This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft File: DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft (raw, json) Hash identifier: 4daHnlAc4h+7Ss6ftSYCOODoYv3CH/VQyYOK8tzblDI= Subject key identifier: E7:4B:58:82:52:20:6A:4E:12:B4:30:9A:41:27:3E:F2:00:EB:C3:4B Authority key identifier: 0D:79:01:C4:30:AE:39:FC:B0:5B:EB:5B:34:26:7F:52:24:F0:4F:61 Certificate issuer: /CN=0d7901c430ae39fcb05beb5b34267f5224f04f61 Certificate serial: 019B3E6D027E57C6A3CE1B9157467BE3E10A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft Manifest number: 167A Signing time: Sun 21 Dec 2025 01:01:30 +0000 Manifest this update: Sun 21 Dec 2025 01:01:30 +0000 Manifest next update: Mon 22 Dec 2025 01:01:30 +0000 Files and hashes: 1: DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl (hash: UL8iCCk7j2F8m1zt+vGrHQcu3n8KPGaH8XqyffAVVH0=) 2: TSvZLiAEM2CqBOpzEquX-L_n02A.roa (hash: I0g5fDPCn3RgZfwIeTKeigQ5B1u0G9JlwOBJf1pZ4jg=) 3: ydjENtpcRcTmVcWG9oyQwp3NaQ0.roa (hash: YWkayHgIhYTNLiz4XAeekrNCTOGkXpvO+aHI+JpNUpU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:02:7e:57:c6:a3:ce:1b:91:57:46:7b:e3:e1:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d7901c430ae39fcb05beb5b34267f5224f04f61 Validity Not Before: Dec 21 01:01:30 2025 GMT Not After : Dec 22 01:01:30 2025 GMT Subject: CN=e74b588252206a4e12b4309a41273ef200ebc34b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:6d:ef:3c:df:08:87:9e:bc:59:3e:79:f1:a5: 08:e3:23:0f:52:4b:44:2a:44:48:35:86:ab:57:4b: 98:35:05:c8:e7:ac:d9:ee:42:eb:b3:ea:0e:7a:f2: ff:a1:f0:9e:cc:01:ad:61:2e:a5:1a:4e:a3:95:bf: 26:ec:2f:1f:4b:91:a3:76:d5:55:50:eb:35:af:a2: ab:32:68:6a:e9:4e:a1:2e:81:73:b5:7b:8a:ec:02: 3a:dc:7f:ae:b6:d9:6d:f2:d9:9e:0a:89:10:e6:b4: ba:8b:a0:32:00:a8:60:8f:e1:65:f5:26:bf:e6:fb: bb:42:dd:5f:03:a1:da:5a:cc:0c:6d:a9:94:79:29: d8:88:a6:3a:ca:ac:56:0d:a6:bb:3b:29:95:8c:a8: e8:c3:bf:8d:0e:4d:69:fa:23:79:47:ec:4b:a0:c7: 1f:79:4d:2f:e5:28:23:e7:f9:22:dd:c5:9d:cc:cb: dd:07:4b:79:21:7e:9c:24:ff:c8:cf:7f:a5:f3:5c: 53:51:d3:27:5a:bf:32:c5:b5:25:55:5b:4a:54:89: c1:b6:fc:f2:27:a0:3c:a4:84:b8:4f:37:1f:d6:ba: 57:92:79:16:d6:9e:6e:59:5b:f1:1e:17:4f:ba:16: 88:b1:0c:41:2b:ff:32:ee:82:cf:24:e2:76:b1:57: 75:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:4B:58:82:52:20:6A:4E:12:B4:30:9A:41:27:3E:F2:00:EB:C3:4B X509v3 Authority Key Identifier: keyid:0D:79:01:C4:30:AE:39:FC:B0:5B:EB:5B:34:26:7F:52:24:F0:4F:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:74:e4:7e:41:17:af:5e:e7:cc:73:2e:01:53:eb:28:19:cc: 