This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.mft File: DkGjlotidBs200i-DSyRxdSxM6I.mft (raw, json) Hash identifier: rKLkRNVef3reKHpYatSmr5nkVvnKqc51kRkmigbGneo= Subject key identifier: D0:0E:64:BD:03:EB:89:5E:45:C2:C1:AE:01:95:3B:EC:70:D9:3E:5D Authority key identifier: 0E:41:A3:96:8B:62:74:1B:36:D3:48:BE:0D:2C:91:C5:D4:B1:33:A2 Certificate issuer: /CN=0e41a3968b62741b36d348be0d2c91c5d4b133a2 Certificate serial: 019AF61C318F60C13FF4CC85C7F9312E6C32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkGjlotidBs200i-DSyRxdSxM6I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.mft Manifest number: 1764 Signing time: Sun 07 Dec 2025 00:00:33 +0000 Manifest this update: Sun 07 Dec 2025 00:00:33 +0000 Manifest next update: Mon 08 Dec 2025 00:00:33 +0000 Files and hashes: 1: DkGjlotidBs200i-DSyRxdSxM6I.crl (hash: y5gl+B+gqtKvIgGmeOGhOGVNvV/BbHHeCvypNntU4kk=) 2: nHnuu4F-Ic_WUkHgNlM9Go5lrwU.roa (hash: 5dkmrGwUAjAB3N+7M+2yibV5BDpF46oezVix+Yio7q4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.crl rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.mft rsync://rpki.ripe.net/repository/DEFAULT/DkGjlotidBs200i-DSyRxdSxM6I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:31:8f:60:c1:3f:f4:cc:85:c7:f9:31:2e:6c:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e41a3968b62741b36d348be0d2c91c5d4b133a2 Validity Not Before: Dec 7 00:00:33 2025 GMT Not After : Dec 8 00:00:33 2025 GMT Subject: CN=d00e64bd03eb895e45c2c1ae01953bec70d93e5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b0:91:d6:67:6f:14:64:81:70:21:11:38:13: 1b:f2:c9:88:95:18:09:10:58:2d:7a:67:b3:69:0f: 75:c0:fd:f6:50:45:89:ef:72:27:0f:f3:2c:a9:d4: 14:0e:ba:c9:b9:cb:07:d7:5a:dd:b1:c7:dd:71:a2: 56:c7:ab:05:c1:78:ad:30:91:e8:40:62:fd:f3:6b: 2a:db:6e:17:d8:54:03:a0:a3:93:68:79:3b:7f:31: 3e:8b:58:05:94:6d:26:74:86:e2:d9:e0:d5:dc:ae: 6a:0a:85:e8:20:6f:c9:84:f9:42:35:26:08:ba:88: 50:1c:47:6a:88:ab:7b:5f:e3:9e:6e:aa:36:4b:5b: 93:06:94:91:7b:63:f2:e3:49:f8:3e:82:9b:53:39: 98:f2:95:22:bf:25:91:88:59:d1:54:65:9f:9a:d9: 3a:c4:44:fd:eb:60:b0:be:f2:ad:1a:2e:ff:f3:33: 44:ef:f7:b5:72:05:57:d7:26:a8:c8:67:89:6e:e8: 44:67:01:a4:aa:0f:44:6c:61:57:af:62:b2:6d:dd: 5b:95:90:65:78:41:56:bb:51:9b:1a:f9:b5:f1:00: 1e:21:8d:57:bf:8b:85:cd:9f:ce:61:0c:6d:3c:7b: 8c:ca:b6:5d:db:8d:0c:b7:fd:f5:e2:a4:8c:f6:5c: 99:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:0E:64:BD:03:EB:89:5E:45:C2:C1:AE:01:95:3B:EC:70:D9:3E:5D X509v3 Authority Key Identifier: keyid:0E:41:A3:96:8B:62:74:1B:36:D3:48:BE:0D:2C:91:C5:D4:B1:33:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkGjlotidBs200i-DSyRxdSxM6I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:bc:9d:63:87:3d:48:4d:c1:9b:35:8e:21:5b:03:71:3d:83: 08:a3:6a:fb:a7:0e:58:9a:31:2f:cb:b3:63:12:8e:7d:16:49: e0:56:df:61:69:41:f1:34:0e:5e:bf:19:10:ef:25:ec:aa:19: 10:28:d5:e9:9e:51:44:54:56:7f:9c:d8:dd:ce:5f:49:ec:0a: b2:22:8b:de:3c:af:f0:dd:14:e9:26:5a:d9:3e:05:e5:0a:40: 52:56:1d:b7:7c:b3:c8:6b:53:d7:fd:4a:1f:5e:ea:63:87:e0: a7:94:51:38:84:34:48:da:18:8b:1d:13:12:a9:60:3e:f5:d2: b4:7d:ab:fa:57:a2:7b:8a:87:34:95:d6:1a:af:dd:20:f7:c1: 24:23:61:67:d2:95:99:a5:1f:3d:35:7d:1c:d8:80:2b:09:cf: ea:86:26:84:2b:aa:fb:e9:c7:97:c0:09:6b:af:17:ac:62:4f: 08:24:67:bc:ad:e6:42:4b:89:9f:50:40:00:d1:85:2e:a5:61: 70:4f:d7:97:51:7c:ce:1a:db:4f:ae:40:be:e7:ec:76:3b:94: 1d:43:54:6e:8c:e8:00:72:66:68:10:1b:1c:23:16:c9:2b:ad: 14:bc:a6:50:da:b5:fc:a4:83:95:7a:02:99:ff:5a:c6:41:60: 3c:ea:18:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HDGPYME/9MyFx/kxLmwyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNDFhMzk2OGI2Mjc0MWIzNmQzNDhiZTBkMmM5MWM1ZDRi MTMzYTIwHhcNMjUxMjA3MDAwMDMzWhcNMjUxMjA4MDAwMDMzWjAzMTEwLwYDVQQD EyhkMDBlNjRiZDAzZWI4OTVlNDVjMmMxYWUwMTk1M2JlYzcwZDkzZTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrCR1mdvFGSBcCEROBMb8smIlRgJ EFgtemezaQ91wP32UEWJ73InD/MsqdQUDrrJucsH11rdscfdcaJWx6sFwXitMJHo QGL982sq224X2FQDoKOTaHk7fzE+i1gFlG0mdIbi2eDV3K5qCoXoIG/JhPlCNSYI uohQHEdqiKt7X+Oebqo2S1uTBpSRe2Py40n4PoKbUzmY8pUivyWRiFnRVGWfmtk6 xET962CwvvKtGi7/8zNE7/e1cgVX1yaoyGeJbuhEZwGkqg9EbGFXr2Kybd1blZBl eEFWu1GbGvm18QAeIY1Xv4uFzZ/OYQxtPHuMyrZd240Mt/314qSM9lyZXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNAOZL0D64leRcLBrgGVO+xw2T5dMB8GA1UdIwQY MBaAFA5Bo5aLYnQbNtNIvg0skcXUsTOiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGtHamxvdGlkQnMyMDBpLURTeVJ4ZFN4TTZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8wNWIxZjgtNGIzNS00MGJiLWEwMzQt NzQ3NTIzMTkyMzYzLzEvRGtHamxvdGlkQnMyMDBpLURTeVJ4ZFN4TTZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8wNWIxZjgtNGIzNS00MGJiLWEwMzQtNzQ3NTIzMTkyMzYz LzEvRGtHamxvdGlkQnMyMDBpLURTeVJ4ZFN4TTZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAarydY4c9 SE3BmzWOIVsDcT2DCKNq+6cOWJoxL8uzYxKOfRZJ4FbfYWlB8TQOXr8ZEO8l7KoZ ECjV6Z5RRFRWf5zY3c5fSewKsiKL3jyv8N0U6SZa2T4F5QpAUlYdt3yzyGtT1/1K H17qY4fgp5RROIQ0SNoYix0TEqlgPvXStH2r+leie4qHNJXWGq/dIPfBJCNhZ9KV maUfPTV9HNiAKwnP6oYmhCuq++nHl8AJa68XrGJPCCRnvK3mQkuJn1BAANGFLqVh cE/Xl1F8zhrbT65AvufsdjuUHUNUbozoAHJmaBAbHCMWySutFLymUNq1/KSDlXoC mf9axkFgPOoYMQ== -----END CERTIFICATE-----Generated at Sun Dec 7 02:57:16 2025 by rpki-client