This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft File: DXQT3PU3N0pw2qMf2amf0psDMjk.mft (raw, json) Hash identifier: DBKvvJNieUlBFJWoF1yhia8B7vWZtkKdo2pCAa+EXGU= Subject key identifier: EB:CA:2A:6E:33:83:BB:2E:22:1C:BD:02:6C:62:5B:8D:55:B3:E7:02 Authority key identifier: 0D:74:13:DC:F5:37:37:4A:70:DA:A3:1F:D9:A9:9F:D2:9B:03:32:39 Certificate issuer: /CN=0d7413dcf537374a70daa31fd9a99fd29b033239 Certificate serial: 019B3C105C7B864C5BB1B055F9CE1EDFDBEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft Manifest number: 154D Signing time: Sat 20 Dec 2025 14:01:03 +0000 Manifest this update: Sat 20 Dec 2025 14:01:03 +0000 Manifest next update: Sun 21 Dec 2025 14:01:03 +0000 Files and hashes: 1: DXQT3PU3N0pw2qMf2amf0psDMjk.crl (hash: TIgifIZ2zJW5DgmzngrcrpV3qW/UyPsfkCc9QL1plVQ=) 2: ka4zet-SkUrSnEvI5_4fHR-JIQI.roa (hash: EBw/ap+q2JTBNlcLQGiKoKAynchkYNGQi71a58xmflM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.crl rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:5c:7b:86:4c:5b:b1:b0:55:f9:ce:1e:df:db:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d7413dcf537374a70daa31fd9a99fd29b033239 Validity Not Before: Dec 20 14:01:03 2025 GMT Not After : Dec 21 14:01:03 2025 GMT Subject: CN=ebca2a6e3383bb2e221cbd026c625b8d55b3e702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e9:83:df:3f:be:27:ad:8a:cd:38:fb:64:b8: 95:cd:e9:23:90:a6:56:13:81:b3:60:51:31:e6:bf: c9:e5:c8:a8:f7:3f:78:e1:68:98:cb:fa:3f:af:fd: 68:3a:47:95:7d:16:cd:ff:64:85:e5:d0:29:b3:c6: 5a:d0:dd:9a:89:47:16:d2:65:45:b5:d3:19:bc:f3: 48:8a:a1:89:8e:4e:54:c7:f5:0b:f3:4f:fc:fd:f8: 84:55:3a:4d:9f:8c:1d:d0:a5:3e:1f:f9:9a:5f:35: f3:48:13:47:de:5a:bb:12:89:7f:d1:af:ad:b1:ca: d8:5a:e6:67:fd:8a:4c:10:16:c1:64:2d:6c:03:30: 09:a7:4f:af:3b:6b:1d:d2:db:cd:67:e1:58:fe:c0: 46:ef:85:96:5f:8e:f9:f7:5c:18:bd:59:c8:fc:6b: f8:40:4e:9f:f6:57:a0:1b:6b:65:c0:0c:9b:fb:87: ff:fd:23:ed:00:d9:72:4d:8c:fa:57:f3:61:32:cf: 99:4e:71:12:27:73:7f:85:c4:7f:19:78:00:ae:41: fe:53:50:42:4e:de:99:1a:bd:ec:00:ef:5f:45:cc: 29:e5:2a:1d:d9:0d:03:8e:f3:ce:83:b9:1b:b9:3f: 93:a4:19:0a:fa:95:9a:5a:3e:cf:40:cf:3f:c6:e7: 6d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:CA:2A:6E:33:83:BB:2E:22:1C:BD:02:6C:62:5B:8D:55:B3:E7:02 X509v3 Authority Key Identifier: keyid:0D:74:13:DC:F5:37:37:4A:70:DA:A3:1F:D9:A9:9F:D2:9B:03:32:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:83:fe:47:b0:b5:26:08:75:68:54:0f:d3:a9:06:17:31:bc: c6:22:f3:45:c4:9f:90:9f:14:6d:e9:81:07:a8:b2:05:0a:5c: cc:20:08:25:17:e2:ed:bd:1c:c8:ea:ac:e8:31:ee:05:61:1d: a2:87:7c:79:68:c6:c1:4b:db:e9:98:c9:b7:6f:88:0c:d3:85: e3:6f:a4:1c:e6:4b:b8:34:7d:63:9f:b2:86:82:b0:e8:3d:20: a3:ba:3d:40:f2:b6:27:d7:b9:9d:74:a5:af:03:ea:5f:0b:d0: 82:10:9c:86:40:49:ba:4b:59:f5:b8:ca:e8:2a:4d:88:85:8e: 62:98:2e:47:05:0b:64:43:95:a4:4c:16:86:00:9b:70:e9:1d: c9:72:53:e6:27:5d:17:86:a3:c2:df:88:ed:bd:0a:64:db:97: 71:63:48:3d:8d:19:77:d5:2e:46:3f:ab:ef:35:b7:87:77:70: b1:80:02:fa:fe:44:f2:2b:52:99:c0:87:f0:71:71:01:7f:c5: 62:52:d2:d9:74:6a:da:a4:68:bf:46:cd:5d:ad:8a:6c:b2:77: 4b:53:0a:f7:10:32:f4:3f:73:29:66:df:62:ba:98:84:95:94: f9:67:2f:e8:43:22:e7:38:5f:08:73:14:27:f5:67:f8:e1:d8: d1:d5:01:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EFx7hkxbsbBV+c4e39vsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzQxM2RjZjUzNzM3NGE3MGRhYTMxZmQ5YTk5ZmQyOWIw MzMyMzkwHhcNMjUxMjIwMTQwMTAzWhcNMjUxMjIxMTQwMTAzWjAzMTEwLwYDVQQD EyhlYmNhMmE2ZTMzODNiYjJlMjIxY2JkMDI2YzYyNWI4ZDU1YjNlNzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtumD3z++J62KzTj7ZLiVzekjkKZW E4GzYFEx5r/J5cio9z944WiYy/o/r/1oOkeVfRbN/2SF5dAps8Za0N2aiUcW0mVF tdMZvPNIiqGJjk5Ux/UL80/8/fiEVTpNn4wd0KU+H/maXzXzSBNH3lq7Eol/0a+t scrYWuZn/YpMEBbBZC1sAzAJp0+vO2sd0tvNZ+FY/sBG74WWX47591wYvVnI/Gv4 QE6f9legG2tlwAyb+4f//SPtANlyTYz6V/NhMs+ZTnESJ3N/hcR/GXgArkH+U1BC Tt6ZGr3sAO9fRcwp5Sod2Q0DjvPOg7kbuT+TpBkK+pWaWj7PQM8/xudtcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOvKKm4zg7suIhy9AmxiW41Vs+cCMB8GA1UdIwQY MBaAFA10E9z1NzdKcNqjH9mpn9KbAzI5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhRVDNQVTNOMHB3MnFNZjJhbWYwcHNETWprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9lMzI2YjktNzk1Zi00YTBiLTllZmQt ZTY5YmUzOTViMGY3LzEvRFhRVDNQVTNOMHB3MnFNZjJhbWYwcHNETWprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9lMzI2YjktNzk1Zi00YTBiLTllZmQtZTY5YmUzOTViMGY3 LzEvRFhRVDNQVTNOMHB3MnFNZjJhbWYwcHNETWprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGYP+R7C1 Jgh1aFQP06kGFzG8xiLzRcSfkJ8UbemBB6iyBQpczCAIJRfi7b0cyOqs6DHuBWEd ood8eWjGwUvb6ZjJt2+IDNOF42+kHOZLuDR9Y5+yhoKw6D0go7o9QPK2J9e5nXSl rwPqXwvQghCchkBJuktZ9bjK6CpNiIWOYpguRwULZEOVpEwWhgCbcOkdyXJT5idd F4ajwt+I7b0KZNuXcWNIPY0Zd9UuRj+r7zW3h3dwsYAC+v5E8itSmcCH8HFxAX/F YlLS2XRq2qRov0bNXa2KbLJ3S1MK9xAy9D9zKWbfYrqYhJWU+Wcv6EMi5zhfCHMU J/Vn+OHY0dUBIw== -----END CERTIFICATE-----Generated at Sat Dec 20 22:05:19 2025 by rpki-client