This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft File: DKqIQOU7uWW-UZLIW3QDReegZSw.mft (raw, json) Hash identifier: lEQxTXxFy306fKrCDK1iDKp2N1mbP2Q0Uqnj3kPgdeQ= Subject key identifier: 79:E8:80:9A:0B:66:0C:25:3B:27:3C:27:26:AA:23:02:60:B0:AD:FE Authority key identifier: 0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C Certificate issuer: /CN=0caa8840e53bb965be5192c85b740345e7a0652c Certificate serial: 019B2174BCA1CEE8FAE45CAFF62C924961E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft Manifest number: 0D4E Signing time: Mon 15 Dec 2025 10:00:57 +0000 Manifest this update: Mon 15 Dec 2025 10:00:57 +0000 Manifest next update: Tue 16 Dec 2025 10:00:57 +0000 Files and hashes: 1: 6a6m2sY5irDHLsl4ebhsVtwBNoA.roa (hash: CJz/QYXYByZR8HyEy/tvD2Zb/IQMDG9xzZSpgVMTt6I=) 2: DKqIQOU7uWW-UZLIW3QDReegZSw.crl (hash: ACS+QMe3iwmuIHzaCxdvzZGbHYPIfomViuA44jVSg8Y=) 3: VBefpoqrDUHQSpoj27BSrozRznM.roa (hash: agBfgG2iYmaXn7ObPl+WmZUGarHOkDC9u5AsUTrfJ94=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:74:bc:a1:ce:e8:fa:e4:5c:af:f6:2c:92:49:61:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0caa8840e53bb965be5192c85b740345e7a0652c Validity Not Before: Dec 15 10:00:57 2025 GMT Not After : Dec 16 10:00:57 2025 GMT Subject: CN=79e8809a0b660c253b273c2726aa230260b0adfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:af:24:c3:a3:86:4b:97:00:52:74:8d:05:12: ef:f5:f3:51:df:8f:61:cb:cd:bf:db:c1:14:2f:2b: 98:42:a1:90:4d:57:8b:60:d6:b0:67:c1:1a:76:08: e0:89:f6:7d:5f:52:21:23:a0:7d:ed:a2:03:a1:83: 8f:bc:5c:60:63:c2:de:71:1b:9c:f1:36:7f:aa:7b: 07:56:4d:60:d7:6e:cb:f0:e2:7c:50:6d:2e:21:7f: e0:bc:46:1a:1e:dd:3c:43:25:1b:4f:fc:a0:42:a4: 06:73:f0:23:07:7e:c8:ec:11:35:cf:37:e1:16:6d: 1e:82:da:b3:bb:f6:0e:ea:b2:0c:79:78:99:87:8b: f2:ec:38:fc:8f:23:1a:62:bc:03:46:e0:38:ae:7c: d4:13:21:b8:c8:3f:fd:3b:bf:bd:d6:41:9a:03:35: 2a:d2:e3:79:72:dd:93:d8:48:e8:09:0c:92:40:a2: a0:71:63:e8:90:11:fc:0a:5c:9a:0c:9e:90:66:1c: 07:71:c1:8f:63:d7:03:11:73:46:76:c9:8d:ee:f4: 28:b5:83:b8:18:70:cf:6b:3f:44:88:39:d3:5b:b9: 3d:ff:00:fc:b8:a1:31:16:f9:e9:8f:0b:1c:79:3b: 9b:65:9f:36:83:94:be:1a:76:a5:1a:23:fc:61:a4: 73:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:E8:80:9A:0B:66:0C:25:3B:27:3C:27:26:AA:23:02:60:B0:AD:FE X509v3 Authority Key Identifier: keyid:0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:19:4a:23:2b:6f:fa:c2:58:d0:1b:50:75:9f:4a:26:f6:c1: 