This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.mft File: DuPU2BDyR3hBqLhVk7jzDors1Ak.mft (raw, json) Hash identifier: OsICOWHYqntDWgxmsRbytlVWul/NGhkrm+FwVdo3WGA= Subject key identifier: 67:8D:EF:1B:86:28:9D:AC:08:D4:30:5D:69:2B:1D:6D:30:61:35:62 Authority key identifier: 0E:E3:D4:D8:10:F2:47:78:41:A8:B8:55:93:B8:F3:0E:8A:EC:D4:09 Certificate issuer: /CN=0ee3d4d810f2477841a8b85593b8f30e8aecd409 Certificate serial: 019AF578619510FC4F12A1166370A98BD915 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DuPU2BDyR3hBqLhVk7jzDors1Ak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 21:01:38 +0000 Manifest this update: Sat 06 Dec 2025 21:01:38 +0000 Manifest next update: Sun 07 Dec 2025 21:01:38 +0000 Files and hashes: 1: DuPU2BDyR3hBqLhVk7jzDors1Ak.crl (hash: ZcB2WqE74LRiuKfdeCKRMdfHVRzemOBLIW5pcFz2YIY=) 2: kT96Syix82Ksegk49TAUeSUGMVc.roa (hash: d9BAb8ybDMu+8NvAhemfJFOhiARZSFEf5iHfB6YfEWg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.crl rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.mft rsync://rpki.ripe.net/repository/DEFAULT/DuPU2BDyR3hBqLhVk7jzDors1Ak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:61:95:10:fc:4f:12:a1:16:63:70:a9:8b:d9:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ee3d4d810f2477841a8b85593b8f30e8aecd409 Validity Not Before: Dec 6 21:01:38 2025 GMT Not After : Dec 7 21:01:38 2025 GMT Subject: CN=678def1b86289dac08d4305d692b1d6d30613562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:43:e7:18:79:70:10:72:50:2c:a9:0e:a7:93: 14:dd:7a:2d:31:62:85:7c:06:38:26:ac:fe:70:b0: 57:d4:50:7a:28:82:1e:fd:ce:de:b2:66:90:db:9c: 4b:3c:15:74:f2:58:ea:47:bc:38:38:c6:5c:d1:62: 37:5e:bf:05:af:50:da:f0:17:65:65:0f:22:ed:f8: 20:c0:14:e4:c5:09:14:1b:58:b3:c1:74:4f:56:c4: 94:ce:f0:79:5f:e0:7a:a8:87:05:c2:14:12:3d:26: 47:4b:d1:b6:10:62:b9:f5:74:23:f6:a7:c8:93:b3: cd:93:88:ac:5c:a1:1c:f6:bb:1b:b8:f5:63:d4:c3: bd:c7:66:44:f2:99:e6:ee:0a:9e:e1:6d:65:32:80: 62:ea:5f:82:67:f9:fd:a1:bd:d2:e0:05:7c:75:b9: f3:18:0a:26:2e:08:f9:a4:47:e3:d0:0a:63:72:aa: 58:9a:8f:91:6d:d2:de:17:72:8c:02:30:b2:a3:06: 3d:33:71:c6:78:09:5d:9f:37:10:70:ef:39:0a:04: c5:87:eb:5b:cd:a1:a1:95:dc:7d:32:36:e7:c2:48: 42:bb:db:be:43:81:17:eb:75:0f:97:9f:3b:78:53: 00:2b:ce:a1:49:dd:38:f3:46:a4:92:20:72:7e:fc: 45:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:8D:EF:1B:86:28:9D:AC:08:D4:30:5D:69:2B:1D:6D:30:61:35:62 X509v3 Authority Key Identifier: