This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft File: DKqIQOU7uWW-UZLIW3QDReegZSw.mft (raw, json) Hash identifier: V/IdNX56d4GRh/jjLN0m6qqi3v/Jd6zyTOqvsj0XKBA= Subject key identifier: A2:43:75:0C:50:91:2E:A3:24:85:21:AA:EB:6E:AB:61:CB:77:3F:F0 Authority key identifier: 0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C Certificate issuer: /CN=0caa8840e53bb965be5192c85b740345e7a0652c Certificate serial: 019AF12CF57576969636B42AEE69FDE3FD62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft Manifest number: 0D35 Signing time: Sat 06 Dec 2025 01:00:46 +0000 Manifest this update: Sat 06 Dec 2025 01:00:46 +0000 Manifest next update: Sun 07 Dec 2025 01:00:46 +0000 Files and hashes: 1: 6a6m2sY5irDHLsl4ebhsVtwBNoA.roa (hash: CJz/QYXYByZR8HyEy/tvD2Zb/IQMDG9xzZSpgVMTt6I=) 2: DKqIQOU7uWW-UZLIW3QDReegZSw.crl (hash: tiXMAwbYdz8VV8VDaS0E0MOCZjUG1Vd2mRzHWJMFkYE=) 3: VBefpoqrDUHQSpoj27BSrozRznM.roa (hash: agBfgG2iYmaXn7ObPl+WmZUGarHOkDC9u5AsUTrfJ94=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:f5:75:76:96:96:36:b4:2a:ee:69:fd:e3:fd:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0caa8840e53bb965be5192c85b740345e7a0652c Validity Not Before: Dec 6 01:00:46 2025 GMT Not After : Dec 7 01:00:46 2025 GMT Subject: CN=a243750c50912ea3248521aaeb6eab61cb773ff0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:da:1f:8b:70:ec:36:19:31:4d:0f:0b:74:c7: b2:ed:b1:be:c6:9b:5a:69:7e:c2:9c:79:03:c7:c9: f5:4c:85:9d:e0:f6:80:07:5a:86:09:e9:f8:db:18: 04:b2:79:88:01:df:3f:b6:72:f0:92:30:86:65:c2: 42:e4:90:c0:98:d5:b8:be:9f:b9:29:bd:2b:d5:fe: 70:20:d0:cc:a0:58:c0:2d:71:89:ac:83:cd:86:54: 25:41:d6:b8:7a:d8:9f:fc:3c:c1:3f:27:82:35:7f: db:2d:90:fb:99:51:1e:f9:04:48:4a:b9:9a:d7:5f: c0:0c:7c:c9:80:7d:2e:d6:b7:f4:f9:dc:ea:2c:65: 4b:fc:b7:45:58:42:8d:d0:94:3f:90:0d:b0:18:c8: ea:20:04:0d:ac:c0:3d:bc:8a:8f:50:dd:47:0f:f7: 2e:35:05:5a:9c:2b:bf:64:7a:66:7d:ed:60:6e:d6: 67:5f:d0:b2:28:45:07:78:3e:60:8d:71:e2:2b:30: e8:33:fb:fb:60:1d:e7:39:aa:a8:76:99:1b:a9:78: df:7f:9d:b0:1e:2a:9d:30:41:50:dd:a9:50:8c:db: eb:8c:a1:86:67:33:bd:fc:fc:a0:32:c0:ac:0b:54: bc:35:c5:57:60:dd:26:5f:21:11:18:7a:9f:94:7b: 1e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:43:75:0C:50:91:2E:A3:24:85:21:AA:EB:6E:AB:61:CB:77:3F:F0 X509v3 Authority Key Identifier: keyid:0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:98:10:aa:fe:ac:5c:b3:ce:5d:53:40:e9:92:28:08:6c:4e: c7:2c:30:0b:db:b9:cf:ab:70:71:b6:23:5e:03:be:6a:90:83: ba:07:3a:7a:1a:a3:c8:d8:a7:a4:19:9c:f9:5c:22:52:5e:1e: a0:86:38:ce:10:e2:38:ad:2f:a6:d4:a7:0f:6d:33:c6:10:e7: d6:23:38:a9:e0:b0:e5:e6:89:ec:4f:34:3b:70:28:fb:9b:75: 95:f3:e0:7c:31:7d:b6:2e:6e:8b:da:77:de:c0:75:1e:eb:37: 7b:81:5a:46:92:f6:cd:cb:f2:f5:44:12:98:0c:a1:d9:29:16: 24:5b:18:f0:98:64:2f:21:51:23:b9:c2:49:1c:6e:c9:27:f5: 21:10:af:27:35:40:9a:74:32:8d:68:9e:1e:ee:4f:d1:2c:67: cb:06:4e:21:08:04:ac:cb:84:33:ba:ad:5b:84:6b:df:ca:a0: f6:97:db:f2:71:33:1b:4a:7f:fa:d7:85:b1:29:eb:24:e7:2c: b5:54:fb:23:49:58:de:21:5a:d4:15:ea:aa:1d:5b:10:8d:43: 8b:06:94:4c:bd:0d:2a:0b:34:18:14:8f:01:3b:d3:bc:93:d8: 82:5e:86:5d:eb:35:3e:3b:31:cf:0d:0e:a1:54:a1:b9:5d:33: 79:88:29:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLPV1dpaWNrQq7mn94/1iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjYWE4ODQwZTUzYmI5NjViZTUxOTJjODViNzQwMzQ1ZTdh MDY1MmMwHhcNMjUxMjA2MDEwMDQ2WhcNMjUxMjA3MDEwMDQ2WjAzMTEwLwYDVQQD EyhhMjQzNzUwYzUwOTEyZWEzMjQ4NTIxYWFlYjZlYWI2MWNiNzczZmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNofi3DsNhkxTQ8LdMey7bG+xpta aX7CnHkDx8n1TIWd4PaAB1qGCen42xgEsnmIAd8/tnLwkjCGZcJC5JDAmNW4vp+5 Kb0r1f5wINDMoFjALXGJrIPNhlQlQda4etif/DzBPyeCNX/bLZD7mVEe+QRISrma 11/ADHzJgH0u1rf0+dzqLGVL/LdFWEKN0JQ/kA2wGMjqIAQNrMA9vIqPUN1HD/cu NQVanCu/ZHpmfe1gbtZnX9CyKEUHeD5gjXHiKzDoM/v7YB3nOaqodpkbqXjff52w HiqdMEFQ3alQjNvrjKGGZzO9/PygMsCsC1S8NcVXYN0mXyERGHqflHseawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKJDdQxQkS6jJIUhqutuq2HLdz/wMB8GA1UdIwQY MBaAFAyqiEDlO7llvlGSyFt0A0XnoGUsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREtxSVFPVTd1V1ctVVpMSVczUURSZWVnWlN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9jNjdjM2UtNDVjNi00YzgxLTk3Mzgt YzQ0ZGRmZmE2OWFiLzEvREtxSVFPVTd1V1ctVVpMSVczUURSZWVnWlN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9jNjdjM2UtNDVjNi00YzgxLTk3MzgtYzQ0ZGRmZmE2OWFi LzEvREtxSVFPVTd1V1ctVVpMSVczUURSZWVnWlN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAJgQqv6s XLPOXVNA6ZIoCGxOxywwC9u5z6twcbYjXgO+apCDugc6ehqjyNinpBmc+VwiUl4e oIY4zhDiOK0vptSnD20zxhDn1iM4qeCw5eaJ7E80O3Ao+5t1lfPgfDF9ti5ui9p3 3sB1Hus3e4FaRpL2zcvy9UQSmAyh2SkWJFsY8JhkLyFRI7nCSRxuySf1IRCvJzVA mnQyjWieHu5P0SxnywZOIQgErMuEM7qtW4Rr38qg9pfb8nEzG0p/+teFsSnrJOcs tVT7I0lY3iFa1BXqqh1bEI1DiwaUTL0NKgs0GBSPATvTvJPYgl6GXes1Pjsxzw0O oVShuV0zeYgpmA== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:46 2025 by rpki-client