This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.mft File: dKR-OmcWCuRmLg68ztepIzzker8.mft (raw, json) Hash identifier: KAPzZbsKtx6OMvqicuPNWOBeEbaoHvJcCDw7z/9kcGE= Subject key identifier: FC:98:C1:83:CA:73:DF:E2:C7:3E:39:67:D3:8C:52:46:C1:75:EF:AB Authority key identifier: 74:A4:7E:3A:67:16:0A:E4:66:2E:0E:BC:CE:D7:A9:23:3C:E4:7A:BF Certificate issuer: /CN=74a47e3a67160ae4662e0ebcced7a9233ce47abf Certificate serial: 019AF19B8ABD33C42AB41DEAF0F7E613C7E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKR-OmcWCuRmLg68ztepIzzker8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.mft Manifest number: 13B4 Signing time: Sat 06 Dec 2025 03:01:33 +0000 Manifest this update: Sat 06 Dec 2025 03:01:33 +0000 Manifest next update: Sun 07 Dec 2025 03:01:33 +0000 Files and hashes: 1: 6S1fN0Slf3Y95btQEfpy__y_tiw.roa (hash: 5FWi2gr8yiM3yt2DtW3oiI0p1G9KyA1KVfzD3/JWlJI=) 2: dKR-OmcWCuRmLg68ztepIzzker8.crl (hash: omsVEf/SnO16HFY3azp5Wg1I0mAQssx1Pe6B28JvXAQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.crl rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.mft rsync://rpki.ripe.net/repository/DEFAULT/dKR-OmcWCuRmLg68ztepIzzker8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:8a:bd:33:c4:2a:b4:1d:ea:f0:f7:e6:13:c7:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74a47e3a67160ae4662e0ebcced7a9233ce47abf Validity Not Before: Dec 6 03:01:33 2025 GMT Not After : Dec 7 03:01:33 2025 GMT Subject: CN=fc98c183ca73dfe2c73e3967d38c5246c175efab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:bb:33:f6:6f:3b:b0:d9:dd:3d:20:7b:7c:cf: 3a:e8:a6:74:8d:2a:c3:36:a3:97:14:0b:3b:8a:30: f3:08:b2:99:6a:34:fa:89:0e:0a:f2:9e:ac:85:7b: 3c:d2:48:9a:b0:64:47:5d:c0:13:1e:6e:83:cc:4e: a4:a7:f0:8c:5c:e8:1e:af:b7:0c:ea:74:a0:32:0d: 8c:91:9c:dd:f2:27:17:bc:37:e3:57:4f:9b:08:d0: 87:b1:99:84:d8:48:39:8e:df:b8:e4:db:20:74:c6: 73:fe:0b:ac:44:47:68:da:58:db:32:53:b8:92:cc: 8d:92:f9:5e:f6:d1:af:52:a9:5a:1b:21:e2:ab:b0: c4:d7:aa:58:9a:49:43:5a:c5:84:f3:65:fa:6b:35: ce:f1:a1:3b:e9:78:b3:d3:b9:d0:ab:21:b4:5c:8f: d9:3c:2c:90:d7:23:9e:8b:da:7c:a8:07:4a:ce:46: 79:57:db:f9:60:c1:84:2a:b2:7c:ae:3a:a5:3f:62: c6:c1:30:fa:22:f4:91:b8:72:04:3a:69:89:99:3c: e2:98:c2:28:92:f0:7d:51:9b:da:01:df:1a:d3:63: 02:d8:8f:4e:52:7b:14:07:f6:4b:2f:0c:59:37:76: c3:d0:17:3a:73:0c:65:30:5b:32:94:24:dc:fd:6c: 6a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:98:C1:83:CA:73:DF:E2:C7:3E:39:67:D3:8C:52:46:C1:75:EF:AB X509v3 Authority Key Identifier: keyid:74:A4:7E:3A:67:16:0A:E4:66:2E:0E:BC:CE:D7:A9:23:3C:E4:7A:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKR-OmcWCuRmLg68ztepIzzker8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:cc:c2:65:17:52:f8:88:6c:57:3f:cf:92:38:a3:75:8e:93: 8d:ab:e2:e0:13:43:c0:ee:4c:c3:fc:f1:3b:90:d8:10:84:fb: c2:f6:2f:71:0f:af:9d:d9:e2:61:51:35:2b:99:0f:3d:ff:48: ff:c0:d9:87:eb:22:39:d9:f2:ae:ae:c5:37:0d:63:50:42:a6: 46:66:de:15:e0:b4:b3:30:94:17:3e:4a:e1:cf:16:20:85:ab: a7:c9:74:6d:11:ac:47:05:5a:6c:d7:09:dd:7b:51:d3:4a:c0: db:94:77:4b:9a:a0:01:78:ca:d1:34:93:09:fd:68:f5:66:12: c8:87:64:b2:5f:03:50:5f:ab:81:71:9a:43:4b:74:eb:52:a3: d8:c1:0f:d8:eb:a0:5c:6e:d7:61:86:b5:43:44:69:df:30:00: fa:dc:a4:69:e2:30:dd:9e:49:ed:3a:ec:b4:c5:77:b4:a0:99: 5b:f8:87:59:50:a6:05:89:61:fa:92:32:8a:47:ee:32:45:5e: e4:2b:1b:2e:34:87:cc:0d:b5:2d:7b:29:c0:9a:d0:77:65:b5: 8f:da:13:ce:09:0f:b4:04:f7:8d:5c:cf:90:a0:6c:b8:a2:26: 7c:42:1d:f4:21:eb:86:ce:a5:e7:19:ce:5d:a5:69:16:2c:ce: 20:43:15:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm4q9M8QqtB3q8PfmE8fiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0YTQ3ZTNhNjcxNjBhZTQ2NjJlMGViY2NlZDdhOTIzM2Nl NDdhYmYwHhcNMjUxMjA2MDMwMTMzWhcNMjUxMjA3MDMwMTMzWjAzMTEwLwYDVQQD EyhmYzk4YzE4M2NhNzNkZmUyYzczZTM5NjdkMzhjNTI0NmMxNzVlZmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLsz9m87sNndPSB7fM866KZ0jSrD NqOXFAs7ijDzCLKZajT6iQ4K8p6shXs80kiasGRHXcATHm6DzE6kp/CMXOger7cM 6nSgMg2MkZzd8icXvDfjV0+bCNCHsZmE2Eg5jt+45NsgdMZz/gusREdo2ljbMlO4 ksyNkvle9tGvUqlaGyHiq7DE16pYmklDWsWE82X6azXO8aE76Xiz07nQqyG0XI/Z PCyQ1yOei9p8qAdKzkZ5V9v5YMGEKrJ8rjqlP2LGwTD6IvSRuHIEOmmJmTzimMIo kvB9UZvaAd8a02MC2I9OUnsUB/ZLLwxZN3bD0Bc6cwxlMFsylCTc/WxqZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPyYwYPKc9/ixz45Z9OMUkbBde+rMB8GA1UdIwQY MBaAFHSkfjpnFgrkZi4OvM7XqSM85Hq/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEtSLU9tY1dDdVJtTGc2OHp0ZXBJenprZXI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9kNmQ2MjUtZGRhMi00ZjJmLWI4Y2Yt OTJjN2Q0NmRkYjg5LzEvZEtSLU9tY1dDdVJtTGc2OHp0ZXBJenprZXI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny9kNmQ2MjUtZGRhMi00ZjJmLWI4Y2YtOTJjN2Q0NmRkYjg5 LzEvZEtSLU9tY1dDdVJtTGc2OHp0ZXBJenprZXI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaMzCZRdS +IhsVz/PkjijdY6Tjavi4BNDwO5Mw/zxO5DYEIT7wvYvcQ+vndniYVE1K5kPPf9I /8DZh+siOdnyrq7FNw1jUEKmRmbeFeC0szCUFz5K4c8WIIWrp8l0bRGsRwVabNcJ 3XtR00rA25R3S5qgAXjK0TSTCf1o9WYSyIdksl8DUF+rgXGaQ0t061Kj2MEP2Oug XG7XYYa1Q0Rp3zAA+tykaeIw3Z5J7TrstMV3tKCZW/iHWVCmBYlh+pIyikfuMkVe 5CsbLjSHzA21LXspwJrQd2W1j9oTzgkPtAT3jVzPkKBsuKImfEId9CHrhs6l5xnO XaVpFizOIEMVwQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:31:33 2025 by rpki-client