This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft File: DUTaXBkECVhg6GgYBXPuPIlae0U.mft (raw, json) Hash identifier: 643LQTkDORD0vYzqjvWlcXNaqQjBPWllzULgZdUMFow= Subject key identifier: D2:DD:27:F6:47:03:B8:DC:87:B8:D2:01:19:E5:00:55:C3:03:FA:E3 Authority key identifier: 0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45 Certificate issuer: /CN=0d44da5c1904095860e868180573ee3c895a7b45 Certificate serial: 019B3D239763091D33F9EB35453CC6B900D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 19:01:41 +0000 Manifest this update: Sat 20 Dec 2025 19:01:41 +0000 Manifest next update: Sun 21 Dec 2025 19:01:41 +0000 Files and hashes: 1: 3yv-zmmgfXirN5akYyOZ225Erpo.roa (hash: K+9VHB7ShEik6QpuUx3J66d/K6RXrAo5ZliJg0jvNJw=) 2: DUTaXBkECVhg6GgYBXPuPIlae0U.crl (hash: yLZckQoW2Mj/QiJK+UKfpMlDQ51JQ1VHlB7ULscFFBM=) 3: PDj9CbhapwaiDPTHl4V_zSatG1U.roa (hash: y9pPTUUi0Tga4prSiUslZJiX9MosJ/c0ePSWJE6OCf4=) 4: jF8Pgd5Bgl8f2cMDpAgMnJwOiNM.roa (hash: pnp8ADM8uhliAwKsnA0g8scyokzHgOV+zWcR7wMxlws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.crl rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:97:63:09:1d:33:f9:eb:35:45:3c:c6:b9:00:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d44da5c1904095860e868180573ee3c895a7b45 Validity Not Before: Dec 20 19:01:41 2025 GMT Not After : Dec 21 19:01:41 2025 GMT Subject: CN=d2dd27f64703b8dc87b8d20119e50055c303fae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:16:f4:e4:95:0d:41:86:43:45:d4:ec:79:2e: 6a:9a:d1:11:8a:0d:20:18:cf:58:fa:d8:c2:84:e1: 57:63:d1:2c:e7:8f:94:1d:d7:f8:7d:30:ca:67:af: f6:dd:79:a0:da:b6:56:8d:89:fd:24:f7:5f:fe:01: 28:7c:49:4d:59:a1:18:a0:61:ac:86:e2:d3:4f:50: 03:f4:97:8f:f9:9c:f5:73:36:f7:2d:5a:cd:bf:1b: 94:1d:62:f2:d1:24:62:8a:fe:f7:c8:3c:e3:e4:b2: 47:60:33:42:5c:39:0d:06:89:d7:3a:36:32:ba:e6: 25:e9:24:d0:22:19:a6:af:6d:bf:89:12:fb:2c:f2: f2:62:6e:c7:de:cb:c8:d9:98:a8:17:7a:78:9e:11: f0:40:e9:10:5b:14:d9:d7:63:8e:25:08:c5:3a:d7: b7:58:73:18:7a:f1:ca:c0:56:85:a8:66:73:65:6d: 9b:79:6a:80:6d:d5:97:ab:24:dc:f4:49:23:ad:1e: bf:c7:79:05:ed:62:0b:ce:6b:9b:41:4a:82:00:64: f3:19:85:9a:5d:0d:6c:f6:f7:81:19:5f:42:78:4d: 6d:4a:8e:6e:a9:a6:35:8b:55:6f:10:71:e7:45:21: a2:14:ae:13:63:7c:ae:2f:f0:fe:34:99:a5:48:de: 5d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:DD:27:F6:47:03:B8:DC:87:B8:D2:01:19:E5:00:55:C3:03:FA:E3 X509v3 Authority Key Identifier: keyid:0D:44:DA:5C:19:04:09:58:60:E8:68:18:05:73:EE:3C:89:5A:7B:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUTaXBkECVhg6GgYBXPuPIlae0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/bce53d-d39d-4e23-aa17-27fb5822b32d/1/DUTaXBkECVhg6GgYBXPuPIlae0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:15:0a:92:36:bd:4d:ce:c1:2f:33:9d:48:5f:48:fb:0a:53: 