This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft File: dxvOKaNsveiYrABwfblRQ_hqeSI.mft (raw, json) Hash identifier: 8uoXaPgjnQzfbs2OMkHwj8A7RCw2X+ARJID+uAN9aas= Subject key identifier: 15:B1:9C:08:6A:00:F7:77:EB:33:45:81:B7:B4:83:30:37:39:54:AD Authority key identifier: 77:1B:CE:29:A3:6C:BD:E8:98:AC:00:70:7D:B9:51:43:F8:6A:79:22 Certificate issuer: /CN=771bce29a36cbde898ac00707db95143f86a7922 Certificate serial: 019B3D5A6361DD8D5A108251B44B22688F52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft Manifest number: 0F67 Signing time: Sat 20 Dec 2025 20:01:32 +0000 Manifest this update: Sat 20 Dec 2025 20:01:32 +0000 Manifest next update: Sun 21 Dec 2025 20:01:32 +0000 Files and hashes: 1: Fu0lK4Mcztssv3LosrHSeGC9v5I.roa (hash: u/9ObfX95800lVIP5yQNITdaQtRd2zqHQxCUamlQIjU=) 2: dxvOKaNsveiYrABwfblRQ_hqeSI.crl (hash: Afd6KMQMX2id7x9/FpDMYQAlUwqI39Cno5qf3RKD31A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.crl rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:63:61:dd:8d:5a:10:82:51:b4:4b:22:68:8f:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=771bce29a36cbde898ac00707db95143f86a7922 Validity Not Before: Dec 20 20:01:32 2025 GMT Not After : Dec 21 20:01:32 2025 GMT Subject: CN=15b19c086a00f777eb334581b7b48330373954ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:44:35:03:18:a2:1f:02:44:f3:86:9f:c4:9d: fa:1a:3b:f6:b2:81:90:71:97:3a:b9:2c:ae:f5:9b: e3:6f:27:07:d7:0b:2a:c9:82:ac:75:c0:f8:ce:36: 41:b8:e0:91:a6:0d:0f:16:1f:36:09:d1:66:4e:1b: 1a:e1:c2:83:d3:04:8a:8f:eb:e8:a2:6e:c9:88:d6: 46:28:42:26:23:55:e9:15:43:de:e3:b7:ed:37:2d: e9:e4:bc:9f:5c:55:a8:9e:85:5c:52:40:f0:48:a0: 0c:ae:92:70:31:0b:ed:43:e2:43:37:0e:a2:ea:f4: 8f:2f:5c:cb:17:28:5f:7c:6f:ba:1e:2a:d1:67:b1: 94:58:74:07:29:3f:a8:74:4d:02:34:9a:3a:47:d2: 95:a0:fb:63:4f:f0:d9:37:ae:34:30:4f:18:6e:9e: 73:43:4e:bf:23:e8:97:ff:57:61:b2:5a:82:7b:ef: 5c:a8:76:27:4d:d2:71:d8:9e:24:31:ef:42:8a:8d: e2:cd:7b:63:45:a0:bb:8e:dc:41:8d:d9:00:4c:db: c9:2d:24:83:0a:b7:77:df:7f:a5:e6:d6:1c:08:16: 60:f3:74:91:ce:b0:f0:c0:b6:6c:e9:98:00:bd:91: c9:29:fe:6c:7b:92:e3:0e:80:1e:67:39:f9:23:52: b9:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:B1:9C:08:6A:00:F7:77:EB:33:45:81:B7:B4:83:30:37:39:54:AD X509v3 Authority Key Identifier: keyid:77:1B:CE:29:A3:6C:BD:E8:98:AC:00:70:7D:B9:51:43:F8:6A:79:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:7e:fc:7b:0e:9f:7c:41:a2:07:38:da:ac:d3:8c:48:d9:10: 