This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft File: dK68FUpWyDAly9hkGprDFctVHAY.mft (raw, json) Hash identifier: +2iQjG1W4JjCap1WFxq7jYzR1ERKnIcYh79/KRvy0PA= Subject key identifier: 95:03:A1:5A:90:9D:51:CB:B8:77:7C:D4:D1:B4:5B:D3:A8:02:70:7F Authority key identifier: 74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06 Certificate issuer: /CN=74aebc154a56c83025cbd8641a9ac315cb551c06 Certificate serial: 019AF465A77EBF0059D71030165A08A438C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft Manifest number: 176A Signing time: Sat 06 Dec 2025 16:01:33 +0000 Manifest this update: Sat 06 Dec 2025 16:01:33 +0000 Manifest next update: Sun 07 Dec 2025 16:01:33 +0000 Files and hashes: 1: R0_MeNcCGsgFbXPPMSbNiNB6onw.roa (hash: jCCdHzd1f1vyFj3zrZb6H/YnXBVmEiivGeOlhoHJWc0=) 2: dK68FUpWyDAly9hkGprDFctVHAY.crl (hash: vtfPknnG/SXl9wZRZRQFkRlvuuSVgQOMTyLoUcz22Zk=) 3: xiLzP1pUVJ4HlLptpzl15fneHrg.roa (hash: Oybd2JrzjZp9Unasli0WI1/BduGFzHUQWKvicye2j54=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:a7:7e:bf:00:59:d7:10:30:16:5a:08:a4:38:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74aebc154a56c83025cbd8641a9ac315cb551c06 Validity Not Before: Dec 6 16:01:33 2025 GMT Not After : Dec 7 16:01:33 2025 GMT Subject: CN=9503a15a909d51cbb8777cd4d1b45bd3a802707f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7a:21:a1:e8:aa:91:07:00:ab:d6:9f:c0:c9: 98:4f:6c:59:53:17:29:8c:33:a8:d5:d1:7e:26:3b: 79:12:40:93:90:c6:b2:27:ec:55:b6:01:40:99:6f: 75:ac:24:b9:64:80:ca:ca:c2:73:29:63:8b:4f:b1: a9:0b:d9:7a:25:0b:6a:79:64:60:5e:f1:cf:c5:cf: c5:0e:e3:7d:16:97:cb:3c:4d:01:76:33:e3:9f:4b: f1:2a:e6:67:4f:92:a6:4d:cc:6d:fb:b3:04:37:3c: 78:c5:dd:12:95:62:d7:6f:a3:bf:9a:56:1e:3e:57: 28:fc:bf:f3:5f:bd:d9:e2:24:96:67:18:a1:0c:fa: a6:dd:a0:d4:3c:92:e4:ed:f5:95:e3:4a:8e:5e:23: 16:28:99:ef:3d:58:83:72:49:4d:21:05:19:e9:af: d7:b1:7a:0e:4a:31:f6:09:72:08:db:65:eb:f0:71: 47:07:96:8e:4b:38:ce:2e:f6:67:56:92:9c:5e:ce: 09:dc:ea:88:79:e7:a3:77:b1:d7:bc:10:6c:33:21: f8:08:52:75:b2:2a:9b:71:54:a9:86:12:8e:80:31: 39:04:59:6e:00:79:a1:b5:14:80:6a:bd:9c:a1:c1: 98:38:0f:92:bf:17:a8:21:c3:e4:83:f2:f7:7d:47: 90:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:03:A1:5A:90:9D:51:CB:B8:77:7C:D4:D1:B4:5B:D3:A8:02:70:7F X509v3 Authority Key Identifier: keyid:74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:b8:31:e3:9c:92:bc:d2:a4:34:fa:1e:85:2d:d1:9a:e3:2c: 