This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft File: dxBykg2MmitA6zoEXx8qbjNKRJY.mft (raw, json) Hash identifier: JRVR+5J25dlUPYWhW4yxCKO2K1NEXuMwIgTtkUFFz4M= Subject key identifier: 0F:0B:F5:31:BF:CA:86:BC:4E:25:90:C8:48:D1:6A:D9:0C:39:40:1B Authority key identifier: 77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96 Certificate issuer: /CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496 Certificate serial: 019AF31D4E6A7663ABCF55A89DE78EEA9356 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 10:02:55 +0000 Manifest this update: Sat 06 Dec 2025 10:02:55 +0000 Manifest next update: Sun 07 Dec 2025 10:02:55 +0000 Files and hashes: 1: YkTwnLLBjio1cr_ngfAfzZs1Hh0.roa (hash: Y9RRPtZapEofyZ5MjGOGJpjlqTcZ/UM1TnoKmtwIB40=) 2: dxBykg2MmitA6zoEXx8qbjNKRJY.crl (hash: WNeKUTSins+u+fVrj4EtUQZou8oE1AeOXiruwdf2BDA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:4e:6a:76:63:ab:cf:55:a8:9d:e7:8e:ea:93:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496 Validity Not Before: Dec 6 10:02:55 2025 GMT Not After : Dec 7 10:02:55 2025 GMT Subject: CN=0f0bf531bfca86bc4e2590c848d16ad90c39401b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:af:9a:70:e3:b3:7a:ad:0d:3a:df:d4:f0:49: 35:f8:04:d3:b0:ea:38:26:93:ca:3c:87:29:23:e0: fb:ee:74:a5:88:af:5c:be:bc:73:65:0d:92:58:1a: 3e:03:1e:38:86:f5:07:02:f0:30:96:55:56:fc:a0: 45:d9:e4:88:fa:38:57:d0:a1:8e:6d:ec:14:5f:1a: 86:7f:67:ab:64:a4:36:a0:cf:8d:4a:64:a9:a8:ab: 91:8c:ec:a3:72:8a:a8:08:49:5c:57:18:d5:c3:56: f0:6d:92:6d:29:42:f6:07:fb:3d:14:b0:d8:dd:9e: 40:39:f6:c2:d3:2f:9b:0d:0c:06:ce:00:3f:10:97: e4:a6:d3:63:37:49:6f:19:a7:54:f8:c5:e6:6d:0a: e0:fc:1f:17:09:3b:17:df:b6:b2:ca:ca:4a:04:64: 13:ef:14:0e:93:26:4b:8b:a8:d4:30:3d:3c:83:72: 6d:1d:33:2e:53:64:98:0c:b5:90:13:07:32:c4:9e: ac:be:e0:8e:67:82:6c:a8:f2:54:e6:12:4c:22:04: 39:2b:ab:5f:27:8f:63:77:48:86:c4:23:ff:a2:55: c8:c7:3c:cb:19:a3:f0:48:81:c3:21:29:81:f7:c5: 37:8e:c1:94:b8:39:0b:06:32:58:c3:d0:b5:a1:8a: 9b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:0B:F5:31:BF:CA:86:BC:4E:25:90:C8:48:D1:6A:D9:0C:39:40:1B X509v3 Authority Key Identifier: keyid:77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:ef:6e:2d:34:fb:a2:af:b0:c6:d4:e5:a4:7f:bb:77:a5:3b: 3f:59:c8:fd:a9:9c:19:b1:49:cf:e6:86:28:ed:61:6b:05:d9: e9:19:70:1a:ec:14:c8:68:e2:0e:69:de:a3:7a:52:86:df:de: 