1AWY3n0Y3eXn v6c4JrxjmQu7iFeo6xFqw07VNpJCmsbDpi8KukQFqbl7smcyvitea2iFm/uYBvU2 EujVZdfIClsA4Q== -----END CERTIFICATE-----Generated at Thu Dec 25 11:16:00 2025 by rpki-client