This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.mft File: dkE2w82_1ftgyv1Kmx1HOjtnJjU.mft (raw, json) Hash identifier: eY/Pr4Mp4jw+a0G/zHeI+Kf8fQqa1wjW1E8hdoUNGGY= Subject key identifier: B2:99:E5:AB:4D:47:13:AD:B2:41:0F:75:DC:4F:3D:38:57:39:BC:88 Authority key identifier: 76:41:36:C3:CD:BF:D5:FB:60:CA:FD:4A:9B:1D:47:3A:3B:67:26:35 Certificate issuer: /CN=764136c3cdbfd5fb60cafd4a9b1d473a3b672635 Certificate serial: 019AF12D0B0DD7AB12197F59706F67DA1581 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkE2w82_1ftgyv1Kmx1HOjtnJjU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.mft Manifest number: 0B46 Signing time: Sat 06 Dec 2025 01:00:52 +0000 Manifest this update: Sat 06 Dec 2025 01:00:52 +0000 Manifest next update: Sun 07 Dec 2025 01:00:52 +0000 Files and hashes: 1: dkE2w82_1ftgyv1Kmx1HOjtnJjU.crl (hash: DzVoyDU8JCIfRNAQb8y5R0RYC1oH7PUhzGaI0lQPwiI=) 2: uTA8mSJ_3Pm9uHRtbBQGox8CCms.roa (hash: JKMyKU4R0Hs07ETR6QJe5cFRF5p9HW1pjj1e0SHJl68=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.crl rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.mft rsync://rpki.ripe.net/repository/DEFAULT/dkE2w82_1ftgyv1Kmx1HOjtnJjU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:0b:0d:d7:ab:12:19:7f:59:70:6f:67:da:15:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=764136c3cdbfd5fb60cafd4a9b1d473a3b672635 Validity Not Before: Dec 6 01:00:52 2025 GMT Not After : Dec 7 01:00:52 2025 GMT Subject: CN=b299e5ab4d4713adb2410f75dc4f3d385739bc88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b9:c8:fb:70:8d:fe:e2:53:36:47:1d:1b:b0: aa:7c:81:66:4c:fd:04:00:64:75:6b:27:da:36:bc: d5:48:ef:79:12:81:a1:5c:07:ee:f2:bf:81:3c:8f: 6e:82:18:c6:f2:14:67:bb:4d:63:e9:02:55:26:58: ae:39:0b:01:5a:f2:14:8d:45:c8:bf:13:91:22:1d: 45:87:d9:4c:78:63:9b:88:6d:bb:0c:40:9e:b8:93: c4:ac:cc:ac:af:bb:77:09:5c:9d:1c:22:28:c2:63: 85:60:75:38:c2:f7:9d:7a:69:e6:2e:b8:0a:47:cb: 48:d7:ca:f6:a1:f3:cf:2a:ac:2f:20:7d:53:2d:c7: dd:9b:84:f0:77:3e:61:7f:d3:82:7e:bd:f9:3d:a5: 23:22:fe:61:e4:84:18:88:75:e7:53:15:a7:32:cb: 1f:ac:e6:64:da:24:4f:24:a5:06:13:ba:65:f7:db: 19:18:13:8b:8f:ba:30:31:09:0f:09:30:7d:d1:04: 4c:de:fe:f6:57:e1:e0:b1:59:f4:65:ef:ee:9f:e1: 3c:6d:ff:7f:af:2d:78:6b:05:86:22:5a:8c:ec:b8: 83:30:c6:17:c2:42:b3:c6:56:90:9d:8a:92:7a:5e: 18:0f:a3:03:64:99:cd:d6:54:ed:af:54:a8:fc:48: f3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:99:E5:AB:4D:47:13:AD:B2:41:0F:75:DC:4F:3D:38:57:39:BC:88 X509v3 Authority Key Identifier: keyid:76:41:36:C3:CD:BF:D5:FB:60:CA:FD:4A:9B:1D:47:3A:3B:67:26:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkE2w82_1ftgyv1Kmx1HOjtnJjU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:d9:a2:7d:10:62:5f:86:2e:bc:ff:2d:0e:86:a5:e9:41:cc: 45:5d:35:0c:d9:60:a5:d6:42:47:dc:7a:4a:c3:4f:c6:66:15: ab:16:35:e2:2c:67:dc:cf:54:70:b8:93:7d:4d:20:59:56:06: b0:20:d6:d8:94:53:6a:ae:ad:c5:df:f1:74:cb:e0:82:07:ce: 79:b5:4d:2f:91:cd:29:4d:71:02:bb:98:5f:7a:ce:59:1e:fe: 67:8a:2c:cf:5e:6f:1d:ed:87:dc:81:12:ec:e0:f0:33:7a:4e: 23:0c:b7:26:03:11:72:00:ab:19:06:18:f3:18:8a:ba:ae:57: 92:8f:46:0d:b6:55:31:25:e1:0c:b6:f0:2c:fa:d7:21:7c:3f: bd:03:74:2b:ab:b5:04:e9:36:7b:ee:cc:6e:03:76:68:42:3e: 4e:32:5e:48:78:17:f0:3a:a2:3d:91:21:d6:b1:ea:d2:ff:d8: d8:9c:af:2b:23:ff:80:88:88:6d:9a:da:65:18:13:fd:fc:74: 41:69:83:b5:4f:af:18:0a:b9:30:67:03:33:64:c2:6a:16:d0: f0:6e:7b:6e:e5:7a:84:42:6d:cc:14:01:01:12:e9:ff:e5:a9: a7:20:07:d6:1f:f8:b0:c3:dc:63:d2:b1:80:ef:78:fa:69:e4: a7:88:13:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLQsN16sSGX9ZcG9n2hWBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NDEzNmMzY2RiZmQ1ZmI2MGNhZmQ0YTliMWQ0NzNhM2I2 NzI2MzUwHhcNMjUxMjA2MDEwMDUyWhcNMjUxMjA3MDEwMDUyWjAzMTEwLwYDVQQD EyhiMjk5ZTVhYjRkNDcxM2FkYjI0MTBmNzVkYzRmM2QzODU3MzliYzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrnI+3CN/uJTNkcdG7CqfIFmTP0E AGR1ayfaNrzVSO95EoGhXAfu8r+BPI9ughjG8hRnu01j6QJVJliuOQsBWvIUjUXI vxORIh1Fh9lMeGObiG27DECeuJPErMysr7t3CVydHCIowmOFYHU4wvedemnmLrgK R8tI18r2ofPPKqwvIH1TLcfdm4Twdz5hf9OCfr35PaUjIv5h5IQYiHXnUxWnMssf rOZk2iRPJKUGE7pl99sZGBOLj7owMQkPCTB90QRM3v72V+HgsVn0Ze/un+E8bf9/ ry14awWGIlqM7LiDMMYXwkKzxlaQnYqSel4YD6MDZJnN1lTtr1So/EjziQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLKZ5atNRxOtskEPddxPPThXObyIMB8GA1UdIwQY MBaAFHZBNsPNv9X7YMr9SpsdRzo7ZyY1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGtFMnc4Ml8xZnRneXYxS214MUhPanRuSmpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My81MjQ2ZTYtNzJjNi00ZjQ3LWEzYTMt ZTRkZjVhODdkNGVkLzEvZGtFMnc4Ml8xZnRneXYxS214MUhPanRuSmpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My81MjQ2ZTYtNzJjNi00ZjQ3LWEzYTMtZTRkZjVhODdkNGVk LzEvZGtFMnc4Ml8xZnRneXYxS214MUhPanRuSmpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj9mifRBi X4YuvP8tDoal6UHMRV01DNlgpdZCR9x6SsNPxmYVqxY14ixn3M9UcLiTfU0gWVYG sCDW2JRTaq6txd/xdMvgggfOebVNL5HNKU1xAruYX3rOWR7+Z4osz15vHe2H3IES 7ODwM3pOIwy3JgMRcgCrGQYY8xiKuq5Xko9GDbZVMSXhDLbwLPrXIXw/vQN0K6u1 BOk2e+7MbgN2aEI+TjJeSHgX8DqiPZEh1rHq0v/Y2JyvKyP/gIiIbZraZRgT/fx0 QWmDtU+vGAq5MGcDM2TCahbQ8G57buV6hEJtzBQBARLp/+WppyAH1h/4sMPcY9Kx gO94+mnkp4gTAQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:56:25 2025 by rpki-client