This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft File: DUt01InEknijADmUrJf9QH1yNuU.mft (raw, json) Hash identifier: KnO8nsUH69wW4qgLj350Y41e72QFyA+FP4XHsO4epag= Subject key identifier: BE:47:7B:3B:4F:B3:EC:2F:88:70:1B:64:36:6E:0E:72:C5:6E:7B:68 Authority key identifier: 0D:4B:74:D4:89:C4:92:78:A3:00:39:94:AC:97:FD:40:7D:72:36:E5 Certificate issuer: /CN=0d4b74d489c49278a3003994ac97fd407d7236e5 Certificate serial: 019B698E1C96193AA995A20878F630D829C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft Manifest number: 17A6 Signing time: Mon 29 Dec 2025 10:01:19 +0000 Manifest this update: Mon 29 Dec 2025 10:01:19 +0000 Manifest next update: Tue 30 Dec 2025 10:01:19 +0000 Files and hashes: 1: DUt01InEknijADmUrJf9QH1yNuU.crl (hash: NR7OZndbHwGkfUsF9cOeF3+8gP707sC09QUJw+8+q48=) 2: UfRDoAWDKGsXBQFJZfp7lG85sGU.roa (hash: 9M4lkZntB8nlVH2p7zUMp7EJK070pmxoOnJnaHWBY5g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.crl rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 10:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:8e:1c:96:19:3a:a9:95:a2:08:78:f6:30:d8:29:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d4b74d489c49278a3003994ac97fd407d7236e5 Validity Not Before: Dec 29 10:01:19 2025 GMT Not After : Dec 30 10:01:19 2025 GMT Subject: CN=be477b3b4fb3ec2f88701b64366e0e72c56e7b68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:07:66:67:d0:84:79:78:db:a1:6f:53:8a:2a: 60:dc:50:ab:25:78:d5:02:b8:91:62:ce:65:ff:a5: ee:5d:d4:88:8e:dd:fe:06:a4:33:99:51:f0:92:30: 86:de:9f:a6:b0:ea:12:aa:57:fe:9e:83:23:c1:88: f7:f1:1b:f1:7b:11:a3:35:cf:5d:ef:24:94:4c:c0: d0:91:1e:9b:4b:e3:22:37:98:5c:11:9b:a8:ae:45: e2:ea:63:ac:92:5f:97:ff:71:a1:c2:26:84:bf:83: bf:8a:6b:e6:8b:4a:b8:0b:f6:77:7c:c2:d3:52:73: 63:9c:ad:3e:fb:3e:5d:61:59:60:90:f3:20:53:5c: 4c:d7:fe:cc:9d:1e:b8:31:ae:86:d5:27:d7:19:6f: b3:11:f4:f7:7a:f7:d8:2e:0a:ad:50:54:28:18:62: d0:1d:21:84:fe:e4:2a:67:8d:2b:6d:67:0a:e0:df: 1c:85:98:3d:e5:d4:f3:fc:bc:e6:12:3a:c9:71:65: 1c:51:78:b0:93:d6:6f:d1:6a:3a:00:9e:84:a2:2f: 4e:13:4e:5a:71:9e:ae:8d:b8:dc:15:2d:e2:6a:d1: d0:7f:d9:12:af:46:57:54:38:c4:2b:23:bb:78:ae: 8c:f4:0f:73:99:88:ea:b5:57:14:b2:f4:81:46:f1: b9:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:47:7B:3B:4F:B3:EC:2F:88:70:1B:64:36:6E:0E:72:C5:6E:7B:68 X509v3 Authority Key Identifier: keyid:0D:4B:74:D4:89:C4:92:78:A3:00:39:94:AC:97:FD:40:7D:72:36:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:e1:f1:19:49:39:27:89:c5:d3:71:9a:b4:dd:26:1e:cb:57: 