This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft File: dxBykg2MmitA6zoEXx8qbjNKRJY.mft (raw, json) Hash identifier: Et+bB/ShkcH878eDnkePhNBcJumWXofJ2iJ5gB/Kugg= Subject key identifier: 8B:69:0A:F1:F4:77:54:90:0E:0B:E7:66:DF:06:AE:70:84:C1:B7:D4 Authority key identifier: 77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96 Certificate issuer: /CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496 Certificate serial: 019B53AB06BA8655362FF0FB4E9B24D3D31E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft Manifest number: 1796 Signing time: Thu 25 Dec 2025 04:01:15 +0000 Manifest this update: Thu 25 Dec 2025 04:01:15 +0000 Manifest next update: Fri 26 Dec 2025 04:01:15 +0000 Files and hashes: 1: YkTwnLLBjio1cr_ngfAfzZs1Hh0.roa (hash: Y9RRPtZapEofyZ5MjGOGJpjlqTcZ/UM1TnoKmtwIB40=) 2: dxBykg2MmitA6zoEXx8qbjNKRJY.crl (hash: WPwpVs1cYHETJrX70Y2W91m8TD6qwJoP9t+7+oL7sR4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:ab:06:ba:86:55:36:2f:f0:fb:4e:9b:24:d3:d3:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496 Validity Not Before: Dec 25 04:01:15 2025 GMT Not After : Dec 26 04:01:15 2025 GMT Subject: CN=8b690af1f47754900e0be766df06ae7084c1b7d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3d:96:ed:11:27:6e:c6:e8:2d:7b:2e:6d:b6: 57:ef:60:37:88:11:fe:38:e3:c9:1f:e1:2d:6c:84: f1:0e:15:34:4c:12:e6:16:48:83:85:3b:6b:0b:50: 07:fc:30:dd:50:1d:50:b3:9c:1e:01:07:2d:0b:4e: b9:29:2b:e3:8b:f3:08:f8:d1:a9:d6:e0:f1:47:42: a7:52:8a:4e:70:3d:4d:20:19:d8:b2:7f:33:d9:8c: 8c:c4:2c:d8:75:ca:c0:17:b9:e1:39:ff:37:5a:d8: 27:3e:8a:d3:80:61:72:7a:1a:e9:0b:64:2a:76:59: 51:d5:f8:a6:06:5b:9f:fd:1e:89:df:50:7e:a8:ef: a5:46:d5:3a:80:24:7e:20:e7:ae:cc:3f:28:d1:aa: e4:cf:ca:26:f2:1c:26:86:a3:67:81:8c:5e:d1:70: e9:88:a7:2b:49:af:15:a1:39:f8:1c:8b:f7:a4:db: 25:5c:8b:21:b2:b9:bc:62:01:2a:80:81:ba:cb:ff: 94:dc:12:5f:87:88:ec:85:23:35:4d:3a:3a:da:56: 59:bc:15:9d:f4:1c:0b:82:3a:f0:87:92:b6:4b:76: dd:4c:73:a7:8f:7f:40:64:c8:cf:21:f9:7c:0f:6d: 8b:3e:ca:3f:50:7e:46:cc:2c:98:d5:31:bc:ec:21: 15:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:69:0A:F1:F4:77:54:90:0E:0B:E7:66:DF:06:AE:70:84:C1:B7:D4 X509v3 Authority Key Identifier: keyid:77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:14:87:cf:37:c9:9d:07:7c:a8:d9:61:f1:d4:0b:bf:4c:78: 06:0d:8b:81:70:b0:0c:11:07:81:07:84:c1:ec:6e:cc:4f:66: 