This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.mft File: DkTxM_OHWTqvor6rOIhJBPrJvRk.mft (raw, json) Hash identifier: OXkM8NO3LL2PFaGIedzNvwZ7L/3+gGm/Fs/y4qw0uOQ= Subject key identifier: 4C:AE:6C:19:00:88:30:F6:D1:AB:4E:DA:78:51:45:4B:A7:D3:4A:7E Authority key identifier: 0E:44:F1:33:F3:87:59:3A:AF:A2:BE:AB:38:88:49:04:FA:C9:BD:19 Certificate issuer: /CN=0e44f133f387593aafa2beab38884904fac9bd19 Certificate serial: 019B281C60BE65DAAE356ED565AF1732FF55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkTxM_OHWTqvor6rOIhJBPrJvRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.mft Manifest number: 0409 Signing time: Tue 16 Dec 2025 17:01:46 +0000 Manifest this update: Tue 16 Dec 2025 17:01:46 +0000 Manifest next update: Wed 17 Dec 2025 17:01:46 +0000 Files and hashes: 1: DkTxM_OHWTqvor6rOIhJBPrJvRk.crl (hash: K9cbbyTi71Fp+tYIwdkd2dOmd6uRjngskSJ9qyIm5GU=) 2: Wiv0DHdRF2zh8D5DY6J3_PLSV6Q.roa (hash: /xs5AGgsSlLOCnLD+1aaT+DfL+K36ivL9muQHygs7c4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.mft rsync://rpki.ripe.net/repository/DEFAULT/DkTxM_OHWTqvor6rOIhJBPrJvRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:1c:60:be:65:da:ae:35:6e:d5:65:af:17:32:ff:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e44f133f387593aafa2beab38884904fac9bd19 Validity Not Before: Dec 16 17:01:46 2025 GMT Not After : Dec 17 17:01:46 2025 GMT Subject: CN=4cae6c19008830f6d1ab4eda7851454ba7d34a7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:43:98:e1:7b:94:b0:50:52:31:50:ac:6a:9e: 1a:e4:30:4e:ac:0c:dd:8b:c5:43:96:22:e3:dd:6c: c5:64:cf:79:0f:7e:bf:d8:73:7a:3c:12:78:29:4b: 96:71:8a:f9:5c:bd:58:85:82:ca:a9:ff:bd:88:19: 17:4c:cb:14:a9:f8:16:cb:6e:e7:0c:b9:72:dc:66: 32:d1:16:51:bf:0b:03:1f:42:f6:4e:1a:9e:dd:f8: 08:c1:0e:c3:67:0e:ed:ef:92:bd:cf:92:3a:30:e5: a9:8e:99:d5:56:1f:17:5f:99:fd:9e:5a:90:c0:0d: 5f:b3:4a:f4:10:9b:b6:8f:a8:b6:77:d1:2b:95:ec: fe:cd:3c:da:de:92:d0:bb:94:62:9d:a4:92:a5:44: 51:3c:6d:65:48:4d:69:a3:25:1e:a6:c4:a8:80:17: a9:28:ad:71:0d:26:a2:c1:ea:66:a3:a1:32:7f:11: 0b:7d:fa:42:55:9d:b1:08:74:d1:50:5f:6f:75:eb: d9:96:d7:d3:46:5d:bf:61:f2:c0:d8:64:c2:8b:84: be:d3:83:de:9e:e8:b1:12:bf:3a:50:8e:fe:ec:31: 37:7f:9d:5c:ef:76:73:38:cd:44:32:bd:6f:85:4b: 86:3d:44:e5:b1:d9:85:ff:5d:c3:3a:16:28:54:60: 7e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:AE:6C:19:00:88:30:F6:D1:AB:4E:DA:78:51:45:4B:A7:D3:4A:7E X509v3 Authority Key Identifier: keyid:0E:44:F1:33:F3:87:59:3A:AF:A2:BE:AB:38:88:49:04:FA:C9:BD:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkTxM_OHWTqvor6rOIhJBPrJvRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:ee:39:fd:96:29:e6:ea:60:ed:f9:c3:a7:7b:11:5a:ae:59: 2b:fd:52:09:91:2b:67:ae:ef:7c:96:de:b4:10:54:fe:df:43: bd:73:ee:b9:2a:60:c4:c0:ce:6b:c6:f8:b2:f7:9c:4f:16:54: 09:50:96:0c:85:33:fa:f3:76:cd:2d:73:ad:c2:39:51:23:fd: 21:77:6e:dd:3f:6f:ba:58:b5:94:33:8c:ef:b0:25:f4:51:48: f4:b2:38:5b:11:ed:14:cc:8f:4c:4d:8b:52:19:d8:de:9e:5f: e6:f2:93:bc:26:92:fa:e8:9c:2e:9e:42:f9:5b:04:2f:94:e2: d6:ef:ed:d9:3b:4e:ad:6e:a3:41:4c:be:11:1f:48:5b:59:6c: 01:35:5f:dc:41:68:a1:4c:a7:e1:d4:b4:d1:bf:da:c8:10:f5: 85:9b:2d:f7:9f:7a:51:00:5a:04:7d:18:c1:06:19:25:43:01: 17:27:24:02:54:a0:d2:3e:e9:38:89:d6:62:ed:e3:48:58:8c: 39:8d:65:ec:43:d8:ab:09:51:bc:eb:18:17:58:98:37:0e:81: aa:6c:8e:5c:75:49:b2:7b:0f:48:29:2d:46:aa:7c:cf:6d:d4: 9d:8d:b1:a9:e0:d3:20:8c:69:b0:ad:30:76:00:8f:e2:ff:a6: 95:ab:fb:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoHGC+ZdquNW7VZa8XMv9VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNDRmMTMzZjM4NzU5M2FhZmEyYmVhYjM4ODg0OTA0ZmFj OWJkMTkwHhcNMjUxMjE2MTcwMTQ2WhcNMjUxMjE3MTcwMTQ2WjAzMTEwLwYDVQQD Eyg0Y2FlNmMxOTAwODgzMGY2ZDFhYjRlZGE3ODUxNDU0YmE3ZDM0YTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUOY4XuUsFBSMVCsap4a5DBOrAzd i8VDliLj3WzFZM95D36/2HN6PBJ4KUuWcYr5XL1YhYLKqf+9iBkXTMsUqfgWy27n DLly3GYy0RZRvwsDH0L2Thqe3fgIwQ7DZw7t75K9z5I6MOWpjpnVVh8XX5n9nlqQ wA1fs0r0EJu2j6i2d9Erlez+zTza3pLQu5RinaSSpURRPG1lSE1poyUepsSogBep KK1xDSaiwepmo6EyfxELffpCVZ2xCHTRUF9vdevZltfTRl2/YfLA2GTCi4S+04Pe nuixEr86UI7+7DE3f51c73ZzOM1EMr1vhUuGPUTlsdmF/13DOhYoVGB+mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEyubBkAiDD20atO2nhRRUun00p+MB8GA1UdIwQY MBaAFA5E8TPzh1k6r6K+qziISQT6yb0ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGtUeE1fT0hXVHF2b3I2ck9JaEpCUHJKdlJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8wYjY4ZGMtYzVjOS00MGRkLTlkOGYt ZGJmZjBlZTFlMDllLzEvRGtUeE1fT0hXVHF2b3I2ck9JaEpCUHJKdlJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC8wYjY4ZGMtYzVjOS00MGRkLTlkOGYtZGJmZjBlZTFlMDll LzEvRGtUeE1fT0hXVHF2b3I2ck9JaEpCUHJKdlJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz+45/ZYp 5upg7fnDp3sRWq5ZK/1SCZErZ67vfJbetBBU/t9DvXPuuSpgxMDOa8b4svecTxZU CVCWDIUz+vN2zS1zrcI5USP9IXdu3T9vuli1lDOM77Al9FFI9LI4WxHtFMyPTE2L UhnY3p5f5vKTvCaS+uicLp5C+VsEL5Ti1u/t2TtOrW6jQUy+ER9IW1lsATVf3EFo oUyn4dS00b/ayBD1hZst9596UQBaBH0YwQYZJUMBFyckAlSg0j7pOInWYu3jSFiM OY1l7EPYqwlRvOsYF1iYNw6BqmyOXHVJsnsPSCktRqp8z23UnY2xqeDTIIxpsK0w dgCP4v+mlav7YA== -----END CERTIFICATE-----Generated at Tue Dec 16 23:14:22 2025 by rpki-client