This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft File: DU7hk7MBZltW9ngPIl_UTRRAk68.mft (raw, json) Hash identifier: lzuqPlvZdRrMcIG26NY5ZkjOjB9V5g45q51Zyr8mAt0= Subject key identifier: 8E:7A:51:2D:79:A7:29:9B:BC:48:F4:D7:09:F5:C1:0B:EB:9F:44:F1 Authority key identifier: 0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF Certificate issuer: /CN=0d4ee193b301665b56f6780f225fd44d144093af Certificate serial: 019AF23F9636FDFDA60F141DDAFCCB40D478 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 06:00:44 +0000 Manifest this update: Sat 06 Dec 2025 06:00:44 +0000 Manifest next update: Sun 07 Dec 2025 06:00:44 +0000 Files and hashes: 1: 1YRiu8peow1lTJm9FFHNR8FDAbc.roa (hash: M9tDjK8KKMnpI4O/RkjitSO923bPcK4J9p0X6jE60uA=) 2: DU7hk7MBZltW9ngPIl_UTRRAk68.crl (hash: 7ogWKAWo4wBY52dzLhINJJPTVB4SSW+lfcGzwGVgvHo=) 3: PGW1u6hsibHWgf5RkDB15fW7nFU.roa (hash: 0InCSbIA5SExLZ91M4uEAsM9+kvbm4v2lPuTA9ZO2w0=) 4: Rywj_aQoQHnt260cmm4BjBhDxUY.roa (hash: YR+g76t/hDT4XdE58vT7jt0pb9k9/4GBzS42rk3Jatg=) 5: UeY-6eT8AWic-hKV67W_oibJpb0.roa (hash: P9rAEKkeAqwEaQF6epHGIcD5QsTjObpMNhsoMNWv7oU=) 6: WrHytc5z_RMrlF1ugU748saPCOY.roa (hash: aZHYeaaNVTa6TtaiWMmR/j6toZEkqeQ4kR1tqb6QqNc=) 7: Z0NstpNFGmZvTmitOe-bpzN3pog.roa (hash: vOxHYK5BHjTLsLb9PBk4RNol3oeaceKJ5r4uuQeEoSc=) 8: m6l4SopMeawwf-xaFHTLkByhnNs.roa (hash: S7Ljuk3eaMITMnrAZF6Kgxf8yU/v0CtwtarS6ZzuIMk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:96:36:fd:fd:a6:0f:14:1d:da:fc:cb:40:d4:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d4ee193b301665b56f6780f225fd44d144093af Validity Not Before: Dec 6 06:00:44 2025 GMT Not After : Dec 7 06:00:44 2025 GMT Subject: CN=8e7a512d79a7299bbc48f4d709f5c10beb9f44f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7d:f4:30:51:1a:a8:8c:5e:c3:0f:78:d3:d2: 40:58:38:e0:9c:73:eb:f9:fc:02:ae:d4:a9:77:3a: 5b:3f:71:36:3b:c6:5b:34:7b:c2:52:f6:4a:e4:32: 61:84:d2:be:1e:91:7c:af:cd:87:ab:4a:16:16:cc: 89:ac:e7:32:11:52:9b:a9:23:21:cf:18:a5:d2:51: b3:d4:1b:67:06:4c:4c:67:97:ee:09:4c:42:eb:ba: 37:7f:29:1e:dd:73:13:68:f1:61:9c:ae:31:6a:1e: ed:7a:ff:75:e5:23:24:4b:3d:f5:2b:24:de:16:b7: 55:06:56:de:a2:a2:ed:81:d5:4f:35:40:6d:86:a9: e4:ac:0a:ba:c8:9e:1e:6c:fc:1b:78:10:ab:ea:1f: 51:6e:0c:bb:4d:e6:94:6f:77:f7:b4:ce:7a:6e:c0: f4:65:a5:75:e0:e6:d6:b0:b4:7d:f5:8c:59:a4:de: 24:f2:5f:0a:ca:a4:75:a4:9b:bd:70:49:a8:bb:f9: a7:af:4f:f9:05:1d:93:39:71:77:16:c0:3c:52:b3: a4:2f:12:1a:8f:8f:38:d7:d4:87:3f:88:89:a9:fd: 4d:02:d0:c3:00:55:46:15:f0:55:5e:1b:1c:1c:af: c1:ba:4a:e1:8d:46:65:73:13:6a:81:8b:20:6d:37: 91:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:7A:51:2D:79:A7:29:9B:BC:48:F4:D7:09:F5:C1:0B:EB:9F:44:F1 