86:74:9e:7c:9b:94:f8:86:c4:e1:d4:70:77:a1:54:1c:62:d1: 5d:86:56:5b:69:a5:c9:ea:41:32:e3:b0:09:a1:3d:a7:ea:ec: 15:3b:ae:57:9a:ae:b9:27:74:12:7a:1b:3c:df:fc:d5:5b:5c: 78:3c:1f:12:b0:24:a0:13:1a:56:3d:bf:54:b1:5e:0d:6b:1a: 46:30:6b:ae:8e:fa:90:59:a6:4c:e6:bf:3b:90:36:4f:f5:24: dd:32:c5:55:56:79:89:67:ff:ec:63:c5:da:9f:e9:71:3e:06: 64:65:ee:97:99:27:6e:8c:c1:b4:20:bb:44:17:bc:f0:d3:3b: cf:2c:bd:92:df:b0:cb:92:ca:7a:52:1a:84:09:a9:6f:97:9b: 36:40:b4:85:a6:f7:cd:e1:66:3d:e9:fe:98:2b:7b:f1:16:d3: 70:30:f0:56:d4:8e:c6:02:ad:8c:da:3f:24:44:11:44:9c:7d: 1a:7d:71:bb:e7:82:0c:92:33:7f:91:c6:7c:27:d9:ea:a7:99: 9c:c1:16:8c:5d:02:23:f8:12:14:ff:e3:18:bb:ee:d3:61:d2: 05:03:91:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTqwa6hlU2L/D7Tpsk09MeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MTA3MjkyMGQ4YzlhMmI0MGViM2EwNDVmMWYyYTZlMzM0 YTQ0OTYwHhcNMjUxMjI1MDQwMTE1WhcNMjUxMjI2MDQwMTE1WjAzMTEwLwYDVQQD Eyg4YjY5MGFmMWY0Nzc1NDkwMGUwYmU3NjZkZjA2YWU3MDg0YzFiN2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2j2W7REnbsboLXsubbZX72A3iBH+ OOPJH+EtbITxDhU0TBLmFkiDhTtrC1AH/DDdUB1Qs5weAQctC065KSvji/MI+NGp 1uDxR0KnUopOcD1NIBnYsn8z2YyMxCzYdcrAF7nhOf83WtgnPorTgGFyehrpC2Qq dllR1fimBluf/R6J31B+qO+lRtU6gCR+IOeuzD8o0arkz8om8hwmhqNngYxe0XDp iKcrSa8VoTn4HIv3pNslXIshsrm8YgEqgIG6y/+U3BJfh4jshSM1TTo62lZZvBWd 9BwLgjrwh5K2S3bdTHOnj39AZMjPIfl8D22LPso/UH5GzCyY1TG87CEViwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFItpCvH0d1SQDgvnZt8GrnCEwbfUMB8GA1UdIwQY MBaAFHcQcpINjJorQOs6BF8fKm4zSkSWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHhCeWtnMk1taXRBNnpvRVh4OHFiak5LUkpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC85ZWMxMzQtZjA0Zi00NDIzLThiZTUt N2Y1ZTE3NTlmODRlLzEvZHhCeWtnMk1taXRBNnpvRVh4OHFiak5LUkpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC85ZWMxMzQtZjA0Zi00NDIzLThiZTUtN2Y1ZTE3NTlmODRl LzEvZHhCeWtnMk1taXRBNnpvRVh4OHFiak5LUkpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgRSHzzfJ nQd8qNlh8dQLv0x4Bg2LgXCwDBEHgQeEwexuzE9mhnSefJuU+IbE4dRwd6FUHGLR XYZWW2mlyepBMuOwCaE9p+rsFTuuV5quuSd0EnobPN/81VtceDwfErAkoBMaVj2/ VLFeDWsaRjBrro76kFmmTOa/O5A2T/Uk3TLFVVZ5iWf/7GPF2p/pcT4GZGXul5kn bozBtCC7RBe88NM7zyy9kt+wy5LKelIahAmpb5ebNkC0hab3zeFmPen+mCt78RbT cDDwVtSOxgKtjNo/JEQRRJx9Gn1xu+eCDJIzf5HGfCfZ6qeZnMEWjF0CI/gSFP/j GLvu02HSBQOR7Q== -----END CERTIFICATE-----Generated at Thu Dec 25 06:24:28 2025 by rpki-client