This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft File: dkkoqXvpVTdwE9OCxilA6VDdISs.mft (raw, json) Hash identifier: ZsQ640Wq7vkGF7cP2sTJqlDH7DqYOW1YpEovpJSImOA= Subject key identifier: 84:10:0E:8C:C7:66:3D:0B:78:FE:E1:5C:BE:CE:DA:76:C9:C3:5F:97 Authority key identifier: 76:49:28:A9:7B:E9:55:37:70:13:D3:82:C6:29:40:E9:50:DD:21:2B Certificate issuer: /CN=764928a97be955377013d382c62940e950dd212b Certificate serial: 019AF2768307D3DEF06EF9C9A1CC8FBF4019 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft Manifest number: 123D Signing time: Sat 06 Dec 2025 07:00:44 +0000 Manifest this update: Sat 06 Dec 2025 07:00:44 +0000 Manifest next update: Sun 07 Dec 2025 07:00:44 +0000 Files and hashes: 1: Boq3yDWVANB56Y7DdPt7_dRYcLU.roa (hash: BStaHVeGVGavPOImRXWb924Lp/RocgyKTH8C5s1+NHU=) 2: FcY_QKqq9c1xfH6rECvdKY1Kcu8.roa (hash: Ju8mYMjl2LUkVKbzqtiMt1rTH2nwPvl1R7kMAYH3RPc=) 3: IeAOnvbZbd0JxF7ran2IKsJXZmY.roa (hash: a22ZpV1PraD9QyqLIF4t6hPyMcIcLe+GxaE9NUf90hg=) 4: bHETVGvggsNe0a6WvXBELNSVwc4.roa (hash: ghxBEvOC//7xSO8+ytfjs+nd2Bn+dpSbYc1UKClOMyw=) 5: dkkoqXvpVTdwE9OCxilA6VDdISs.crl (hash: ybocUhmoWcuWc9pCXuXFkWIsU8fHom2Vziuz7nBTS6M=) 6: qJx6x_1Si80i7zgxLEJabwqPPdM.roa (hash: VSNbxo3HViYCFTqzC6xV6bqWlabz9RKcmoeLCtu/aVM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.crl rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:83:07:d3:de:f0:6e:f9:c9:a1:cc:8f:bf:40:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=764928a97be955377013d382c62940e950dd212b Validity Not Before: Dec 6 07:00:44 2025 GMT Not After : Dec 7 07:00:44 2025 GMT Subject: CN=84100e8cc7663d0b78fee15cbeceda76c9c35f97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3b:39:9d:ac:b9:1c:3b:25:4b:0a:c7:68:3a: a7:85:13:9f:e7:b1:3d:8e:ee:fd:da:2c:64:93:f7: 6b:57:b8:02:f0:a2:b1:80:74:f7:da:6b:39:3d:63: 3b:b6:e8:02:7d:a1:5b:37:43:98:76:21:0a:7c:ad: 5f:c8:09:a7:4c:84:80:b6:12:25:03:4e:67:ca:0b: d4:f0:4d:25:ee:e1:de:b7:3b:71:32:a2:92:87:e0: e4:3d:e7:47:f9:a4:41:30:fa:2a:3b:d2:ef:3c:f0: ae:13:e8:7a:bf:36:7e:3a:1f:4c:b4:50:8e:e4:5b: 46:63:60:e2:84:e1:fd:7c:e7:c0:a0:ff:1c:39:03: f7:90:dc:2d:be:57:32:10:03:0b:2c:20:63:aa:5b: a7:49:65:e3:58:b3:79:11:d8:bd:1a:8f:92:5c:11: 3b:74:86:3e:68:2e:fa:ac:72:42:bf:69:6b:97:45: 17:55:06:ce:64:99:c8:7a:b0:83:b6:58:c5:42:fb: fb:90:5b:68:13:87:a0:7a:73:e7:74:99:3d:9e:c5: 11:90:00:c5:0f:38:9d:41:08:f4:21:02:55:1b:ac: 87:3b:c3:ff:fb:60:88:19:6b:ad:24:c5:2a:0d:3a: 2c:83:79:5d:9e:23:42:71:c8:a2:a7:ee:2f:f1:dd: 51:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:10:0E:8C:C7:66:3D:0B:78:FE:E1:5C:BE:CE:DA:76:C9:C3:5F:97 X509v3 Authority