keyid:0E:E3:D4:D8:10:F2:47:78:41:A8:B8:55:93:B8:F3:0E:8A:EC:D4:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DuPU2BDyR3hBqLhVk7jzDors1Ak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:ca:d8:9d:25:a8:a0:d4:9e:b0:09:b4:ff:a9:7a:af:86:2f: 99:a3:41:08:7e:03:3e:fb:17:50:ba:6d:f5:f9:17:c0:d3:1d: b2:b1:68:e5:88:9a:e3:56:38:b9:d0:06:89:08:47:f1:9c:56: d8:0a:cc:06:46:5c:bd:16:23:5f:7e:ae:e4:aa:2a:16:ea:ab: 63:f7:71:c8:10:4b:f5:da:a1:6d:ff:90:de:d3:76:a3:f7:93: 38:e7:b7:d5:c1:3b:88:7c:d2:d0:88:c5:10:23:dc:d1:31:68: 3e:f9:41:df:26:dd:d3:2d:74:f2:6e:82:39:0c:d8:b1:df:fa: 59:d4:37:b8:58:a1:1a:02:dd:35:0c:49:dd:dd:73:0d:a8:8d: e9:b2:92:52:07:27:cd:82:fb:54:bc:d9:df:c8:08:3c:00:07: b6:57:71:e3:75:04:db:3d:99:d9:0b:e6:62:4d:71:6d:22:c7: e7:61:87:5e:47:9c:78:cc:67:04:1f:16:3b:a5:5d:91:4e:6d: 37:73:01:94:92:84:11:38:a4:80:9e:e9:f2:87:30:78:84:38: e2:24:d4:e7:f5:1e:14:a9:20:b7:98:77:10:37:17:cf:dd:e8: fb:09:1c:9c:a8:c3:a9:9c:ca:c8:74:d8:d7:4c:6d:97:76:15: a7:05:ed:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eGGVEPxPEqEWY3Cpi9kVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlZTNkNGQ4MTBmMjQ3Nzg0MWE4Yjg1NTkzYjhmMzBlOGFl Y2Q0MDkwHhcNMjUxMjA2MjEwMTM4WhcNMjUxMjA3MjEwMTM4WjAzMTEwLwYDVQQD Eyg2NzhkZWYxYjg2Mjg5ZGFjMDhkNDMwNWQ2OTJiMWQ2ZDMwNjEzNTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kPnGHlwEHJQLKkOp5MU3XotMWKF fAY4Jqz+cLBX1FB6KIIe/c7esmaQ25xLPBV08ljqR7w4OMZc0WI3Xr8Fr1Da8Bdl ZQ8i7fggwBTkxQkUG1izwXRPVsSUzvB5X+B6qIcFwhQSPSZHS9G2EGK59XQj9qfI k7PNk4isXKEc9rsbuPVj1MO9x2ZE8pnm7gqe4W1lMoBi6l+CZ/n9ob3S4AV8dbnz GAomLgj5pEfj0ApjcqpYmo+RbdLeF3KMAjCyowY9M3HGeAldnzcQcO85CgTFh+tb zaGhldx9MjbnwkhCu9u+Q4EX63UPl587eFMAK86hSd0480akkiByfvxFxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGeN7xuGKJ2sCNQwXWkrHW0wYTViMB8GA1UdIwQY MBaAFA7j1NgQ8kd4Qai4VZO48w6K7NQJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHVQVTJCRHlSM2hCcUxoVms3anpEb3JzMUFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xYmM2ZGItNDU3Ni00ZjFiLTg2NzIt YzMzMjZhZDJjZjhmLzEvRHVQVTJCRHlSM2hCcUxoVms3anpEb3JzMUFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8xYmM2ZGItNDU3Ni00ZjFiLTg2NzItYzMzMjZhZDJjZjhm LzEvRHVQVTJCRHlSM2hCcUxoVms3anpEb3JzMUFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVMrYnSWo oNSesAm0/6l6r4YvmaNBCH4DPvsXULpt9fkXwNMdsrFo5Yia41Y4udAGiQhH8ZxW 2ArMBkZcvRYjX36u5KoqFuqrY/dxyBBL9dqhbf+Q3tN2o/eTOOe31cE7iHzS0IjF ECPc0TFoPvlB3ybd0y108m6COQzYsd/6WdQ3uFihGgLdNQxJ3d1zDaiN6bKSUgcn zYL7VLzZ38gIPAAHtldx43UE2z2Z2QvmYk1xbSLH52GHXkeceMxnBB8WO6VdkU5t N3MBlJKEETikgJ7p8ocweIQ44iTU5/UeFKkgt5h3EDcXz93o+wkcnKjDqZzKyHTY 10xtl3YVpwXtmA== -----END CERTIFICATE-----Generated at Sun Dec 7 01:40:42 2025 by rpki-client