This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft File: DKqIQOU7uWW-UZLIW3QDReegZSw.mft (raw, json) Hash identifier: JzSW2LVEvzFVRMYczJf0qfMupinrJTQgWhiedJNUgG4= Subject key identifier: 55:08:E5:AF:E3:05:88:EE:91:3C:39:54:31:3C:1E:DC:EF:E0:25:72 Authority key identifier: 0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C Certificate issuer: /CN=0caa8840e53bb965be5192c85b740345e7a0652c Certificate serial: 019B36B2D3C898A24080D33F586FCB1DCE3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft Manifest number: 0D59 Signing time: Fri 19 Dec 2025 13:00:47 +0000 Manifest this update: Fri 19 Dec 2025 13:00:47 +0000 Manifest next update: Sat 20 Dec 2025 13:00:47 +0000 Files and hashes: 1: 6a6m2sY5irDHLsl4ebhsVtwBNoA.roa (hash: CJz/QYXYByZR8HyEy/tvD2Zb/IQMDG9xzZSpgVMTt6I=) 2: DKqIQOU7uWW-UZLIW3QDReegZSw.crl (hash: bkgXDKUI39Q5K0pO/9JO35ResoSg1xxX8C8XuKSOn04=) 3: VBefpoqrDUHQSpoj27BSrozRznM.roa (hash: agBfgG2iYmaXn7ObPl+WmZUGarHOkDC9u5AsUTrfJ94=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b2:d3:c8:98:a2:40:80:d3:3f:58:6f:cb:1d:ce:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0caa8840e53bb965be5192c85b740345e7a0652c Validity Not Before: Dec 19 13:00:47 2025 GMT Not After : Dec 20 13:00:47 2025 GMT Subject: CN=5508e5afe30588ee913c3954313c1edcefe02572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b6:d5:63:91:d8:dc:00:3e:4e:13:a1:fc:58: c9:11:35:24:1e:be:e5:9b:81:d1:c4:6a:8b:7d:1d: 96:43:8b:b8:6d:85:fc:d7:d5:d2:b7:71:7d:d0:1a: a1:6f:01:3f:06:ef:4e:c6:53:3c:8a:17:01:b8:b3: 12:52:bf:f9:4c:9c:75:77:53:1e:1c:fa:31:c3:bd: 06:8e:23:3d:c2:fe:f3:71:58:20:77:b2:24:71:44: 22:c5:3b:86:a6:b4:ec:2f:29:9f:f4:f6:43:68:85: 71:f7:86:47:17:5c:d9:b4:dc:8d:f7:bc:1e:3c:e7: f1:70:28:11:dc:06:b7:33:d4:5f:a8:24:af:aa:c3: 68:79:ff:35:c9:d0:7b:1f:52:10:9a:b3:08:d3:e7: ab:46:0f:c7:ef:00:c5:1a:5c:53:f4:cc:61:71:99: e8:d4:48:41:c6:de:2b:67:b0:b4:0d:2c:4b:75:68: c8:de:35:23:0d:5e:c5:f7:2a:03:b0:e9:87:06:66: 52:ca:b5:72:e1:c6:e2:a9:38:b7:80:bb:a6:80:e5: 15:98:4f:33:4d:5b:34:ee:7f:64:64:32:bd:b1:4a: c2:5e:94:61:91:5d:a7:de:f7:53:9e:b3:41:92:f2: ae:01:7c:b2:8a:36:81:43:db:11:9f:eb:fe:68:d0: 60:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:08:E5:AF:E3:05:88:EE:91:3C:39:54:31:3C:1E:DC:EF:E0:25:72 X509v3 Authority Key Identifier: keyid:0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:09:7f:69:90:69:3f:1c:ad:45:fd:ff:ee:a0:c5:b7:be:ad: 