This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft File: DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft (raw, json) Hash identifier: 7QzfjVZPWNL5gTdw5S3lc47yf6dCCY7VMqiuRpksSbQ= Subject key identifier: 45:E4:96:F2:90:CB:48:D8:62:FB:EB:AB:BF:E3:2F:E3:41:1D:02:0A Authority key identifier: 0C:A4:BB:69:B3:F5:68:05:14:0E:FA:E2:43:E4:DD:4B:36:C0:DD:1B Certificate issuer: /CN=0ca4bb69b3f56805140efae243e4dd4b36c0dd1b Certificate serial: 019AF1644EBD196F63E42E2BE6BB0C522A6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 02:01:14 +0000 Manifest this update: Sat 06 Dec 2025 02:01:14 +0000 Manifest next update: Sun 07 Dec 2025 02:01:14 +0000 Files and hashes: 1: 1cBDORiVvrRChAcdm2hc6y292d0.roa (hash: XIDQHNSLIfpf1kaFUtLQNCl28oalABx/0LdYZxGeMgk=) 2: DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl (hash: wmGUaq2ynhygBF0oMKRmhRnt4ieDdPzxkkNfRpwDM1Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:4e:bd:19:6f:63:e4:2e:2b:e6:bb:0c:52:2a:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ca4bb69b3f56805140efae243e4dd4b36c0dd1b Validity Not Before: Dec 6 02:01:14 2025 GMT Not After : Dec 7 02:01:14 2025 GMT Subject: CN=45e496f290cb48d862fbebabbfe32fe3411d020a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d1:1a:0d:26:fa:1f:c7:d4:15:37:8c:c6:8a: 7e:86:89:9f:69:a7:81:3f:82:c4:11:58:ee:dc:b0: 60:33:96:75:52:8d:96:4d:e4:b7:a1:16:15:1c:64: f5:f5:46:17:3c:1e:6b:c1:d1:ab:85:8a:c6:e8:19: 2a:48:b7:72:d6:81:22:d8:07:ea:51:1f:d9:4a:3a: 62:0d:7f:ae:36:f6:51:e3:81:3a:0b:78:ac:a1:54: 1e:47:45:e7:b9:9f:53:30:5c:ff:87:df:21:f4:d5: 1a:66:a1:0f:2d:62:1b:38:a5:cb:4e:de:ae:3a:ce: 47:67:79:32:ae:0a:cf:df:25:34:7b:dd:e8:8b:17: ac:b5:ad:45:0f:a2:35:09:3e:a6:47:ef:8b:f7:da: bc:72:f8:04:ef:d8:34:5b:b0:88:09:b0:db:3b:aa: 6e:b3:16:f6:40:ab:37:71:37:3a:c3:4c:e3:d1:65: dc:ba:35:c5:ee:e6:23:30:63:26:a3:e4:30:07:25: d2:10:87:7d:f6:92:e6:03:f3:a0:9b:01:a8:34:f0: 37:1c:6f:1e:39:9f:73:04:e0:e4:6d:63:70:30:cd: 12:1e:71:77:8b:43:9e:d7:7c:25:63:04:87:5b:d1: 04:64:0f:04:83:3f:f7:6c:d3:68:78:9f:f8:fd:91: de:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:E4:96:F2:90:CB:48:D8:62:FB:EB:AB:BF:E3:2F:E3:41:1D:02:0A X509v3 Authority Key Identifier: keyid:0C:A4:BB:69:B3:F5:68:05:14:0E:FA:E2:43:E4:DD:4B:36:C0:DD:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:ed:53:0e:4a:bf:93:19:f1:d4:41:b6:2d:08:5f:fe:1a:0a: 