This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft File: DT66aHPFtQdbPEOff-61SvHxDak.mft (raw, json) Hash identifier: Vgae8tDV3HbRSWH2e2dfU1E4bvuK8P4vq4hrFPp7/HI= Subject key identifier: 82:44:8F:A6:11:D2:84:76:90:F6:31:2C:BC:E3:92:0A:AF:8C:24:BD Authority key identifier: 0D:3E:BA:68:73:C5:B5:07:5B:3C:43:9F:7F:EE:B5:4A:F1:F1:0D:A9 Certificate issuer: /CN=0d3eba6873c5b5075b3c439f7feeb54af1f10da9 Certificate serial: 019AF19B397E7CF22568605C8B3DB0421412 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DT66aHPFtQdbPEOff-61SvHxDak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 03:01:13 +0000 Manifest this update: Sat 06 Dec 2025 03:01:13 +0000 Manifest next update: Sun 07 Dec 2025 03:01:13 +0000 Files and hashes: 1: DT66aHPFtQdbPEOff-61SvHxDak.crl (hash: IkUv/Rbm4dZ1kV2Y8VNYP38cGG9mpl+yq2g9N99Z5a8=) 2: bJFxuWRTLDK11fnMj6JzG9bfGJc.roa (hash: GJmoaYMZlK46RmoyjMRGd4Icb8shLixbmKsjvQhxyu0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.crl rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft rsync://rpki.ripe.net/repository/DEFAULT/DT66aHPFtQdbPEOff-61SvHxDak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:39:7e:7c:f2:25:68:60:5c:8b:3d:b0:42:14:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3eba6873c5b5075b3c439f7feeb54af1f10da9 Validity Not Before: Dec 6 03:01:13 2025 GMT Not After : Dec 7 03:01:13 2025 GMT Subject: CN=82448fa611d2847690f6312cbce3920aaf8c24bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:8c:a0:ae:a3:91:17:a7:75:1b:98:15:1d:07: 87:a0:24:57:02:4b:d8:a4:13:70:75:58:1c:72:c4: 3d:20:59:ff:b4:94:f7:39:60:de:5f:6c:eb:29:d0: a5:e2:b1:89:cf:e8:e2:9a:75:d5:36:94:2a:55:fc: 09:ae:1a:cb:5c:53:96:40:3d:f1:d1:f3:99:d3:ba: 21:3a:ee:ff:78:4f:77:d8:22:5f:4a:e4:13:a2:b2: 16:36:0e:bd:dc:f0:20:27:68:94:86:16:a5:5e:84: 53:ce:ab:fb:c7:4c:0f:be:76:4a:ba:12:37:ed:ca: df:ca:84:3b:7d:d3:6e:d4:3d:08:11:5f:ff:6d:25: 29:3a:20:b4:40:7a:4a:6d:4c:b5:42:b4:04:1b:85: 1e:b2:61:3b:82:38:24:1d:be:e7:1d:0c:e9:9c:9c: 47:63:71:97:bd:85:d3:89:25:03:6f:d3:16:e9:6e: 5e:c1:e6:64:0e:b9:5c:53:6f:dc:17:d1:ba:fa:7d: a5:11:c2:8f:7f:55:fb:9d:de:b8:c3:2a:15:90:7b: 85:5d:0a:45:68:75:d6:8b:22:c6:c2:e4:56:2f:34: 20:0a:7f:68:3f:ba:b1:5a:bb:4f:41:b3:a7:ab:2c: 72:0a:65:85:ad:31:5d:46:f3:66:51:37:ee:38:1e: 46:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:44:8F:A6:11:D2:84:76:90:F6:31:2C:BC:E3:92:0A:AF:8C:24:BD X509v3 Authority Key Identifier: keyid:0D:3E:BA:68:73:C5:B5:07:5B:3C:43:9F:7F:EE:B5:4A:F1:F1:0D:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DT66aHPFtQdbPEOff-61SvHxDak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:6e:06:74:c5:24:16:ae:65:ac:d7:97:a0:07:bd:3e:09:b8: 70:fa:08:27:a6:ee:2d:aa:8f:05:23:a2:09:90:ef:c7:97:c3: 42:9e:38:4e:85:0f:98:d3:e1:ac:0f:bd:01:24:b4:ad:cf:89: 35:c8:86:34:db:f1:cf:a2:70:ac:f5:95:99:3c:a2:17:2e:77: 7c:0f:6f:4b:ec:5c:f7:41:88:73:43:7e:31:1a:60:5a:2c:7b: 00:bd:68:c6:dd:68:48:fb:83:bd:2e:bf:ec:af:a6:cc:e1:f1: 23:26:81:04:0f:b2:9c:1a:22:5b:58:21:e2:e4:c2:f1:ff:56: a1:fc:06:c4:57:d0:16:2d:20:8f:31:3e:f9:cf:9e:5b:0b:09: 53:c3:a5:3e:4e:32:d1:29:ad:77:6d:cf:08:07:47:5b:09:9b: 9a:92:df:c5:76:3f:22:dc:06:02:1b:20:b0:83:8e:90:c7:c1: 0d:dd:78:c4:4a:95:b3:72:bb:4b:f2:48:bb:59:d5:62:a1:14: 62:13:58:59:e1:63:e9:ac:20:82:51:26:ca:ae:72:c0:c2:d9: 8f:e1:cf:02:52:04:a5:4a:a6:7a:40:25:71:93:55:37:0e:dc: 67:35:72:bd:3f:f7:61:47:34:f4:8a:dd:47:0c:8f:a1:09:73: 6a:01:d0:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmzl+fPIlaGBciz2wQhQSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkM2ViYTY4NzNjNWI1MDc1YjNjNDM5ZjdmZWViNTRhZjFm MTBkYTkwHhcNMjUxMjA2MDMwMTEzWhcNMjUxMjA3MDMwMTEzWjAzMTEwLwYDVQQD Eyg4MjQ0OGZhNjExZDI4NDc2OTBmNjMxMmNiY2UzOTIwYWFmOGMyNGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YygrqORF6d1G5gVHQeHoCRXAkvY pBNwdVgccsQ9IFn/tJT3OWDeX2zrKdCl4rGJz+jimnXVNpQqVfwJrhrLXFOWQD3x 0fOZ07ohOu7/eE932CJfSuQTorIWNg693PAgJ2iUhhalXoRTzqv7x0wPvnZKuhI3 7crfyoQ7fdNu1D0IEV//bSUpOiC0QHpKbUy1QrQEG4UesmE7gjgkHb7nHQzpnJxH Y3GXvYXTiSUDb9MW6W5eweZkDrlcU2/cF9G6+n2lEcKPf1X7nd64wyoVkHuFXQpF aHXWiyLGwuRWLzQgCn9oP7qxWrtPQbOnqyxyCmWFrTFdRvNmUTfuOB5GOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIJEj6YR0oR2kPYxLLzjkgqvjCS9MB8GA1UdIwQY MBaAFA0+umhzxbUHWzxDn3/utUrx8Q2pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFQ2NmFIUEZ0UWRiUEVPZmYtNjFTdkh4RGFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8zMzgzZjEtMDQyOC00NjRiLWJkMWUt Mjc5OThiZjE3NDY1LzEvRFQ2NmFIUEZ0UWRiUEVPZmYtNjFTdkh4RGFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS8zMzgzZjEtMDQyOC00NjRiLWJkMWUtMjc5OThiZjE3NDY1 LzEvRFQ2NmFIUEZ0UWRiUEVPZmYtNjFTdkh4RGFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAum4GdMUk Fq5lrNeXoAe9Pgm4cPoIJ6buLaqPBSOiCZDvx5fDQp44ToUPmNPhrA+9ASS0rc+J NciGNNvxz6JwrPWVmTyiFy53fA9vS+xc90GIc0N+MRpgWix7AL1oxt1oSPuDvS6/ 7K+mzOHxIyaBBA+ynBoiW1gh4uTC8f9WofwGxFfQFi0gjzE++c+eWwsJU8OlPk4y 0Smtd23PCAdHWwmbmpLfxXY/ItwGAhsgsIOOkMfBDd14xEqVs3K7S/JIu1nVYqEU YhNYWeFj6awgglEmyq5ywMLZj+HPAlIEpUqmekAlcZNVNw7cZzVyvT/3YUc09Ird RwyPoQlzagHQ8Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:53 2025 by rpki-client