This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.mft File: dKR-OmcWCuRmLg68ztepIzzker8.mft (raw, json) Hash identifier: Aej2iyF1qfpzfaZo2fAQSNuIyuSoC/j+iZdp5FexvmM= Subject key identifier: DB:52:0C:56:DF:82:15:09:13:E0:A0:37:5B:5F:A6:C6:79:B8:C7:2D Authority key identifier: 74:A4:7E:3A:67:16:0A:E4:66:2E:0E:BC:CE:D7:A9:23:3C:E4:7A:BF Certificate issuer: /CN=74a47e3a67160ae4662e0ebcced7a9233ce47abf Certificate serial: 019B3533047FC6D47AED39772DBADF401111 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKR-OmcWCuRmLg68ztepIzzker8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.mft Manifest number: 13D7 Signing time: Fri 19 Dec 2025 06:01:34 +0000 Manifest this update: Fri 19 Dec 2025 06:01:34 +0000 Manifest next update: Sat 20 Dec 2025 06:01:34 +0000 Files and hashes: 1: 6S1fN0Slf3Y95btQEfpy__y_tiw.roa (hash: 5FWi2gr8yiM3yt2DtW3oiI0p1G9KyA1KVfzD3/JWlJI=) 2: dKR-OmcWCuRmLg68ztepIzzker8.crl (hash: AQ+lu1BUrlA/ZV8mPR39YX9PHJ3NDDcgCdMXoxVCEuU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.crl rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.mft rsync://rpki.ripe.net/repository/DEFAULT/dKR-OmcWCuRmLg68ztepIzzker8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:33:04:7f:c6:d4:7a:ed:39:77:2d:ba:df:40:11:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74a47e3a67160ae4662e0ebcced7a9233ce47abf Validity Not Before: Dec 19 06:01:34 2025 GMT Not After : Dec 20 06:01:34 2025 GMT Subject: CN=db520c56df82150913e0a0375b5fa6c679b8c72d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ac:2c:a0:e5:4a:9c:9e:6b:1b:93:a0:f6:2d: 7b:46:fe:17:0b:0a:f2:ef:ae:dc:f1:cf:0a:d5:ab: 58:2e:be:cb:42:19:24:2c:4e:59:fb:97:c0:fc:4b: bc:07:95:4f:e7:fb:ad:b7:00:6d:1b:b8:45:e0:8c: 31:53:09:9d:e0:bc:71:01:32:aa:56:2d:a1:7e:d9: 63:79:fa:fb:43:3b:6b:29:b8:eb:9f:d4:17:ab:c7: 13:93:fc:c3:ae:79:ec:6b:54:9c:a1:98:ea:bb:7d: d5:86:46:e1:f3:f5:d6:fc:7a:d3:9c:14:69:a9:32: 14:8c:2d:2d:18:8d:97:3c:4d:24:39:29:14:75:7f: 8c:64:4f:c3:8c:71:53:7e:5b:1c:5a:e7:14:e9:78: 28:8a:26:5a:98:00:07:2b:77:7d:e3:c5:cc:5c:40: 4e:9d:02:03:c6:20:9f:9e:0b:3b:c4:37:1c:e7:ca: f1:0a:60:11:c5:47:ba:76:2d:08:be:3a:11:a0:0f: 77:4d:43:03:a8:76:83:cd:0c:86:15:f3:75:c3:d4: dd:78:17:3c:ed:7d:44:15:73:e1:b6:4c:99:3e:9e: 92:80:45:85:ce:4a:db:83:ef:5e:dd:2c:82:1b:93: bf:2d:c6:de:fc:f9:ff:e5:3f:ec:fc:6d:59:5b:7d: b4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:52:0C:56:DF:82:15:09:13:E0:A0:37:5B:5F:A6:C6:79:B8:C7:2D X509v3 Authority Key Identifier: