This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft File: DXQT3PU3N0pw2qMf2amf0psDMjk.mft (raw, json) Hash identifier: Pbbivk675mGAH0rHangzq9yAgKFQ+ERBc5K8Spbw6tE= Subject key identifier: 0D:89:64:AC:F1:14:AE:0B:19:C6:88:99:B3:E1:D4:47:FC:D6:F4:3A Authority key identifier: 0D:74:13:DC:F5:37:37:4A:70:DA:A3:1F:D9:A9:9F:D2:9B:03:32:39 Certificate issuer: /CN=0d7413dcf537374a70daa31fd9a99fd29b033239 Certificate serial: 019AF2ADE13DF1DFF0A33970CDC2F3A77765 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft Manifest number: 1527 Signing time: Sat 06 Dec 2025 08:01:12 +0000 Manifest this update: Sat 06 Dec 2025 08:01:12 +0000 Manifest next update: Sun 07 Dec 2025 08:01:12 +0000 Files and hashes: 1: DXQT3PU3N0pw2qMf2amf0psDMjk.crl (hash: chKymLarYFa6kcmcIpjHsvR3tRST+8YmzMSUkY55/rg=) 2: ka4zet-SkUrSnEvI5_4fHR-JIQI.roa (hash: EBw/ap+q2JTBNlcLQGiKoKAynchkYNGQi71a58xmflM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.crl rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:e1:3d:f1:df:f0:a3:39:70:cd:c2:f3:a7:77:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d7413dcf537374a70daa31fd9a99fd29b033239 Validity Not Before: Dec 6 08:01:12 2025 GMT Not After : Dec 7 08:01:12 2025 GMT Subject: CN=0d8964acf114ae0b19c68899b3e1d447fcd6f43a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:78:06:99:1d:b0:e3:3c:37:24:9c:06:ee:2e: a7:b7:db:0b:59:16:d1:51:9f:63:2c:7e:92:26:c6: bf:52:a1:80:d9:a9:88:f3:c4:57:6b:bb:a4:21:0e: 2a:9a:79:b5:f8:0e:78:c9:d6:d5:cf:8a:20:fa:f8: 71:e3:d3:3c:68:64:2b:19:46:8d:53:e7:fd:b7:6f: 60:63:5f:32:f9:28:2c:fe:7e:08:c4:b8:ab:50:ea: 57:d5:95:71:f7:91:5c:20:ae:80:a4:e9:14:60:98: 9b:bc:c8:d9:07:2c:f5:81:a3:22:10:b4:bf:a4:e0: d3:d0:bf:c0:7e:16:7c:bc:39:e2:8d:69:bb:87:ac: c2:35:62:83:32:ce:90:ab:f0:28:8d:ef:b7:c7:83: 53:f3:c8:60:f5:1f:86:b2:a7:47:1b:a2:93:c5:ac: 92:15:ad:0e:06:6d:c3:a2:53:01:67:4b:5c:cc:3d: 2f:d8:d0:2d:c1:67:87:e6:1a:bb:7c:25:07:36:13: 99:ba:80:92:54:58:c4:5e:fd:22:80:fd:e8:ad:92: 32:21:de:90:16:d5:49:f7:13:8b:ef:2d:c3:27:53: f5:f4:e5:61:f8:5d:b0:09:85:9b:a8:c7:a4:8f:5f: 4b:67:0c:54:c2:2b:97:a3:19:1d:68:e9:65:3e:1e: 92:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:89:64:AC:F1:14:AE:0B:19:C6:88:99:B3:E1:D4:47:FC:D6:F4:3A X509v3 Authority Key Identifier: keyid:0D:74:13:DC:F5:37:37:4A:70:DA:A3:1F:D9:A9:9F:D2:9B:03:32:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:f9:8f:56:c5:f0:02:96:48:f6:d4:bc:64:cb:fc:75:31:4b: