This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft File: DU7hk7MBZltW9ngPIl_UTRRAk68.mft (raw, json) Hash identifier: DMVjSAHgxjZcohwUlfg8i++Kk+tP6ShKmR3EQK03qJk= Subject key identifier: D0:57:29:CB:CA:6A:88:13:57:D4:C7:56:41:66:92:7A:91:D5:0D:DA Authority key identifier: 0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF Certificate issuer: /CN=0d4ee193b301665b56f6780f225fd44d144093af Certificate serial: 019B661EB43C318B3FDACB1AB6C66B01DF73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft Manifest number: 17A3 Signing time: Sun 28 Dec 2025 18:00:46 +0000 Manifest this update: Sun 28 Dec 2025 18:00:46 +0000 Manifest next update: Mon 29 Dec 2025 18:00:46 +0000 Files and hashes: 1: 1YRiu8peow1lTJm9FFHNR8FDAbc.roa (hash: M9tDjK8KKMnpI4O/RkjitSO923bPcK4J9p0X6jE60uA=) 2: DU7hk7MBZltW9ngPIl_UTRRAk68.crl (hash: rJFMFtqraAifRMkzpoKmLKUAAwLNDNs+JIPPOcKB8f0=) 3: PGW1u6hsibHWgf5RkDB15fW7nFU.roa (hash: 0InCSbIA5SExLZ91M4uEAsM9+kvbm4v2lPuTA9ZO2w0=) 4: Rywj_aQoQHnt260cmm4BjBhDxUY.roa (hash: YR+g76t/hDT4XdE58vT7jt0pb9k9/4GBzS42rk3Jatg=) 5: UeY-6eT8AWic-hKV67W_oibJpb0.roa (hash: P9rAEKkeAqwEaQF6epHGIcD5QsTjObpMNhsoMNWv7oU=) 6: WrHytc5z_RMrlF1ugU748saPCOY.roa (hash: aZHYeaaNVTa6TtaiWMmR/j6toZEkqeQ4kR1tqb6QqNc=) 7: Z0NstpNFGmZvTmitOe-bpzN3pog.roa (hash: vOxHYK5BHjTLsLb9PBk4RNol3oeaceKJ5r4uuQeEoSc=) 8: m6l4SopMeawwf-xaFHTLkByhnNs.roa (hash: S7Ljuk3eaMITMnrAZF6Kgxf8yU/v0CtwtarS6ZzuIMk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 18:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:1e:b4:3c:31:8b:3f:da:cb:1a:b6:c6:6b:01:df:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d4ee193b301665b56f6780f225fd44d144093af Validity Not Before: Dec 28 18:00:46 2025 GMT Not After : Dec 29 18:00:46 2025 GMT Subject: CN=d05729cbca6a881357d4c7564166927a91d50dda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2e:fb:96:3f:9d:b3:60:39:9d:0c:8a:7a:05: 2f:a1:f4:69:5e:c9:da:cb:55:42:88:9b:f2:e5:91: 38:fa:ee:a0:2d:e2:dd:7f:b7:7b:83:30:0d:de:e1: e5:5e:a8:b5:51:1a:33:e5:4e:7e:1f:8b:dc:e0:d7: 72:aa:74:37:c5:31:86:13:6a:f6:76:2b:b0:23:4f: 6c:13:e2:3c:74:87:4e:6c:a9:a3:1c:6d:2f:c3:ef: a0:28:47:a6:0a:18:9a:e7:57:4a:cf:7d:d7:e5:37: 63:1f:4a:cd:1f:f4:76:32:a7:dd:c8:24:03:05:26: 78:d6:1f:ad:14:c3:d0:c4:95:56:21:f9:8f:a7:86: a0:fb:52:07:ca:13:8a:2b:19:51:8d:4c:c0:49:61: 9f:7a:9c:8f:47:b4:cf:4d:14:6a:de:8f:75:d7:39: ce:b5:0b:dc:86:a6:2d:41:af:94:97:69:46:38:64: 21:7c:db:4b:ff:3f:5c:48:4e:94:3f:8e:89:01:da: 00:04:68:b5:a2:d0:ce:af:5b:0e:86:3f:49:9b:79: 28:03:23:82:78:5d:9e:40:b1:7b:89:a7:19:da:bf: 8d:b9:bb:43:35:ae:c8:62:c1:2b:d5:d1:49:6d:d2: dd:91:8d:56:aa:2b:04:4a:95:f5:c1:7c:8b:15:cf: 