keyid:74:A4:7E:3A:67:16:0A:E4:66:2E:0E:BC:CE:D7:A9:23:3C:E4:7A:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKR-OmcWCuRmLg68ztepIzzker8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:85:b6:13:3d:d5:10:be:92:fa:2e:f0:fc:17:2e:e4:1f:31: 66:b3:ab:fa:83:11:9d:fc:b8:83:3f:6d:6f:17:ff:05:35:3f: 4d:3f:b8:83:0d:87:64:ae:ca:0c:c9:fe:29:86:73:2b:36:f8: 07:d6:bf:58:1c:33:cb:33:41:26:37:0f:9d:52:83:9a:2f:ea: 0b:54:54:41:27:fd:18:f0:56:7b:0e:7d:dd:55:8b:82:72:ce: 5b:85:13:24:41:e8:5b:2f:65:6b:7f:67:2c:d0:3d:3d:d8:2d: a4:87:f4:9d:75:41:a2:d6:f9:c2:c9:89:60:1c:b3:42:85:1e: ec:a0:c4:24:4b:18:41:e2:7f:0a:83:64:63:f9:73:b7:a0:59: e0:62:dc:d8:b0:9c:f8:03:46:1f:16:24:0d:e2:61:5a:72:b6: a2:27:c3:ae:d7:e4:6f:2e:5e:45:44:58:9d:bc:6c:c4:0c:a9: 35:0e:e2:0f:16:9a:5a:64:60:1d:ee:ea:2f:18:2a:34:2f:fc: d6:de:73:52:41:9a:10:94:8a:74:0a:83:9f:a1:fd:e5:b5:44: 79:70:f2:06:67:dd:a3:6e:24:26:32:65:35:b9:eb:e2:37:e1: a2:a9:53:9b:ff:c2:89:38:2c:41:ce:00:91:aa:71:c1:29:2d: e2:ba:b3:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MwR/xtR67Tl3LbrfQBERMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0YTQ3ZTNhNjcxNjBhZTQ2NjJlMGViY2NlZDdhOTIzM2Nl NDdhYmYwHhcNMjUxMjE5MDYwMTM0WhcNMjUxMjIwMDYwMTM0WjAzMTEwLwYDVQQD EyhkYjUyMGM1NmRmODIxNTA5MTNlMGEwMzc1YjVmYTZjNjc5YjhjNzJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKwsoOVKnJ5rG5Og9i17Rv4XCwry 767c8c8K1atYLr7LQhkkLE5Z+5fA/Eu8B5VP5/uttwBtG7hF4IwxUwmd4LxxATKq Vi2hftljefr7QztrKbjrn9QXq8cTk/zDrnnsa1ScoZjqu33Vhkbh8/XW/HrTnBRp qTIUjC0tGI2XPE0kOSkUdX+MZE/DjHFTflscWucU6XgoiiZamAAHK3d948XMXEBO nQIDxiCfngs7xDcc58rxCmARxUe6di0IvjoRoA93TUMDqHaDzQyGFfN1w9TdeBc8 7X1EFXPhtkyZPp6SgEWFzkrbg+9e3SyCG5O/Lcbe/Pn/5T/s/G1ZW320vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNtSDFbfghUJE+CgN1tfpsZ5uMctMB8GA1UdIwQY MBaAFHSkfjpnFgrkZi4OvM7XqSM85Hq/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEtSLU9tY1dDdVJtTGc2OHp0ZXBJenprZXI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9kNmQ2MjUtZGRhMi00ZjJmLWI4Y2Yt OTJjN2Q0NmRkYjg5LzEvZEtSLU9tY1dDdVJtTGc2OHp0ZXBJenprZXI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny9kNmQ2MjUtZGRhMi00ZjJmLWI4Y2YtOTJjN2Q0NmRkYjg5 LzEvZEtSLU9tY1dDdVJtTGc2OHp0ZXBJenprZXI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR4W2Ez3V EL6S+i7w/Bcu5B8xZrOr+oMRnfy4gz9tbxf/BTU/TT+4gw2HZK7KDMn+KYZzKzb4 B9a/WBwzyzNBJjcPnVKDmi/qC1RUQSf9GPBWew593VWLgnLOW4UTJEHoWy9la39n LNA9PdgtpIf0nXVBotb5wsmJYByzQoUe7KDEJEsYQeJ/CoNkY/lzt6BZ4GLc2LCc +ANGHxYkDeJhWnK2oifDrtfkby5eRURYnbxsxAypNQ7iDxaaWmRgHe7qLxgqNC/8 1t5zUkGaEJSKdAqDn6H95bVEeXDyBmfdo24kJjJlNbnr4jfhoqlTm//CiTgsQc4A kapxwSkt4rqz+A== -----END CERTIFICATE-----Generated at Fri Dec 19 11:59:51 2025 by rpki-client