19:15:12:80:75:5c:b2:9b:ed:68:33:3d:0d:53:86:61:1c:1d: 04:9e:1c:65:86:18:26:2b:96:ef:a0:4a:39:d0:b9:4b:5a:7e: 71:0f:cb:22:97:59:f7:20:91:39:71:44:f9:32:e2:c9:7e:ff: f0:86:cf:68:4d:f0:f1:4a:84:6f:2a:d0:87:38:78:f4:2b:04: 23:93:dc:2a:66:c4:23:29:0d:3d:21:12:4a:22:14:e1:d3:73: 61:1f:d7:fd:ea:b3:68:02:fa:3a:e4:3a:cb:f9:f3:d0:e8:f2: 6a:17:e0:2e:89:bf:4c:c2:28:59:56:52:01:ab:a0:ef:df:73: 59:7a:51:66:8e:93:00:85:9f:65:4f:26:a9:5d:ea:66:07:5a: 01:8b:64:a8:12:7a:a9:90:e0:44:b7:62:30:36:1c:f5:d3:47: cb:33:03:be:7e:a3:ca:13:c0:10:85:b4:05:70:dc:53:f4:5e: 5e:05:c2:a7:77:58:c0:11:12:ce:20:59:71:20:73:a1:db:37: 6a:68:b3:5f:27:84:75:7e:57:c7:17:33:dd:0b:7c:6e:c4:e4: 85:5f:a5:cd:e8:75:4d:34:e2:0f:f3:10:e4:32:55:47:9d:f1: 04:a0:0f:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtpjhyWGTqplaIIePYw2CnDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNGI3NGQ0ODljNDkyNzhhMzAwMzk5NGFjOTdmZDQwN2Q3 MjM2ZTUwHhcNMjUxMjI5MTAwMTE5WhcNMjUxMjMwMTAwMTE5WjAzMTEwLwYDVQQD EyhiZTQ3N2IzYjRmYjNlYzJmODg3MDFiNjQzNjZlMGU3MmM1NmU3YjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAdmZ9CEeXjboW9Tiipg3FCrJXjV AriRYs5l/6XuXdSIjt3+BqQzmVHwkjCG3p+msOoSqlf+noMjwYj38RvxexGjNc9d 7ySUTMDQkR6bS+MiN5hcEZuorkXi6mOskl+X/3GhwiaEv4O/imvmi0q4C/Z3fMLT UnNjnK0++z5dYVlgkPMgU1xM1/7MnR64Ma6G1SfXGW+zEfT3evfYLgqtUFQoGGLQ HSGE/uQqZ40rbWcK4N8chZg95dTz/LzmEjrJcWUcUXiwk9Zv0Wo6AJ6Eoi9OE05a cZ6ujbjcFS3iatHQf9kSr0ZXVDjEKyO7eK6M9A9zmYjqtVcUsvSBRvG5xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL5HeztPs+wviHAbZDZuDnLFbntoMB8GA1UdIwQY MBaAFA1LdNSJxJJ4owA5lKyX/UB9cjblMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFV0MDFJbkVrbmlqQURtVXJKZjlRSDF5TnVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9iNjk2MzMtYzAzMS00ZDI1LTllMGUt NjU2NDBmMWMxNzlhLzEvRFV0MDFJbkVrbmlqQURtVXJKZjlRSDF5TnVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9iNjk2MzMtYzAzMS00ZDI1LTllMGUtNjU2NDBmMWMxNzlh LzEvRFV0MDFJbkVrbmlqQURtVXJKZjlRSDF5TnVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU+HxGUk5 J4nF03GatN0mHstXGRUSgHVcspvtaDM9DVOGYRwdBJ4cZYYYJiuW76BKOdC5S1p+ cQ/LIpdZ9yCROXFE+TLiyX7/8IbPaE3w8UqEbyrQhzh49CsEI5PcKmbEIykNPSES SiIU4dNzYR/X/eqzaAL6OuQ6y/nz0OjyahfgLom/TMIoWVZSAaug799zWXpRZo6T AIWfZU8mqV3qZgdaAYtkqBJ6qZDgRLdiMDYc9dNHyzMDvn6jyhPAEIW0BXDcU/Re XgXCp3dYwBESziBZcSBzods3amizXyeEdX5Xxxcz3Qt8bsTkhV+lzeh1TTTiD/MQ 5DJVR53xBKAP4w== -----END CERTIFICATE-----Generated at Mon Dec 29 16:26:36 2025 by rpki-client