This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
File: dcuRtTn9feisVTjK9Tu_L6wbslk.mft (raw, json)
Hash identifier: 2FFdG5rANvaQG5BgDeQfNOpUu8T3PTLLev8VmCw07pQ=
Subject key identifier: D4:B7:96:8F:B9:F5:2C:48:62:4D:71:E8:8D:FA:7C:79:F2:92:66:82
Authority key identifier: 75:CB:91:B5:39:FD:7D:E8:AC:55:38:CA:F5:3B:BF:2F:AC:1B:B2:59
Certificate issuer: /CN=75cb91b539fd7de8ac5538caf53bbf2fac1bb259
Certificate serial: 019B3D90CF87E76184F48BE2F776A6B9EFC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
Manifest number: 083A
Signing time: Sat 20 Dec 2025 21:00:59 +0000
Manifest this update: Sat 20 Dec 2025 21:00:59 +0000
Manifest next update: Sun 21 Dec 2025 21:00:59 +0000
Files and hashes: 1: dcuRtTn9feisVTjK9Tu_L6wbslk.crl (hash: F4P0+df7OA/TT1Jb7HA/6U73RcMzIKKk53tHE/zeonw=)
2: wmFwOwWe4TE9uLkEByUtzshEopU.roa (hash: QBlI2HpuFwgzwXYHTq+pMuExi7xAAtXFZ+n0JdzIy8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 19:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3d:90:cf:87:e7:61:84:f4:8b:e2:f7:76:a6:b9:ef:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75cb91b539fd7de8ac5538caf53bbf2fac1bb259
Validity
Not Before: Dec 20 21:00:59 2025 GMT
Not After : Dec 21 21:00:59 2025 GMT
Subject: CN=d4b7968fb9f52c48624d71e88dfa7c79f2926682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:42:d3:48:f8:12:88:88:23:c6:fc:33:6a:79:
c1:ad:62:1b:11:b4:44:de:88:b5:4a:90:bf:3e:ab:
32:ad:a8:6a:b7:6a:b4:fa:f1:4a:4b:65:23:9b:18:
f0:41:af:89:69:c9:bd:92:20:b9:2f:5b:61:4d:c6:
14:e3:6e:5d:95:d0:ea:ee:5d:b4:b3:19:21:c4:ab:
c9:fd:2e:5c:f7:4d:84:c7:6e:7f:89:76:c0:06:86:
c8:8a:af:6f:70:40:b2:f0:4b:77:16:5e:ae:ca:d9:
b7:c0:5e:98:b8:24:6f:62:b7:76:d5:1d:83:de:ab:
07:b5:6b:c0:f2:e2:a7:01:10:51:f7:18:52:b8:88:
be:3e:f0:c4:3d:0c:14:7e:45:13:d5:21:36:7f:80:
d2:34:43:5f:04:00:89:e6:12:d3:5e:fa:91:23:59:
e5:8b:2c:ef:86:7c:2c:89:e3:fb:89:dd:8e:c7:63:
5c:04:03:d2:a6:34:16:b7:15:1e:cd:43:fc:be:9a:
59:67:c8:b9:53:89:33:02:94:d2:d7:c7:17:fb:cb:
d4:60:ef:6b:a6:8c:b2:99:dd:44:b3:f8:ac:d8:d7:
55:ac:0c:93:ef:41:c8:0b:84:f1:61:2b:d4:d1:84:
c0:cd:ba:6a:ea:ce:60:a8:93:12:4c:94:d5:6b:40:
08:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B7:96:8F:B9:F5:2C:48:62:4D:71:E8:8D:FA:7C:79:F2:92:66:82
X509v3 Authority Key Identifier:
keyid:75:CB:91:B5:39:FD:7D:E8:AC:55:38:CA:F5:3B:BF:2F:AC:1B:B2:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:f6:4a:a4:86:b8:ef:35:81:22:9c:41:ee:fb:0b:e3:ce:00:
