This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft File: DKtCI5upRIWzELVRXczH_u2SIFw.mft (raw, json) Hash identifier: 4gExZcxcvYYG7709VU37JvcNvTiQclu3lQ4QVYQd/1Y= Subject key identifier: 05:11:89:A8:9A:BB:6F:33:DF:2A:19:2D:3A:5D:CD:2F:D6:76:06:F9 Authority key identifier: 0C:AB:42:23:9B:A9:44:85:B3:10:B5:51:5D:CC:C7:FE:ED:92:20:5C Certificate issuer: /CN=0cab42239ba94485b310b5515dccc7feed92205c Certificate serial: 019B3C7F7B55794C971BB135139660902AF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft Manifest number: 16C7 Signing time: Sat 20 Dec 2025 16:02:26 +0000 Manifest this update: Sat 20 Dec 2025 16:02:26 +0000 Manifest next update: Sun 21 Dec 2025 16:02:26 +0000 Files and hashes: 1: DKtCI5upRIWzELVRXczH_u2SIFw.crl (hash: glvXR8ImXVfl0MyoU2TYdJtH9uYDAMJc03Q54WIa1e8=) 2: U2UqHVAbFqT-DpJ2VeePtrrb8ik.roa (hash: pXyykD/gM3hsVstV7hOq0+tHLwMN2H8uNSnz2A5Kgw4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:7b:55:79:4c:97:1b:b1:35:13:96:60:90:2a:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cab42239ba94485b310b5515dccc7feed92205c Validity Not Before: Dec 20 16:02:26 2025 GMT Not After : Dec 21 16:02:26 2025 GMT Subject: CN=051189a89abb6f33df2a192d3a5dcd2fd67606f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bb:3d:af:4d:26:c8:c5:4c:22:09:e0:c3:70: d2:7f:0e:54:24:48:8d:34:3d:66:6b:79:da:d6:b6: f9:d2:4b:7b:8b:2f:81:97:0b:ca:b9:d6:d8:ae:08: 87:d1:a4:fb:04:fe:61:cc:51:1a:d1:79:be:18:69: 12:56:49:1c:3b:b1:6a:0d:3f:7b:ed:45:14:06:ae: 2d:21:3f:25:dd:9b:96:e3:4c:43:17:0a:0b:4e:35: 34:3b:5d:60:0b:38:14:40:5d:ac:4b:36:61:f1:5a: 47:8c:e3:05:75:ef:99:8b:45:e1:21:5f:ef:6c:4e: cf:69:26:73:ee:be:ce:9d:69:b8:cf:d9:71:0a:a4: 93:c8:9a:51:c5:20:6b:ab:7e:24:d0:de:fa:cf:d8: 88:da:86:a3:64:55:bc:e8:5b:ea:ef:ac:82:67:96: a0:6f:65:16:1c:91:7a:ba:8c:91:66:c9:92:44:74: 31:9f:06:25:24:3d:00:81:07:53:62:d1:6e:a4:72: a7:58:81:6d:a5:0d:57:8f:73:58:03:72:cc:c9:a7: 24:eb:29:b9:bd:d7:9c:47:ec:21:1a:20:97:64:13: 63:88:1e:df:d2:6e:84:82:f2:c0:16:87:b5:2c:d4: 16:4c:90:b1:67:93:d6:ed:a4:d0:54:ae:15:df:81: d2:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:11:89:A8:9A:BB:6F:33:DF:2A:19:2D:3A:5D:CD:2F:D6:76:06:F9 X509v3 Authority Key Identifier: keyid:0C:AB:42:23:9B:A9:44:85:B3:10:B5:51:5D:CC:C7:FE:ED:92:20:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:85:dd:0c:48:b5:8e:22:0c:9c:ed:1b:8c:28:c5:96:81:69: 