This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft File: DT66aHPFtQdbPEOff-61SvHxDak.mft (raw, json) Hash identifier: 3RDjaKzAKtXj53GZp1EuJG2tqbtYb1Pjhqhv849toIQ= Subject key identifier: 39:06:E2:FF:D3:FC:56:05:49:9D:FD:0D:1E:CA:67:4D:49:F6:DF:FE Authority key identifier: 0D:3E:BA:68:73:C5:B5:07:5B:3C:43:9F:7F:EE:B5:4A:F1:F1:0D:A9 Certificate issuer: /CN=0d3eba6873c5b5075b3c439f7feeb54af1f10da9 Certificate serial: 019B5BD1DA480E8A092CE00247278033F630 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DT66aHPFtQdbPEOff-61SvHxDak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft Manifest number: 179F Signing time: Fri 26 Dec 2025 18:00:38 +0000 Manifest this update: Fri 26 Dec 2025 18:00:38 +0000 Manifest next update: Sat 27 Dec 2025 18:00:38 +0000 Files and hashes: 1: DT66aHPFtQdbPEOff-61SvHxDak.crl (hash: q5sJ7uXLBf+E+Hg9HMyq3ndREOpkC5HXzhEVln64Quc=) 2: bJFxuWRTLDK11fnMj6JzG9bfGJc.roa (hash: GJmoaYMZlK46RmoyjMRGd4Icb8shLixbmKsjvQhxyu0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.crl rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft rsync://rpki.ripe.net/repository/DEFAULT/DT66aHPFtQdbPEOff-61SvHxDak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:d1:da:48:0e:8a:09:2c:e0:02:47:27:80:33:f6:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d3eba6873c5b5075b3c439f7feeb54af1f10da9 Validity Not Before: Dec 26 18:00:38 2025 GMT Not After : Dec 27 18:00:38 2025 GMT Subject: CN=3906e2ffd3fc5605499dfd0d1eca674d49f6dffe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7d:e2:f9:c5:69:34:2a:14:84:f8:f8:5a:43: 26:59:46:70:6f:7a:96:de:62:8c:b1:24:79:36:f6: 7d:79:92:3e:e9:07:5f:9d:1d:7e:97:d2:28:49:09: ea:97:70:98:b4:5a:e6:e8:99:1c:ec:71:3c:49:2d: fd:85:18:23:27:98:52:4e:8d:b0:2b:3a:90:63:5d: 63:f6:67:56:c2:65:dd:4d:85:34:68:7e:77:2f:00: bc:6a:13:ea:47:c0:f4:c8:73:1b:4f:06:55:0a:fd: 05:df:b8:4d:42:33:f2:f8:a4:2c:be:33:43:a8:20: f4:54:a8:fa:7b:81:5f:fb:e2:b6:fc:fe:4a:7f:f4: 05:18:68:f3:f7:8e:87:ab:40:df:9a:2a:e5:86:de: bc:9e:a8:b1:3b:79:3b:07:a2:2d:4f:1e:f3:82:39: de:2c:db:b1:18:7e:5f:7d:ea:3f:9f:f7:46:a1:73: 1c:c9:63:13:71:cf:ad:44:f1:3c:af:83:85:47:84: f6:d3:ff:1b:00:13:d9:4a:4d:74:0d:2e:6b:98:b6: 35:6a:57:d2:4b:e2:62:b1:fa:28:2e:67:61:55:1c: bf:de:f0:43:47:a2:5d:1b:77:8c:78:3b:a2:c2:e1: 9b:26:d3:24:a4:7d:84:af:7b:1e:5e:27:66:ce:03: 68:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:06:E2:FF:D3:FC:56:05:49:9D:FD:0D:1E:CA:67:4D:49:F6:DF:FE X509v3 Authority Key Identifier: keyid:0D:3E:BA:68:73:C5:B5:07:5B:3C:43:9F:7F:EE:B5:4A:F1:F1:0D:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DT66aHPFtQdbPEOff-61SvHxDak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3383f1-0428-464b-bd1e-27998bf17465/1/DT66aHPFtQdbPEOff-61SvHxDak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:d2:c7:65:ee:ef:22:19:d0:9c:58:1d:93:8c:f2:a7:a7:db: 9d:ba:99:b4:f0:bd:4f:0d:1a:17:71:cc:76:a7:f0:0b:76:47: 59:d7:5b:40:de:55:3b:09:77:91:3b:97:ee:8f:94:f7:6c:3f: 70:cb:fc:50:88:34:aa:91:fc:dc:4a:b7:11:85:08:9c:6a:6e: e3:d3:0d:f8:34:0a:2b:34:06:e0:87:ba:aa:43:70:66:56:52: 76:7e:38:28:13:9f:aa:14:e7:bc:9b:55:e8:fa:55:4d:30:ba: 43:8e:1d:bb:95:cc:82:8d:b5:7c:1c:90:da:23:16:77:8e:67: ea:e9:f6:24:29:57:f6:ea:38:6a:61:20:08:12:6c:47:83:95: 95:38:6d:f8:38:c6:d0:e4:17:f4:f5:61:d8:53:51:ca:80:a1: e7:4c:db:a3:0b:44:78:aa:57:e3:79:71:ab:d7:15:41:1d:e0: e6:e6:a3:83:22:4a:ba:6f:90:b5:98:90:54:58:1b:b6:3d:b1: 75:f4:87:f4:72:14:c6:30:db:75:2f:6e:fb:33:21:29:02:6e: 8d:df:f7:fa:25:f5:a0:f1:b2:7f:25:50:5f:da:97:0a:7e:01: 2d:4b:56:5c:2a:70:a5:75:4f:94:11:94:0d:6d:3e:c1:60:8c: e2:d9:87:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtb0dpIDooJLOACRyeAM/YwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkM2ViYTY4NzNjNWI1MDc1YjNjNDM5ZjdmZWViNTRhZjFm MTBkYTkwHhcNMjUxMjI2MTgwMDM4WhcNMjUxMjI3MTgwMDM4WjAzMTEwLwYDVQQD EygzOTA2ZTJmZmQzZmM1NjA1NDk5ZGZkMGQxZWNhNjc0ZDQ5ZjZkZmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqH3i+cVpNCoUhPj4WkMmWUZwb3qW 3mKMsSR5NvZ9eZI+6QdfnR1+l9IoSQnql3CYtFrm6Jkc7HE8SS39hRgjJ5hSTo2w KzqQY11j9mdWwmXdTYU0aH53LwC8ahPqR8D0yHMbTwZVCv0F37hNQjPy+KQsvjND qCD0VKj6e4Ff++K2/P5Kf/QFGGjz946Hq0Dfmirlht68nqixO3k7B6ItTx7zgjne LNuxGH5ffeo/n/dGoXMcyWMTcc+tRPE8r4OFR4T20/8bABPZSk10DS5rmLY1alfS S+JisfooLmdhVRy/3vBDR6JdG3eMeDuiwuGbJtMkpH2Er3seXidmzgNo4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDkG4v/T/FYFSZ39DR7KZ01J9t/+MB8GA1UdIwQY MBaAFA0+umhzxbUHWzxDn3/utUrx8Q2pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFQ2NmFIUEZ0UWRiUEVPZmYtNjFTdkh4RGFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8zMzgzZjEtMDQyOC00NjRiLWJkMWUt Mjc5OThiZjE3NDY1LzEvRFQ2NmFIUEZ0UWRiUEVPZmYtNjFTdkh4RGFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS8zMzgzZjEtMDQyOC00NjRiLWJkMWUtMjc5OThiZjE3NDY1 LzEvRFQ2NmFIUEZ0UWRiUEVPZmYtNjFTdkh4RGFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMNLHZe7v IhnQnFgdk4zyp6fbnbqZtPC9Tw0aF3HMdqfwC3ZHWddbQN5VOwl3kTuX7o+U92w/ cMv8UIg0qpH83Eq3EYUInGpu49MN+DQKKzQG4Ie6qkNwZlZSdn44KBOfqhTnvJtV 6PpVTTC6Q44du5XMgo21fByQ2iMWd45n6un2JClX9uo4amEgCBJsR4OVlTht+DjG 0OQX9PVh2FNRyoCh50zbowtEeKpX43lxq9cVQR3g5uajgyJKum+QtZiQVFgbtj2x dfSH9HIUxjDbdS9u+zMhKQJujd/3+iX1oPGyfyVQX9qXCn4BLUtWXCpwpXVPlBGU DW0+wWCM4tmH5Q== -----END CERTIFICATE-----Generated at Fri Dec 26 23:10:27 2025 by rpki-client