51:c1:aa:d2:57:b7:79:96:b7:b8:81:0e:2b:f5:87:c1:17:cf: 77:e2:45:d2:d9:df:fa:ee:7c:e5:52:9c:18:74:cd:bc:72:96: c9:2c:db:6c:3d:80:f2:bd:7a:3b:90:7f:2c:85:a9:56:31:93: 69:99:21:b8:f3:ee:c4:13:51:dd:85:c8:ba:4b:5b:3f:0f:06: 40:1f:9f:cd:d9:df:61:4f:47:62:85:e6:14:cc:8f:70:e4:ea: 36:b8:93:c2:67:21:74:07:c5:09:af:45:7b:cd:48:73:a4:a8: c7:a8:54:4a:51:a8:8f:fa:44:7a:8a:d4:98:43:0f:3e:c5:27: 3d:da:91:01:76:9e:4c:7c:72:db:e8:e5:fb:16:98:30:7e:01: 9a:5b:fa:5e:17:ea:f5:87:0a:13:58:29:21:b0:ef:ef:e4:fc: a1:d1:af:9a:b1:3c:aa:43:a4:f6:fb:dc:54:7a:39:df:cb:72: c3:1c:17:8e:4b:28:9f:26:33:36:5a:fd:d0:68:5f:39:f9:04: 1c:4e:2f:e1:39:46:2c:47:d3:24:06:7a:0c:1f:ae:de:a6:91: 5e:fa:72:57:94:b7:77:7a:5d:72:cf:c6:b2:ae:b9:eb:34:c9: 77:cf:bc:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdLyhzuj65Fyv9iySSWHlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjYWE4ODQwZTUzYmI5NjViZTUxOTJjODViNzQwMzQ1ZTdh MDY1MmMwHhcNMjUxMjE1MTAwMDU3WhcNMjUxMjE2MTAwMDU3WjAzMTEwLwYDVQQD Eyg3OWU4ODA5YTBiNjYwYzI1M2IyNzNjMjcyNmFhMjMwMjYwYjBhZGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu68kw6OGS5cAUnSNBRLv9fNR349h y82/28EULyuYQqGQTVeLYNawZ8EadgjgifZ9X1IhI6B97aIDoYOPvFxgY8LecRuc 8TZ/qnsHVk1g127L8OJ8UG0uIX/gvEYaHt08QyUbT/ygQqQGc/AjB37I7BE1zzfh Fm0egtqzu/YO6rIMeXiZh4vy7Dj8jyMaYrwDRuA4rnzUEyG4yD/9O7+91kGaAzUq 0uN5ct2T2EjoCQySQKKgcWPokBH8ClyaDJ6QZhwHccGPY9cDEXNGdsmN7vQotYO4 GHDPaz9EiDnTW7k9/wD8uKExFvnpjwsceTubZZ82g5S+GnalGiP8YaRziwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHnogJoLZgwlOyc8JyaqIwJgsK3+MB8GA1UdIwQY MBaAFAyqiEDlO7llvlGSyFt0A0XnoGUsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREtxSVFPVTd1V1ctVVpMSVczUURSZWVnWlN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9jNjdjM2UtNDVjNi00YzgxLTk3Mzgt YzQ0ZGRmZmE2OWFiLzEvREtxSVFPVTd1V1ctVVpMSVczUURSZWVnWlN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9jNjdjM2UtNDVjNi00YzgxLTk3MzgtYzQ0ZGRmZmE2OWFi LzEvREtxSVFPVTd1V1ctVVpMSVczUURSZWVnWlN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYBlKIytv +sJY0BtQdZ9KJvbBUcGq0le3eZa3uIEOK/WHwRfPd+JF0tnf+u585VKcGHTNvHKW ySzbbD2A8r16O5B/LIWpVjGTaZkhuPPuxBNR3YXIuktbPw8GQB+fzdnfYU9HYoXm FMyPcOTqNriTwmchdAfFCa9Fe81Ic6Sox6hUSlGoj/pEeorUmEMPPsUnPdqRAXae THxy2+jl+xaYMH4Bmlv6Xhfq9YcKE1gpIbDv7+T8odGvmrE8qkOk9vvcVHo538ty wxwXjksonyYzNlr90GhfOfkEHE4v4TlGLEfTJAZ6DB+u3qaRXvpyV5S3d3pdcs/G sq656zTJd8+8MA== -----END CERTIFICATE-----Generated at Mon Dec 15 20:20:37 2025 by rpki-client