This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft File: DUTaXBkECVhg6GgYBXPuPIlae0U.mft (raw, json) Hash identifier: WbwloeqNvZSrqS73389NuLgmduQgfAM3Nch5QakYhrk= Subject key identifier: 0B:61:6D:5A:6C:D6:93:08:40:3E:0F:1C:DC:76:05:B6:99:35:8E:6B Authority key identifier: 0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45 Certificate issuer: /CN=0d44da5c1904095860e868180573ee3c895a7b45 Certificate serial: 019AF1D24AA4D447D4B0E69E43DBC29E7DA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 04:01:21 +0000 Manifest this update: Sat 06 Dec 2025 04:01:21 +0000 Manifest next update: Sun 07 Dec 2025 04:01:21 +0000 Files and hashes: 1: 3yv-zmmgfXirN5akYyOZ225Erpo.roa (hash: K+9VHB7ShEik6QpuUx3J66d/K6RXrAo5ZliJg0jvNJw=) 2: DUTaXBkECVhg6GgYBXPuPIlae0U.crl (hash: YEP4rWCvKs9kaipm2P5l/sUyS/2iEpopmejJb4KGmPM=) 3: PDj9CbhapwaiDPTHl4V_zSatG1U.roa (hash: y9pPTUUi0Tga4prSiUslZJiX9MosJ/c0ePSWJE6OCf4=) 4: jF8Pgd5Bgl8f2cMDpAgMnJwOiNM.roa (hash: pnp8ADM8uhliAwKsnA0g8scyokzHgOV+zWcR7wMxlws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.crl rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:4a:a4:d4:47:d4:b0:e6:9e:43:db:c2:9e:7d:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d44da5c1904095860e868180573ee3c895a7b45 Validity Not Before: Dec 6 04:01:21 2025 GMT Not After : Dec 7 04:01:21 2025 GMT Subject: CN=0b616d5a6cd69308403e0f1cdc7605b699358e6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2d:65:aa:8b:10:29:3e:8c:3e:20:b8:fa:13: 98:c6:14:e4:91:2b:08:8f:41:ab:de:42:1e:43:c8: 7b:04:1d:a0:3b:19:8e:8c:6d:8e:66:89:2d:8b:bb: 4d:33:a0:58:b6:79:31:cc:2d:b5:f8:7e:63:1a:5c: 48:ce:ef:d8:33:4d:9d:dc:b2:6b:e9:f6:28:ec:68: fa:a7:09:a6:01:eb:3e:cf:66:40:d9:d1:51:47:f2: b0:2e:98:51:84:56:f4:19:6e:dd:1a:0a:b9:ce:07: da:6b:36:ec:e1:ac:f5:5c:d2:f0:de:be:0f:26:25: 75:2f:c0:c0:db:92:2b:27:ef:b7:c7:33:c1:30:ac: fb:bd:65:76:43:d7:e6:5c:9f:ee:7f:32:13:12:ae: 13:35:87:86:fe:36:1c:66:55:f9:b9:f5:36:60:82: 44:91:fe:0e:af:57:f5:d4:94:81:3c:73:75:59:a1: cb:81:d4:71:59:fd:2b:43:71:20:f4:be:2b:20:93: ef:7e:75:77:c4:a6:76:43:3c:73:74:e5:dc:62:1c: 24:c3:36:db:34:78:40:0a:44:50:51:fc:d0:94:f5: 94:23:2f:b0:93:65:b7:3b:6e:d1:2e:c4:6e:32:4a: 73:6d:ea:b1:6d:28:24:68:92:61:ff:79:b4:11:c0: d1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:61:6D:5A:6C:D6:93:08:40:3E:0F:1C:DC:76:05:B6:99:35:8E:6B X509v3 Authority Key Identifier: keyid:0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:40:64:08:1e:52:3a:1f:b5:ff:fd:4e:2a:87:eb:3d:ee:fc: 