This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft File: dcuRtTn9feisVTjK9Tu_L6wbslk.mft (raw, json) Hash identifier: JVc56adqN2YRB3rTA0bMErld3+Hpc1XnRJ4Dp7M0E6w= Subject key identifier: 0E:A1:5C:E8:43:7A:5A:95:8E:F5:5B:6D:78:0F:AB:FE:CC:4B:7A:A2 Authority key identifier: 75:CB:91:B5:39:FD:7D:E8:AC:55:38:CA:F5:3B:BF:2F:AC:1B:B2:59 Certificate issuer: /CN=75cb91b539fd7de8ac5538caf53bbf2fac1bb259 Certificate serial: 019AF23FCF26B2061AD824179FFA119BB1D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft Manifest number: 0813 Signing time: Sat 06 Dec 2025 06:00:59 +0000 Manifest this update: Sat 06 Dec 2025 06:00:59 +0000 Manifest next update: Sun 07 Dec 2025 06:00:59 +0000 Files and hashes: 1: dcuRtTn9feisVTjK9Tu_L6wbslk.crl (hash: ObDXD5yBORGfQVkDm9c+QY4SkinsPQ5KHhEjwDiLVsM=) 2: wmFwOwWe4TE9uLkEByUtzshEopU.roa (hash: QBlI2HpuFwgzwXYHTq+pMuExi7xAAtXFZ+n0JdzIy8U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 06:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:cf:26:b2:06:1a:d8:24:17:9f:fa:11:9b:b1:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75cb91b539fd7de8ac5538caf53bbf2fac1bb259 Validity Not Before: Dec 6 06:00:59 2025 GMT Not After : Dec 7 06:00:59 2025 GMT Subject: CN=0ea15ce8437a5a958ef55b6d780fabfecc4b7aa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4d:8f:9b:e8:c3:f7:b6:d4:ed:5f:0a:f2:cf: ea:a6:9d:dc:57:39:ab:c3:79:7e:cf:f0:f7:c2:44: 1a:c9:7b:74:d9:d6:2d:1a:74:ba:bb:ee:b1:77:00: 4f:61:36:dc:f1:e5:7f:4f:b5:29:fa:f7:c3:c2:70: 57:43:28:e8:eb:62:63:bd:82:35:cf:58:9a:0c:43: 84:eb:b3:dd:e9:79:02:cc:5a:4a:2d:8d:b0:7d:a4: a0:48:60:db:89:9a:ab:0d:e7:e5:ea:5f:c5:df:b5: e4:82:0a:d5:ae:ad:a3:70:cf:84:30:0c:ba:2f:e5: 31:9d:7c:09:46:19:5a:53:5b:fd:f7:5d:15:ee:4c: e0:37:d0:b7:fe:87:06:dd:85:bf:29:1a:6e:03:9d: 28:2a:e2:9d:01:92:cf:73:55:02:53:e5:86:91:9d: d9:0b:d2:42:20:0c:f0:3d:66:f6:86:7e:2a:de:ee: cf:51:93:e8:80:e2:e7:47:23:4f:df:c2:99:88:32: 2b:cd:a1:87:8d:4a:94:0f:30:8e:07:15:f3:92:d0: 6c:c1:0a:6a:9e:a5:e1:2f:ee:16:c5:70:9f:d0:1b: 92:09:e9:da:70:00:22:90:c5:29:7d:29:2c:cc:f5: ca:26:d1:25:b0:a9:59:6b:07:20:68:8c:b1:e7:42: 5e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:A1:5C:E8:43:7A:5A:95:8E:F5:5B:6D:78:0F:AB:FE:CC:4B:7A:A2 X509v3 Authority Key Identifier: keyid:75:CB:91:B5:39:FD:7D:E8:AC:55:38:CA:F5:3B:BF:2F:AC:1B:B2:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:d0:4c:c9:05:91:aa:fa:df:48:47:bf:38:6c:5d:f3:fe:9f: 