11:fd:57:d7:83:6a:ec:51:7f:ee:fd:7a:98:9b:67:1b:03:6d: 60:76:d8:da:fd:cd:65:12:eb:18:73:4e:54:a3:4a:ae:64:8f: 28:c4:0a:5b:1c:47:46:42:94:d7:da:74:49:b0:ec:f7:74:f0: 77:16:7c:e2:ff:d2:32:d8:1b:c1:3f:da:3e:3d:e9:a2:d3:cd: 94:6d:6e:15:37:34:b4:b6:c9:44:14:17:da:11:68:53:eb:77: 67:4a:98:e0:60:fe:75:05:e5:5b:97:ee:f6:36:57:b5:1f:04: 71:cd:65:e2:bb:e9:d4:e8:58:5b:97:27:7e:fe:f5:7f:23:19: 2a:88:bc:c2:45:8d:d0:6d:39:fd:83:62:7d:d1:f9:d9:37:0e: b2:0a:b5:91:95:f0:5a:22:c2:00:e0:17:dc:64:70:0e:25:27: 01:c4:59:3b:3a:6d:38:2e:fd:fa:b1:25:de:14:0b:9d:2d:e3: ae:ba:29:b9:1c:13:8b:59:0d:da:d5:a7:2a:c0:12:b4:34:48: 7d:90:25:a8:a3:65:b4:10:4f:5c:bb:6d:33:dd:63:35:0c:56: 4f:85:84:39:66:2b:a2:9f:ab:a6:9d:d9:cf:66:91:21:df:4a: d4:aa:b6:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f3tVeUyXG7E1E5ZgkCr2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjYWI0MjIzOWJhOTQ0ODViMzEwYjU1MTVkY2NjN2ZlZWQ5 MjIwNWMwHhcNMjUxMjIwMTYwMjI2WhcNMjUxMjIxMTYwMjI2WjAzMTEwLwYDVQQD EygwNTExODlhODlhYmI2ZjMzZGYyYTE5MmQzYTVkY2QyZmQ2NzYwNmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLs9r00myMVMIgngw3DSfw5UJEiN ND1ma3na1rb50kt7iy+BlwvKudbYrgiH0aT7BP5hzFEa0Xm+GGkSVkkcO7FqDT97 7UUUBq4tIT8l3ZuW40xDFwoLTjU0O11gCzgUQF2sSzZh8VpHjOMFde+Zi0XhIV/v bE7PaSZz7r7OnWm4z9lxCqSTyJpRxSBrq34k0N76z9iI2oajZFW86Fvq76yCZ5ag b2UWHJF6uoyRZsmSRHQxnwYlJD0AgQdTYtFupHKnWIFtpQ1Xj3NYA3LMyack6ym5 vdecR+whGiCXZBNjiB7f0m6EgvLAFoe1LNQWTJCxZ5PW7aTQVK4V34HSswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAURiaiau28z3yoZLTpdzS/Wdgb5MB8GA1UdIwQY MBaAFAyrQiObqUSFsxC1UV3Mx/7tkiBcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREt0Q0k1dXBSSVd6RUxWUlhjekhfdTJTSUZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9hYWI2MmUtNDA4Yy00ODNkLTk1ZmEt Y2MxMTlkMjc3MTQ4LzEvREt0Q0k1dXBSSVd6RUxWUlhjekhfdTJTSUZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9hYWI2MmUtNDA4Yy00ODNkLTk1ZmEtY2MxMTlkMjc3MTQ4 LzEvREt0Q0k1dXBSSVd6RUxWUlhjekhfdTJTSUZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHoXdDEi1 jiIMnO0bjCjFloFpEf1X14Nq7FF/7v16mJtnGwNtYHbY2v3NZRLrGHNOVKNKrmSP KMQKWxxHRkKU19p0SbDs93TwdxZ84v/SMtgbwT/aPj3potPNlG1uFTc0tLbJRBQX 2hFoU+t3Z0qY4GD+dQXlW5fu9jZXtR8Ecc1l4rvp1OhYW5cnfv71fyMZKoi8wkWN 0G05/YNifdH52TcOsgq1kZXwWiLCAOAX3GRwDiUnAcRZOzptOC79+rEl3hQLnS3j rropuRwTi1kN2tWnKsAStDRIfZAlqKNltBBPXLttM91jNQxWT4WEOWYrop+rpp3Z z2aRId9K1Kq2gg== -----END CERTIFICATE-----Generated at Sat Dec 20 23:54:41 2025 by rpki-client