X509v3 Authority Key Identifier: keyid:0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:00:7f:cf:28:7a:43:b4:9a:0b:e1:da:e7:7a:ba:ab:58:c0: 6d:e3:2c:ee:8f:34:df:20:1a:06:1a:fa:48:e8:e0:bc:f6:51: 46:8c:54:9f:bf:87:1d:0c:a6:a7:f0:1c:8a:e3:89:1b:fc:11: c8:40:9d:29:37:10:ad:7d:23:46:08:40:69:d6:be:d6:f4:95: df:3c:fa:90:46:c3:ce:f9:5a:af:85:b2:d5:ef:27:1c:5f:2d: 49:a8:9b:f4:f1:ae:76:00:5a:b4:1c:4a:9d:b2:e0:d7:db:d2: 50:7a:e4:61:a6:c3:4e:17:e2:85:d7:bf:4b:03:19:10:d9:e4: ad:f4:c7:2f:0c:33:93:a3:9f:4d:4e:88:4a:99:79:73:06:62: e2:02:6c:95:18:ba:67:44:d2:7b:2b:fd:b4:0f:34:9a:b7:46: 11:7d:a2:4a:24:d0:0e:2c:49:f9:61:46:34:cc:85:9f:c5:ac: db:c5:d1:ee:ac:7d:f0:72:e3:09:9c:14:17:95:ae:e0:eb:89: 34:18:33:fe:51:c1:91:0a:bf:0f:94:98:fc:50:d5:a8:19:1d: 07:6e:34:d6:a2:e1:38:5d:68:33:08:56:c1:a5:8a:ef:0f:65: 61:41:64:2c:99:e9:4d:6f:5a:ab:7c:ac:52:d0:96:25:a3:28: a9:15:43:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP5Y2/f2mDxQd2vzLQNR4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNGVlMTkzYjMwMTY2NWI1NmY2NzgwZjIyNWZkNDRkMTQ0 MDkzYWYwHhcNMjUxMjA2MDYwMDQ0WhcNMjUxMjA3MDYwMDQ0WjAzMTEwLwYDVQQD Eyg4ZTdhNTEyZDc5YTcyOTliYmM0OGY0ZDcwOWY1YzEwYmViOWY0NGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyX30MFEaqIxeww9409JAWDjgnHPr +fwCrtSpdzpbP3E2O8ZbNHvCUvZK5DJhhNK+HpF8r82Hq0oWFsyJrOcyEVKbqSMh zxil0lGz1BtnBkxMZ5fuCUxC67o3fyke3XMTaPFhnK4xah7tev915SMkSz31KyTe FrdVBlbeoqLtgdVPNUBthqnkrAq6yJ4ebPwbeBCr6h9Rbgy7TeaUb3f3tM56bsD0 ZaV14ObWsLR99YxZpN4k8l8KyqR1pJu9cEmou/mnr0/5BR2TOXF3FsA8UrOkLxIa j48419SHP4iJqf1NAtDDAFVGFfBVXhscHK/BukrhjUZlcxNqgYsgbTeR4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI56US15pymbvEj01wn1wQvrn0TxMB8GA1UdIwQY MBaAFA1O4ZOzAWZbVvZ4DyJf1E0UQJOvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFU3aGs3TUJabHRXOW5nUElsX1VUUlJBazY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wOTcxMTEtMzA5OC00Y2Y3LWFjMGYt OWY3ZTBmODYyZjFlLzEvRFU3aGs3TUJabHRXOW5nUElsX1VUUlJBazY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8wOTcxMTEtMzA5OC00Y2Y3LWFjMGYtOWY3ZTBmODYyZjFl LzEvRFU3aGs3TUJabHRXOW5nUElsX1VUUlJBazY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARAB/zyh6 Q7SaC+Ha53q6q1jAbeMs7o803yAaBhr6SOjgvPZRRoxUn7+HHQymp/AciuOJG/wR yECdKTcQrX0jRghAada+1vSV3zz6kEbDzvlar4Wy1e8nHF8tSaib9PGudgBatBxK nbLg19vSUHrkYabDThfihde/SwMZENnkrfTHLwwzk6OfTU6ISpl5cwZi4gJslRi6 Z0TSeyv9tA80mrdGEX2iSiTQDixJ+WFGNMyFn8Ws28XR7qx98HLjCZwUF5Wu4OuJ NBgz/lHBkQq/D5SY/FDVqBkdB2401qLhOF1oMwhWwaWK7w9lYUFkLJnpTW9aq3ys UtCWJaMoqRVDTw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:41:16 2025 by rpki-client