This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft File: dKTzwLZqTJPoD_X22JrYZz6UPF8.mft (raw, json) Hash identifier: nc7Jziu+KmprTwIuKx2guCqeyV58OtUtJlYYFY+KMwY= Subject key identifier: F4:20:B2:A6:8D:70:4A:1B:8F:E0:15:21:0F:FC:D5:A0:F0:8C:11:A0 Authority key identifier: 74:A4:F3:C0:B6:6A:4C:93:E8:0F:F5:F6:D8:9A:D8:67:3E:94:3C:5F Certificate issuer: /CN=74a4f3c0b66a4c93e80ff5f6d89ad8673e943c5f Certificate serial: 019B2C2EE9A2A939D7FCAD8CC1C98D694A18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKTzwLZqTJPoD_X22JrYZz6UPF8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft Manifest number: 177F Signing time: Wed 17 Dec 2025 12:00:30 +0000 Manifest this update: Wed 17 Dec 2025 12:00:30 +0000 Manifest next update: Thu 18 Dec 2025 12:00:30 +0000 Files and hashes: 1: 1-MmN0tsEmoim2sae335BAlf2iMY.roa (hash: BOjGK2JKa11z5em/Dgc+q3/nSr0kFU/3HDEjsSjRF+k=) 2: dKTzwLZqTJPoD_X22JrYZz6UPF8.crl (hash: YBZ6Ca/lgoDMRd+Yb2njN3oLR0DgYLgoJKkDFTFbA3o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft rsync://rpki.ripe.net/repository/DEFAULT/dKTzwLZqTJPoD_X22JrYZz6UPF8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2e:e9:a2:a9:39:d7:fc:ad:8c:c1:c9:8d:69:4a:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74a4f3c0b66a4c93e80ff5f6d89ad8673e943c5f Validity Not Before: Dec 17 12:00:30 2025 GMT Not After : Dec 18 12:00:30 2025 GMT Subject: CN=f420b2a68d704a1b8fe015210ffcd5a0f08c11a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:66:93:d8:ea:22:8c:c4:36:e6:a6:ea:7e:b8: 5f:0f:01:eb:5c:fe:c6:47:0c:61:95:14:7e:8d:9b: 0d:85:83:da:9e:69:85:9b:6a:0b:33:c4:2e:e7:ac: 1c:43:c6:a2:74:c5:8a:cf:f9:12:20:64:75:3a:df: 78:55:b3:63:57:f3:07:a3:4b:f6:1d:cf:b4:a3:f6: cf:c5:41:aa:80:df:af:ae:72:b2:4a:2f:08:a4:f0: 39:08:41:70:cb:bf:b9:e7:cc:ee:47:f3:9e:48:3a: af:82:5f:b5:47:e8:ff:25:7a:d8:66:93:dd:f7:30: f5:80:5e:b4:88:9e:47:b8:49:58:2d:7c:97:fe:2f: 9f:43:15:08:d3:c1:8f:25:49:cf:fe:31:48:36:7b: f6:e2:00:c8:ce:7f:79:df:45:59:78:f4:f0:a9:62: d6:77:48:7f:93:84:01:7a:08:9c:7e:33:ed:4d:aa: 44:4b:f5:2e:51:1b:6b:93:a3:3c:e9:12:94:63:aa: 39:88:58:0d:44:99:20:a7:9b:77:69:d5:c5:cc:11: 96:7e:06:51:19:24:14:f3:ee:6a:66:d4:d6:48:b8: ce:09:e7:44:79:be:1e:79:8d:db:cf:2b:11:af:01: 07:d9:73:6b:c1:44:da:64:9d:5f:0f:57:08:14:bb: 9d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:20:B2:A6:8D:70:4A:1B:8F:E0:15:21:0F:FC:D5:A0:F0:8C:11:A0 X509v3 Authority Key Identifier: keyid:74:A4:F3:C0:B6:6A:4C:93:E8:0F:F5:F6:D8:9A:D8:67:3E:94:3C:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKTzwLZqTJPoD_X22JrYZz6UPF8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:cc:09:7a:58:2f:e1:a4:6e:26:7d:26:76:c8:e6:d7:03:8f: ca:12:25:0a:e5:5c:0e:3a:cb:45:41:19:cf:a2:70:07:61:5b: 68:cc:00:7a:8f:93:60:12:2f:96:0e:35:b7:81:31:7e:48:41: 5d:af:e3:3b:25:31:88:ac:fc:c1:dd:a5:ef:fa:00:99:7a:26: bd:aa:b3:6a:52:d6:db:37:c8:7f:e3:35:5c:3a:e9:af:9f:a6: 11:d1:5c:fd:c3:3e:6b:18:98:99:f1:4c:04:0a:ac:2f:07:92: 43:30:9c:b1:2f:22:da:c6:f1:55:03:fb:a5:3c:36:10:31:b6: 5c:4b:86:97:d0:43:39:ba:21:d5:33:5d:57:ba:1f:40:8f:7f: 6f:ae:10:b8:b3:6a:f1:d7:d9:c4:54:5a:92:d4:b8:9d:70:fc: aa:59:89:2c:54:63:b9:22:9d:94:f4:d4:0a:76:ca:8b:88:cb: 73:87:28:85:34:29:99:fe:31:b6:8d:29:a9:5e:34:b3:9e:a7: 59:8c:1a:33:60:41:83:92:56:08:cf:a9:c8:14:6f:f5:0d:1e: d2:f8:ec:50:08:4a:23:0d:f8:af:1e:e7:56:f3:70:4d:a3:ce: 12:43:88:d3:f2:09:6b:b0:83:d0:7c:43:52:02:93:4c:db:7e: ca:b1:46:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssLumiqTnX/K2MwcmNaUoYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0YTRmM2MwYjY2YTRjOTNlODBmZjVmNmQ4OWFkODY3M2U5 NDNjNWYwHhcNMjUxMjE3MTIwMDMwWhcNMjUxMjE4MTIwMDMwWjAzMTEwLwYDVQQD EyhmNDIwYjJhNjhkNzA0YTFiOGZlMDE1MjEwZmZjZDVhMGYwOGMxMWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2aT2OoijMQ25qbqfrhfDwHrXP7G RwxhlRR+jZsNhYPanmmFm2oLM8Qu56wcQ8aidMWKz/kSIGR1Ot94VbNjV/MHo0v2 Hc+0o/bPxUGqgN+vrnKySi8IpPA5CEFwy7+558zuR/OeSDqvgl+1R+j/JXrYZpPd 9zD1gF60iJ5HuElYLXyX/i+fQxUI08GPJUnP/jFINnv24gDIzn9530VZePTwqWLW d0h/k4QBegicfjPtTapES/UuURtrk6M86RKUY6o5iFgNRJkgp5t3adXFzBGWfgZR GSQU8+5qZtTWSLjOCedEeb4eeY3bzysRrwEH2XNrwUTaZJ1fD1cIFLudJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPQgsqaNcEobj+AVIQ/81aDwjBGgMB8GA1UdIwQY MBaAFHSk88C2akyT6A/19tia2Gc+lDxfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEtUendMWnFUSlBvRF9YMjJKcllaejZVUEY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi82OTk3MDQtODAwNC00NjE0LWI0NGMt MmNhNDkyZjZkN2E4LzEvZEtUendMWnFUSlBvRF9YMjJKcllaejZVUEY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi82OTk3MDQtODAwNC00NjE0LWI0NGMtMmNhNDkyZjZkN2E4 LzEvZEtUendMWnFUSlBvRF9YMjJKcllaejZVUEY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACswJelgv 4aRuJn0mdsjm1wOPyhIlCuVcDjrLRUEZz6JwB2FbaMwAeo+TYBIvlg41t4ExfkhB Xa/jOyUxiKz8wd2l7/oAmXomvaqzalLW2zfIf+M1XDrpr5+mEdFc/cM+axiYmfFM BAqsLweSQzCcsS8i2sbxVQP7pTw2EDG2XEuGl9BDOboh1TNdV7ofQI9/b64QuLNq 8dfZxFRaktS4nXD8qlmJLFRjuSKdlPTUCnbKi4jLc4cohTQpmf4xto0pqV40s56n WYwaM2BBg5JWCM+pyBRv9Q0e0vjsUAhKIw34rx7nVvNwTaPOEkOI0/IJa7CD0HxD UgKTTNt+yrFGiA== -----END CERTIFICATE-----Generated at Wed Dec 17 17:05:40 2025 by rpki-client