This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft File: DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft (raw, json) Hash identifier: hGrFJC+vTsThY09mntdr2gnXhao9Q9MB6Ckb4XODQN0= Subject key identifier: 90:7D:4B:DB:FE:12:66:71:F9:62:A9:5A:D4:12:8A:80:5F:F5:C6:31 Authority key identifier: 0C:A5:19:90:CE:0C:89:F0:D2:10:60:9E:67:E9:E8:07:56:5C:13:1F Certificate issuer: /CN=0ca51990ce0c89f0d210609e67e9e807565c131f Certificate serial: 019B5E9CBCA80E2F8015EDC401ED2737F6D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKUZkM4MifDSEGCeZ-noB1ZcEx8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft Manifest number: 17 Signing time: Sat 27 Dec 2025 07:01:28 +0000 Manifest this update: Sat 27 Dec 2025 07:01:28 +0000 Manifest next update: Sun 28 Dec 2025 07:01:28 +0000 Files and hashes: 1: 2OHFPQVJVgVn60Ld5ccjFPlW1i0.asa (hash: +IoXSl7cJZOwMQhzd2pQ1n8sh9/7YWkQ4/mMli/beos=) 2: DKUZkM4MifDSEGCeZ-noB1ZcEx8.crl (hash: h382lmXYyOlLhy9IYfJ3tbfAg+SP5Tkr2mKWbPdtcyo=) 3: bXExQtE2rsssLcHm9zFscNvg6uU.roa (hash: +TlfvfkpHkxj8edMDvPQZBfnz+Yh21yBEM7LNlWsTfU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.crl rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft rsync://rpki.ripe.net/repository/DEFAULT/DKUZkM4MifDSEGCeZ-noB1ZcEx8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 07:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5e:9c:bc:a8:0e:2f:80:15:ed:c4:01:ed:27:37:f6:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ca51990ce0c89f0d210609e67e9e807565c131f Validity Not Before: Dec 27 07:01:28 2025 GMT Not After : Dec 28 07:01:28 2025 GMT Subject: CN=907d4bdbfe126671f962a95ad4128a805ff5c631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:53:b6:6e:f9:f9:e3:89:c9:9f:4e:b6:a4:8f: 3e:df:18:6e:eb:19:3a:17:f9:1c:c2:38:31:8d:92: c8:25:b5:38:f2:d0:91:48:a0:f8:5d:3e:67:40:10: 37:79:ed:06:03:70:8a:7c:76:af:66:90:46:42:f2: 73:96:84:b3:1f:d2:e8:a7:a8:01:88:82:9f:72:3b: 8e:a0:69:1d:97:5c:94:02:7b:1f:67:04:d3:c6:d9: 44:66:ba:f2:59:81:f1:47:a3:56:84:76:55:29:e8: 57:87:71:7c:dc:a4:e8:20:91:b4:d0:ac:d1:07:c7: 1d:b1:a5:91:42:90:12:91:c0:ff:b0:22:d9:d0:fb: 7b:c4:25:8e:bf:95:b7:a5:f6:43:63:8b:a5:3b:b4: f2:c2:f0:66:78:36:5a:d4:3b:bc:0e:7f:45:e5:62: 86:1e:f5:22:16:58:3e:75:d3:d7:a1:78:0f:39:99: 9e:ec:d1:3c:6b:62:4e:c0:90:f5:e5:06:f7:5b:d7: cc:0a:7e:4f:3b:59:c8:d5:ec:86:d5:dc:4c:f0:af: c8:56:4d:ea:b9:fa:aa:77:de:b2:f2:4c:c7:f1:25: 00:45:1b:91:ee:58:de:5b:08:5f:54:a1:02:7b:79: e4:ab:d1:cc:53:6d:09:03:30:95:b2:a1:2e:6a:eb: ef:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:7D:4B:DB:FE:12:66:71:F9:62:A9:5A:D4:12:8A:80:5F:F5:C6:31 X509v3 Authority Key Identifier: keyid:0C:A5:19:90:CE:0C:89:F0:D2:10:60:9E:67:E9:E8:07:56:5C:13:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKUZkM4MifDSEGCeZ-noB1ZcEx8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:31:20:a2:33:ad:34:85:49:1d:f1:9d:38:4e:74:f0:af:e6: 3f:d9:12:e5:b3:c7:a3:35:d4:38:88:56:18:ae:88:9d:a2:44: 07:23:a9:7e:32:6a:28:c2:e8:c7:73:6a:11:14:80:97:80:f4: ed:f9:5b:b6:b1:67:70:8b:87:5d:0e:1e:2e:54:9a:ff:cb:7f: 69:0a:bf:ec:22:f8:9e:eb:c9:76:81:82:ca:9f:58:af:a6:e7: 57:1a:8c:66:64:06:28:c8:22:c4:87:87:ae:f1:bb:9c:ed:b5: 1f:93:19:06:48:d7:3c:82:8b:5b:b0:61:ad:f8:bb:03:66:45: 57:f6:af:1c:2c:6f:dd:fc:10:1d:6d:64:ee:48:a4:5a:2a:75: 87:01:cf:e2:ff:b0:cf:72:5f:45:d7:60:26:f3:5e:54:1c:18: 07:f0:04:36:e4:74:f5:fe:e9:fa:37:ab:5e:6b:59:83:f2:78: 97:34:64:3f:98:c8:03:fb:b7:56:9f:ba:ae:e1:d8:5b:cf:1f: 1f:a2:81:fa:54:2e:7a:ff:f6:4b:6b:dd:9f:92:f8:ba:a7:a5: 14:d3:03:36:5b:f8:0a:32:0f:a9:03:a2:20:e5:21:e3:98:60: 29:43:00:7c:92:9f:d3:f3:3d:31:0a:e3:8f:2e:9f:1c:9c:92: 04:49:bc:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtenLyoDi+AFe3EAe0nN/bXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjYTUxOTkwY2UwYzg5ZjBkMjEwNjA5ZTY3ZTllODA3NTY1 YzEzMWYwHhcNMjUxMjI3MDcwMTI4WhcNMjUxMjI4MDcwMTI4WjAzMTEwLwYDVQQD Eyg5MDdkNGJkYmZlMTI2NjcxZjk2MmE5NWFkNDEyOGE4MDVmZjVjNjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VO2bvn544nJn062pI8+3xhu6xk6 F/kcwjgxjZLIJbU48tCRSKD4XT5nQBA3ee0GA3CKfHavZpBGQvJzloSzH9Lop6gB iIKfcjuOoGkdl1yUAnsfZwTTxtlEZrryWYHxR6NWhHZVKehXh3F83KToIJG00KzR B8cdsaWRQpASkcD/sCLZ0Pt7xCWOv5W3pfZDY4ulO7TywvBmeDZa1Du8Dn9F5WKG HvUiFlg+ddPXoXgPOZme7NE8a2JOwJD15Qb3W9fMCn5PO1nI1eyG1dxM8K/IVk3q ufqqd96y8kzH8SUARRuR7ljeWwhfVKECe3nkq9HMU20JAzCVsqEuauvvOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJB9S9v+EmZx+WKpWtQSioBf9cYxMB8GA1UdIwQY MBaAFAylGZDODInw0hBgnmfp6AdWXBMfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREtVWmtNNE1pZkRTRUdDZVotbm9CMVpjRXg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9mNjMwYTgtNzE3OS00MDA1LTg1ZWYt OWI2ZGIxZTcyMDg4LzEvREtVWmtNNE1pZkRTRUdDZVotbm9CMVpjRXg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9mNjMwYTgtNzE3OS00MDA1LTg1ZWYtOWI2ZGIxZTcyMDg4 LzEvREtVWmtNNE1pZkRTRUdDZVotbm9CMVpjRXg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVzEgojOt NIVJHfGdOE508K/mP9kS5bPHozXUOIhWGK6InaJEByOpfjJqKMLox3NqERSAl4D0 7flbtrFncIuHXQ4eLlSa/8t/aQq/7CL4nuvJdoGCyp9Yr6bnVxqMZmQGKMgixIeH rvG7nO21H5MZBkjXPIKLW7Bhrfi7A2ZFV/avHCxv3fwQHW1k7kikWip1hwHP4v+w z3JfRddgJvNeVBwYB/AENuR09f7p+jerXmtZg/J4lzRkP5jIA/u3Vp+6ruHYW88f H6KB+lQuev/2S2vdn5L4uqelFNMDNlv4CjIPqQOiIOUh45hgKUMAfJKf0/M9MQrj jy6fHJySBEm8dA== -----END CERTIFICATE-----Generated at Sat Dec 27 10:45:28 2025 by rpki-client