This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.mft File: dxLiD1ELIrghfN8NIRSWsbnB7bg.mft (raw, json) Hash identifier: TVjT+xTpAaXEqD7bn1yW9gTb87ef0UPf7kIAt+JpgH0= Subject key identifier: 80:8A:EF:39:6B:62:6A:F5:71:09:6D:C0:22:05:3F:29:5F:C2:A8:AE Authority key identifier: 77:12:E2:0F:51:0B:22:B8:21:7C:DF:0D:21:14:96:B1:B9:C1:ED:B8 Certificate issuer: /CN=7712e20f510b22b8217cdf0d211496b1b9c1edb8 Certificate serial: 019B74B647D3F5B3095ED12F36EC3F6709B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxLiD1ELIrghfN8NIRSWsbnB7bg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.mft Manifest number: 17A5 Signing time: Wed 31 Dec 2025 14:01:01 +0000 Manifest this update: Wed 31 Dec 2025 14:01:01 +0000 Manifest next update: Thu 01 Jan 2026 14:01:01 +0000 Files and hashes: 1: 0bjBu50yRFSQQCpaSDnz4Da59n0.roa (hash: EpIJkfUrUz0ncMqveTDKjCXPCU3oKNIvzwGQlVcXpbY=) 2: dxLiD1ELIrghfN8NIRSWsbnB7bg.crl (hash: yC5EzxqXiFgXYo4Bst5dC+UBDwV0ikIqNlE2XihUfzs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.crl rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.mft rsync://rpki.ripe.net/repository/DEFAULT/dxLiD1ELIrghfN8NIRSWsbnB7bg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 14:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:74:b6:47:d3:f5:b3:09:5e:d1:2f:36:ec:3f:67:09:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7712e20f510b22b8217cdf0d211496b1b9c1edb8 Validity Not Before: Dec 31 14:01:01 2025 GMT Not After : Jan 1 14:01:01 2026 GMT Subject: CN=808aef396b626af571096dc022053f295fc2a8ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f1:b1:2f:8e:2b:74:14:ff:3d:8e:6a:41:c2: 32:c0:f9:5c:6f:61:f5:81:d3:b8:77:a6:9e:b3:fb: f5:65:95:84:57:e6:21:70:00:2f:ba:f5:15:3b:3d: b6:87:47:57:d6:3d:eb:3b:41:56:1b:0c:77:ed:6e: 51:14:3f:4d:e2:ae:35:81:a2:f8:dd:c5:cc:6c:88: dd:fe:d5:69:0a:53:49:a2:09:4b:58:28:2d:d0:a0: 3c:34:fc:cd:1f:96:b4:29:0b:67:69:70:77:70:1c: bd:fd:36:15:e9:ff:a1:4c:16:71:1d:51:b5:e6:0a: 0b:ab:0c:f6:7b:34:7d:99:15:f7:a5:78:02:08:c7: 21:a8:63:08:dd:b1:75:5a:d9:e1:22:6e:54:17:7c: a1:bf:9f:fa:50:26:34:b2:ff:53:c3:ee:51:ea:93: f4:d4:10:f1:7a:50:a2:5c:24:7c:5c:82:24:48:fe: 6d:8e:e9:54:03:0f:09:e9:d2:61:73:e7:46:35:05: 66:8c:a0:27:10:b1:80:20:29:cd:26:e8:64:b9:bd: e6:64:4b:3e:62:fa:3b:a3:5c:ed:ab:49:39:53:4a: 21:a3:22:11:fe:a5:06:b7:d4:7f:97:c1:2b:bc:15: 6b:0e:aa:ad:c2:5a:25:62:f0:f3:72:e0:9f:63:ff: 34:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:8A:EF:39:6B:62:6A:F5:71:09:6D:C0:22:05:3F:29:5F:C2:A8:AE X509v3 Authority Key Identifier: keyid:77:12:E2:0F:51:0B:22:B8:21:7C:DF:0D:21:14:96:B1:B9:C1:ED:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxLiD1ELIrghfN8NIRSWsbnB7bg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:03:92:63:3e:cd:f0:98:d8:0f:69:df:67:59:33:e4:77:cb: c4:32:96:81:95:69:62:40:08:85:0b:f4:58:40:95:10:c9:3c: 6d:2f:0a:73:4b:c0:54:b5:df:7f:1b:13:7a:18:65:35:a9:ae: 94:af:27:20:56:8f:d9:e3:26:c3:60:fd:36:f7:5e:ab:d7:f1: 3e:84:88:ed:6f:77:f3:fb:b5:7e:fb:e5:ab:2b:43:0d:a1:6f: b3:fd:72:e0:c7:c7:fa:9d:09:51:10:7d:26:6c:60:0c:c0:3d: 9d:e2:40:d0:a7:fd:49:89:2b:e5:fb:be:45:a0:fb:af:3c:74: ee:8f:63:94:bb:5a:ce:14:2c:81:5b:4e:83:b8:40:d4:92:93: 97:80:c4:49:88:06:ca:5d:d6:83:c4:e7:6f:d4:d3:2a:16:db: 7b:5f:e5:1f:77:70:8a:15:06:43:e3:68:11:65:03:13:5b:db: 73:c8:8f:ed:eb:62:a3:7e:c8:88:0c:12:08:11:e4:d9:35:f4: ec:0e:bd:2d:d0:b8:40:2c:e6:d6:2c:1f:5d:2b:4f:dd:5f:35: c0:c8:fb:4b:bc:5d:8f:35:c5:09:b8:5f:82:e7:5f:10:c6:5f: d1:f0:7f:dd:27:7d:06:45:0a:61:af:a3:8a:ca:64:62:a2:db: 4d:f4:db:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt0tkfT9bMJXtEvNuw/ZwmwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MTJlMjBmNTEwYjIyYjgyMTdjZGYwZDIxMTQ5NmIxYjlj MWVkYjgwHhcNMjUxMjMxMTQwMTAxWhcNMjYwMTAxMTQwMTAxWjAzMTEwLwYDVQQD Eyg4MDhhZWYzOTZiNjI2YWY1NzEwOTZkYzAyMjA1M2YyOTVmYzJhOGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvGxL44rdBT/PY5qQcIywPlcb2H1 gdO4d6aes/v1ZZWEV+YhcAAvuvUVOz22h0dX1j3rO0FWGwx37W5RFD9N4q41gaL4 3cXMbIjd/tVpClNJoglLWCgt0KA8NPzNH5a0KQtnaXB3cBy9/TYV6f+hTBZxHVG1 5goLqwz2ezR9mRX3pXgCCMchqGMI3bF1WtnhIm5UF3yhv5/6UCY0sv9Tw+5R6pP0 1BDxelCiXCR8XIIkSP5tjulUAw8J6dJhc+dGNQVmjKAnELGAICnNJuhkub3mZEs+ Yvo7o1ztq0k5U0ohoyIR/qUGt9R/l8ErvBVrDqqtwlolYvDzcuCfY/806wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFICK7zlrYmr1cQltwCIFPylfwqiuMB8GA1UdIwQY MBaAFHcS4g9RCyK4IXzfDSEUlrG5we24MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHhMaUQxRUxJcmdoZk44TklSU1dzYm5CN2JnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS82Y2I3MTQtYzcxNC00MjgxLThhZGEt NDNjZTk0OTY2M2Q5LzEvZHhMaUQxRUxJcmdoZk44TklSU1dzYm5CN2JnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS82Y2I3MTQtYzcxNC00MjgxLThhZGEtNDNjZTk0OTY2M2Q5 LzEvZHhMaUQxRUxJcmdoZk44TklSU1dzYm5CN2JnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVgOSYz7N 8JjYD2nfZ1kz5HfLxDKWgZVpYkAIhQv0WECVEMk8bS8Kc0vAVLXffxsTehhlNamu lK8nIFaP2eMmw2D9Nvdeq9fxPoSI7W938/u1fvvlqytDDaFvs/1y4MfH+p0JURB9 JmxgDMA9neJA0Kf9SYkr5fu+RaD7rzx07o9jlLtazhQsgVtOg7hA1JKTl4DESYgG yl3Wg8Tnb9TTKhbbe1/lH3dwihUGQ+NoEWUDE1vbc8iP7etio37IiAwSCBHk2TX0 7A69LdC4QCzm1iwfXStP3V81wMj7S7xdjzXFCbhfgudfEMZf0fB/3Sd9BkUKYa+j ispkYqLbTfTb5Q== -----END CERTIFICATE-----Generated at Wed Dec 31 21:46:20 2025 by rpki-client