79:a6:33:19:ac:6a:7a:a2:83:62:26:55:7f:07:ab:f6:0a:72:
a4:22:f4:f3:a6:ba:f1:53:00:0c:bc:51:d3:8a:57:b3:df:47:
d2:1e:b2:68:df:49:d3:92:e1:47:49:8c:3b:d7:87:0f:f8:52:
03:b5:cf:e1:bd:31:61:63:b5:95:3b:78:7a:fe:ad:9b:68:ab:
48:c2:37:b4:9f:2a:8c:73:1e:e2:3a:6f:80:48:96:78:d6:06:
51:2c:a8:4a:66:41:0b:7a:24:41:7c:f8:a5:05:c4:62:c1:11:
ec:6f:24:86:f8:1f:6e:e0:ae:93:ad:12:53:14:2c:fc:52:2d:
ee:ee:6e:1d:49:fc:57:21:8d:6c:70:a9:70:56:46:84:28:dd:
0c:b5:cd:bd:ec:33:fa:de:73:5a:9b:b2:d9:5d:62:6d:4c:cc:
5b:14:61:db:64:a6:a4:09:86:64:93:48:9c:c4:59:58:96:77:
c0:17:ed:1e:fc:4b:bd:ec:5b:25:5c:94:0d:9e:10:b6:15:27:
3d:87:10:16:67:bf:96:2f:c4:dd:e9:6d:ab:36:0d:5e:83:8f:
e1:b4:44:eb:41:ab:62:bf:82:83:ca:cc:e8:a3:79:55:47:f8:
4b:9c:db:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs9kM+H52GE9Ivi93amue/DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1Y2I5MWI1MzlmZDdkZThhYzU1MzhjYWY1M2JiZjJmYWMx
YmIyNTkwHhcNMjUxMjIwMjEwMDU5WhcNMjUxMjIxMjEwMDU5WjAzMTEwLwYDVQQD
EyhkNGI3OTY4ZmI5ZjUyYzQ4NjI0ZDcxZTg4ZGZhN2M3OWYyOTI2NjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtULTSPgSiIgjxvwzannBrWIbEbRE
3oi1SpC/Pqsyrahqt2q0+vFKS2UjmxjwQa+Jacm9kiC5L1thTcYU425dldDq7l20
sxkhxKvJ/S5c902Ex25/iXbABobIiq9vcECy8Et3Fl6uytm3wF6YuCRvYrd21R2D
3qsHtWvA8uKnARBR9xhSuIi+PvDEPQwUfkUT1SE2f4DSNENfBACJ5hLTXvqRI1nl
iyzvhnwsieP7id2Ox2NcBAPSpjQWtxUezUP8vppZZ8i5U4kzApTS18cX+8vUYO9r
poyymd1Es/is2NdVrAyT70HIC4TxYSvU0YTAzbpq6s5gqJMSTJTVa0AIgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNS3lo+59SxIYk1x6I36fHnykmaCMB8GA1UdIwQY
MBaAFHXLkbU5/X3orFU4yvU7vy+sG7JZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGN1UnRUbjlmZWlzVlRqSzlUdV9MNndic2xrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9iM2QyNWMtNDViYS00MzNmLTg4MjQt
MTdlMGE2ODY5Y2VkLzEvZGN1UnRUbjlmZWlzVlRqSzlUdV9MNndic2xrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9iM2QyNWMtNDViYS00MzNmLTg4MjQtMTdlMGE2ODY5Y2Vk
LzEvZGN1UnRUbjlmZWlzVlRqSzlUdV9MNndic2xrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaPZKpIa4
7zWBIpxB7vsL484AeaYzGaxqeqKDYiZVfwer9gpypCL086a68VMADLxR04pXs99H
0h6yaN9J05LhR0mMO9eHD/hSA7XP4b0xYWO1lTt4ev6tm2irSMI3tJ8qjHMe4jpv
gEiWeNYGUSyoSmZBC3okQXz4pQXEYsER7G8khvgfbuCuk60SUxQs/FIt7u5uHUn8
VyGNbHCpcFZGhCjdDLXNvewz+t5zWpuy2V1ibUzMWxRh22SmpAmGZJNInMRZWJZ3
wBftHvxLvexbJVyUDZ4QthUnPYcQFme/li/E3eltqzYNXoOP4bRE60GrYr+Cg8rM
6KN5VUf4S5zbDA==
-----END CERTIFICATE-----
Generated at Sun Dec 21 04:24:29 2025 by rpki-client