2c:52:68:ae:e7:6b:2a:0a:4f:07:b9:ea:78:08:cf:f0:b6:6f: 4b:b8:d2:bf:b1:e3:f3:33:16:48:1b:65:4c:2a:52:f6:4c:46: 13:52:15:6f:3b:37:69:7f:d3:c3:5c:3d:76:95:ea:10:b4:1f: 8f:8a:2f:39:83:a3:b7:c3:9f:2c:c0:3c:52:cc:79:97:5e:c4: 6f:e6:8b:ba:75:28:df:59:d6:02:62:c6:69:e0:4a:41:6c:6b: 8b:4d:5e:56:9f:d9:3b:21:ff:09:97:2e:75:3a:bb:a7:32:85: cc:c8:20:8a:03:45:22:cc:10:8d:13:3a:64:9e:21:79:b8:27: f0:9c:07:7b:23:7f:c1:bc:4e:d5:a3:8c:14:38:c8:54:78:4a: 70:24:6c:fb:6e:54:56:a9:d0:c7:27:3a:ff:35:cf:37:06:27: 5d:9e:77:0f:71:60:e7:7a:8d:0f:31:36:73:af:6e:e7:d0:7a: 02:6f:f7:91:cb:ea:b7:e2:1e:7b:35:35:a6:45:ae:2e:f4:a5: 72:a4:07:d9:cc:e9:f8:59:38:39:58:af:34:d1:88:da:ff:d4: c1:80:f6:4c:75:2f:ea:fb:eb:f0:b1:9f:64:81:9f:bd:27:ae: 76:97:cb:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0kqk1EfUsOaeQ9vCnn2jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNDRkYTVjMTkwNDA5NTg2MGU4NjgxODA1NzNlZTNjODk1 YTdiNDUwHhcNMjUxMjA2MDQwMTIxWhcNMjUxMjA3MDQwMTIxWjAzMTEwLwYDVQQD EygwYjYxNmQ1YTZjZDY5MzA4NDAzZTBmMWNkYzc2MDViNjk5MzU4ZTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsi1lqosQKT6MPiC4+hOYxhTkkSsI j0Gr3kIeQ8h7BB2gOxmOjG2OZokti7tNM6BYtnkxzC21+H5jGlxIzu/YM02d3LJr 6fYo7Gj6pwmmAes+z2ZA2dFRR/KwLphRhFb0GW7dGgq5zgfaazbs4az1XNLw3r4P JiV1L8DA25IrJ++3xzPBMKz7vWV2Q9fmXJ/ufzITEq4TNYeG/jYcZlX5ufU2YIJE kf4Or1f11JSBPHN1WaHLgdRxWf0rQ3Eg9L4rIJPvfnV3xKZ2QzxzdOXcYhwkwzbb NHhACkRQUfzQlPWUIy+wk2W3O27RLsRuMkpzbeqxbSgkaJJh/3m0EcDRjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAthbVps1pMIQD4PHNx2BbaZNY5rMB8GA1UdIwQY MBaAFA1E2lwZBAlYYOhoGAVz7jyJWntFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFVUYVhCa0VDVmhnNkdnWUJYUHVQSWxhZTBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9iY2U1M2QtZDM5ZC00ZTIzLWFhMTct MjdmYjU4MjJiMzJkLzEvRFVUYVhCa0VDVmhnNkdnWUJYUHVQSWxhZTBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9iY2U1M2QtZDM5ZC00ZTIzLWFhMTctMjdmYjU4MjJiMzJk LzEvRFVUYVhCa0VDVmhnNkdnWUJYUHVQSWxhZTBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmEBkCB5S Oh+1//1OKofrPe78LFJorudrKgpPB7nqeAjP8LZvS7jSv7Hj8zMWSBtlTCpS9kxG E1IVbzs3aX/Tw1w9dpXqELQfj4ovOYOjt8OfLMA8Usx5l17Eb+aLunUo31nWAmLG aeBKQWxri01eVp/ZOyH/CZcudTq7pzKFzMggigNFIswQjRM6ZJ4hebgn8JwHeyN/ wbxO1aOMFDjIVHhKcCRs+25UVqnQxyc6/zXPNwYnXZ53D3Fg53qNDzE2c69u59B6 Am/3kcvqt+IeezU1pkWuLvSlcqQH2czp+Fk4OVivNNGI2v/UwYD2THUv6vvr8LGf ZIGfvSeudpfLxg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:06:04 2025 by rpki-client