6b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:57:29:CB:CA:6A:88:13:57:D4:C7:56:41:66:92:7A:91:D5:0D:DA X509v3 Authority Key Identifier: keyid:0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:f6:82:f2:79:ea:7f:a0:d5:0c:21:78:28:5b:01:dd:ff:5d: a9:46:eb:7c:ad:df:00:04:b2:0d:47:c0:42:48:39:8c:84:4a: 46:c2:f2:84:80:3e:22:99:37:23:8d:02:57:47:99:ab:84:fe: 3e:17:8f:b0:af:9e:61:3b:fc:0b:81:a1:26:26:5c:89:5e:c1: 50:97:ff:f8:05:6a:7d:a9:d4:bb:b0:ca:d7:bf:c6:13:4b:67: 0c:d7:24:55:1c:83:e3:60:90:2e:1d:69:c9:4b:36:de:f6:39: 4d:a8:1d:e3:49:2f:33:89:fe:23:bf:76:75:16:1a:3e:5c:23: f2:4c:15:66:68:16:66:e1:13:85:60:04:7c:b8:d0:81:66:b3: 90:dc:95:c3:41:06:f2:47:61:3e:74:1c:4e:43:ed:56:2f:4e: 56:d7:e2:91:61:1b:4e:2d:2c:64:3a:8b:44:5d:22:e0:80:79: ae:89:33:17:9b:36:f8:68:a3:2e:a9:b4:a1:c8:19:4e:48:a0: 1a:ff:bc:c3:1a:63:6c:f9:62:ac:f3:08:89:df:98:d5:bf:f1: df:64:04:b6:4f:7c:fb:fd:05:7e:1c:10:3c:da:57:aa:78:b4: fe:25:65:b5:5b:c6:60:71:d3:cf:e3:bd:22:88:b8:d4:b4:3e: fa:7a:5c:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtmHrQ8MYs/2ssatsZrAd9zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNGVlMTkzYjMwMTY2NWI1NmY2NzgwZjIyNWZkNDRkMTQ0 MDkzYWYwHhcNMjUxMjI4MTgwMDQ2WhcNMjUxMjI5MTgwMDQ2WjAzMTEwLwYDVQQD EyhkMDU3MjljYmNhNmE4ODEzNTdkNGM3NTY0MTY2OTI3YTkxZDUwZGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAly77lj+ds2A5nQyKegUvofRpXsna y1VCiJvy5ZE4+u6gLeLdf7d7gzAN3uHlXqi1URoz5U5+H4vc4NdyqnQ3xTGGE2r2 diuwI09sE+I8dIdObKmjHG0vw++gKEemChia51dKz33X5TdjH0rNH/R2MqfdyCQD BSZ41h+tFMPQxJVWIfmPp4ag+1IHyhOKKxlRjUzASWGfepyPR7TPTRRq3o911znO tQvchqYtQa+Ul2lGOGQhfNtL/z9cSE6UP46JAdoABGi1otDOr1sOhj9Jm3koAyOC eF2eQLF7iacZ2r+NubtDNa7IYsEr1dFJbdLdkY1WqisESpX1wXyLFc9r8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNBXKcvKaogTV9THVkFmknqR1Q3aMB8GA1UdIwQY MBaAFA1O4ZOzAWZbVvZ4DyJf1E0UQJOvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFU3aGs3TUJabHRXOW5nUElsX1VUUlJBazY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wOTcxMTEtMzA5OC00Y2Y3LWFjMGYt OWY3ZTBmODYyZjFlLzEvRFU3aGs3TUJabHRXOW5nUElsX1VUUlJBazY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8wOTcxMTEtMzA5OC00Y2Y3LWFjMGYtOWY3ZTBmODYyZjFl LzEvRFU3aGs3TUJabHRXOW5nUElsX1VUUlJBazY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA/aC8nnq f6DVDCF4KFsB3f9dqUbrfK3fAASyDUfAQkg5jIRKRsLyhIA+Ipk3I40CV0eZq4T+ PhePsK+eYTv8C4GhJiZciV7BUJf/+AVqfanUu7DK17/GE0tnDNckVRyD42CQLh1p yUs23vY5Tagd40kvM4n+I792dRYaPlwj8kwVZmgWZuEThWAEfLjQgWazkNyVw0EG 8kdhPnQcTkPtVi9OVtfikWEbTi0sZDqLRF0i4IB5rokzF5s2+GijLqm0ocgZTkig Gv+8wxpjbPlirPMIid+Y1b/x32QEtk98+/0FfhwQPNpXqni0/iVltVvGYHHTz+O9 Ioi41LQ++npc0w== -----END CERTIFICATE-----Generated at Sun Dec 28 23:21:55 2025 by rpki-client