07:ad:39:41:7e:37:24:63:fc:99:0d:6b:6f:bd:b9:77:0e:f3: c2:69:78:c3:8b:de:7f:ea:e2:78:ba:d9:b5:4f:f8:dd:18:87: 8a:29:60:98:13:d8:4f:5d:59:c8:73:cb:ff:9a:1e:eb:34:1f: 54:34:43:3f:4d:1d:d5:87:b4:71:32:3c:51:4e:b2:cb:c2:5b: e3:13:d2:58:62:95:e5:8f:3b:38:1b:15:fe:17:04:04:1e:47: fd:0d:8b:2e:97:a3:47:21:81:de:c0:6b:e6:5c:b9:c8:a9:e1: ca:95:ec:8a:be:04:cd:f7:6a:03:54:79:dc:00:d3:79:dd:d7: 39:e2:77:3a:4b:b6:5b:5d:a8:ba:21:8e:9e:e9:94:fd:23:f1: e2:29:01:54:f3:07:76:a6:fe:cb:6a:3f:42:c8:89:cc:3e:54: c5:c9:bb:24:22:f5:8e:ce:e2:4d:a8:1a:d0:76:61:70:09:57: 1d:42:3d:84:19:f9:0e:bf:f5:58:30:be:b2:85:4b:59:c8:bf: 6d:9f:66:bb:cc:04:54:13:44:1f:aa:0f:d4:18:8e:90:0c:c7: f4:ee:09:12:df:60:fc:28:3b:f0:51:bb:c8:0e:5c:bb:f9:b7: 55:44:85:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WmNh3Y1aEIJRtEsiaI9SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MWJjZTI5YTM2Y2JkZTg5OGFjMDA3MDdkYjk1MTQzZjg2 YTc5MjIwHhcNMjUxMjIwMjAwMTMyWhcNMjUxMjIxMjAwMTMyWjAzMTEwLwYDVQQD EygxNWIxOWMwODZhMDBmNzc3ZWIzMzQ1ODFiN2I0ODMzMDM3Mzk1NGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukQ1AxiiHwJE84afxJ36Gjv2soGQ cZc6uSyu9ZvjbycH1wsqyYKsdcD4zjZBuOCRpg0PFh82CdFmThsa4cKD0wSKj+vo om7JiNZGKEImI1XpFUPe47ftNy3p5LyfXFWonoVcUkDwSKAMrpJwMQvtQ+JDNw6i 6vSPL1zLFyhffG+6HirRZ7GUWHQHKT+odE0CNJo6R9KVoPtjT/DZN640ME8Ybp5z Q06/I+iX/1dhslqCe+9cqHYnTdJx2J4kMe9Cio3izXtjRaC7jtxBjdkATNvJLSSD Crd333+l5tYcCBZg83SRzrDwwLZs6ZgAvZHJKf5se5LjDoAeZzn5I1K5xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBWxnAhqAPd36zNFgbe0gzA3OVStMB8GA1UdIwQY MBaAFHcbzimjbL3omKwAcH25UUP4ankiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHh2T0thTnN2ZWlZckFCd2ZibFJRX2hxZVNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9kZDZlYTctYmRiOC00N2MzLTk2NGYt MmFmOTE3ODM4MmZiLzEvZHh2T0thTnN2ZWlZckFCd2ZibFJRX2hxZVNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9kZDZlYTctYmRiOC00N2MzLTk2NGYtMmFmOTE3ODM4MmZi LzEvZHh2T0thTnN2ZWlZckFCd2ZibFJRX2hxZVNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjH78ew6f fEGiBzjarNOMSNkQB605QX43JGP8mQ1rb725dw7zwml4w4vef+rieLrZtU/43RiH iilgmBPYT11ZyHPL/5oe6zQfVDRDP00d1Ye0cTI8UU6yy8Jb4xPSWGKV5Y87OBsV /hcEBB5H/Q2LLpejRyGB3sBr5ly5yKnhypXsir4EzfdqA1R53ADTed3XOeJ3Oku2 W12ouiGOnumU/SPx4ikBVPMHdqb+y2o/QsiJzD5Uxcm7JCL1js7iTaga0HZhcAlX HUI9hBn5Dr/1WDC+soVLWci/bZ9mu8wEVBNEH6oP1BiOkAzH9O4JEt9g/Cg78FG7 yA5cu/m3VUSF8Q== -----END CERTIFICATE-----Generated at Sun Dec 21 03:55:55 2025 by rpki-client