This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft File: DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft (raw, json) Hash identifier: +dzidjNzALeCUsZyy72NlixfexdSkCvfgw+9KgBH1Qc= Subject key identifier: A7:5B:80:FA:BE:AF:44:BD:CA:7E:DD:BC:E2:79:9C:25:C5:F3:2C:C5 Authority key identifier: 0D:79:01:C4:30:AE:39:FC:B0:5B:EB:5B:34:26:7F:52:24:F0:4F:61 Certificate issuer: /CN=0d7901c430ae39fcb05beb5b34267f5224f04f61 Certificate serial: 019AF31B415189C9B8B27EF9333663B9B28B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft Manifest number: 1653 Signing time: Sat 06 Dec 2025 10:00:40 +0000 Manifest this update: Sat 06 Dec 2025 10:00:40 +0000 Manifest next update: Sun 07 Dec 2025 10:00:40 +0000 Files and hashes: 1: DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl (hash: ZfFiGKI3UvxJybcYPLeumlarSff+I/40RLt6T/l7hTA=) 2: TSvZLiAEM2CqBOpzEquX-L_n02A.roa (hash: I0g5fDPCn3RgZfwIeTKeigQ5B1u0G9JlwOBJf1pZ4jg=) 3: ydjENtpcRcTmVcWG9oyQwp3NaQ0.roa (hash: YWkayHgIhYTNLiz4XAeekrNCTOGkXpvO+aHI+JpNUpU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:41:51:89:c9:b8:b2:7e:f9:33:36:63:b9:b2:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d7901c430ae39fcb05beb5b34267f5224f04f61 Validity Not Before: Dec 6 10:00:40 2025 GMT Not After : Dec 7 10:00:40 2025 GMT Subject: CN=a75b80fabeaf44bdca7eddbce2799c25c5f32cc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:27:8f:03:9a:9a:9e:ec:7e:56:5a:ca:d9:58: 2b:6d:d4:b2:b2:81:e9:f1:bf:b3:e5:10:26:8c:4e: 2e:8a:2f:1e:f4:c7:fa:8a:de:f3:8c:a0:d6:3a:d8: bc:0c:33:d0:bd:d5:68:d5:8c:56:66:cd:76:bc:df: 40:8d:86:c4:08:76:b6:bf:da:9c:bf:37:4d:82:2d: a5:64:b6:e6:95:cb:9c:35:ce:92:2f:2d:a6:76:2b: 1a:be:c5:f2:78:0c:3c:df:20:e2:c1:7c:15:91:5d: c0:dd:20:a4:5a:b0:38:00:78:66:db:f9:e9:7c:df: ea:fc:91:ab:27:c4:d8:37:6d:cd:8b:d1:a9:1e:bb: dd:d6:91:3b:1f:a5:3b:a3:f1:4f:18:a7:5c:bb:3c: d3:32:7b:06:10:01:22:32:9a:53:26:b9:3a:3d:c2: da:c4:5e:26:5a:47:9b:17:41:f5:39:26:d4:de:88: 15:1b:d1:c7:46:d9:8a:df:4a:7c:49:cf:a0:4f:e5: d8:b4:f6:44:61:31:99:f4:e0:30:db:02:fa:4b:e5: e9:f7:17:30:6c:0a:8a:2a:21:3c:77:ca:05:ca:0d: 0b:1b:40:bb:8e:df:34:96:98:b7:d3:03:81:12:19: 37:db:32:bc:8c:29:1b:1c:14:0b:dd:ab:28:09:76: fd:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:5B:80:FA:BE:AF:44:BD:CA:7E:DD:BC:E2:79:9C:25:C5:F3:2C:C5 X509v3 Authority Key Identifier: keyid:0D:79:01:C4:30:AE:39:FC:B0:5B:EB:5B:34:26:7F:52:24:F0:4F:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:f4:e1:7d:0b:03:39:2d:fc:ab:36:63:54:a0:de:f8:43:fc: f4:9f:be:54:a6:d4:ee:03:a8:6e:91:a4:95:1c:42:f9:e4:7e: 77:76:ba:97:2e:5d:ed:2c:3e:89:ed:22:50:5b:42:b4:6e:1c: e5:2e:c6:49:91:d7:64:6b:64:f0:c0:a4:26:0a:04:14:39:9a: 89:a7:d6:1d:fc:b1:10:45:09:ac:75:c1:f1:e7:25:5a:27:32: 8c:73:fa:f0:3d:1e:e3:12:ba:ad:ae:2f:99:e7:bd:0d:30:2b: d6:eb:52:f5:d4:69:bf:4d:da:53:35:de:28:ea:26:ed:bb:39: 13:a2:9e:13:bc:f5:d3:17:de:39:d2:dd:03:79:1b:93:34:5d: c8:eb:c7:71:77:a8:03:0a:14:bf:83:01:1c:7e:56:79:55:52: 1c:81:6f:75:30:33:e0:b1:df:97:bc:16:97:0d:2d:06:6b:b0: 75:8a:7f:76:0d:c4:7d:ac:15:cc:41:02:f1:c9:2b:04:10:1d: 04:05:b7:b1:b5:70:ff:87:08:07:64:db:7d:1e:05:c0:f7:13: bd:7a:dd:aa:10:67:d8:19:88:ef:6e:fb:5b:18:c5:b2:46:dc: a7:99:0a:29:f5:04:2b:38:50:49:be:25:0a:c1:eb:de:34:a9: 19:10:f8:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG0FRicm4sn75MzZjubKLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzkwMWM0MzBhZTM5ZmNiMDViZWI1YjM0MjY3ZjUyMjRm MDRmNjEwHhcNMjUxMjA2MTAwMDQwWhcNMjUxMjA3MTAwMDQwWjAzMTEwLwYDVQQD EyhhNzViODBmYWJlYWY0NGJkY2E3ZWRkYmNlMjc5OWMyNWM1ZjMyY2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCePA5qanux+VlrK2VgrbdSysoHp 8b+z5RAmjE4uii8e9Mf6it7zjKDWOti8DDPQvdVo1YxWZs12vN9AjYbECHa2v9qc vzdNgi2lZLbmlcucNc6SLy2mdisavsXyeAw83yDiwXwVkV3A3SCkWrA4AHhm2/np fN/q/JGrJ8TYN23Ni9GpHrvd1pE7H6U7o/FPGKdcuzzTMnsGEAEiMppTJrk6PcLa xF4mWkebF0H1OSbU3ogVG9HHRtmK30p8Sc+gT+XYtPZEYTGZ9OAw2wL6S+Xp9xcw bAqKKiE8d8oFyg0LG0C7jt80lpi30wOBEhk32zK8jCkbHBQL3asoCXb9MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKdbgPq+r0S9yn7dvOJ5nCXF8yzFMB8GA1UdIwQY MBaAFA15AcQwrjn8sFvrWzQmf1Ik8E9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhrQnhEQ3VPZnl3Vy10Yk5DWl9VaVR3VDJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS82NDU2ZGUtNzQwYi00MzRkLWI3NjUt MTcxZDlmMmNjZTNkLzEvRFhrQnhEQ3VPZnl3Vy10Yk5DWl9VaVR3VDJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS82NDU2ZGUtNzQwYi00MzRkLWI3NjUtMTcxZDlmMmNjZTNk LzEvRFhrQnhEQ3VPZnl3Vy10Yk5DWl9VaVR3VDJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhfThfQsD OS38qzZjVKDe+EP89J++VKbU7gOobpGklRxC+eR+d3a6ly5d7Sw+ie0iUFtCtG4c 5S7GSZHXZGtk8MCkJgoEFDmaiafWHfyxEEUJrHXB8eclWicyjHP68D0e4xK6ra4v mee9DTAr1utS9dRpv03aUzXeKOom7bs5E6KeE7z10xfeOdLdA3kbkzRdyOvHcXeo AwoUv4MBHH5WeVVSHIFvdTAz4LHfl7wWlw0tBmuwdYp/dg3EfawVzEEC8ckrBBAd BAW3sbVw/4cIB2TbfR4FwPcTvXrdqhBn2BmI7277WxjFskbcp5kKKfUEKzhQSb4l CsHr3jSpGRD4Rw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:51:55 2025 by rpki-client