This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.mft File: duKuT-DA1ssHSbh3rhVaYp_ir9Y.mft (raw, json) Hash identifier: eXmH8lszj9oamevNnQfqj52Q4XyTDhMWzBIW67mfB7k= Subject key identifier: 1F:B2:34:B5:64:D7:CF:A9:A2:EC:69:57:5F:E2:E7:D6:D4:E5:7E:77 Authority key identifier: 76:E2:AE:4F:E0:C0:D6:CB:07:49:B8:77:AE:15:5A:62:9F:E2:AF:D6 Certificate issuer: /CN=76e2ae4fe0c0d6cb0749b877ae155a629fe2afd6 Certificate serial: 019B4513772092BCB07E9D8346DB46A251D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/duKuT-DA1ssHSbh3rhVaYp_ir9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.mft Manifest number: 178A Signing time: Mon 22 Dec 2025 08:01:02 +0000 Manifest this update: Mon 22 Dec 2025 08:01:02 +0000 Manifest next update: Tue 23 Dec 2025 08:01:02 +0000 Files and hashes: 1: duKuT-DA1ssHSbh3rhVaYp_ir9Y.crl (hash: Qk3uC0Mjl+sYeQhU1ESXndhf/Dfi2OTriuwUOWXX0ps=) 2: x6TyoeiDznZ5SRtqywkNMGfQA5k.roa (hash: 1tj6LlfsRsB/tYIfqw9rOc/KrLH+6NOSUXP1XdEdR5k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/duKuT-DA1ssHSbh3rhVaYp_ir9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:13:77:20:92:bc:b0:7e:9d:83:46:db:46:a2:51:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76e2ae4fe0c0d6cb0749b877ae155a629fe2afd6 Validity Not Before: Dec 22 08:01:02 2025 GMT Not After : Dec 23 08:01:02 2025 GMT Subject: CN=1fb234b564d7cfa9a2ec69575fe2e7d6d4e57e77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1c:70:c1:6b:34:42:3c:aa:14:6b:f0:ff:0a: 69:6c:4b:7c:cb:cf:e5:b2:4f:fb:af:86:c8:b0:59: f2:82:ab:a5:24:bd:ae:3e:90:2a:67:ca:bd:9e:36: 20:7a:98:2a:e7:22:8e:60:e5:da:9a:ba:fc:30:4c: b7:16:a9:a7:b3:8c:b1:50:0e:01:5e:ad:03:dd:6e: 11:ce:64:68:98:6f:08:9d:ee:54:e5:a6:76:06:fe: a8:74:cf:7e:bb:14:45:ec:c0:2d:2c:4e:f1:93:4f: 32:b1:b0:0f:e7:52:b7:b8:64:e2:b2:20:a9:e5:dd: 46:64:40:f7:1e:1b:45:92:fb:41:92:89:37:09:a3: f6:5d:73:73:08:f2:8a:a8:45:3c:7e:8a:cb:1d:ef: a3:a4:31:52:d2:ac:ac:1c:88:8a:47:43:ff:52:66: de:f6:d1:2f:20:00:3c:bf:a3:3b:b3:b4:11:ed:07: ef:c3:c8:74:f8:60:d5:67:b5:b2:0e:fd:0f:31:31: d5:12:a5:31:8f:41:d5:ad:8d:bf:c6:b8:43:df:21: 7f:6e:e0:ce:01:de:6a:c6:d6:fa:32:0f:ca:9c:d4: 40:b0:44:c4:47:d0:c3:d7:42:8e:fe:b8:8a:0d:ec: 18:e6:fa:68:31:eb:dd:e9:00:83:06:81:e1:2f:7f: 9c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:B2:34:B5:64:D7:CF:A9:A2:EC:69:57:5F:E2:E7:D6:D4:E5:7E:77 X509v3 Authority Key Identifier: keyid:76:E2:AE:4F:E0:C0:D6:CB:07:49:B8:77:AE:15:5A:62:9F:E2:AF:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/duKuT-DA1ssHSbh3rhVaYp_ir9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:00:5b:2b:7d:33:d8:f4:3a:ce:db:ff:ef:93:57:e6:c9:8f: c3:c5:d3:ce:76:c0:62:1c:7a:65:ae:e0:2d:e6:23:cd:c9:0c: 68:9e:d0:ff:1f:5f:79:b1:a2:8d:60:6b:80:14:34:68:95:d4: 0f:48:6c:c7:60:60:2d:e8:54:be:f2:e2:45:21:f5:49:76:9e: 31:ef:cb:05:65:ae:47:13:cf:6c:40:69:ab:24:97:0b:9e:59: 41:72:9e:5a:ee:e4:f7:13:a4:24:bf:01:6e:d7:22:e5:69:05: 10:15:b5:14:50:51:c6:c0:b8:80:1a:6c:c8:20:95:a4:cc:ab: f6:56:6f:c2:0f:1b:46:9f:30:2b:c9:65:58:d6:13:ab:f5:75: 4c:78:0a:6d:3d:fe:78:81:0d:25:d6:fa:5b:0e:fa:76:69:47: 42:b9:f1:8c:22:f7:b5:7f:2f:9f:da:94:9c:17:15:91:88:0c: bc:69:b7:84:5e:88:8e:96:f6:3f:0e:e5:f7:e8:36:43:72:45: 24:5b:45:d0:39:dd:5e:a0:32:36:73:f0:b6:19:04:be:0f:2f: d3:1b:c6:3b:2c:50:78:24:8e:92:1f:d0:54:3e:e8:2d:f0:0c: 03:a6:70:fb:b3:e5:1c:ec:f6:09:ee:11:3b:e3:cc:de:16:d3: e3:22:63:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFE3cgkrywfp2DRttGolHVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2ZTJhZTRmZTBjMGQ2Y2IwNzQ5Yjg3N2FlMTU1YTYyOWZl MmFmZDYwHhcNMjUxMjIyMDgwMTAyWhcNMjUxMjIzMDgwMTAyWjAzMTEwLwYDVQQD EygxZmIyMzRiNTY0ZDdjZmE5YTJlYzY5NTc1ZmUyZTdkNmQ0ZTU3ZTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBxwwWs0QjyqFGvw/wppbEt8y8/l sk/7r4bIsFnygqulJL2uPpAqZ8q9njYgepgq5yKOYOXamrr8MEy3Fqmns4yxUA4B Xq0D3W4RzmRomG8Ine5U5aZ2Bv6odM9+uxRF7MAtLE7xk08ysbAP51K3uGTisiCp 5d1GZED3HhtFkvtBkok3CaP2XXNzCPKKqEU8forLHe+jpDFS0qysHIiKR0P/Umbe 9tEvIAA8v6M7s7QR7Qfvw8h0+GDVZ7WyDv0PMTHVEqUxj0HVrY2/xrhD3yF/buDO Ad5qxtb6Mg/KnNRAsETER9DD10KO/riKDewY5vpoMevd6QCDBoHhL3+cVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB+yNLVk18+pouxpV1/i59bU5X53MB8GA1UdIwQY MBaAFHbirk/gwNbLB0m4d64VWmKf4q/WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHVLdVQtREExc3NIU2JoM3JoVmFZcF9pcjlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC85YTUyZmQtMDM2NC00MTUwLWFhY2Et NDE2MDJmZGM5ZmRlLzEvZHVLdVQtREExc3NIU2JoM3JoVmFZcF9pcjlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC85YTUyZmQtMDM2NC00MTUwLWFhY2EtNDE2MDJmZGM5ZmRl LzEvZHVLdVQtREExc3NIU2JoM3JoVmFZcF9pcjlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKABbK30z 2PQ6ztv/75NX5smPw8XTznbAYhx6Za7gLeYjzckMaJ7Q/x9febGijWBrgBQ0aJXU D0hsx2BgLehUvvLiRSH1SXaeMe/LBWWuRxPPbEBpqySXC55ZQXKeWu7k9xOkJL8B btci5WkFEBW1FFBRxsC4gBpsyCCVpMyr9lZvwg8bRp8wK8llWNYTq/V1THgKbT3+ eIENJdb6Ww76dmlHQrnxjCL3tX8vn9qUnBcVkYgMvGm3hF6Ijpb2Pw7l9+g2Q3JF JFtF0DndXqAyNnPwthkEvg8v0xvGOyxQeCSOkh/QVD7oLfAMA6Zw+7PlHOz2Ce4R O+PM3hbT4yJjTA== -----END CERTIFICATE-----Generated at Mon Dec 22 09:47:39 2025 by rpki-client