c8:d7:b1:77:b9:fb:39:a5:82:f5:93:75:22:f1:e4:7a:9d:63: 2b:62:5e:94:4c:4c:de:4a:e6:dd:40:0c:dc:af:8c:78:46:83: d5:f9:f3:5f:4a:53:d5:b1:cc:d5:54:21:2d:99:0a:b9:47:aa: 1b:0f:7e:29:b5:d6:31:40:42:0e:13:01:0a:6d:8e:9a:17:e0: a7:42:e8:bf:91:8f:62:75:dc:37:77:5d:89:da:af:98:11:4b: 26:4c:b4:72:27:74:8c:0c:95:fa:d8:c1:ee:54:9b:81:3d:c0: 19:1f:49:f3:c6:38:6a:d5:9e:b7:a7:38:6d:ff:ac:20:a0:96: 41:ed:b6:01:36:66:f6:4e:5f:d3:c1:13:f7:b3:67:76:d4:42: 14:df:56:c4:04:8a:d8:63:0b:84:21:cf:fb:c2:02:4b:0a:9f: 43:99:aa:36:c8:bb:38:5b:73:14:dd:bf:bb:ab:52:96:71:4f: db:e1:c1:36:fb:69:63:71:68:26:88:18:5f:93:1b:ea:6e:4e: 7f:4c:6f:ce:36:54:73:98:24:5d:7f:cd:b8:2a:03:dc:7e:da: d8:c8:f0:54:b9:6b:93:77:31:61:df:c8:a7:c1:32:75:ff:90: cc:0b:2f:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryreE98d/wozlwzcLzp3dlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzQxM2RjZjUzNzM3NGE3MGRhYTMxZmQ5YTk5ZmQyOWIw MzMyMzkwHhcNMjUxMjA2MDgwMTEyWhcNMjUxMjA3MDgwMTEyWjAzMTEwLwYDVQQD EygwZDg5NjRhY2YxMTRhZTBiMTljNjg4OTliM2UxZDQ0N2ZjZDZmNDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXgGmR2w4zw3JJwG7i6nt9sLWRbR UZ9jLH6SJsa/UqGA2amI88RXa7ukIQ4qmnm1+A54ydbVz4og+vhx49M8aGQrGUaN U+f9t29gY18y+Sgs/n4IxLirUOpX1ZVx95FcIK6ApOkUYJibvMjZByz1gaMiELS/ pODT0L/AfhZ8vDnijWm7h6zCNWKDMs6Qq/Aoje+3x4NT88hg9R+GsqdHG6KTxayS Fa0OBm3DolMBZ0tczD0v2NAtwWeH5hq7fCUHNhOZuoCSVFjEXv0igP3orZIyId6Q FtVJ9xOL7y3DJ1P19OVh+F2wCYWbqMekj19LZwxUwiuXoxkdaOllPh6SkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA2JZKzxFK4LGcaImbPh1Ef81vQ6MB8GA1UdIwQY MBaAFA10E9z1NzdKcNqjH9mpn9KbAzI5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhRVDNQVTNOMHB3MnFNZjJhbWYwcHNETWprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9lMzI2YjktNzk1Zi00YTBiLTllZmQt ZTY5YmUzOTViMGY3LzEvRFhRVDNQVTNOMHB3MnFNZjJhbWYwcHNETWprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9lMzI2YjktNzk1Zi00YTBiLTllZmQtZTY5YmUzOTViMGY3 LzEvRFhRVDNQVTNOMHB3MnFNZjJhbWYwcHNETWprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbvmPVsXw ApZI9tS8ZMv8dTFLyNexd7n7OaWC9ZN1IvHkep1jK2JelExM3krm3UAM3K+MeEaD 1fnzX0pT1bHM1VQhLZkKuUeqGw9+KbXWMUBCDhMBCm2Omhfgp0Lov5GPYnXcN3dd idqvmBFLJky0cid0jAyV+tjB7lSbgT3AGR9J88Y4atWet6c4bf+sIKCWQe22ATZm 9k5f08ET97NndtRCFN9WxASK2GMLhCHP+8ICSwqfQ5mqNsi7OFtzFN2/u6tSlnFP 2+HBNvtpY3FoJogYX5Mb6m5Of0xvzjZUc5gkXX/NuCoD3H7a2MjwVLlrk3cxYd/I p8Eydf+QzAsvww== -----END CERTIFICATE-----Generated at Sat Dec 6 11:08:34 2025 by rpki-client