This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft File: dcuRtTn9feisVTjK9Tu_L6wbslk.mft (raw, json) Hash identifier: par/voCvD1USeb5xsXv8Df3XysU49DmIMOEF13SVtlk= Subject key identifier: 1A:15:60:E4:16:0A:90:4A:81:0D:20:C2:94:66:5C:E8:F5:92:0F:16 Authority key identifier: 75:CB:91:B5:39:FD:7D:E8:AC:55:38:CA:F5:3B:BF:2F:AC:1B:B2:59 Certificate issuer: /CN=75cb91b539fd7de8ac5538caf53bbf2fac1bb259 Certificate serial: 019B3F7F3171A313A7373E05E0D75F3145C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft Manifest number: 083B Signing time: Sun 21 Dec 2025 06:00:58 +0000 Manifest this update: Sun 21 Dec 2025 06:00:58 +0000 Manifest next update: Mon 22 Dec 2025 06:00:58 +0000 Files and hashes: 1: dcuRtTn9feisVTjK9Tu_L6wbslk.crl (hash: 2cci6kEkKwWCYFvLjqPgl8DzMPrh9rP5MBZNu1wjAkg=) 2: wmFwOwWe4TE9uLkEByUtzshEopU.roa (hash: QBlI2HpuFwgzwXYHTq+pMuExi7xAAtXFZ+n0JdzIy8U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7f:31:71:a3:13:a7:37:3e:05:e0:d7:5f:31:45:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75cb91b539fd7de8ac5538caf53bbf2fac1bb259 Validity Not Before: Dec 21 06:00:58 2025 GMT Not After : Dec 22 06:00:58 2025 GMT Subject: CN=1a1560e4160a904a810d20c294665ce8f5920f16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:de:a3:46:91:cb:b6:3c:3a:d0:e0:94:c0:03: 26:31:d3:21:f7:1d:bf:55:a3:be:e7:c9:10:ea:3a: 45:27:ac:43:c4:ae:fc:a3:fb:d8:52:06:8b:04:a6: 12:29:ec:cb:88:e6:9b:14:fa:90:c1:c8:8d:a6:00: 7f:bf:c4:e6:09:01:e8:de:a7:df:18:31:cf:39:7f: 09:1d:20:ca:99:82:fc:cf:7a:04:9c:43:e0:fe:52: 3a:0e:07:8e:ab:00:71:ef:4a:02:bf:00:e5:17:87: ad:4f:68:e4:c2:63:99:0a:9f:05:82:0b:98:20:be: 97:34:92:9f:5b:90:cc:32:c3:77:5b:d4:91:02:73: ab:0e:59:a8:bf:4d:b2:72:b0:2e:fa:a2:a8:36:c6: ab:05:63:22:97:97:4a:cf:3a:18:cd:4e:4a:94:52: da:b2:7d:26:a7:48:da:c8:4e:de:1e:74:69:15:b1: be:05:54:0d:2d:b5:db:aa:e7:8e:c0:94:4c:c3:70: 85:eb:85:38:eb:79:f2:62:74:59:be:fb:27:f9:ed: d3:f0:71:d8:52:f6:c0:93:03:14:de:b3:1d:3a:b6: 5b:0c:b0:ec:7d:b4:f8:66:58:50:22:bc:94:e6:5f: 42:29:6c:81:f1:12:91:f7:5f:2a:73:39:99:60:a8: 59:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:15:60:E4:16:0A:90:4A:81:0D:20:C2:94:66:5C:E8:F5:92:0F:16 X509v3 Authority Key Identifier: keyid:75:CB:91:B5:39:FD:7D:E8:AC:55:38:CA:F5:3B:BF:2F:AC:1B:B2:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:05:2b:de:c9:5f:68:44:44:a3:de:ec:a3:ae:39:74:33:b4: f5:bc:84:b4:3e:7c:ba:96:26:25:da:9a:7a:f2:6a:3c:ff:c3: 72:86:67:b1:1c:29:c6:0d:af:da:17:96:0a:48:99:b6:a2:f3: 26:15:4d:fd:06:e4:ae:45:ab:c3:d8:bd:38:52:2e:05:75:e2: f5:fd:f9:4e:0d:ad:b5:e4:6c:4b:c5:67:4c:5e:94:fa:94:30: c9:7a:79:55:ba:d2:31:51:6e:0c:e2:77:5d:a3:d8:55:cb:5c: c0:b4:5d:91:de:98:30:f8:b9:1a:9e:47:fc:62:ec:fb:6f:bb: ee:b1:b2:56:1b:48:ff:c7:a3:89:ea:e8:69:3f:a4:08:7a:1b: d1:aa:18:d4:16:33:5d:06:a0:d4:d8:3a:31:16:30:7c:d9:22: 1c:75:db:46:5b:9b:6d:4e:a1:97:fa:4b:87:3a:d9:df:88:1b: 50:d7:52:8e:6e:8e:52:66:50:4c:eb:ce:82:b3:2a:29:8b:88: 0e:05:7e:f7:f2:38:70:c9:dc:45:8c:e4:fb:65:7f:4e:af:19: 98:84:c3:23:34:c5:a3:d8:61:ef:a5:ac:bf:c8:0c:ea:6d:32: bf:08:68:e9:80:46:ee:9b:e0:99:34:1e:d5:8b:7b:5a:20:e1: fc:52:a6:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/fzFxoxOnNz4F4NdfMUXGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1Y2I5MWI1MzlmZDdkZThhYzU1MzhjYWY1M2JiZjJmYWMx YmIyNTkwHhcNMjUxMjIxMDYwMDU4WhcNMjUxMjIyMDYwMDU4WjAzMTEwLwYDVQQD EygxYTE1NjBlNDE2MGE5MDRhODEwZDIwYzI5NDY2NWNlOGY1OTIwZjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwt6jRpHLtjw60OCUwAMmMdMh9x2/ VaO+58kQ6jpFJ6xDxK78o/vYUgaLBKYSKezLiOabFPqQwciNpgB/v8TmCQHo3qff GDHPOX8JHSDKmYL8z3oEnEPg/lI6DgeOqwBx70oCvwDlF4etT2jkwmOZCp8FgguY IL6XNJKfW5DMMsN3W9SRAnOrDlmov02ycrAu+qKoNsarBWMil5dKzzoYzU5KlFLa sn0mp0jayE7eHnRpFbG+BVQNLbXbqueOwJRMw3CF64U463nyYnRZvvsn+e3T8HHY UvbAkwMU3rMdOrZbDLDsfbT4ZlhQIryU5l9CKWyB8RKR918qczmZYKhZxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBoVYOQWCpBKgQ0gwpRmXOj1kg8WMB8GA1UdIwQY MBaAFHXLkbU5/X3orFU4yvU7vy+sG7JZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGN1UnRUbjlmZWlzVlRqSzlUdV9MNndic2xrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9iM2QyNWMtNDViYS00MzNmLTg4MjQt MTdlMGE2ODY5Y2VkLzEvZGN1UnRUbjlmZWlzVlRqSzlUdV9MNndic2xrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9iM2QyNWMtNDViYS00MzNmLTg4MjQtMTdlMGE2ODY5Y2Vk LzEvZGN1UnRUbjlmZWlzVlRqSzlUdV9MNndic2xrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPQUr3slf aEREo97so645dDO09byEtD58upYmJdqaevJqPP/DcoZnsRwpxg2v2heWCkiZtqLz JhVN/QbkrkWrw9i9OFIuBXXi9f35Tg2tteRsS8VnTF6U+pQwyXp5VbrSMVFuDOJ3 XaPYVctcwLRdkd6YMPi5Gp5H/GLs+2+77rGyVhtI/8ejieroaT+kCHob0aoY1BYz XQag1Ng6MRYwfNkiHHXbRlubbU6hl/pLhzrZ34gbUNdSjm6OUmZQTOvOgrMqKYuI DgV+9/I4cMncRYzk+2V/Tq8ZmITDIzTFo9hh76Wsv8gM6m0yvwho6YBG7pvgmTQe 1Yt7WiDh/FKmYA== -----END CERTIFICATE-----Generated at Sun Dec 21 07:40:38 2025 by rpki-client