This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.mft File: dkyOsD7yMmpiDfEAVI0fBth0VRo.mft (raw, json) Hash identifier: ohbFifZhMddfoQYKxY6qCEPu6GNBvHRAMlwhrMK1gxc= Subject key identifier: CF:D9:E8:55:00:99:80:D7:10:B8:69:04:E9:AB:C8:1E:9E:1E:56:4D Authority key identifier: 76:4C:8E:B0:3E:F2:32:6A:62:0D:F1:00:54:8D:1F:06:D8:74:55:1A Certificate issuer: /CN=764c8eb03ef2326a620df100548d1f06d874551a Certificate serial: 019AF31D2A6247ED160BD6CADECD709F5A63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkyOsD7yMmpiDfEAVI0fBth0VRo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.mft Manifest number: 1017 Signing time: Sat 06 Dec 2025 10:02:45 +0000 Manifest this update: Sat 06 Dec 2025 10:02:45 +0000 Manifest next update: Sun 07 Dec 2025 10:02:45 +0000 Files and hashes: 1: 6pQ6t4bP0J0fbsLbhEpUyG2VFpw.roa (hash: dOWAwUrFgwCtFG9Vv9gPLuYcFdBlCoehZxFbI34HH6c=) 2: dkyOsD7yMmpiDfEAVI0fBth0VRo.crl (hash: c61KVxlmcjYpGzDQuWiVi/TQyvWVNO0XdYDZ2jZRDfU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.crl rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.mft rsync://rpki.ripe.net/repository/DEFAULT/dkyOsD7yMmpiDfEAVI0fBth0VRo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:2a:62:47:ed:16:0b:d6:ca:de:cd:70:9f:5a:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=764c8eb03ef2326a620df100548d1f06d874551a Validity Not Before: Dec 6 10:02:45 2025 GMT Not After : Dec 7 10:02:45 2025 GMT Subject: CN=cfd9e855009980d710b86904e9abc81e9e1e564d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5b:3e:62:d0:d5:29:ee:ed:b7:43:eb:47:1e: c9:55:4f:5e:43:92:2a:df:5f:3d:21:67:0b:56:c4: 65:4b:36:5b:b1:8f:c5:f5:a1:cd:4a:92:71:f1:c3: a4:0b:55:51:08:8f:d2:a8:14:ca:bd:a2:53:ea:66: 84:7f:95:2d:ac:42:62:1a:af:ea:ac:30:9b:83:d1: 12:1a:b9:47:5a:c2:c3:33:88:e8:c7:bc:36:b9:1e: 1c:16:9d:d3:a1:e6:97:e6:21:5c:4b:c2:fd:9d:0b: e5:3e:05:7e:04:cc:e5:ad:83:5a:1a:0e:a3:1a:eb: 45:de:23:b1:97:c9:07:7e:fd:a1:43:56:97:11:da: 11:bd:3e:77:fa:59:d3:27:7a:83:71:7b:bd:5d:16: 1f:e5:c2:50:1b:18:e8:41:d6:e4:3f:89:43:d5:02: 1e:23:f7:60:ce:e2:fb:1c:9c:2f:a0:d9:83:c9:a0: b9:8f:80:08:ee:aa:63:fc:03:90:28:56:5d:6f:d0: bb:11:49:c9:f6:32:b4:0e:10:1b:82:e4:69:6e:d1: c7:15:77:b3:b7:4c:a8:a2:8f:48:4f:52:68:c8:78: 15:6e:6a:28:19:ba:c0:da:13:9b:cb:3f:4e:1d:5e: ba:ed:d4:71:a7:91:ec:cd:5a:75:a9:2a:25:a2:b9: e4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D9:E8:55:00:99:80:D7:10:B8:69:04:E9:AB:C8:1E:9E:1E:56:4D X509v3 Authority Key Identifier: keyid:76:4C:8E:B0:3E:F2:32:6A:62:0D:F1:00:54:8D:1F:06:D8:74:55:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkyOsD7yMmpiDfEAVI0fBth0VRo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:0d:4f:1b:3b:21:67:a3:d6:b8:1f:7e:ca:d3:ad:68:49:b1: 74:c6:37:e2:fe:c8:37:e4:42:80:78:71:b1:8f:13:f7:e0:98: e3:38:0d:c4:7c:86:36:92:64:ec:bc:67:e8:f0:37:e3:08:76: a2:62:10:ec:b7:6e:92:ac:67:f5:3b:f5:1f:3b:12:2c:f2:e5: 7e:26:a4:0e:d7:d6:cc:c0:7b:8d:d3:a9:09:02:05:ce:62:28: e7:17:47:ab:e0:6f:87:5e:6c:30:83:60:34:f7:9e:a9:46:5e: 2c:05:78:f4:5c:53:c8:3a:56:4c:3f:6d:1d:af:a1:13:3a:cf: dd:8a:10:f6:03:2b:26:45:d4:ab:bc:63:f0:bd:00:9d:77:79: d9:6b:92:55:b4:63:a2:c7:38:f2:f6:4c:03:d1:72:35:05:5a: 33:bd:87:57:85:d2:02:68:0e:16:d6:cd:81:c4:6d:27:11:c6: c1:ed:d9:88:91:53:f5:e6:19:83:6b:37:14:39:23:12:d6:61: a3:33:1c:44:91:10:3e:7d:ee:03:04:15:5e:1f:b6:d9:4f:bb: 52:0a:75:2c:a5:71:52:47:fb:c3:bf:fb:05:b3:7f:32:d2:10: e6:70:c1:41:30:fc:65:41:7c:55:c4:52:dd:f9:47:65:66:88: 19:30:2e:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHSpiR+0WC9bK3s1wn1pjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NGM4ZWIwM2VmMjMyNmE2MjBkZjEwMDU0OGQxZjA2ZDg3 NDU1MWEwHhcNMjUxMjA2MTAwMjQ1WhcNMjUxMjA3MTAwMjQ1WjAzMTEwLwYDVQQD EyhjZmQ5ZTg1NTAwOTk4MGQ3MTBiODY5MDRlOWFiYzgxZTllMWU1NjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvls+YtDVKe7tt0PrRx7JVU9eQ5Iq 3189IWcLVsRlSzZbsY/F9aHNSpJx8cOkC1VRCI/SqBTKvaJT6maEf5UtrEJiGq/q rDCbg9ESGrlHWsLDM4jox7w2uR4cFp3ToeaX5iFcS8L9nQvlPgV+BMzlrYNaGg6j GutF3iOxl8kHfv2hQ1aXEdoRvT53+lnTJ3qDcXu9XRYf5cJQGxjoQdbkP4lD1QIe I/dgzuL7HJwvoNmDyaC5j4AI7qpj/AOQKFZdb9C7EUnJ9jK0DhAbguRpbtHHFXez t0yooo9IT1JoyHgVbmooGbrA2hObyz9OHV667dRxp5HszVp1qSolornkBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM/Z6FUAmYDXELhpBOmryB6eHlZNMB8GA1UdIwQY MBaAFHZMjrA+8jJqYg3xAFSNHwbYdFUaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGt5T3NEN3lNbXBpRGZFQVZJMGZCdGgwVlJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS83MTI2NWYtMGE1My00MTA2LWIyMGEt ZjNiNTBjNjVmODIwLzEvZGt5T3NEN3lNbXBpRGZFQVZJMGZCdGgwVlJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS83MTI2NWYtMGE1My00MTA2LWIyMGEtZjNiNTBjNjVmODIw LzEvZGt5T3NEN3lNbXBpRGZFQVZJMGZCdGgwVlJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABw1PGzsh Z6PWuB9+ytOtaEmxdMY34v7IN+RCgHhxsY8T9+CY4zgNxHyGNpJk7Lxn6PA34wh2 omIQ7Ldukqxn9Tv1HzsSLPLlfiakDtfWzMB7jdOpCQIFzmIo5xdHq+Bvh15sMINg NPeeqUZeLAV49FxTyDpWTD9tHa+hEzrP3YoQ9gMrJkXUq7xj8L0AnXd52WuSVbRj osc48vZMA9FyNQVaM72HV4XSAmgOFtbNgcRtJxHGwe3ZiJFT9eYZg2s3FDkjEtZh ozMcRJEQPn3uAwQVXh+22U+7Ugp1LKVxUkf7w7/7BbN/MtIQ5nDBQTD8ZUF8VcRS 3flHZWaIGTAujw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:37:08 2025 by rpki-client