This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft File: dKTzwLZqTJPoD_X22JrYZz6UPF8.mft (raw, json) Hash identifier: RuX7mTG/wV35AZlBqpDYk/xiRA9NC+RNyZERtjVNZ4w= Subject key identifier: 95:7C:11:DB:B0:0E:1F:8E:F7:B1:4D:0B:1B:1C:8F:9C:11:C7:DF:CF Authority key identifier: 74:A4:F3:C0:B6:6A:4C:93:E8:0F:F5:F6:D8:9A:D8:67:3E:94:3C:5F Certificate issuer: /CN=74a4f3c0b66a4c93e80ff5f6d89ad8673e943c5f Certificate serial: 019B5899C00562F47C7A58F73B6B6316439B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKTzwLZqTJPoD_X22JrYZz6UPF8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft Manifest number: 1796 Signing time: Fri 26 Dec 2025 03:00:29 +0000 Manifest this update: Fri 26 Dec 2025 03:00:29 +0000 Manifest next update: Sat 27 Dec 2025 03:00:29 +0000 Files and hashes: 1: 1-MmN0tsEmoim2sae335BAlf2iMY.roa (hash: BOjGK2JKa11z5em/Dgc+q3/nSr0kFU/3HDEjsSjRF+k=) 2: dKTzwLZqTJPoD_X22JrYZz6UPF8.crl (hash: 5V3Qd0Qn7FpI8jJapLRwQcU/WGCNQbUDeq10/zgcWMM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft rsync://rpki.ripe.net/repository/DEFAULT/dKTzwLZqTJPoD_X22JrYZz6UPF8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:58:99:c0:05:62:f4:7c:7a:58:f7:3b:6b:63:16:43:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74a4f3c0b66a4c93e80ff5f6d89ad8673e943c5f Validity Not Before: Dec 26 03:00:29 2025 GMT Not After : Dec 27 03:00:29 2025 GMT Subject: CN=957c11dbb00e1f8ef7b14d0b1b1c8f9c11c7dfcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9e:db:38:c8:19:02:60:dd:a8:d3:58:56:51: 59:76:9e:24:5c:b6:a7:11:11:64:96:ae:71:37:16: 5d:21:a5:6e:9a:ec:82:5f:ca:d2:cb:0b:b3:dd:e2: 70:12:e0:b6:f8:77:54:95:13:38:12:5a:7e:51:18: 22:29:72:e3:a5:5f:73:d9:5d:c2:2e:1f:78:5e:8c: 98:35:5c:30:05:14:5e:6c:7e:94:c2:63:e5:95:4d: a5:fd:2a:6b:f6:b6:e7:b6:c0:5a:df:7d:89:c5:82: 85:d1:79:c8:f8:d6:ca:21:de:d5:40:0f:da:8c:93: ec:97:73:49:0f:81:8e:c8:a5:c2:2c:32:d7:89:a0: aa:38:f4:db:50:8c:78:33:99:90:ea:f4:c9:52:60: e2:ac:b0:95:b4:bf:76:4f:72:61:99:b0:c1:29:ff: 1c:6c:72:15:ae:b9:29:14:2b:28:f8:1c:2f:f6:21: b5:73:67:c0:8a:72:8b:27:60:88:44:a6:ba:8c:26: 0f:a5:b1:29:7f:aa:a7:fe:0b:84:25:38:73:aa:6e: 39:bd:61:56:7f:73:89:45:83:c8:4d:c8:91:2e:c6: 54:db:d4:2e:80:4e:b1:b5:56:7e:83:fb:0e:bb:ae: 4e:10:a2:69:3f:02:bb:ff:22:5e:2f:0f:16:8a:af: 7d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:7C:11:DB:B0:0E:1F:8E:F7:B1:4D:0B:1B:1C:8F:9C:11:C7:DF:CF X509v3 Authority Key Identifier: keyid:74:A4:F3:C0:B6:6A:4C:93:E8:0F:F5:F6:D8:9A:D8:67:3E:94:3C:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKTzwLZqTJPoD_X22JrYZz6UPF8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:3e:28:20:9f:90:bb:f5:7a:d6:5f:b2:1a:c5:e6:ba:1b:5f: de:dd:d3:be:c9:46:a6:4d:c7:f4:75:fe:0a:ea:78:e7:43:73: 5a:82:91:01:82:95:5d:39:0d:7a:5c:7b:5d:2d:d6:11:fe:eb: 20:83:49:48:2c:46:2a:e3:4d:de:2e:2d:ac:91:95:f3:ef:20: a8:62:68:02:64:52:a3:5d:bc:dd:9d:15:35:9e:2e:a0:5a:9d: 38:e1:44:17:69:15:0b:f0:07:a7:7a:f9:4c:51:0b:a5:d9:35: d5:6e:70:00:c7:ab:f6:37:4b:4d:50:e7:59:85:aa:b1:20:b5: 1c:0c:22:b0:18:8a:29:c4:37:6e:83:b5:98:72:15:37:72:af: f6:94:b9:02:a4:08:db:1a:a8:88:1c:e1:3e:c1:6d:bb:9a:9a: 88:38:4c:5f:fd:4c:eb:b1:e2:93:0f:f8:d5:29:83:54:f7:96: 74:f6:c7:f1:3b:75:09:d8:3e:87:ae:dd:84:2c:0a:70:fa:5a: 22:b3:98:bf:c4:dc:0b:ab:5d:e3:d6:ba:68:fc:cc:31:fc:ea: fc:3e:2c:6b:1d:74:fa:24:ff:ee:73:b0:02:a4:b2:6d:49:64: 34:15:0d:79:e0:44:41:0f:2c:bf:75:e8:ef:d3:f0:3d:f5:da: 33:e0:eb:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtYmcAFYvR8elj3O2tjFkObMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0YTRmM2MwYjY2YTRjOTNlODBmZjVmNmQ4OWFkODY3M2U5 NDNjNWYwHhcNMjUxMjI2MDMwMDI5WhcNMjUxMjI3MDMwMDI5WjAzMTEwLwYDVQQD Eyg5NTdjMTFkYmIwMGUxZjhlZjdiMTRkMGIxYjFjOGY5YzExYzdkZmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJ7bOMgZAmDdqNNYVlFZdp4kXLan ERFklq5xNxZdIaVumuyCX8rSywuz3eJwEuC2+HdUlRM4Elp+URgiKXLjpV9z2V3C Lh94XoyYNVwwBRRebH6UwmPllU2l/Spr9rbntsBa332JxYKF0XnI+NbKId7VQA/a jJPsl3NJD4GOyKXCLDLXiaCqOPTbUIx4M5mQ6vTJUmDirLCVtL92T3JhmbDBKf8c bHIVrrkpFCso+Bwv9iG1c2fAinKLJ2CIRKa6jCYPpbEpf6qn/guEJThzqm45vWFW f3OJRYPITciRLsZU29QugE6xtVZ+g/sOu65OEKJpPwK7/yJeLw8Wiq99vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJV8EduwDh+O97FNCxscj5wRx9/PMB8GA1UdIwQY MBaAFHSk88C2akyT6A/19tia2Gc+lDxfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEtUendMWnFUSlBvRF9YMjJKcllaejZVUEY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi82OTk3MDQtODAwNC00NjE0LWI0NGMt MmNhNDkyZjZkN2E4LzEvZEtUendMWnFUSlBvRF9YMjJKcllaejZVUEY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi82OTk3MDQtODAwNC00NjE0LWI0NGMtMmNhNDkyZjZkN2E4 LzEvZEtUendMWnFUSlBvRF9YMjJKcllaejZVUEY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWz4oIJ+Q u/V61l+yGsXmuhtf3t3TvslGpk3H9HX+Cup450NzWoKRAYKVXTkNelx7XS3WEf7r IINJSCxGKuNN3i4trJGV8+8gqGJoAmRSo1283Z0VNZ4uoFqdOOFEF2kVC/AHp3r5 TFELpdk11W5wAMer9jdLTVDnWYWqsSC1HAwisBiKKcQ3boO1mHIVN3Kv9pS5AqQI 2xqoiBzhPsFtu5qaiDhMX/1M67Hikw/41SmDVPeWdPbH8Tt1Cdg+h67dhCwKcPpa IrOYv8TcC6td49a6aPzMMfzq/D4sax10+iT/7nOwAqSybUlkNBUNeeBEQQ8sv3Xo 79PwPfXaM+Dr9A== -----END CERTIFICATE-----Generated at Fri Dec 26 13:09:06 2025 by rpki-client