6a:0f:7d:60:c5:88:fb:c9:f3:fb:0d:ed:07:d0:cb:ab:ba:e0: 78:34:fe:ef:22:68:06:67:04:a0:d3:0d:64:44:e1:40:7f:1d: eb:8f:b7:b8:60:44:f2:6e:02:70:df:3d:57:e2:4d:2f:05:1c: 47:a9:39:6f:cf:ee:bb:68:06:80:fc:c2:bf:15:76:8a:be:54: 3b:18:a4:42:15:5f:44:28:4b:be:8b:fc:bf:1c:4f:a4:f0:e1: 33:06:f7:b4:1c:c8:49:1e:d3:01:8a:00:bf:88:87:a8:e4:86: 0a:1d:50:45:a3:83:a5:a1:a2:d6:ed:62:2c:be:7e:fe:57:4f: 21:56:a2:b4:5d:3e:e5:0d:85:d2:fd:61:20:fd:cb:25:fe:77: 81:74:91:3f:61:03:3f:22:f8:f8:51:5b:84:dc:dd:bb:70:88: a8:7c:ea:78:35:c9:a4:51:e3:85:0b:cb:ef:51:6d:19:2f:6b: 40:f5:4a:ff:fa:03:a7:46:ac:71:db:da:9f:6a:29:e7:52:94: 25:78:5d:9b:61:2d:9a:d3:17:93:23:6c:a0:35:23:e1:32:6d: 9c:86:ee:15:64:1b:46:93:13:91:70:bc:44:03:d2:02:8b:bf: bb:cb:e1:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9I5djCR0z+es1RTzGuQDWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNDRkYTVjMTkwNDA5NTg2MGU4NjgxODA1NzNlZTNjODk1 YTdiNDUwHhcNMjUxMjIwMTkwMTQxWhcNMjUxMjIxMTkwMTQxWjAzMTEwLwYDVQQD EyhkMmRkMjdmNjQ3MDNiOGRjODdiOGQyMDExOWU1MDA1NWMzMDNmYWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBb05JUNQYZDRdTseS5qmtERig0g GM9Y+tjChOFXY9Es54+UHdf4fTDKZ6/23Xmg2rZWjYn9JPdf/gEofElNWaEYoGGs huLTT1AD9JeP+Zz1czb3LVrNvxuUHWLy0SRiiv73yDzj5LJHYDNCXDkNBonXOjYy uuYl6STQIhmmr22/iRL7LPLyYm7H3svI2ZioF3p4nhHwQOkQWxTZ12OOJQjFOte3 WHMYevHKwFaFqGZzZW2beWqAbdWXqyTc9EkjrR6/x3kF7WILzmubQUqCAGTzGYWa XQ1s9veBGV9CeE1tSo5uqaY1i1VvEHHnRSGiFK4TY3yuL/D+NJmlSN5dUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNLdJ/ZHA7jch7jSARnlAFXDA/rjMB8GA1UdIwQY MBaAFA1E2lwZBAlYYOhoGAVz7jyJWntFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFVUYVhCa0VDVmhnNkdnWUJYUHVQSWxhZTBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9iY2U1M2QtZDM5ZC00ZTIzLWFhMTct MjdmYjU4MjJiMzJkLzEvRFVUYVhCa0VDVmhnNkdnWUJYUHVQSWxhZTBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9iY2U1M2QtZDM5ZC00ZTIzLWFhMTctMjdmYjU4MjJiMzJk LzEvRFVUYVhCa0VDVmhnNkdnWUJYUHVQSWxhZTBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAshUKkja9 Tc7BLzOdSF9I+wpTag99YMWI+8nz+w3tB9DLq7rgeDT+7yJoBmcEoNMNZEThQH8d 64+3uGBE8m4CcN89V+JNLwUcR6k5b8/uu2gGgPzCvxV2ir5UOxikQhVfRChLvov8 vxxPpPDhMwb3tBzISR7TAYoAv4iHqOSGCh1QRaODpaGi1u1iLL5+/ldPIVaitF0+ 5Q2F0v1hIP3LJf53gXSRP2EDPyL4+FFbhNzdu3CIqHzqeDXJpFHjhQvL71FtGS9r QPVK//oDp0ascdvan2op51KUJXhdm2EtmtMXkyNsoDUj4TJtnIbuFWQbRpMTkXC8 RAPSAou/u8vh6A== -----END CERTIFICATE-----Generated at Sun Dec 21 02:56:51 2025 by rpki-client