5e:c4:85:fb:ff:51:78:06:e1:c3:aa:dc:f1:87:3c:e6:be:a1: a3:2f:47:90:2b:52:55:80:d3:12:08:4e:6d:ba:c3:8b:9c:43: 00:32:b6:af:2f:6b:db:32:62:28:7e:39:bb:7f:ad:41:f0:d8: 86:3b:84:1b:c2:fb:54:42:26:dc:60:f8:9d:e8:25:5d:0d:c5: 11:fe:ff:90:83:58:ae:2c:8e:7e:03:70:48:e0:c4:4c:24:c4: 0d:32:a6:83:c2:88:46:24:30:57:ed:62:80:e6:ee:1d:3b:ec: de:ff:63:46:a8:dd:98:fc:a3:b3:33:11:2f:eb:d3:7f:6d:fd: 2b:b2:60:31:b8:70:b5:a0:34:a6:e2:01:f4:4c:55:58:1e:ed: ba:01:a1:df:c3:70:74:ba:01:f3:c4:1e:1a:3b:9c:8e:ed:62: 21:9c:da:02:bf:18:fd:2d:3d:43:ce:98:5b:52:b2:95:b1:13: 62:82:aa:ca:f7:aa:4f:2d:82:fd:ff:d9:54:8a:54:57:bd:05: cc:09:be:c8:59:39:dd:87:76:8b:53:74:ab:61:fe:6c:81:1e: 95:51:dd:26:5f:bc:3e:1f:04:a3:a0:0c:ce:ca:35:84:a1:1e: 51:66:ed:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Zad+vwBZ1xAwFloIpDjFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0YWViYzE1NGE1NmM4MzAyNWNiZDg2NDFhOWFjMzE1Y2I1 NTFjMDYwHhcNMjUxMjA2MTYwMTMzWhcNMjUxMjA3MTYwMTMzWjAzMTEwLwYDVQQD Eyg5NTAzYTE1YTkwOWQ1MWNiYjg3NzdjZDRkMWI0NWJkM2E4MDI3MDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3ohoeiqkQcAq9afwMmYT2xZUxcp jDOo1dF+Jjt5EkCTkMayJ+xVtgFAmW91rCS5ZIDKysJzKWOLT7GpC9l6JQtqeWRg XvHPxc/FDuN9FpfLPE0BdjPjn0vxKuZnT5KmTcxt+7MENzx4xd0SlWLXb6O/mlYe Plco/L/zX73Z4iSWZxihDPqm3aDUPJLk7fWV40qOXiMWKJnvPViDcklNIQUZ6a/X sXoOSjH2CXII22Xr8HFHB5aOSzjOLvZnVpKcXs4J3OqIeeejd7HXvBBsMyH4CFJ1 siqbcVSphhKOgDE5BFluAHmhtRSAar2cocGYOA+SvxeoIcPkg/L3fUeQwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJUDoVqQnVHLuHd81NG0W9OoAnB/MB8GA1UdIwQY MBaAFHSuvBVKVsgwJcvYZBqawxXLVRwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEs2OEZVcFd5REFseTloa0dwckRGY3RWSEFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy82ZGU3YTAtNDA3My00MjcyLWJmNDQt MDdhMWQ2NTU0OGJhLzEvZEs2OEZVcFd5REFseTloa0dwckRGY3RWSEFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy82ZGU3YTAtNDA3My00MjcyLWJmNDQtMDdhMWQ2NTU0OGJh LzEvZEs2OEZVcFd5REFseTloa0dwckRGY3RWSEFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkbgx45yS vNKkNPoehS3RmuMsXsSF+/9ReAbhw6rc8Yc85r6hoy9HkCtSVYDTEghObbrDi5xD ADK2ry9r2zJiKH45u3+tQfDYhjuEG8L7VEIm3GD4neglXQ3FEf7/kINYriyOfgNw SODETCTEDTKmg8KIRiQwV+1igObuHTvs3v9jRqjdmPyjszMRL+vTf239K7JgMbhw taA0puIB9ExVWB7tugGh38NwdLoB88QeGjucju1iIZzaAr8Y/S09Q86YW1KylbET YoKqyveqTy2C/f/ZVIpUV70FzAm+yFk53Yd2i1N0q2H+bIEelVHdJl+8Ph8Eo6AM zso1hKEeUWbtKg== -----END CERTIFICATE-----Generated at Sat Dec 6 18:02:02 2025 by rpki-client