33:e1:eb:21:88:67:b2:64:9e:f2:0b:a1:f2:8e:50:60:2d:d2: 3e:4a:d9:8e:31:40:65:65:53:fe:2a:8a:5b:f4:42:ae:b4:4c: 37:19:da:d8:f6:d8:42:fc:59:6a:ce:a4:00:d7:b3:ce:59:ea: 9c:d8:75:1c:23:e0:a4:89:ee:73:ef:ee:86:c5:2b:5b:fe:ef: 14:f6:fe:b2:b6:fd:97:cd:3e:ce:05:16:37:b9:81:c5:4d:23: 82:2b:55:fa:af:6b:34:7e:cf:75:70:75:ec:f7:09:de:4f:5c: 23:45:8d:10:73:6f:79:72:71:74:e3:1e:54:36:4a:7a:0b:13: 58:0a:f3:d4:95:b2:d7:f5:3a:f6:cd:18:a7:f3:d8:24:0f:b7: 86:b6:60:a1:04:ce:ee:ab:26:da:50:a6:dd:96:bc:a1:28:f0: c8:3d:49:28:2d:be:6a:51:cc:32:0d:4b:ae:b0:a1:81:93:a0: 2a:71:b4:bf:3a:2c:76:2d:03:3f:c5:15:3f:a4:ab:f2:9e:c6: d2:63:66:07:e9:fe:3b:87:a9:30:a1:32:dd:0b:97:7b:19:5f: 7e:16:9d:8a:bd:8b:ed:a8:9e:a9:cb:50:6c:7a:b0:c8:84:d8: ef:48:c3:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2stPImKJAgNM/WG/LHc4/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjYWE4ODQwZTUzYmI5NjViZTUxOTJjODViNzQwMzQ1ZTdh MDY1MmMwHhcNMjUxMjE5MTMwMDQ3WhcNMjUxMjIwMTMwMDQ3WjAzMTEwLwYDVQQD Eyg1NTA4ZTVhZmUzMDU4OGVlOTEzYzM5NTQzMTNjMWVkY2VmZTAyNTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbbVY5HY3AA+ThOh/FjJETUkHr7l m4HRxGqLfR2WQ4u4bYX819XSt3F90BqhbwE/Bu9OxlM8ihcBuLMSUr/5TJx1d1Me HPoxw70GjiM9wv7zcVggd7IkcUQixTuGprTsLymf9PZDaIVx94ZHF1zZtNyN97we POfxcCgR3Aa3M9RfqCSvqsNoef81ydB7H1IQmrMI0+erRg/H7wDFGlxT9MxhcZno 1EhBxt4rZ7C0DSxLdWjI3jUjDV7F9yoDsOmHBmZSyrVy4cbiqTi3gLumgOUVmE8z TVs07n9kZDK9sUrCXpRhkV2n3vdTnrNBkvKuAXyyijaBQ9sRn+v+aNBg7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFUI5a/jBYjukTw5VDE8Htzv4CVyMB8GA1UdIwQY MBaAFAyqiEDlO7llvlGSyFt0A0XnoGUsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREtxSVFPVTd1V1ctVVpMSVczUURSZWVnWlN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9jNjdjM2UtNDVjNi00YzgxLTk3Mzgt YzQ0ZGRmZmE2OWFiLzEvREtxSVFPVTd1V1ctVVpMSVczUURSZWVnWlN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9jNjdjM2UtNDVjNi00YzgxLTk3MzgtYzQ0ZGRmZmE2OWFi LzEvREtxSVFPVTd1V1ctVVpMSVczUURSZWVnWlN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZgl/aZBp PxytRf3/7qDFt76tM+HrIYhnsmSe8guh8o5QYC3SPkrZjjFAZWVT/iqKW/RCrrRM Nxna2PbYQvxZas6kANezzlnqnNh1HCPgpInuc+/uhsUrW/7vFPb+srb9l80+zgUW N7mBxU0jgitV+q9rNH7PdXB17PcJ3k9cI0WNEHNveXJxdOMeVDZKegsTWArz1JWy 1/U69s0Yp/PYJA+3hrZgoQTO7qsm2lCm3Za8oSjwyD1JKC2+alHMMg1LrrChgZOg KnG0vzosdi0DP8UVP6Sr8p7G0mNmB+n+O4epMKEy3QuXexlffhadir2L7aieqctQ bHqwyITY70jDQg== -----END CERTIFICATE-----Generated at Fri Dec 19 18:46:17 2025 by rpki-client