1a:35:fc:2f:2d:e4:e5:96:0a:27:aa:d6:95:40:cb:87:f8:82: 07:d1:16:5e:e5:40:50:bc:c9:a1:3d:56:ed:38:3c:a8:1c:ba: 90:50:e1:f2:8c:32:1f:de:5e:80:b6:df:33:78:50:66:6b:44: 4e:63:6d:8c:11:28:f5:f1:d3:14:96:39:86:2c:34:5d:f0:77: 11:1a:a4:90:d0:14:12:7d:ac:eb:08:4c:c8:18:4b:ff:d0:1d: 41:5f:b6:18:e8:22:7c:b9:85:d8:30:63:e7:bc:f4:5f:98:44: 62:32:d5:45:0e:c0:f0:a4:7c:07:0a:15:8b:0c:d0:e7:07:ac: a6:c2:6e:d6:8b:96:7d:1f:e1:9b:be:7a:7a:46:c8:a2:65:55: 3c:9f:eb:81:6d:3e:a4:1b:83:0d:f4:72:a0:0c:46:fc:28:de: 1d:41:56:22:93:24:6a:f7:91:83:ac:c9:fb:0a:59:86:db:c6: 9f:f3:bc:4c:be:d9:5f:1a:95:4d:3e:7e:5c:27:c8:e2:64:3f: ea:25:23:83:f1:ca:8c:21:e6:56:1a:59:df:e0:5e:69:13:ce: 02:1b:34:39:49:50:97:bd:b1:1a:64:ca:e5:3e:0f:14:89:81: df:67:1f:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZE69GW9j5C4r5rsMUipvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjYTRiYjY5YjNmNTY4MDUxNDBlZmFlMjQzZTRkZDRiMzZj MGRkMWIwHhcNMjUxMjA2MDIwMTE0WhcNMjUxMjA3MDIwMTE0WjAzMTEwLwYDVQQD Eyg0NWU0OTZmMjkwY2I0OGQ4NjJmYmViYWJiZmUzMmZlMzQxMWQwMjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutEaDSb6H8fUFTeMxop+homfaaeB P4LEEVju3LBgM5Z1Uo2WTeS3oRYVHGT19UYXPB5rwdGrhYrG6BkqSLdy1oEi2Afq UR/ZSjpiDX+uNvZR44E6C3isoVQeR0XnuZ9TMFz/h98h9NUaZqEPLWIbOKXLTt6u Os5HZ3kyrgrP3yU0e93oixesta1FD6I1CT6mR++L99q8cvgE79g0W7CICbDbO6pu sxb2QKs3cTc6w0zj0WXcujXF7uYjMGMmo+QwByXSEId99pLmA/OgmwGoNPA3HG8e OZ9zBODkbWNwMM0SHnF3i0Oe13wlYwSHW9EEZA8Egz/3bNNoeJ/4/ZHeUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEXklvKQy0jYYvvrq7/jL+NBHQIKMB8GA1UdIwQY MBaAFAyku2mz9WgFFA764kPk3Us2wN0bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREtTN2FiUDFhQVVVRHZyaVEtVGRTemJBM1JzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC82ODZjZmQtYTAyYy00MDczLTk5ZGQt ZDdmNDVlMGE3NzM2LzEvREtTN2FiUDFhQVVVRHZyaVEtVGRTemJBM1JzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC82ODZjZmQtYTAyYy00MDczLTk5ZGQtZDdmNDVlMGE3NzM2 LzEvREtTN2FiUDFhQVVVRHZyaVEtVGRTemJBM1JzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo+1TDkq/ kxnx1EG2LQhf/hoKGjX8Ly3k5ZYKJ6rWlUDLh/iCB9EWXuVAULzJoT1W7Tg8qBy6 kFDh8owyH95egLbfM3hQZmtETmNtjBEo9fHTFJY5hiw0XfB3ERqkkNAUEn2s6whM yBhL/9AdQV+2GOgifLmF2DBj57z0X5hEYjLVRQ7A8KR8BwoViwzQ5wespsJu1ouW fR/hm756ekbIomVVPJ/rgW0+pBuDDfRyoAxG/CjeHUFWIpMkaveRg6zJ+wpZhtvG n/O8TL7ZXxqVTT5+XCfI4mQ/6iUjg/HKjCHmVhpZ3+BeaRPOAhs0OUlQl72xGmTK 5T4PFImB32cfvA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:07:23 2025 by rpki-client