This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft File: DUxrauUAB3adKNmJcNJPvO4bo5A.mft (raw, json) Hash identifier: uxo18HHWZjZGo0KA6XiRf4smEZBgGUc4N490AorIAPk= Subject key identifier: 5F:84:3F:4F:EA:3D:7D:02:9C:DB:C8:D7:90:A6:1C:13:21:63:EE:5D Authority key identifier: 0D:4C:6B:6A:E5:00:07:76:9D:28:D9:89:70:D2:4F:BC:EE:1B:A3:90 Certificate issuer: /CN=0d4c6b6ae50007769d28d98970d24fbcee1ba390 Certificate serial: 019B3B6C0DA46D977704C1209E2914B15219 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUxrauUAB3adKNmJcNJPvO4bo5A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft Manifest number: 014D Signing time: Sat 20 Dec 2025 11:01:35 +0000 Manifest this update: Sat 20 Dec 2025 11:01:35 +0000 Manifest next update: Sun 21 Dec 2025 11:01:35 +0000 Files and hashes: 1: DUxrauUAB3adKNmJcNJPvO4bo5A.crl (hash: 9pODbn9e5bcedB+4CCJ/PJYWhp7eBzB1+TQOV0XvEb4=) 2: m3GZ3uzof7l0GBgnn84BPxNFAYA.roa (hash: 2i1OlK6EDLBEyz+L6W8IHqQybGpvkp0P97W/04ZDHzg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft rsync://rpki.ripe.net/repository/DEFAULT/DUxrauUAB3adKNmJcNJPvO4bo5A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6c:0d:a4:6d:97:77:04:c1:20:9e:29:14:b1:52:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d4c6b6ae50007769d28d98970d24fbcee1ba390 Validity Not Before: Dec 20 11:01:35 2025 GMT Not After : Dec 21 11:01:35 2025 GMT Subject: CN=5f843f4fea3d7d029cdbc8d790a61c132163ee5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:78:03:39:a6:eb:17:7a:1d:70:bf:24:e0:a2: 6b:2d:ba:f0:31:6e:0b:73:6d:24:27:64:0e:e5:07: 2c:47:ba:fe:0d:57:33:94:68:26:0a:79:16:90:41: b8:53:e9:a6:2a:b9:a8:b2:31:32:73:65:33:41:7a: 8e:7b:ba:cb:2b:75:e1:b0:c9:25:ce:7a:d0:01:3a: f5:9f:20:d0:ce:3e:49:c9:af:78:fa:be:db:ec:54: d3:48:17:30:79:73:9b:0b:83:59:4c:7e:f3:cb:5c: 94:12:13:01:d0:5d:9e:99:b2:56:f5:7a:2e:be:7a: 4c:b1:07:56:88:37:a6:37:57:3c:e3:6a:40:2b:14: e7:07:e8:76:d1:88:46:ce:b9:57:6c:5f:2a:8b:5a: f5:47:74:1c:aa:ba:e7:ad:0c:1d:5a:18:a5:a1:9f: e7:92:41:aa:34:16:d9:3e:f5:77:07:d8:95:19:49: e7:ce:76:7c:0a:d0:20:9b:27:73:35:20:01:92:76: ad:77:6e:17:e6:21:4d:ac:f8:ee:cc:55:cd:06:e1: 20:3e:be:e2:63:2d:51:4f:b3:5f:22:e8:ca:55:b5: 7c:69:95:69:90:f6:2d:6d:db:76:97:62:e7:81:d2: 74:d0:45:26:52:e4:d8:3f:fe:0a:5a:38:27:6a:c1: 26:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:84:3F:4F:EA:3D:7D:02:9C:DB:C8:D7:90:A6:1C:13:21:63:EE:5D X509v3 Authority Key Identifier: keyid:0D:4C:6B:6A:E5:00:07:76:9D:28:D9:89:70:D2:4F:BC:EE:1B:A3:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUxrauUAB3adKNmJcNJPvO4bo5A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63667b-7a25-440f-84f9-2ab9587e5f1d/1/DUxrauUAB3adKNmJcNJPvO4bo5A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:cb:65:a0:94:9e:62:23:26:88:fa:a9:89:59:28:d6:16:b5: e7:7c:a5:53:f8:58:c8:60:3f:5d:ed:d5:b6:72:9e:80:04:6b: 9b:b1:50:c2:d0:a4:c1:16:5b:61:74:43:78:34:53:91:15:61: b7:96:f0:ad:1f:9d:9f:ea:95:d0:5a:e3:3a:7c:93:d4:d4:12: fb:7f:07:fc:57:24:c3:c5:45:5b:72:6e:b0:85:07:3e:04:53: da:0c:83:1c:6c:06:09:41:59:60:7d:2f:70:5b:fb:b1:fb:bb: 8f:13:10:84:59:c9:54:11:91:d7:fd:a1:a1:c0:07:5c:bb:a0: fe:4e:19:49:ae:4b:98:20:4e:4c:b5:8a:ae:78:e7:a4:08:20: ad:80:06:89:9d:5b:f0:65:e8:98:89:b2:48:54:b0:f7:57:89: 57:49:92:b7:0b:f6:de:d7:13:83:27:0f:ee:cb:7e:cd:8d:d1: c5:03:65:35:93:08:ee:92:0e:48:db:90:9b:15:a0:f8:28:96: 35:f0:a7:bd:3e:52:ca:7a:9c:b1:35:db:28:5f:cf:f5:1a:56: 99:25:3c:a4:32:a8:06:de:ba:33:39:c3:3b:a6:e1:62:3b:b3: 9f:48:8a:fb:f7:5a:bc:a0:d5:4a:b4:be:49:08:90:3c:a8:83: e3:0c:37:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7bA2kbZd3BMEgnikUsVIZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNGM2YjZhZTUwMDA3NzY5ZDI4ZDk4OTcwZDI0ZmJjZWUx YmEzOTAwHhcNMjUxMjIwMTEwMTM1WhcNMjUxMjIxMTEwMTM1WjAzMTEwLwYDVQQD Eyg1Zjg0M2Y0ZmVhM2Q3ZDAyOWNkYmM4ZDc5MGE2MWMxMzIxNjNlZTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtngDOabrF3odcL8k4KJrLbrwMW4L c20kJ2QO5QcsR7r+DVczlGgmCnkWkEG4U+mmKrmosjEyc2UzQXqOe7rLK3XhsMkl znrQATr1nyDQzj5Jya94+r7b7FTTSBcweXObC4NZTH7zy1yUEhMB0F2embJW9Xou vnpMsQdWiDemN1c842pAKxTnB+h20YhGzrlXbF8qi1r1R3QcqrrnrQwdWhiloZ/n kkGqNBbZPvV3B9iVGUnnznZ8CtAgmydzNSABknatd24X5iFNrPjuzFXNBuEgPr7i Yy1RT7NfIujKVbV8aZVpkPYtbdt2l2LngdJ00EUmUuTYP/4KWjgnasEm7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF+EP0/qPX0CnNvI15CmHBMhY+5dMB8GA1UdIwQY MBaAFA1Ma2rlAAd2nSjZiXDST7zuG6OQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFV4cmF1VUFCM2FkS05tSmNOSlB2TzRibzVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi82MzY2N2ItN2EyNS00NDBmLTg0Zjkt MmFiOTU4N2U1ZjFkLzEvRFV4cmF1VUFCM2FkS05tSmNOSlB2TzRibzVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi82MzY2N2ItN2EyNS00NDBmLTg0ZjktMmFiOTU4N2U1ZjFk LzEvRFV4cmF1VUFCM2FkS05tSmNOSlB2TzRibzVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAMtloJSe YiMmiPqpiVko1ha153ylU/hYyGA/Xe3VtnKegARrm7FQwtCkwRZbYXRDeDRTkRVh t5bwrR+dn+qV0FrjOnyT1NQS+38H/Fckw8VFW3JusIUHPgRT2gyDHGwGCUFZYH0v cFv7sfu7jxMQhFnJVBGR1/2hocAHXLug/k4ZSa5LmCBOTLWKrnjnpAggrYAGiZ1b 8GXomImySFSw91eJV0mStwv23tcTgycP7st+zY3RxQNlNZMI7pIOSNuQmxWg+CiW NfCnvT5SynqcsTXbKF/P9RpWmSU8pDKoBt66MznDO6bhYjuzn0iK+/davKDVSrS+ SQiQPKiD4ww3Lg== -----END CERTIFICATE-----Generated at Sat Dec 20 17:16:17 2025 by rpki-client