This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft File: DuKWtgwDjNxr_vTAYLFAYWTshow.mft (raw, json) Hash identifier: RkJ+M3QGFPamn4QIuE67vvwRJKLGksUUKBclaKd1sxU= Subject key identifier: 52:40:DB:72:33:EB:F7:BE:03:4E:62:4B:13:A1:A1:0B:2F:65:62:BE Authority key identifier: 0E:E2:96:B6:0C:03:8C:DC:6B:FE:F4:C0:60:B1:40:61:64:EC:86:8C Certificate issuer: /CN=0ee296b60c038cdc6bfef4c060b1406164ec868c Certificate serial: 019B503BA6C889E11543A0513F9F75A83F87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft Manifest number: 1791 Signing time: Wed 24 Dec 2025 12:00:45 +0000 Manifest this update: Wed 24 Dec 2025 12:00:45 +0000 Manifest next update: Thu 25 Dec 2025 12:00:45 +0000 Files and hashes: 1: DuKWtgwDjNxr_vTAYLFAYWTshow.crl (hash: whsMx1RczMyAJZGB8G50tdT23IMWqB2pIL1qXLP+zT0=) 2: dl4ybKFr-mjNJ3kV-IfkyZfwx44.roa (hash: /jV0BskL+oSsTISEbyqI8M7CEUXp7IlGvyGOrlDZbmo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 12:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:3b:a6:c8:89:e1:15:43:a0:51:3f:9f:75:a8:3f:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ee296b60c038cdc6bfef4c060b1406164ec868c Validity Not Before: Dec 24 12:00:45 2025 GMT Not After : Dec 25 12:00:45 2025 GMT Subject: CN=5240db7233ebf7be034e624b13a1a10b2f6562be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:49:37:4d:5f:d5:25:4c:22:3c:85:76:a5:42: 86:9d:52:a5:75:32:55:ec:bc:4d:2d:f1:d3:45:04: 55:d1:7e:73:fb:6e:1d:b3:e2:9a:0d:54:79:85:6b: 2e:15:6d:8d:84:50:5f:af:3b:72:85:a5:b7:d6:47: c6:5a:c7:03:4b:39:45:17:ed:1f:2c:bd:00:72:de: de:0f:d5:90:33:79:5d:a9:77:68:c8:eb:99:cd:39: 50:62:f8:ea:8f:61:5c:7c:a7:16:5e:51:5a:95:72: 28:3b:87:47:ca:ca:90:2e:ee:ab:51:93:b3:41:4a: 98:f7:58:a8:53:c7:81:cf:24:60:a0:ec:8c:45:36: 88:1f:b5:98:ec:02:5a:b9:d1:a0:7f:1b:a5:16:90: 7f:6b:56:cc:bc:1e:97:c4:68:08:ed:9c:d3:fd:77: e6:fa:73:bd:ce:24:15:9e:05:eb:38:be:f3:ca:79: 39:8c:00:81:64:09:59:b7:c6:32:44:2b:dc:55:f7: eb:b9:62:03:9a:91:be:c6:f4:3f:1e:a2:04:a1:53: de:5f:e5:dc:ab:a4:dd:8b:64:bb:fb:a4:aa:05:16: 7e:d9:9d:95:fc:f5:cf:ba:69:42:ad:98:64:72:ed: ff:68:88:63:2d:46:1f:20:39:db:d3:c4:72:e0:62: cb:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:40:DB:72:33:EB:F7:BE:03:4E:62:4B:13:A1:A1:0B:2F:65:62:BE X509v3 Authority Key Identifier: keyid:0E:E2:96:B6:0C:03:8C:DC:6B:FE:F4:C0:60:B1:40:61:64:EC:86:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DuKWtgwDjNxr_vTAYLFAYWTshow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0cd0e7-2da9-402b-8a49-f5c805f0255b/1/DuKWtgwDjNxr_vTAYLFAYWTshow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:f3:ac:b7:79:2f:22:f5:bf:03:cc:a1:21:7f:2b:b3:97:bb: dc:18:2b:a1:7a:8f:0f:0d:d0:35:b8:35:4b:d8:5d:5a:d8:c9: b6:8a:71:27:76:13:62:e3:ed:21:ff:a7:de:ac:51:42:86:93: b7:8c:53:bb:2c:0a:cb:20:5b:b4:2a:e6:87:e0:6c:9d:7e:ae: 4a:06:2f:c3:c0:52:6b:25:66:c0:13:9c:7b:8d:4c:1d:25:de: a2:02:71:3f:bb:0a:ad:61:c8:74:72:b3:f2:a8:bc:4d:a4:01: 07:b1:4d:b3:79:86:11:f6:fc:7c:f2:cc:eb:b8:40:69:5c:80: 79:c8:6c:a1:09:30:82:ee:e1:34:20:2a:4f:2f:1e:4f:5b:ae: e9:71:12:b6:f3:a1:1c:b2:3f:ae:26:88:8a:0e:48:d4:29:ec: 60:d5:26:96:e1:58:0e:d7:63:b8:ed:b1:fa:c1:9e:d2:9a:d2: 3b:c0:1a:e7:08:c5:c0:ea:51:dc:60:10:e2:28:61:42:3a:17: fb:2b:8e:99:51:3c:71:8a:70:35:df:3f:12:1f:e6:b0:d6:4e: c9:e3:8e:e5:e3:c5:34:c1:a9:3b:33:b9:f3:ec:f5:81:63:ed: db:3a:89:69:0e:79:ab:23:17:1f:10:c5:d6:57:5f:fa:ca:22: b5:f3:47:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQO6bIieEVQ6BRP591qD+HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlZTI5NmI2MGMwMzhjZGM2YmZlZjRjMDYwYjE0MDYxNjRl Yzg2OGMwHhcNMjUxMjI0MTIwMDQ1WhcNMjUxMjI1MTIwMDQ1WjAzMTEwLwYDVQQD Eyg1MjQwZGI3MjMzZWJmN2JlMDM0ZTYyNGIxM2ExYTEwYjJmNjU2MmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Uk3TV/VJUwiPIV2pUKGnVKldTJV 7LxNLfHTRQRV0X5z+24ds+KaDVR5hWsuFW2NhFBfrztyhaW31kfGWscDSzlFF+0f LL0Act7eD9WQM3ldqXdoyOuZzTlQYvjqj2FcfKcWXlFalXIoO4dHysqQLu6rUZOz QUqY91ioU8eBzyRgoOyMRTaIH7WY7AJaudGgfxulFpB/a1bMvB6XxGgI7ZzT/Xfm +nO9ziQVngXrOL7zynk5jACBZAlZt8YyRCvcVffruWIDmpG+xvQ/HqIEoVPeX+Xc q6Tdi2S7+6SqBRZ+2Z2V/PXPumlCrZhkcu3/aIhjLUYfIDnb08Ry4GLLUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFJA23Iz6/e+A05iSxOhoQsvZWK+MB8GA1UdIwQY MBaAFA7ilrYMA4zca/70wGCxQGFk7IaMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHVLV3Rnd0RqTnhyX3ZUQVlMRkFZV1RzaG93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8wY2QwZTctMmRhOS00MDJiLThhNDkt ZjVjODA1ZjAyNTViLzEvRHVLV3Rnd0RqTnhyX3ZUQVlMRkFZV1RzaG93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8wY2QwZTctMmRhOS00MDJiLThhNDktZjVjODA1ZjAyNTVi LzEvRHVLV3Rnd0RqTnhyX3ZUQVlMRkFZV1RzaG93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT/Ost3kv IvW/A8yhIX8rs5e73BgroXqPDw3QNbg1S9hdWtjJtopxJ3YTYuPtIf+n3qxRQoaT t4xTuywKyyBbtCrmh+BsnX6uSgYvw8BSayVmwBOce41MHSXeogJxP7sKrWHIdHKz 8qi8TaQBB7FNs3mGEfb8fPLM67hAaVyAechsoQkwgu7hNCAqTy8eT1uu6XEStvOh HLI/riaIig5I1CnsYNUmluFYDtdjuO2x+sGe0prSO8Aa5wjFwOpR3GAQ4ihhQjoX +yuOmVE8cYpwNd8/Eh/msNZOyeOO5ePFNMGpOzO58+z1gWPt2zqJaQ55qyMXHxDF 1ldf+soitfNHNA== -----END CERTIFICATE-----Generated at Wed Dec 24 21:35:37 2025 by rpki-client