This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.mft File: DLXT6N3PUkwgwyOH7TED1MvypWo.mft (raw, json) Hash identifier: /bQKObQkK5dBnIYin5n6PO5FzguFOmyHjbjeRTtxaC0= Subject key identifier: A7:7E:25:BC:F6:AF:55:4B:2B:57:59:2F:FD:44:8A:1B:D9:F9:6B:B9 Authority key identifier: 0C:B5:D3:E8:DD:CF:52:4C:20:C3:23:87:ED:31:03:D4:CB:F2:A5:6A Certificate issuer: /CN=0cb5d3e8ddcf524c20c32387ed3103d4cbf2a56a Certificate serial: 019B6D6AAB01DAC30D46DB5D63F6CFBA9902 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DLXT6N3PUkwgwyOH7TED1MvypWo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.mft Manifest number: 17A6 Signing time: Tue 30 Dec 2025 04:01:05 +0000 Manifest this update: Tue 30 Dec 2025 04:01:05 +0000 Manifest next update: Wed 31 Dec 2025 04:01:05 +0000 Files and hashes: 1: DLXT6N3PUkwgwyOH7TED1MvypWo.crl (hash: nrXYT7jnRmyZaN5nSf+lE0bXbHJPOb5MQC7PMgtSJ34=) 2: NmPkoiKmzvfxr2tE8qV8-CIZnCo.roa (hash: RU6vCeDfFthQ1YTFt3fi6pe99JectXQZEPhaEuKEkus=) 3: gIGqiCK0bC1pGcI5YkcQP3gBY1g.roa (hash: AYt4mi1gsvIajU9NsR145mbQ/0eGQGt615cxYTa3ACY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.mft rsync://rpki.ripe.net/repository/DEFAULT/DLXT6N3PUkwgwyOH7TED1MvypWo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:6a:ab:01:da:c3:0d:46:db:5d:63:f6:cf:ba:99:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cb5d3e8ddcf524c20c32387ed3103d4cbf2a56a Validity Not Before: Dec 30 04:01:05 2025 GMT Not After : Dec 31 04:01:05 2025 GMT Subject: CN=a77e25bcf6af554b2b57592ffd448a1bd9f96bb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b9:41:0f:e5:1c:0c:d2:8f:82:0c:08:05:d9: 01:fa:a4:a5:01:24:d9:de:9f:81:e5:b5:6a:cf:05: d2:14:6e:0d:e5:5b:43:5a:f7:32:a1:bf:d1:9b:af: 79:fb:da:3a:4d:0e:a3:7b:29:cc:a9:99:fa:6a:b3: 39:41:b5:00:21:4d:7d:1d:14:19:d5:cc:47:56:53: cd:f0:6d:5b:0e:3e:85:0b:a0:c8:20:9c:a2:0f:8f: ca:49:e7:f4:d9:81:03:9b:70:f9:9d:7e:f6:d0:03: 25:7f:fc:2e:73:27:ed:c9:43:c7:cc:57:39:ca:e0: e8:63:30:be:24:81:70:b4:66:be:a4:e6:91:b2:d3: 28:64:10:54:bb:03:22:37:52:d5:eb:b6:9d:67:6c: 84:6c:cd:33:c8:45:dc:ad:a5:46:ab:45:09:28:15: 02:2e:92:de:40:5f:7b:65:f4:ac:45:32:1f:1e:e9: 71:d9:b2:b3:72:ba:d1:37:8a:b6:c1:29:83:86:79: 80:c3:48:ed:1a:7c:1f:f6:d9:c9:ed:37:fb:01:e9: 37:80:08:68:04:76:61:85:f4:3d:10:88:c7:64:e4: a7:39:e0:9c:b0:94:42:ff:09:33:75:85:6c:47:d1: 77:26:24:bc:a3:b2:fd:99:c4:d2:d0:d0:47:c9:be: 0a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:7E:25:BC:F6:AF:55:4B:2B:57:59:2F:FD:44:8A:1B:D9:F9:6B:B9 X509v3 Authority Key Identifier: keyid:0C:B5:D3:E8:DD:CF:52:4C:20:C3:23:87:ED:31:03:D4:CB:F2:A5:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DLXT6N3PUkwgwyOH7TED1MvypWo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/906768-cdeb-40d2-b2a2-63cd3c861d8e/1/DLXT6N3PUkwgwyOH7TED1MvypWo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:b6:0a:d7:5f:83:bf:44:f3:c9:dd:94:88:2d:eb:86:b4:28: de:3c:a6:8d:d4:03:1b:1f:da:d7:39:c2:6e:89:3e:55:97:53: 6f:37:ba:31:66:e5:ce:85:91:12:e5:21:5a:b7:78:e9:a7:b6: 4b:1b:fa:70:53:4d:42:64:a4:47:71:d9:28:0c:f7:99:f2:59: 83:24:0f:fa:d8:7c:9c:76:7c:11:22:a6:dc:7d:c6:e5:d6:69: 57:34:46:d0:9b:26:46:1c:db:35:97:6b:1b:6a:82:1d:bd:4d: 4a:96:cf:95:22:f6:9d:85:0c:98:11:e3:47:6b:24:7e:50:f7: 8a:ed:80:43:ad:ac:ce:d8:be:99:c8:cd:33:e3:9f:57:80:10: b1:ee:6c:f3:1b:6b:ec:ca:1f:39:b2:20:6e:ca:80:c8:17:c3: b6:3d:cd:c6:36:aa:5d:92:68:ac:b1:8a:55:e5:05:c8:08:72: c7:bc:af:49:5d:6a:67:4b:d8:1c:9c:99:70:f3:3f:6a:71:7c: 65:31:26:bc:c7:13:c0:ef:42:4e:af:cc:f6:e7:f3:8c:d6:49: d1:b0:92:19:4a:d7:2b:eb:fe:5f:e3:f6:de:e0:b0:e3:24:f5: de:ef:25:8c:42:ee:d5:41:c3:ca:00:05:54:39:24:90:f6:2b: fb:24:50:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttaqsB2sMNRttdY/bPupkCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjYjVkM2U4ZGRjZjUyNGMyMGMzMjM4N2VkMzEwM2Q0Y2Jm MmE1NmEwHhcNMjUxMjMwMDQwMTA1WhcNMjUxMjMxMDQwMTA1WjAzMTEwLwYDVQQD EyhhNzdlMjViY2Y2YWY1NTRiMmI1NzU5MmZmZDQ0OGExYmQ5Zjk2YmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7lBD+UcDNKPggwIBdkB+qSlASTZ 3p+B5bVqzwXSFG4N5VtDWvcyob/Rm695+9o6TQ6jeynMqZn6arM5QbUAIU19HRQZ 1cxHVlPN8G1bDj6FC6DIIJyiD4/KSef02YEDm3D5nX720AMlf/wucyftyUPHzFc5 yuDoYzC+JIFwtGa+pOaRstMoZBBUuwMiN1LV67adZ2yEbM0zyEXcraVGq0UJKBUC LpLeQF97ZfSsRTIfHulx2bKzcrrRN4q2wSmDhnmAw0jtGnwf9tnJ7Tf7Aek3gAho BHZhhfQ9EIjHZOSnOeCcsJRC/wkzdYVsR9F3JiS8o7L9mcTS0NBHyb4KSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKd+Jbz2r1VLK1dZL/1EihvZ+Wu5MB8GA1UdIwQY MBaAFAy10+jdz1JMIMMjh+0xA9TL8qVqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRExYVDZOM1BVa3dnd3lPSDdURUQxTXZ5cFdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS85MDY3NjgtY2RlYi00MGQyLWIyYTIt NjNjZDNjODYxZDhlLzEvRExYVDZOM1BVa3dnd3lPSDdURUQxTXZ5cFdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS85MDY3NjgtY2RlYi00MGQyLWIyYTItNjNjZDNjODYxZDhl LzEvRExYVDZOM1BVa3dnd3lPSDdURUQxTXZ5cFdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKLYK11+D v0Tzyd2UiC3rhrQo3jymjdQDGx/a1znCbok+VZdTbze6MWblzoWREuUhWrd46ae2 Sxv6cFNNQmSkR3HZKAz3mfJZgyQP+th8nHZ8ESKm3H3G5dZpVzRG0JsmRhzbNZdr G2qCHb1NSpbPlSL2nYUMmBHjR2skflD3iu2AQ62szti+mcjNM+OfV4AQse5s8xtr 7MofObIgbsqAyBfDtj3NxjaqXZJorLGKVeUFyAhyx7yvSV1qZ0vYHJyZcPM/anF8 ZTEmvMcTwO9CTq/M9ufzjNZJ0bCSGUrXK+v+X+P23uCw4yT13u8ljELu1UHDygAF VDkkkPYr+yRQRA== -----END CERTIFICATE-----Generated at Tue Dec 30 10:33:17 2025 by rpki-client