This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft File: DUxrauUAB3adKNmJcNJPvO4bo5A.mft (raw, json) Hash identifier: BmGjAyC4U73EfILo3wcxdKfXnMR0HNdsvKSFV/U0EGQ= Subject key identifier: 5C:C0:D3:BF:A0:A4:2F:A3:E6:A9:8E:C4:16:4A:A5:95:1F:A8:E3:E2 Authority key identifier: 0D:4C:6B:6A:E5:00:07:76:9D:28:D9:89:70:D2:4F:BC:EE:1B:A3:90 Certificate issuer: /CN=0d4c6b6ae50007769d28d98970d24fbcee1ba390 Certificate serial: 019AF2095EBD4AE7432DCA94703026335CC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUxrauUAB3adKNmJcNJPvO4bo5A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft Manifest number: 0127 Signing time: Sat 06 Dec 2025 05:01:31 +0000 Manifest this update: Sat 06 Dec 2025 05:01:31 +0000 Manifest next update: Sun 07 Dec 2025 05:01:31 +0000 Files and hashes: 1: DUxrauUAB3adKNmJcNJPvO4bo5A.crl (hash: zl9bjpqkKLtorRCkr00WxMXzaCLpTA1zUYxMEOVJZyQ=) 2: m3GZ3uzof7l0GBgnn84BPxNFAYA.roa (hash: 2i1OlK6EDLBEyz+L6W8IHqQybGpvkp0P97W/04ZDHzg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft rsync://rpki.ripe.net/repository/DEFAULT/DUxrauUAB3adKNmJcNJPvO4bo5A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:5e:bd:4a:e7:43:2d:ca:94:70:30:26:33:5c:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d4c6b6ae50007769d28d98970d24fbcee1ba390 Validity Not Before: Dec 6 05:01:31 2025 GMT Not After : Dec 7 05:01:31 2025 GMT Subject: CN=5cc0d3bfa0a42fa3e6a98ec4164aa5951fa8e3e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:74:5e:e8:f6:f1:0e:fe:4f:68:80:6c:83:20: 86:aa:58:d9:e5:35:bb:ea:5b:81:a5:77:2e:5f:3b: 08:37:98:1c:9d:a8:17:60:42:01:f7:4d:67:bd:16: a1:db:05:fc:6a:4c:40:7c:6e:3a:de:d6:a0:c8:4f: e9:1b:96:ba:4e:c6:8e:7d:3b:f7:ce:f1:b7:37:b7: 17:14:aa:43:e8:39:bc:ab:24:37:c8:ad:69:d7:3f: b7:e3:ec:64:cb:e7:d4:0f:15:a5:5c:93:df:26:31: 36:61:38:aa:cf:09:c8:e7:56:3a:6e:d3:98:88:13: b5:fb:1d:6a:6b:39:6c:ba:8d:c6:c6:3e:76:2c:96: a2:4c:28:60:5e:f0:78:f8:5b:99:5e:40:3b:65:bb: 79:35:9b:98:b1:b8:b3:1f:46:d4:c9:d7:75:2b:44: de:73:6c:73:06:b1:c5:4a:e4:c3:07:a8:ad:3d:0e: d9:f0:9e:57:6d:4c:52:24:5f:de:83:66:df:4c:92: 68:3d:6d:7e:20:21:f3:0e:83:94:f9:e9:d9:cd:78: ac:17:cb:49:17:f2:5f:f8:65:f9:0d:b4:03:51:77: 8b:1b:95:f6:46:5f:b2:d9:28:76:f7:62:92:b6:6c: 3a:f8:09:41:14:ac:15:52:2d:2a:58:b2:2f:ac:71: cd:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:C0:D3:BF:A0:A4:2F:A3:E6:A9:8E:C4:16:4A:A5:95:1F:A8:E3:E2 X509v3 Authority Key Identifier: keyid:0D:4C:6B:6A:E5:00:07:76:9D:28:D9:89:70:D2:4F:BC:EE:1B:A3:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUxrauUAB3adKNmJcNJPvO4bo5A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:3e:ed:cd:18:ef:d4:f8:95:59:a9:c0:4d:6b:31:d6:b3:43: d7:16:ed:18:39:a7:1b:b7:46:e6:91:3d:a5:e1:40:ce:4b:07: 55:be:56:db:fb:fe:a4:85:4f:b8:f6:cc:b4:98:b4:8c:8d:ea: 3d:00:ba:79:aa:90:4c:75:15:aa:5e:d5:84:c5:a1:36:6c:96: 8d:e3:70:bc:ca:70:13:62:9a:69:b5:16:6e:51:11:a6:bb:74: 0a:6c:d7:6c:a4:9c:d2:1e:23:d6:cb:13:64:a4:af:0a:af:8e: 55:49:66:94:4f:04:fc:98:ab:c0:4d:ca:b8:1b:be:03:55:ac: 1b:db:00:c6:70:70:55:df:4a:35:9d:06:03:02:24:6f:5a:d0: 86:b8:8d:55:c2:a4:a0:ac:ee:ad:9c:c4:77:9c:17:ea:e3:f1: 11:7f:64:07:b9:da:03:2e:f4:a5:7e:2a:00:06:3e:f0:16:2b: d3:da:2a:bd:cc:0a:00:d8:22:a5:a1:d7:58:f5:8d:d1:ad:80: ca:e4:eb:86:40:44:98:dc:67:74:41:19:ea:38:12:08:67:08: 1f:63:70:7b:1a:f3:5e:48:0e:45:4a:65:be:c3:98:a9:ee:6c: af:f8:1b:17:94:a5:e3:36:d6:4f:86:f9:b1:85:b8:f9:56:cb: 92:b0:39:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCV69SudDLcqUcDAmM1zIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNGM2YjZhZTUwMDA3NzY5ZDI4ZDk4OTcwZDI0ZmJjZWUx YmEzOTAwHhcNMjUxMjA2MDUwMTMxWhcNMjUxMjA3MDUwMTMxWjAzMTEwLwYDVQQD Eyg1Y2MwZDNiZmEwYTQyZmEzZTZhOThlYzQxNjRhYTU5NTFmYThlM2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nRe6PbxDv5PaIBsgyCGqljZ5TW7 6luBpXcuXzsIN5gcnagXYEIB901nvRah2wX8akxAfG463tagyE/pG5a6TsaOfTv3 zvG3N7cXFKpD6Dm8qyQ3yK1p1z+34+xky+fUDxWlXJPfJjE2YTiqzwnI51Y6btOY iBO1+x1qazlsuo3Gxj52LJaiTChgXvB4+FuZXkA7Zbt5NZuYsbizH0bUydd1K0Te c2xzBrHFSuTDB6itPQ7Z8J5XbUxSJF/eg2bfTJJoPW1+ICHzDoOU+enZzXisF8tJ F/Jf+GX5DbQDUXeLG5X2Rl+y2Sh292KStmw6+AlBFKwVUi0qWLIvrHHNjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFzA07+gpC+j5qmOxBZKpZUfqOPiMB8GA1UdIwQY MBaAFA1Ma2rlAAd2nSjZiXDST7zuG6OQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFV4cmF1VUFCM2FkS05tSmNOSlB2TzRibzVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi82MzY2N2ItN2EyNS00NDBmLTg0Zjkt MmFiOTU4N2U1ZjFkLzEvRFV4cmF1VUFCM2FkS05tSmNOSlB2TzRibzVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi82MzY2N2ItN2EyNS00NDBmLTg0ZjktMmFiOTU4N2U1ZjFk LzEvRFV4cmF1VUFCM2FkS05tSmNOSlB2TzRibzVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaD7tzRjv 1PiVWanATWsx1rND1xbtGDmnG7dG5pE9peFAzksHVb5W2/v+pIVPuPbMtJi0jI3q PQC6eaqQTHUVql7VhMWhNmyWjeNwvMpwE2KaabUWblERprt0CmzXbKSc0h4j1ssT ZKSvCq+OVUlmlE8E/JirwE3KuBu+A1WsG9sAxnBwVd9KNZ0GAwIkb1rQhriNVcKk oKzurZzEd5wX6uPxEX9kB7naAy70pX4qAAY+8BYr09oqvcwKANgipaHXWPWN0a2A yuTrhkBEmNxndEEZ6jgSCGcIH2NwexrzXkgORUplvsOYqe5sr/gbF5Sl4zbWT4b5 sYW4+VbLkrA51g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:13:31 2025 by rpki-client