83:65:1a:b1:10:86:f2:f9:e0:24:fb:53:60:89:28:e6:47:1d: 80:ce:c4:0d:c2:4c:fa:f1:52:06:8c:f2:28:bf:eb:55:d3:c1: a7:2a:27:9c:b9:a5:60:54:04:99:a7:70:97:a5:4b:11:a9:48: 43:5f:e3:0b:c7:f0:77:26:cb:36:b4:45:96:e4:79:74:07:46: 55:a6:93:9c:72:2c:e7:32:34:9a:79:74:fa:d9:83:7f:6d:b7: 2a:ce:17:ff:12:63:8a:a8:c4:b7:3c:7a:e7:0c:c6:33:15:65: 30:d9:16:6b:4a:5b:98:26:05:ce:4e:33:d7:fd:b9:3b:83:ef: 99:1e:43:df:59:32:71:2f:4c:2b:39:7a:ea:7c:28:da:de:86: 9e:e8:1c:8e:fe:a5:63:48:65:97:22:b4:50:25:c4:f7:6d:66: 08:98:f9:7e:05:9e:0d:e5:0e:bb:01:4b:d3:02:48:5d:4c:76: 15:8c:9d:be:4b:38:ca:09:7b:1a:52:71:45:e2:cb:9d:8f:7e: 92:07:0a:cc:37:20:81:48:a3:c8:3d:9c:a8:ba:f8:96:cc:c4: fe:77:3e:61:55:83:af:7c:af:be:50:c1:40:31:71:9d:f6:76: 97:43:bb:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bQJ+V8ajzhuRV0Z74+EKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzkwMWM0MzBhZTM5ZmNiMDViZWI1YjM0MjY3ZjUyMjRm MDRmNjEwHhcNMjUxMjIxMDEwMTMwWhcNMjUxMjIyMDEwMTMwWjAzMTEwLwYDVQQD EyhlNzRiNTg4MjUyMjA2YTRlMTJiNDMwOWE0MTI3M2VmMjAwZWJjMzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmm3vPN8Ih568WT558aUI4yMPUktE KkRINYarV0uYNQXI56zZ7kLrs+oOevL/ofCezAGtYS6lGk6jlb8m7C8fS5GjdtVV UOs1r6KrMmhq6U6hLoFztXuK7AI63H+uttlt8tmeCokQ5rS6i6AyAKhgj+Fl9Sa/ 5vu7Qt1fA6HaWswMbamUeSnYiKY6yqxWDaa7OymVjKjow7+NDk1p+iN5R+xLoMcf eU0v5Sgj5/ki3cWdzMvdB0t5IX6cJP/Iz3+l81xTUdMnWr8yxbUlVVtKVInBtvzy J6A8pIS4Tzcf1rpXknkW1p5uWVvxHhdPuhaIsQxBK/8y7oLPJOJ2sVd1MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOdLWIJSIGpOErQwmkEnPvIA68NLMB8GA1UdIwQY MBaAFA15AcQwrjn8sFvrWzQmf1Ik8E9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhrQnhEQ3VPZnl3Vy10Yk5DWl9VaVR3VDJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS82NDU2ZGUtNzQwYi00MzRkLWI3NjUt MTcxZDlmMmNjZTNkLzEvRFhrQnhEQ3VPZnl3Vy10Yk5DWl9VaVR3VDJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS82NDU2ZGUtNzQwYi00MzRkLWI3NjUtMTcxZDlmMmNjZTNk LzEvRFhrQnhEQ3VPZnl3Vy10Yk5DWl9VaVR3VDJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUHTkfkEX r17nzHMuAVPrKBnMg2UasRCG8vngJPtTYIko5kcdgM7EDcJM+vFSBozyKL/rVdPB pyonnLmlYFQEmadwl6VLEalIQ1/jC8fwdybLNrRFluR5dAdGVaaTnHIs5zI0mnl0 +tmDf223Ks4X/xJjiqjEtzx65wzGMxVlMNkWa0pbmCYFzk4z1/25O4PvmR5D31ky cS9MKzl66nwo2t6Gnugcjv6lY0hllyK0UCXE921mCJj5fgWeDeUOuwFL0wJIXUx2 FYydvks4ygl7GlJxReLLnY9+kgcKzDcggUijyD2cqLr4lszE/nc+YVWDr3yvvlDB QDFxnfZ2l0O7QA== -----END CERTIFICATE-----Generated at Sun Dec 21 08:37:02 2025 by rpki-client