This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft File: DmT4G542uEmRd4dnjQFNtL_O8xE.mft (raw, json) Hash identifier: uWp/FH0i6rPVSyLCUy8jJN5SrPN3wg3rBl7XT1+V30E= Subject key identifier: C9:25:72:9F:28:25:87:A0:27:23:00:AA:63:C4:CE:99:D3:27:36:5B Authority key identifier: 0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11 Certificate issuer: /CN=0e64f81b9e36b849917787678d014db4bfcef311 Certificate serial: 019B3946B2AD1A9A49669B8CE13AEED9B960 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft Manifest number: 07C3 Signing time: Sat 20 Dec 2025 01:01:33 +0000 Manifest this update: Sat 20 Dec 2025 01:01:33 +0000 Manifest next update: Sun 21 Dec 2025 01:01:33 +0000 Files and hashes: 1: DmT4G542uEmRd4dnjQFNtL_O8xE.crl (hash: gLFZiF8f6VehP0TZaawikEXi1lIuKhVAarC09zajjEk=) 2: EEHOXZie7GfjFP8O_aL3DaZW-cs.roa (hash: X68IlMoKqFdfJQq29aFoZvl4dyUrIU6qUuNNpdY5QY0=) 3: GRNi9FaG_cegQglT0i8FIDNWU2U.roa (hash: bCWNDCmq66YbcJ+QlNZxut5x3FKlyihHpYRCb3I31oo=) 4: R6j9VFf9hyGNWvQI3K-rac4qKtM.roa (hash: OsF+wduGV2ZDH6UXcdpVcVuvDncNr0AEm//3Zi2I5P8=) 5: XVq1TrlQkDFo2a7BPxVZPb6kuUE.roa (hash: aTCk4tDEozYvDRrFyrZ3f3BlxhXKcnoh7F4+cF/wfgQ=) 6: a543lKmyyGMa0HBPrwfoutV1h7c.roa (hash: LmAVwRAD65X9ZkrQl9CW8/V9eNzAq0UoEpMZCq2ur1o=) 7: jR8-xAGcr5eXfnf9PQ-gCr4sqBU.roa (hash: xAyKDInYSvUkNUl6uz5vwMUk+j1zJC/E+Ymsw/w0qH0=) 8: mK6Hd1l33q60MXDCDb-v3OAM0UE.roa (hash: BlNVjbSzLjZletHX6nfFNTrDwvaIRsmo9MnmSGytaUo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:46:b2:ad:1a:9a:49:66:9b:8c:e1:3a:ee:d9:b9:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e64f81b9e36b849917787678d014db4bfcef311 Validity Not Before: Dec 20 01:01:33 2025 GMT Not After : Dec 21 01:01:33 2025 GMT Subject: CN=c925729f282587a0272300aa63c4ce99d327365b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6b:aa:12:e9:f0:e7:54:05:68:2c:87:b1:bb: d1:17:23:7b:f0:5f:dd:43:a1:98:fe:f8:f5:76:d8: c2:1a:d4:da:77:c2:99:d4:e9:47:a3:28:18:cc:98: af:bd:38:b2:bb:09:25:70:9c:61:95:9a:f2:f4:bf: d2:73:95:7f:01:c4:07:f9:6d:dd:4f:79:39:d3:4e: 0a:21:65:6e:51:cc:4d:9b:f7:c2:00:ad:fd:d4:ba: eb:1d:62:fe:3d:63:55:ed:9a:e5:90:1a:74:d1:36: f3:a4:9c:55:05:d6:7b:aa:00:d7:1c:15:4a:df:51: 6e:8f:6f:31:e6:a0:97:d0:a7:e3:77:a2:1c:01:b3: b8:ab:bc:ff:1d:92:c2:81:a6:45:ee:50:04:78:3e: 3f:8f:ca:45:c1:b7:cb:8a:3f:03:eb:e4:ba:e7:79: 73:df:b3:87:3e:d9:c1:d5:a8:b7:52:3b:38:d5:3a: 07:da:30:d1:5b:f8:31:25:b1:07:f1:6e:4e:90:6c: 7e:6d:89:7b:86:df:c8:4a:21:1e:c6:de:ad:1d:2e: 24:49:60:25:52:92:9f:51:d6:74:9a:86:06:7f:90: b3:63:48:d3:14:88:1f:9b:99:5e:d4:e7:ca:5e:d0: 3f:1d:af:93:1e:c6:b2:48:53:04:fb:c3:3a:f2:c6: 87:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:25:72:9F:28:25:87:A0:27:23:00:AA:63:C4:CE:99:D3:27:36:5B X509v3 Authority Key Identifier: keyid:0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:c9:07:15:77:dd:96:bc:99:5d:6d:9a:dc:e8:12:39:40:86: 0f:d4:64:63:9f:23:0c:1b:2a:fc:56:0e:78:36:db:ec:16:6a: a9:78:b0:78:73:bb:e1:a0:6b:cd:7e:60:c3:34:5b:69:71:f4: a3:64:a7:49:cc:54:50:57:b3:6f:60:28:f3:21:22:2f:ef:51: 1c:8c:94:4b:8e:31:71:77:cf:5e:d2:21:c9:52:a0:27:8d:d8: 29:9e:7e:4a:75:e7:3b:6e:b6:77:54:ce:8b:ac:c3:a8:17:88: 0c:06:1b:6e:b9:ec:63:c9:47:6d:ec:b6:a0:1e:ea:9c:74:39: 4d:1b:d5:e5:ae:b2:ec:0f:40:d3:ba:ab:24:e5:b3:a7:11:fa: c6:9d:58:a3:fa:d5:9c:eb:1e:0d:f3:26:8c:39:94:3d:a0:e0: b2:b3:93:a3:ec:19:ac:3b:d3:6f:5f:36:54:99:d7:b3:04:55: 40:4b:76:c7:44:a4:4f:d7:98:a8:2e:63:94:24:45:fd:04:ad: b4:38:6d:56:5f:0a:bd:1d:fe:0c:67:60:65:80:47:29:14:5a: 8b:7d:8d:c3:c6:56:38:5d:b3:6b:e4:0b:f6:bb:f2:01:67:d5: 23:f5:d4:ca:90:d2:c0:62:1e:cb:1f:ad:13:1e:a3:c3:26:0b: 1e:06:cd:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5RrKtGppJZpuM4Tru2blgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNjRmODFiOWUzNmI4NDk5MTc3ODc2NzhkMDE0ZGI0YmZj ZWYzMTEwHhcNMjUxMjIwMDEwMTMzWhcNMjUxMjIxMDEwMTMzWjAzMTEwLwYDVQQD EyhjOTI1NzI5ZjI4MjU4N2EwMjcyMzAwYWE2M2M0Y2U5OWQzMjczNjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2uqEunw51QFaCyHsbvRFyN78F/d Q6GY/vj1dtjCGtTad8KZ1OlHoygYzJivvTiyuwklcJxhlZry9L/Sc5V/AcQH+W3d T3k5004KIWVuUcxNm/fCAK391LrrHWL+PWNV7ZrlkBp00TbzpJxVBdZ7qgDXHBVK 31Fuj28x5qCX0Kfjd6IcAbO4q7z/HZLCgaZF7lAEeD4/j8pFwbfLij8D6+S653lz 37OHPtnB1ai3Ujs41ToH2jDRW/gxJbEH8W5OkGx+bYl7ht/ISiEext6tHS4kSWAl UpKfUdZ0moYGf5CzY0jTFIgfm5le1OfKXtA/Ha+THsaySFME+8M68saHTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMklcp8oJYegJyMAqmPEzpnTJzZbMB8GA1UdIwQY MBaAFA5k+BueNrhJkXeHZ40BTbS/zvMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG1UNEc1NDJ1RW1SZDRkbmpRRk50TF9POHhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy81OTRkMjUtZjFjNi00MDQ0LWE4YTct YzhmMTgyZTk1ZWE1LzEvRG1UNEc1NDJ1RW1SZDRkbmpRRk50TF9POHhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy81OTRkMjUtZjFjNi00MDQ0LWE4YTctYzhmMTgyZTk1ZWE1 LzEvRG1UNEc1NDJ1RW1SZDRkbmpRRk50TF9POHhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJMkHFXfd lryZXW2a3OgSOUCGD9RkY58jDBsq/FYOeDbb7BZqqXiweHO74aBrzX5gwzRbaXH0 o2SnScxUUFezb2Ao8yEiL+9RHIyUS44xcXfPXtIhyVKgJ43YKZ5+SnXnO262d1TO i6zDqBeIDAYbbrnsY8lHbey2oB7qnHQ5TRvV5a6y7A9A07qrJOWzpxH6xp1Yo/rV nOseDfMmjDmUPaDgsrOTo+wZrDvTb182VJnXswRVQEt2x0SkT9eYqC5jlCRF/QSt tDhtVl8KvR3+DGdgZYBHKRRai32Nw8ZWOF2za+QL9rvyAWfVI/XUypDSwGIeyx+t Ex6jwyYLHgbNNw== -----END CERTIFICATE-----Generated at Sat Dec 20 04:23:29 2025 by rpki-client