This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft File: dcuRtTn9feisVTjK9Tu_L6wbslk.mft (raw, json) Hash identifier: 2FFdG5rANvaQG5BgDeQfNOpUu8T3PTLLev8VmCw07pQ= Subject key identifier: D4:B7:96:8F:B9:F5:2C:48:62:4D:71:E8:8D:FA:7C:79:F2:92:66:82 Authority key identifier: 75:CB:91:B5:39:FD:7D:E8:AC:55:38:CA:F5:3B:BF:2F:AC:1B:B2:59 Certificate issuer: /CN=75cb91b539fd7de8ac5538caf53bbf2fac1bb259 Certificate serial: 019B3D90CF87E76184F48BE2F776A6B9EFC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft Manifest number: 083A Signing time: Sat 20 Dec 2025 21:00:59 +0000 Manifest this update: Sat 20 Dec 2025 21:00:59 +0000 Manifest next update: Sun 21 Dec 2025 21:00:59 +0000 Files and hashes: 1: dcuRtTn9feisVTjK9Tu_L6wbslk.crl (hash: F4P0+df7OA/TT1Jb7HA/6U73RcMzIKKk53tHE/zeonw=) 2: wmFwOwWe4TE9uLkEByUtzshEopU.roa (hash: QBlI2HpuFwgzwXYHTq+pMuExi7xAAtXFZ+n0JdzIy8U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:cf:87:e7:61:84:f4:8b:e2:f7:76:a6:b9:ef:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75cb91b539fd7de8ac5538caf53bbf2fac1bb259 Validity Not Before: Dec 20 21:00:59 2025 GMT Not After : Dec 21 21:00:59 2025 GMT Subject: CN=d4b7968fb9f52c48624d71e88dfa7c79f2926682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:42:d3:48:f8:12:88:88:23:c6:fc:33:6a:79: c1:ad:62:1b:11:b4:44:de:88:b5:4a:90:bf:3e:ab: 32:ad:a8:6a:b7:6a:b4:fa:f1:4a:4b:65:23:9b:18: f0:41:af:89:69:c9:bd:92:20:b9:2f:5b:61:4d:c6: 14:e3:6e:5d:95:d0:ea:ee:5d:b4:b3:19:21:c4:ab: c9:fd:2e:5c:f7:4d:84:c7:6e:7f:89:76:c0:06:86: c8:8a:af:6f:70:40:b2:f0:4b:77:16:5e:ae:ca:d9: b7:c0:5e:98:b8:24:6f:62:b7:76:d5:1d:83:de:ab: 07:b5:6b:c0:f2:e2:a7:01:10:51:f7:18:52:b8:88: be:3e:f0:c4:3d:0c:14:7e:45:13:d5:21:36:7f:80: d2:34:43:5f:04:00:89:e6:12:d3:5e:fa:91:23:59: e5:8b:2c:ef:86:7c:2c:89:e3:fb:89:dd:8e:c7:63: 5c:04:03:d2:a6:34:16:b7:15:1e:cd:43:fc:be:9a: 59:67:c8:b9:53:89:33:02:94:d2:d7:c7:17:fb:cb: d4:60:ef:6b:a6:8c:b2:99:dd:44:b3:f8:ac:d8:d7: 55:ac:0c:93:ef:41:c8:0b:84:f1:61:2b:d4:d1:84: c0:cd:ba:6a:ea:ce:60:a8:93:12:4c:94:d5:6b:40: 08:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B7:96:8F:B9:F5:2C:48:62:4D:71:E8:8D:FA:7C:79:F2:92:66:82 X509v3 Authority Key Identifier: keyid:75:CB:91:B5:39:FD:7D:E8:AC:55:38:CA:F5:3B:BF:2F:AC:1B:B2:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcuRtTn9feisVTjK9Tu_L6wbslk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/b3d25c-45ba-433f-8824-17e0a6869ced/1/dcuRtTn9feisVTjK9Tu_L6wbslk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:f6:4a:a4:86:b8:ef:35:81:22:9c:41:ee:fb:0b:e3:ce:00: 