This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft File: DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft (raw, json) Hash identifier: VDktlvg+3GDqbvCn962r5iwoTcYeyx3hCjCpJ7SvgJ4= Subject key identifier: A9:54:EB:9A:97:D0:C7:AC:22:76:7B:5A:8B:E5:A8:B0:34:01:1A:97 Authority key identifier: 0D:33:3F:72:D9:E2:94:54:38:25:BE:63:72:9F:80:34:A4:51:70:90 Certificate issuer: /CN=0d333f72d9e294543825be63729f8034a4517090 Certificate serial: 019B3D22CD0858B0BCCE276070D2FC318F20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft Manifest number: 0B7E Signing time: Sat 20 Dec 2025 19:00:49 +0000 Manifest this update: Sat 20 Dec 2025 19:00:49 +0000 Manifest next update: Sun 21 Dec 2025 19:00:49 +0000 Files and hashes: 1: DTM_ctnilFQ4Jb5jcp-ANKRRcJA.crl (hash: n7q/k6jIVA4IP65kkB0KxLaewZ9Xltf8SPQ4se9jIwI=) 2: IoDHlDbNXO3jlcqfipIcULBON5A.roa (hash: KOgCTDaSahbElR1Ol4oBVrEjOtYhS4W0VzXtKth8BeM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.crl rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft rsync://rpki.ripe.net/repository/DEFAULT/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:22:cd:08:58:b0:bc:ce:27:60:70:d2:fc:31:8f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d333f72d9e294543825be63729f8034a4517090 Validity Not Before: Dec 20 19:00:49 2025 GMT Not After : Dec 21 19:00:49 2025 GMT Subject: CN=a954eb9a97d0c7ac22767b5a8be5a8b034011a97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0c:6c:45:39:0f:4c:f3:23:b1:67:9e:97:ad: fd:3e:ca:65:a7:8d:bc:61:c7:43:c9:83:7a:3e:89: 03:12:35:cb:a7:ef:26:e0:31:1d:b5:f4:13:6e:72: 5b:f7:cf:5d:b1:1c:f8:84:fc:00:33:4f:51:7b:c2: ce:1f:cf:50:82:1b:3d:68:10:56:70:ca:2d:ee:7a: a1:18:c0:2d:d7:33:46:52:89:fc:20:69:d5:ad:f5: 66:3f:e8:19:f4:d4:58:29:75:0c:f4:5a:4d:32:75: d2:34:55:d9:aa:2a:fe:b0:67:20:54:23:be:30:78: ba:ee:07:4d:ac:cc:85:8f:10:1b:70:26:c9:38:78: 99:ad:dc:73:81:c4:4a:e2:3a:ad:6e:7c:e3:79:23: e1:2d:00:17:69:9c:d3:ea:33:25:d2:fa:4a:1d:19: d3:cd:4d:f2:3b:6d:04:48:6d:98:0c:8c:43:de:34: ec:75:54:65:a1:6d:ea:83:c4:7f:4a:b8:db:f7:21: 0a:e0:75:34:7a:25:aa:f9:c6:f1:fc:c7:6b:e5:d1: 3c:2d:44:f7:95:3e:68:e8:e7:19:df:a4:19:f3:0e: eb:5a:c4:2f:b1:cc:00:cd:9e:f5:dd:ff:fd:01:5b: 3e:f4:86:aa:1a:a7:41:ca:2e:51:21:6b:7b:5f:74: df:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:54:EB:9A:97:D0:C7:AC:22:76:7B:5A:8B:E5:A8:B0:34:01:1A:97 X509v3 Authority Key Identifier: keyid:0D:33:3F:72:D9:E2:94:54:38:25:BE:63:72:9F:80:34:A4:51:70:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:15:27:b9:d7:82:3e:82:dd:bc:7f:0a:d6:70:11:90:9d:29: b9:6f:ab:87:b9:0b:80:30:ba:a1:f2:81:2e:16:5e:aa:d6:76: fd:19:7a:1b:9b:44:97:26:13:18:34:0d:2f:7e:c2:93:84:d8: f6:64:20:2f:8b:c7:a0:82:2d:b2:27:af:78:b7:e7:eb:a4:be: dd:79:09:b4:b0:49:bc:56:f1:d9:c8:62:0b:5a:3d:e2:ec:d9: 63:26:38:59:5b:6f:ed:c0:4f:69:3f:68:1c:83:a6:9b:16:ec: 28:75:0f:2e:61:f4:65:2a:b1:39:45:ef:5c:a8:0d:d5:37:74: a0:9c:3c:9e:5c:c5:a5:6f:e8:63:11:ba:fa:f3:e9:08:d6:a6: d9:7f:64:36:59:fb:7e:bf:dd:97:d4:cc:d3:66:76:c7:02:69: 35:a8:0b:18:bb:ed:a5:3f:00:6e:bd:2d:df:cd:a4:48:9a:49: c0:11:0b:fd:fb:e4:30:e0:fe:33:e6:73:f1:f3:2e:77:05:06: 97:cc:fe:0d:f3:01:5e:49:da:89:0e:91:2c:5e:bd:44:4f:79: 18:b7:27:c4:cd:a6:34:a9:29:83:8f:4b:38:d6:55:2b:2f:e3: f0:ce:ea:fa:d7:d3:80:76:8a:20:5a:b8:41:b0:d2:6f:b1:f0: b9:43:d2:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Is0IWLC8zidgcNL8MY8gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMzMzZjcyZDllMjk0NTQzODI1YmU2MzcyOWY4MDM0YTQ1 MTcwOTAwHhcNMjUxMjIwMTkwMDQ5WhcNMjUxMjIxMTkwMDQ5WjAzMTEwLwYDVQQD EyhhOTU0ZWI5YTk3ZDBjN2FjMjI3NjdiNWE4YmU1YThiMDM0MDExYTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAxsRTkPTPMjsWeel639Psplp428 YcdDyYN6PokDEjXLp+8m4DEdtfQTbnJb989dsRz4hPwAM09Re8LOH89Qghs9aBBW cMot7nqhGMAt1zNGUon8IGnVrfVmP+gZ9NRYKXUM9FpNMnXSNFXZqir+sGcgVCO+ MHi67gdNrMyFjxAbcCbJOHiZrdxzgcRK4jqtbnzjeSPhLQAXaZzT6jMl0vpKHRnT zU3yO20ESG2YDIxD3jTsdVRloW3qg8R/Srjb9yEK4HU0eiWq+cbx/Mdr5dE8LUT3 lT5o6OcZ36QZ8w7rWsQvscwAzZ713f/9AVs+9IaqGqdByi5RIWt7X3TfmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKlU65qX0MesInZ7WovlqLA0ARqXMB8GA1UdIwQY MBaAFA0zP3LZ4pRUOCW+Y3KfgDSkUXCQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFRNX2N0bmlsRlE0SmI1amNwLUFOS1JSY0pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC82NWZlYTItYTNkOS00OTJmLThlNDQt ODk0ZGZhNWRmMDE3LzEvRFRNX2N0bmlsRlE0SmI1amNwLUFOS1JSY0pBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC82NWZlYTItYTNkOS00OTJmLThlNDQtODk0ZGZhNWRmMDE3 LzEvRFRNX2N0bmlsRlE0SmI1amNwLUFOS1JSY0pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArRUnudeC PoLdvH8K1nARkJ0puW+rh7kLgDC6ofKBLhZeqtZ2/Rl6G5tElyYTGDQNL37Ck4TY 9mQgL4vHoIItsieveLfn66S+3XkJtLBJvFbx2chiC1o94uzZYyY4WVtv7cBPaT9o HIOmmxbsKHUPLmH0ZSqxOUXvXKgN1Td0oJw8nlzFpW/oYxG6+vPpCNam2X9kNln7 fr/dl9TM02Z2xwJpNagLGLvtpT8Abr0t382kSJpJwBEL/fvkMOD+M+Zz8fMudwUG l8z+DfMBXknaiQ6RLF69RE95GLcnxM2mNKkpg49LONZVKy/j8M7q+tfTgHaKIFq4 QbDSb7HwuUPSOA== -----END CERTIFICATE-----Generated at Sun Dec 21 02:59:07 2025 by rpki-client