Key Identifier: keyid:76:49:28:A9:7B:E9:55:37:70:13:D3:82:C6:29:40:E9:50:DD:21:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:5f:8a:8d:55:6a:52:90:7c:a3:d8:2a:09:85:c9:a2:3d:6f: 8f:14:03:57:31:31:0f:62:5f:72:b8:69:3d:84:68:57:ba:a0: a4:a0:27:2d:f6:e0:96:c3:14:a9:9a:ac:d6:3e:f7:0f:8c:0e: a5:fd:e9:e6:32:a7:36:db:f2:37:cb:43:a8:0f:54:56:54:89: c6:8c:a9:5f:e3:40:56:19:58:38:a1:d8:51:55:3b:20:0e:a9: de:0d:ce:24:a4:b4:62:dd:cd:f8:67:6f:e8:0a:14:49:c7:94: f1:10:51:73:ef:5d:e9:56:8d:e4:d0:0f:20:2b:dc:e6:54:1a: 5d:a8:ce:f0:dd:13:a4:2d:36:80:db:c3:f6:12:ff:1c:d3:96: 46:97:e9:be:ad:3b:e1:02:4a:ba:55:3d:a9:f6:8c:f8:c6:47: bc:66:ce:19:75:f0:c2:81:a2:c9:8a:bb:58:e5:3f:82:dc:33: 03:fb:c9:d9:7f:02:84:df:6b:a4:72:09:dd:93:4c:81:c9:7c: 6d:65:3b:8a:98:ae:23:62:bf:48:a3:b3:bf:26:fd:74:ef:53: b4:6b:64:94:82:57:ba:55:80:45:fb:52:5a:c1:7d:35:77:21: 83:92:4d:37:99:13:84:f9:9f:82:bb:d4:65:0b:db:dc:a0:2c: fa:ec:88:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydoMH097wbvnJocyPv0AZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NDkyOGE5N2JlOTU1Mzc3MDEzZDM4MmM2Mjk0MGU5NTBk ZDIxMmIwHhcNMjUxMjA2MDcwMDQ0WhcNMjUxMjA3MDcwMDQ0WjAzMTEwLwYDVQQD Eyg4NDEwMGU4Y2M3NjYzZDBiNzhmZWUxNWNiZWNlZGE3NmM5YzM1Zjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDs5nay5HDslSwrHaDqnhROf57E9 ju792ixkk/drV7gC8KKxgHT32ms5PWM7tugCfaFbN0OYdiEKfK1fyAmnTISAthIl A05nygvU8E0l7uHetztxMqKSh+DkPedH+aRBMPoqO9LvPPCuE+h6vzZ+Oh9MtFCO 5FtGY2DihOH9fOfAoP8cOQP3kNwtvlcyEAMLLCBjqlunSWXjWLN5Edi9Go+SXBE7 dIY+aC76rHJCv2lrl0UXVQbOZJnIerCDtljFQvv7kFtoE4egenPndJk9nsURkADF DzidQQj0IQJVG6yHO8P/+2CIGWutJMUqDTosg3ldniNCcciip+4v8d1RYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIQQDozHZj0LeP7hXL7O2nbJw1+XMB8GA1UdIwQY MBaAFHZJKKl76VU3cBPTgsYpQOlQ3SErMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGtrb3FYdnBWVGR3RTlPQ3hpbEE2VkRkSVNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My85NTM2ZjUtZjU2Ni00YzgwLWE3ZDkt YmMxNTIyNzg5ZDNiLzEvZGtrb3FYdnBWVGR3RTlPQ3hpbEE2VkRkSVNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My85NTM2ZjUtZjU2Ni00YzgwLWE3ZDktYmMxNTIyNzg5ZDNi LzEvZGtrb3FYdnBWVGR3RTlPQ3hpbEE2VkRkSVNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbl+KjVVq UpB8o9gqCYXJoj1vjxQDVzExD2JfcrhpPYRoV7qgpKAnLfbglsMUqZqs1j73D4wO pf3p5jKnNtvyN8tDqA9UVlSJxoypX+NAVhlYOKHYUVU7IA6p3g3OJKS0Yt3N+Gdv 6AoUSceU8RBRc+9d6VaN5NAPICvc5lQaXajO8N0TpC02gNvD9hL/HNOWRpfpvq07 4QJKulU9qfaM+MZHvGbOGXXwwoGiyYq7WOU/gtwzA/vJ2X8ChN9rpHIJ3ZNMgcl8 bWU7ipiuI2K/SKOzvyb9dO9TtGtklIJXulWARftSWsF9NXchg5JNN5kThPmfgrvU ZQvb3KAs+uyIPQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:12:19 2025 by rpki-client