This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/bc1140-5086-41e2-b4cc-68c804b658e7/1/dTxuAUKu56nlon0Vd5su7LaI3ac.mft File: dTxuAUKu56nlon0Vd5su7LaI3ac.mft (raw, json) Hash identifier: VLxS8jFicXxNTvMA/fECw4TVyijFLtjDNeN+CMFK9B0= Subject key identifier: 14:F0:FE:31:BF:11:74:D9:AC:40:50:44:1D:7A:03:D4:11:7C:BF:20 Authority key identifier: 75:3C:6E:01:42:AE:E7:A9:E5:A2:7D:15:77:9B:2E:EC:B6:88:DD:A7 Certificate issuer: /CN=753c6e0142aee7a9e5a27d15779b2eecb688dda7 Certificate serial: 019AF49BC9793BD5436B6C16EB3DEA95F864 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTxuAUKu56nlon0Vd5su7LaI3ac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/bc1140-5086-41e2-b4cc-68c804b658e7/1/dTxuAUKu56nlon0Vd5su7LaI3ac.mft Manifest number: 014D Signing time: Sat 06 Dec 2025 17:00:41 +0000 Manifest this update: Sat 06 Dec 2025 17:00:41 +0000 Manifest next update: Sun 07 Dec 2025 17:00:41 +0000 Files and hashes: 1: dTxuAUKu56nlon0Vd5su7LaI3ac.crl (hash: DxTArKnzeKzZy1m2RiDY8COPd37pGvUUWPkJ7BLk5r0=) 2: pSR-rZwOGiE17rW57fz_6H8OuhA.roa (hash: hndxTaLME4hMNFfxFHRJ5PuHa6bS13FEZVnlx7XE/Wk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/bc1140-5086-41e2-b4cc-68c804b658e7/1/dTxuAUKu56nlon0Vd5su7LaI3ac.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/bc1140-5086-41e2-b4cc-68c804b658e7/1/dTxuAUKu56nlon0Vd5su7LaI3ac.mft rsync://rpki.ripe.net/repository/DEFAULT/dTxuAUKu56nlon0Vd5su7LaI3ac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:c9:79:3b:d5:43:6b:6c:16:eb:3d:ea:95:f8:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=753c6e0142aee7a9e5a27d15779b2eecb688dda7 Validity Not Before: Dec 6 17:00:41 2025 GMT Not After : Dec 7 17:00:41 2025 GMT Subject: CN=14f0fe31bf1174d9ac4050441d7a03d4117cbf20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:30:fa:5e:e0:c4:de:60:e2:40:96:1f:0e:63: 06:5f:b7:91:5d:a6:89:da:11:19:9d:1a:1e:10:b6: 74:5d:0e:a6:9e:12:1e:d0:58:48:e7:64:25:f5:0d: 8f:3e:23:e3:40:a7:57:8a:25:d4:b7:6d:af:02:35: 99:a5:26:0c:43:b1:ba:af:85:0d:da:4e:24:53:2c: a7:02:59:1d:7c:d6:32:c1:4f:3a:85:81:fe:2c:0f: 83:3e:21:98:6e:c9:00:b5:c9:56:82:7a:7b:e0:6b: fa:ad:8e:2a:f5:bb:69:1f:0f:f6:1e:75:e4:6e:29: 6f:8b:66:3a:42:69:b5:39:0f:aa:36:1e:e7:63:71: 37:11:1b:a3:06:f1:82:1a:39:32:27:fe:c7:32:ab: 64:d3:3a:8e:35:d2:8f:62:ee:fc:e4:39:3a:98:cb: 7e:4e:74:64:14:fe:d7:65:58:b0:a2:22:e6:ca:ce: 0a:bb:f5:1f:7d:38:6d:ad:cc:61:ec:84:65:39:dd: a4:1d:97:da:17:57:84:df:50:af:70:2a:a6:38:0b: 42:5c:e7:59:74:97:25:37:bc:48:93:40:a7:c8:7f: eb:56:c6:fb:5c:2c:50:58:a0:6d:20:ea:9b:af:69: e3:62:8e:a1:79:60:77:8c:2d:5b:1a:27:49:9d:78: 8b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:F0:FE:31:BF:11:74:D9:AC:40:50:44:1D:7A:03:D4:11:7C:BF:20 X509v3 Authority Key Identifier: keyid:75:3C:6E:01:42:AE:E7:A9:E5:A2:7D:15:77:9B:2E:EC:B6:88:DD:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTxuAUKu56nlon0Vd5su7LaI3ac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/bc1140-5086-41e2-b4cc-68c804b658e7/1/dTxuAUKu56nlon0Vd5su7LaI3ac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/bc1140-5086-41e2-b4cc-68c804b658e7/1/dTxuAUKu56nlon0Vd5su7LaI3ac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:5b:dc:b7:13:a1:b3:a7:c4:1a:1a:b2:19:98:d0:0b:14:d2: f5:e3:0d:be:d0:74:f4:5f:d3:24:34:b1:e2:b4:d0:d4:dd:ff: bb:76:5f:89:8d:1a:c5:a5:c1:03:e2:41:99:5c:07:d5:d8:b7: 62:bd:fa:17:66:dc:d4:6c:f9:20:d0:9a:c0:8e:0a:92:10:b1: e6:68:e1:74:67:36:9e:e8:55:5d:a9:4f:33:a3:73:a6:2b:18: 19:8d:ca:46:76:8b:e6:ee:ba:d4:02:4a:91:53:90:1a:ad:3c: 9b:07:f0:02:e8:43:ee:ed:90:82:d6:04:c1:e6:ac:25:a8:bf: 5d:8a:3d:8c:99:39:27:14:6b:1f:cf:8b:43:5c:b1:e5:21:4b: 9d:f0:e0:b1:57:34:86:05:1e:49:b7:5e:36:eb:2a:94:d7:4d: 32:6b:17:a0:7a:12:de:ac:3d:44:cd:d7:81:60:2a:59:d5:46: 85:cf:c0:bd:10:19:8f:4f:d7:84:3f:e7:eb:61:98:57:34:1a: 81:79:1d:8f:3d:a1:80:00:38:44:8f:12:28:dd:bc:a1:e7:2f: 47:76:05:0e:de:0d:b6:0d:03:39:1f:64:fd:58:0b:c0:b8:e4: 2e:da:ad:90:22:25:e2:c2:ab:f9:cc:cd:44:ad:c3:da:8b:6f: 5c:7e:b8:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m8l5O9VDa2wW6z3qlfhkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1M2M2ZTAxNDJhZWU3YTllNWEyN2QxNTc3OWIyZWVjYjY4 OGRkYTcwHhcNMjUxMjA2MTcwMDQxWhcNMjUxMjA3MTcwMDQxWjAzMTEwLwYDVQQD EygxNGYwZmUzMWJmMTE3NGQ5YWM0MDUwNDQxZDdhMDNkNDExN2NiZjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDD6XuDE3mDiQJYfDmMGX7eRXaaJ 2hEZnRoeELZ0XQ6mnhIe0FhI52Ql9Q2PPiPjQKdXiiXUt22vAjWZpSYMQ7G6r4UN 2k4kUyynAlkdfNYywU86hYH+LA+DPiGYbskAtclWgnp74Gv6rY4q9btpHw/2HnXk bilvi2Y6Qmm1OQ+qNh7nY3E3ERujBvGCGjkyJ/7HMqtk0zqONdKPYu785Dk6mMt+ TnRkFP7XZViwoiLmys4Ku/UffThtrcxh7IRlOd2kHZfaF1eE31CvcCqmOAtCXOdZ dJclN7xIk0CnyH/rVsb7XCxQWKBtIOqbr2njYo6heWB3jC1bGidJnXiLfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBTw/jG/EXTZrEBQRB16A9QRfL8gMB8GA1UdIwQY MBaAFHU8bgFCruep5aJ9FXebLuy2iN2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFR4dUFVS3U1Nm5sb24wVmQ1c3U3TGFJM2FjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9iYzExNDAtNTA4Ni00MWUyLWI0Y2Mt NjhjODA0YjY1OGU3LzEvZFR4dUFVS3U1Nm5sb24wVmQ1c3U3TGFJM2FjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9iYzExNDAtNTA4Ni00MWUyLWI0Y2MtNjhjODA0YjY1OGU3 LzEvZFR4dUFVS3U1Nm5sb24wVmQ1c3U3TGFJM2FjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIFvctxOh s6fEGhqyGZjQCxTS9eMNvtB09F/TJDSx4rTQ1N3/u3ZfiY0axaXBA+JBmVwH1di3 Yr36F2bc1Gz5INCawI4KkhCx5mjhdGc2nuhVXalPM6NzpisYGY3KRnaL5u661AJK kVOQGq08mwfwAuhD7u2QgtYEweasJai/XYo9jJk5JxRrH8+LQ1yx5SFLnfDgsVc0 hgUeSbdeNusqlNdNMmsXoHoS3qw9RM3XgWAqWdVGhc/AvRAZj0/XhD/n62GYVzQa gXkdjz2hgAA4RI8SKN28oecvR3YFDt4Ntg0DOR9k/VgLwLjkLtqtkCIl4sKr+czN RK3D2otvXH64Og== -----END CERTIFICATE-----Generated at Sun Dec 7 03:20:59 2025 by rpki-client