07:0f:19:81:54:04:42:7a:c5:88:58:df:e2:dc:16:2a:d1:a5: 2e:bc:d4:4b:b3:d3:fb:f1:fb:34:b7:58:ac:f4:d4:74:d3:0d: 03:7c:bc:44:eb:55:d2:9e:d8:02:9d:21:7c:c6:4c:e6:b0:c9: 3e:24:f5:55:e7:be:76:24:5f:58:ee:67:5a:ca:45:4c:a0:d7: 08:84:40:ab:7b:f6:73:0f:72:e1:20:83:2e:03:c6:a5:cb:59: 2f:11:a1:ed:72:9e:c8:d5:7a:d4:0b:a4:1f:9f:5c:07:30:67: 44:36:e2:d3:b2:a6:ea:32:91:73:c8:8a:ef:d8:52:71:3d:db: c3:73:e5:d1:6e:7f:42:cb:15:78:ca:ac:7d:59:a1:13:29:f7: 3d:a5:8f:98:f5:c4:82:82:e5:06:79:2d:8a:4a:6d:31:f1:a0: 2c:6d:97:1d:cb:c8:d6:8f:43:8c:2c:32:f4:0d:49:3a:31:25: b3:fc:e0:e1:95:72:fd:87:80:03:15:b7:c9:3a:c4:13:b1:fb: 87:3c:40:23:cd:29:00:c4:b8:cb:b1:24:e2:7e:aa:a9:f0:24: cf:2b:d9:36:cc:35:ec:bf:85:a0:84:40:36:67:b5:50:d2:df: fd:f1:de:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP88msgYa2CQXn/oRm7HUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1Y2I5MWI1MzlmZDdkZThhYzU1MzhjYWY1M2JiZjJmYWMx YmIyNTkwHhcNMjUxMjA2MDYwMDU5WhcNMjUxMjA3MDYwMDU5WjAzMTEwLwYDVQQD EygwZWExNWNlODQzN2E1YTk1OGVmNTViNmQ3ODBmYWJmZWNjNGI3YWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxU2Pm+jD97bU7V8K8s/qpp3cVzmr w3l+z/D3wkQayXt02dYtGnS6u+6xdwBPYTbc8eV/T7Up+vfDwnBXQyjo62JjvYI1 z1iaDEOE67Pd6XkCzFpKLY2wfaSgSGDbiZqrDefl6l/F37XkggrVrq2jcM+EMAy6 L+UxnXwJRhlaU1v9910V7kzgN9C3/ocG3YW/KRpuA50oKuKdAZLPc1UCU+WGkZ3Z C9JCIAzwPWb2hn4q3u7PUZPogOLnRyNP38KZiDIrzaGHjUqUDzCOBxXzktBswQpq nqXhL+4WxXCf0BuSCenacAAikMUpfSkszPXKJtElsKlZawcgaIyx50JexQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA6hXOhDelqVjvVbbXgPq/7MS3qiMB8GA1UdIwQY MBaAFHXLkbU5/X3orFU4yvU7vy+sG7JZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGN1UnRUbjlmZWlzVlRqSzlUdV9MNndic2xrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9iM2QyNWMtNDViYS00MzNmLTg4MjQt MTdlMGE2ODY5Y2VkLzEvZGN1UnRUbjlmZWlzVlRqSzlUdV9MNndic2xrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9iM2QyNWMtNDViYS00MzNmLTg4MjQtMTdlMGE2ODY5Y2Vk LzEvZGN1UnRUbjlmZWlzVlRqSzlUdV9MNndic2xrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACdBMyQWR qvrfSEe/OGxd8/6fBw8ZgVQEQnrFiFjf4twWKtGlLrzUS7PT+/H7NLdYrPTUdNMN A3y8ROtV0p7YAp0hfMZM5rDJPiT1Vee+diRfWO5nWspFTKDXCIRAq3v2cw9y4SCD LgPGpctZLxGh7XKeyNV61AukH59cBzBnRDbi07Km6jKRc8iK79hScT3bw3Pl0W5/ QssVeMqsfVmhEyn3PaWPmPXEgoLlBnktikptMfGgLG2XHcvI1o9DjCwy9A1JOjEl s/zg4ZVy/YeAAxW3yTrEE7H7hzxAI80pAMS4y7Ek4n6qqfAkzyvZNsw17L+FoIRA Nme1UNLf/fHeEQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:07:07 2025 by rpki-client