3e:34:66:8a:8b:a3:4a:f3:1e:2e:5b:6d:8a:1f:dd:db:91:1e: e2:b0:13:8e:ca:82:55:2f:ae:b6:13:66:1f:29:c5:17:a0:d2: 4a:d5:3b:82:fa:d0:20:ff:79:c6:c3:70:61:f9:c5:4a:93:8e: 7a:e5:d3:db:6d:de:4f:87:87:11:c7:6f:5f:c0:85:f2:35:fd: 07:8c:4a:70:cc:6b:7d:07:59:be:6a:50:3e:9d:93:1b:49:30: e4:03:92:33:3b:42:f2:8c:9e:c6:3b:8c:c3:d4:92:13:3a:11: 72:87:bc:06:e6:cc:d1:4d:fe:51:76:34:50:e2:ab:40:ed:8c: 43:8d:0e:3d:a2:d1:df:9a:7f:1c:30:ab:4d:92:32:ca:bf:7f: 20:96:35:a8:36:b1:32:dd:04:88:cc:23:12:fa:86:4b:27:35: ae:65:f5:9d:ac:28:d0:14:f2:03:f3:e9:bb:48:94:b4:63:da: f9:14:be:d3:51:53:bb:db:49:38:9f:40:7d:40:4d:e5:81:d9: 7a:dd:09:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHU5qdmOrz1WoneeO6pNWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MTA3MjkyMGQ4YzlhMmI0MGViM2EwNDVmMWYyYTZlMzM0 YTQ0OTYwHhcNMjUxMjA2MTAwMjU1WhcNMjUxMjA3MTAwMjU1WjAzMTEwLwYDVQQD EygwZjBiZjUzMWJmY2E4NmJjNGUyNTkwYzg0OGQxNmFkOTBjMzk0MDFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6+acOOzeq0NOt/U8Ek1+ATTsOo4 JpPKPIcpI+D77nSliK9cvrxzZQ2SWBo+Ax44hvUHAvAwllVW/KBF2eSI+jhX0KGO bewUXxqGf2erZKQ2oM+NSmSpqKuRjOyjcoqoCElcVxjVw1bwbZJtKUL2B/s9FLDY 3Z5AOfbC0y+bDQwGzgA/EJfkptNjN0lvGadU+MXmbQrg/B8XCTsX37ayyspKBGQT 7xQOkyZLi6jUMD08g3JtHTMuU2SYDLWQEwcyxJ6svuCOZ4JsqPJU5hJMIgQ5K6tf J49jd0iGxCP/olXIxzzLGaPwSIHDISmB98U3jsGUuDkLBjJYw9C1oYqbywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA8L9TG/yoa8TiWQyEjRatkMOUAbMB8GA1UdIwQY MBaAFHcQcpINjJorQOs6BF8fKm4zSkSWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHhCeWtnMk1taXRBNnpvRVh4OHFiak5LUkpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC85ZWMxMzQtZjA0Zi00NDIzLThiZTUt N2Y1ZTE3NTlmODRlLzEvZHhCeWtnMk1taXRBNnpvRVh4OHFiak5LUkpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC85ZWMxMzQtZjA0Zi00NDIzLThiZTUtN2Y1ZTE3NTlmODRl LzEvZHhCeWtnMk1taXRBNnpvRVh4OHFiak5LUkpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcu9uLTT7 oq+wxtTlpH+7d6U7P1nI/amcGbFJz+aGKO1hawXZ6RlwGuwUyGjiDmneo3pSht/e PjRmioujSvMeLlttih/d25Ee4rATjsqCVS+uthNmHynFF6DSStU7gvrQIP95xsNw YfnFSpOOeuXT223eT4eHEcdvX8CF8jX9B4xKcMxrfQdZvmpQPp2TG0kw5AOSMztC 8oyexjuMw9SSEzoRcoe8BubM0U3+UXY0UOKrQO2MQ40OPaLR35p/HDCrTZIyyr9/ IJY1qDaxMt0EiMwjEvqGSyc1rmX1nawo0BTyA/Ppu0iUtGPa+RS+01FTu9tJOJ9A fUBN5YHZet0Jig== -----END CERTIFICATE-----Generated at Sat Dec 6 13:34:54 2025 by rpki-client