This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.mft File: dxLiD1ELIrghfN8NIRSWsbnB7bg.mft (raw, json) Hash identifier: h5a3KTbqmV7dN9qqXwU1pcsMtE8iGydpxmy4xcki+aU= Subject key identifier: 94:03:B0:36:EA:B2:D4:AB:51:EA:3B:10:42:C9:0C:25:6A:25:24:A4 Authority key identifier: 77:12:E2:0F:51:0B:22:B8:21:7C:DF:0D:21:14:96:B1:B9:C1:ED:B8 Certificate issuer: /CN=7712e20f510b22b8217cdf0d211496b1b9c1edb8 Certificate serial: 019B59AD266EBA3505A136BA1A5E13AFE51A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxLiD1ELIrghfN8NIRSWsbnB7bg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 08:01:18 +0000 Manifest this update: Fri 26 Dec 2025 08:01:18 +0000 Manifest next update: Sat 27 Dec 2025 08:01:18 +0000 Files and hashes: 1: 0bjBu50yRFSQQCpaSDnz4Da59n0.roa (hash: EpIJkfUrUz0ncMqveTDKjCXPCU3oKNIvzwGQlVcXpbY=) 2: dxLiD1ELIrghfN8NIRSWsbnB7bg.crl (hash: BQ6gGg3fPtqHe+Hqh0WOj+BKCY0vasZX7qxMIzvbsCM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.crl rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.mft rsync://rpki.ripe.net/repository/DEFAULT/dxLiD1ELIrghfN8NIRSWsbnB7bg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ad:26:6e:ba:35:05:a1:36:ba:1a:5e:13:af:e5:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7712e20f510b22b8217cdf0d211496b1b9c1edb8 Validity Not Before: Dec 26 08:01:18 2025 GMT Not After : Dec 27 08:01:18 2025 GMT Subject: CN=9403b036eab2d4ab51ea3b1042c90c256a2524a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9f:7f:2d:c8:a7:3c:46:fc:92:3c:79:c4:54: db:0f:12:70:f0:ae:bb:45:ea:1d:43:f0:b7:f5:13: 78:75:01:f1:e1:d9:b4:64:e4:a2:81:95:11:aa:a8: dc:c9:db:40:83:ca:3c:48:47:67:0c:32:1a:9c:b7: 3b:22:8b:83:2a:dd:5a:4f:10:09:6e:31:0d:db:47: 19:94:bc:28:cb:36:a3:4e:54:37:5d:32:85:9c:65: d5:0f:08:b0:97:c2:2e:c4:6b:cf:45:3c:a3:91:b5: bf:10:fe:f1:b4:03:f0:db:5d:4b:10:54:ba:1d:ca: 92:aa:84:a9:0f:d2:c9:68:a2:98:e1:ad:d9:98:73: 1a:9f:fe:8b:98:de:0a:1b:8c:d4:6e:38:22:3a:7d: 23:52:15:69:92:6c:0a:6a:8e:2e:82:52:60:e3:27: 7c:3c:54:83:86:1d:97:90:57:3f:8e:42:f8:ff:18: 75:e2:c6:62:e9:74:f6:d3:87:d1:80:fd:2a:f7:e0: c3:ea:66:52:ca:05:63:77:51:5f:c9:ed:b4:73:a8: c1:df:d4:b4:98:83:cf:21:66:08:66:b4:c9:f6:b9: 1e:44:8e:8c:65:b5:bb:ed:9c:92:18:a8:af:20:94: d5:c0:58:8e:75:e1:46:a7:8b:9b:8c:72:65:ee:63: ca:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:03:B0:36:EA:B2:D4:AB:51:EA:3B:10:42:C9:0C:25:6A:25:24:A4 X509v3 Authority Key Identifier: keyid:77:12:E2:0F:51:0B:22:B8:21:7C:DF:0D:21:14:96:B1:B9:C1:ED:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxLiD1ELIrghfN8NIRSWsbnB7bg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cb714-c714-4281-8ada-43ce949663d9/1/dxLiD1ELIrghfN8NIRSWsbnB7bg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:1e:cc:82:fb:88:39:8b:23:bf:b5:86:7e:17:11:99:da:09: 2c:40:b6:fe:3f:52:15:32:2c:7a:11:fa:d1:b0:7e:48:8a:b2: 0b:0d:87:8d:32:3d:cf:a8:55:eb:7b:e6:14:03:cf:6e:28:64: 9a:fb:72:47:13:d8:ef:4d:ff:2c:ab:86:00:07:d8:71:28:21: 57:0a:8a:08:fd:5a:64:89:dd:ab:67:5d:20:d2:75:b0:04:7f: 8b:41:8a:dc:2c:2a:75:40:aa:45:fc:e3:0a:83:b0:61:1b:1a: db:cc:d4:e3:ca:ba:ed:b6:b6:1f:51:91:3b:cc:21:c5:fb:64: b0:7b:e3:98:33:91:24:6a:0c:9d:0a:2f:4c:6b:7f:8a:39:38: 3e:0d:71:49:19:d0:ac:1c:5e:e3:f8:99:c3:87:08:1e:c2:77: ae:0b:c8:62:aa:f4:dd:41:a7:e1:88:bb:df:f8:2f:1c:8f:27: c6:a1:23:7e:40:00:de:4e:bb:4e:f6:3c:e6:ae:da:9f:7b:f6: 63:13:a8:7a:e8:02:7d:c9:30:86:1e:85:92:ef:25:ed:56:d5: 4b:c1:25:38:e7:a1:b0:87:cc:7b:84:e5:d4:4a:9d:8b:cb:b7: 64:f1:c9:48:4a:1a:dd:80:d9:15:44:9a:f4:4e:d3:e8:dd:28: af:0c:fc:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrSZuujUFoTa6Gl4Tr+UaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MTJlMjBmNTEwYjIyYjgyMTdjZGYwZDIxMTQ5NmIxYjlj MWVkYjgwHhcNMjUxMjI2MDgwMTE4WhcNMjUxMjI3MDgwMTE4WjAzMTEwLwYDVQQD Eyg5NDAzYjAzNmVhYjJkNGFiNTFlYTNiMTA0MmM5MGMyNTZhMjUyNGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp59/LcinPEb8kjx5xFTbDxJw8K67 ReodQ/C39RN4dQHx4dm0ZOSigZURqqjcydtAg8o8SEdnDDIanLc7IouDKt1aTxAJ bjEN20cZlLwoyzajTlQ3XTKFnGXVDwiwl8IuxGvPRTyjkbW/EP7xtAPw211LEFS6 HcqSqoSpD9LJaKKY4a3ZmHMan/6LmN4KG4zUbjgiOn0jUhVpkmwKao4uglJg4yd8 PFSDhh2XkFc/jkL4/xh14sZi6XT204fRgP0q9+DD6mZSygVjd1Ffye20c6jB39S0 mIPPIWYIZrTJ9rkeRI6MZbW77ZySGKivIJTVwFiOdeFGp4ubjHJl7mPK8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJQDsDbqstSrUeo7EELJDCVqJSSkMB8GA1UdIwQY MBaAFHcS4g9RCyK4IXzfDSEUlrG5we24MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHhMaUQxRUxJcmdoZk44TklSU1dzYm5CN2JnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS82Y2I3MTQtYzcxNC00MjgxLThhZGEt NDNjZTk0OTY2M2Q5LzEvZHhMaUQxRUxJcmdoZk44TklSU1dzYm5CN2JnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS82Y2I3MTQtYzcxNC00MjgxLThhZGEtNDNjZTk0OTY2M2Q5 LzEvZHhMaUQxRUxJcmdoZk44TklSU1dzYm5CN2JnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOx7MgvuI OYsjv7WGfhcRmdoJLEC2/j9SFTIsehH60bB+SIqyCw2HjTI9z6hV63vmFAPPbihk mvtyRxPY703/LKuGAAfYcSghVwqKCP1aZIndq2ddINJ1sAR/i0GK3CwqdUCqRfzj CoOwYRsa28zU48q67ba2H1GRO8whxftksHvjmDORJGoMnQovTGt/ijk4Pg1xSRnQ rBxe4/iZw4cIHsJ3rgvIYqr03UGn4Yi73/gvHI8nxqEjfkAA3k67TvY85q7an3v2 YxOoeugCfckwhh6Fku8l7VbVS8ElOOehsIfMe4Tl1Eqdi8u3ZPHJSEoa3YDZFUSa 9E7T6N0orwz8cA== -----END CERTIFICATE-----Generated at Fri Dec 26 11:16:35 2025 by rpki-client