79:a6:33:19:ac:6a:7a:a2:83:62:26:55:7f:07:ab:f6:0a:72: a4:22:f4:f3:a6:ba:f1:53:00:0c:bc:51:d3:8a:57:b3:df:47: d2:1e:b2:68:df:49:d3:92:e1:47:49:8c:3b:d7:87:0f:f8:52: 03:b5:cf:e1:bd:31:61:63:b5:95:3b:78:7a:fe:ad:9b:68:ab: 48:c2:37:b4:9f:2a:8c:73:1e:e2:3a:6f:80:48:96:78:d6:06: 51:2c:a8:4a:66:41:0b:7a:24:41:7c:f8:a5:05:c4:62:c1:11: ec:6f:24:86:f8:1f:6e:e0:ae:93:ad:12:53:14:2c:fc:52:2d: ee:ee:6e:1d:49:fc:57:21:8d:6c:70:a9:70:56:46:84:28:dd: 0c:b5:cd:bd:ec:33:fa:de:73:5a:9b:b2:d9:5d:62:6d:4c:cc: 5b:14:61:db:64:a6:a4:09:86:64:93:48:9c:c4:59:58:96:77: c0:17:ed:1e:fc:4b:bd:ec:5b:25:5c:94:0d:9e:10:b6:15:27: 3d:87:10:16:67:bf:96:2f:c4:dd:e9:6d:ab:36:0d:5e:83:8f: e1:b4:44:eb:41:ab:62:bf:82:83:ca:cc:e8:a3:79:55:47:f8: 4b:9c:db:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kM+H52GE9Ivi93amue/DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1Y2I5MWI1MzlmZDdkZThhYzU1MzhjYWY1M2JiZjJmYWMx YmIyNTkwHhcNMjUxMjIwMjEwMDU5WhcNMjUxMjIxMjEwMDU5WjAzMTEwLwYDVQQD EyhkNGI3OTY4ZmI5ZjUyYzQ4NjI0ZDcxZTg4ZGZhN2M3OWYyOTI2NjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtULTSPgSiIgjxvwzannBrWIbEbRE 3oi1SpC/Pqsyrahqt2q0+vFKS2UjmxjwQa+Jacm9kiC5L1thTcYU425dldDq7l20 sxkhxKvJ/S5c902Ex25/iXbABobIiq9vcECy8Et3Fl6uytm3wF6YuCRvYrd21R2D 3qsHtWvA8uKnARBR9xhSuIi+PvDEPQwUfkUT1SE2f4DSNENfBACJ5hLTXvqRI1nl iyzvhnwsieP7id2Ox2NcBAPSpjQWtxUezUP8vppZZ8i5U4kzApTS18cX+8vUYO9r poyymd1Es/is2NdVrAyT70HIC4TxYSvU0YTAzbpq6s5gqJMSTJTVa0AIgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNS3lo+59SxIYk1x6I36fHnykmaCMB8GA1UdIwQY MBaAFHXLkbU5/X3orFU4yvU7vy+sG7JZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGN1UnRUbjlmZWlzVlRqSzlUdV9MNndic2xrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9iM2QyNWMtNDViYS00MzNmLTg4MjQt MTdlMGE2ODY5Y2VkLzEvZGN1UnRUbjlmZWlzVlRqSzlUdV9MNndic2xrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9iM2QyNWMtNDViYS00MzNmLTg4MjQtMTdlMGE2ODY5Y2Vk LzEvZGN1UnRUbjlmZWlzVlRqSzlUdV9MNndic2xrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaPZKpIa4 7zWBIpxB7vsL484AeaYzGaxqeqKDYiZVfwer9gpypCL086a68VMADLxR04pXs99H 0h6yaN9J05LhR0mMO9eHD/hSA7XP4b0xYWO1lTt4ev6tm2irSMI3tJ8qjHMe4jpv gEiWeNYGUSyoSmZBC3okQXz4pQXEYsER7G8khvgfbuCuk60SUxQs/FIt7u5uHUn8 VyGNbHCpcFZGhCjdDLXNvewz+t5zWpuy2V1ibUzMWxRh22SmpAmGZJNInMRZWJZ3 wBftHvxLvexbJVyUDZ4QthUnPYcQFme/li/E3eltqzYNXoOP4bRE60GrYr+Cg8rM 6KN5VUf4S5zbDA== -----END CERTIFICATE-----Generated at Sun Dec 21 04:24:29 2025 by rpki-client