This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/86c789-74ff-4456-b75a-3ac4ad29e46e/1/H65TutIFt6PYV3Frsky_DVW_D2w.mft File: H65TutIFt6PYV3Frsky_DVW_D2w.mft (raw, json) Hash identifier: 378tB2ScK1CQwc40pK60pPFVpn1GvZybeWVdTxfMW7Q= Subject key identifier: AE:45:08:DE:32:12:1B:19:25:E3:C1:D9:3D:8A:FD:4D:58:B4:8D:4B Authority key identifier: 1F:AE:53:BA:D2:05:B7:A3:D8:57:71:6B:B2:4C:BF:0D:55:BF:0F:6C Certificate issuer: /CN=1fae53bad205b7a3d857716bb24cbf0d55bf0f6c Certificate serial: 019B766EA38092B114087CB09BD8FA563DA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H65TutIFt6PYV3Frsky_DVW_D2w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/86c789-74ff-4456-b75a-3ac4ad29e46e/1/H65TutIFt6PYV3Frsky_DVW_D2w.mft Manifest number: 0B5B Signing time: Wed 31 Dec 2025 22:02:00 +0000 Manifest this update: Wed 31 Dec 2025 22:02:00 +0000 Manifest next update: Thu 01 Jan 2026 22:02:00 +0000 Files and hashes: 1: H65TutIFt6PYV3Frsky_DVW_D2w.crl (hash: xNhmVYboMRqYq2MIFnsKyJMe1TXmHn3Tsp30M6RkjhU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/86c789-74ff-4456-b75a-3ac4ad29e46e/1/H65TutIFt6PYV3Frsky_DVW_D2w.crl rsync://rpki.ripe.net/repository/DEFAULT/13/86c789-74ff-4456-b75a-3ac4ad29e46e/1/H65TutIFt6PYV3Frsky_DVW_D2w.mft rsync://rpki.ripe.net/repository/DEFAULT/H65TutIFt6PYV3Frsky_DVW_D2w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:6e:a3:80:92:b1:14:08:7c:b0:9b:d8:fa:56:3d:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fae53bad205b7a3d857716bb24cbf0d55bf0f6c Validity Not Before: Dec 31 22:02:00 2025 GMT Not After : Jan 1 22:02:00 2026 GMT Subject: CN=ae4508de32121b1925e3c1d93d8afd4d58b48d4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:26:5f:b3:1c:8e:65:cb:86:bd:fc:73:4f:a1: 44:6d:c0:c7:74:17:33:5b:64:66:f7:45:db:92:78: 41:81:5b:2b:35:51:a8:b4:5c:d5:69:cd:17:dd:2f: 84:d6:f2:15:8f:0e:1a:9d:f6:df:50:ae:96:af:3a: bb:2c:7a:f3:d1:71:07:07:0c:ae:fc:b7:83:2c:23: a3:0b:00:61:7f:ba:3e:c4:96:9f:02:9c:4c:cd:38: 77:7d:2e:0d:a0:ce:8e:34:03:cd:77:62:52:09:77: 9b:4e:e1:34:70:36:86:95:52:05:f9:9d:76:56:13: e5:da:25:da:39:23:47:17:24:d1:61:70:95:cb:3d: 86:f3:0a:3f:5a:1c:f2:88:f3:c6:f8:55:86:74:4a: 71:49:68:6c:18:e2:d2:8a:cd:99:c0:e9:7d:2e:d7: 91:f0:ed:ca:03:16:ee:d7:cd:c1:47:55:87:11:fb: 4d:6e:a8:d1:73:f3:58:8c:31:c7:af:22:f8:b0:d3: 75:b5:a0:8c:80:9c:5e:b0:41:b9:25:dd:56:c9:3b: 27:ce:e0:70:1d:cd:96:81:64:25:51:d3:de:9a:e7: 2a:77:72:92:de:4a:e0:13:4f:54:5b:50:07:3b:62: 5a:44:98:37:5b:c2:4c:42:0d:de:29:ae:6f:61:c4: 3a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:45:08:DE:32:12:1B:19:25:E3:C1:D9:3D:8A:FD:4D:58:B4:8D:4B X509v3 Authority Key Identifier: keyid:1F:AE:53:BA:D2:05:B7:A3:D8:57:71:6B:B2:4C:BF:0D:55:BF:0F:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H65TutIFt6PYV3Frsky_DVW_D2w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/86c789-74ff-4456-b75a-3ac4ad29e46e/1/H65TutIFt6PYV3Frsky_DVW_D2w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/86c789-74ff-4456-b75a-3ac4ad29e46e/1/H65TutIFt6PYV3Frsky_DVW_D2w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:6d:6f:60:be:29:eb:25:98:e9:e4:e5:15:6c:8c:5d:a4:82: d9:af:30:b1:81:f3:bc:5f:ed:4c:0b:70:3d:75:d5:a9:21:aa: f6:fa:50:1e:a3:97:56:b7:1e:0b:49:78:ad:f2:c4:2a:40:51: 52:c8:78:99:38:b5:e6:f9:cb:e2:3d:79:d7:b5:9c:88:37:89: 64:60:1f:76:3f:8d:20:31:a1:79:d9:2c:a7:30:dc:f5:a3:ad: a5:2d:86:92:e6:13:9b:b5:80:61:55:14:0e:ea:c5:83:88:d5: ae:70:e5:ff:ae:b6:84:68:cb:a8:2c:fb:a3:2c:f5:b5:6d:77: 75:d6:d4:8f:d7:77:2c:5a:ac:c6:28:f5:ea:b6:17:96:92:0c: a6:14:77:a0:85:8e:7f:70:b5:a8:52:11:14:55:2d:43:4b:43: ff:8e:a4:b9:d5:72:36:72:c3:aa:26:04:97:21:98:f5:16:39: 73:68:61:8b:ff:b0:d9:96:e8:c9:d5:59:12:22:ea:10:35:0d: 61:99:b0:55:e0:5c:b0:57:6c:92:e3:ea:37:3e:f3:ca:bc:1c: 56:5a:b2:c4:de:f7:ad:2f:e3:8f:b2:7b:a2:92:79:c8:3c:58: e8:68:60:10:86:ee:fc:06:9a:00:51:7e:97:f2:39:7e:f8:eb: 9d:4f:38:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt2bqOAkrEUCHywm9j6Vj2mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmYWU1M2JhZDIwNWI3YTNkODU3NzE2YmIyNGNiZjBkNTVi ZjBmNmMwHhcNMjUxMjMxMjIwMjAwWhcNMjYwMTAxMjIwMjAwWjAzMTEwLwYDVQQD EyhhZTQ1MDhkZTMyMTIxYjE5MjVlM2MxZDkzZDhhZmQ0ZDU4YjQ4ZDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iZfsxyOZcuGvfxzT6FEbcDHdBcz W2Rm90XbknhBgVsrNVGotFzVac0X3S+E1vIVjw4anfbfUK6Wrzq7LHrz0XEHBwyu /LeDLCOjCwBhf7o+xJafApxMzTh3fS4NoM6ONAPNd2JSCXebTuE0cDaGlVIF+Z12 VhPl2iXaOSNHFyTRYXCVyz2G8wo/WhzyiPPG+FWGdEpxSWhsGOLSis2ZwOl9LteR 8O3KAxbu183BR1WHEftNbqjRc/NYjDHHryL4sNN1taCMgJxesEG5Jd1WyTsnzuBw Hc2WgWQlUdPemucqd3KS3krgE09UW1AHO2JaRJg3W8JMQg3eKa5vYcQ6rwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK5FCN4yEhsZJePB2T2K/U1YtI1LMB8GA1UdIwQY MBaAFB+uU7rSBbej2Fdxa7JMvw1Vvw9sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDY1VHV0SUZ0NlBZVjNGcnNreV9EVldfRDJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy84NmM3ODktNzRmZi00NDU2LWI3NWEt M2FjNGFkMjllNDZlLzEvSDY1VHV0SUZ0NlBZVjNGcnNreV9EVldfRDJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy84NmM3ODktNzRmZi00NDU2LWI3NWEtM2FjNGFkMjllNDZl LzEvSDY1VHV0SUZ0NlBZVjNGcnNreV9EVldfRDJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo21vYL4p 6yWY6eTlFWyMXaSC2a8wsYHzvF/tTAtwPXXVqSGq9vpQHqOXVrceC0l4rfLEKkBR Ush4mTi15vnL4j1517WciDeJZGAfdj+NIDGhedkspzDc9aOtpS2GkuYTm7WAYVUU DurFg4jVrnDl/662hGjLqCz7oyz1tW13ddbUj9d3LFqsxij16rYXlpIMphR3oIWO f3C1qFIRFFUtQ0tD/46kudVyNnLDqiYElyGY9RY5c2hhi/+w2ZboydVZEiLqEDUN YZmwVeBcsFdskuPqNz7zyrwcVlqyxN73rS/jj7J7opJ5yDxY6GhgEIbu/AaaAFF+ l/I5fvjrnU845Q== -----END CERTIFICATE-----Generated at Thu Jan 1 00:01:39 2026 by rpki-client