This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.mft File: DkTxM_OHWTqvor6rOIhJBPrJvRk.mft (raw, json) Hash identifier: UhNH1sCabP3lHNMSJZHLF8L0gHV+mYIz4vLEmWcT4Ns= Subject key identifier: 92:09:31:E3:5F:6A:16:A6:F4:4D:EB:26:E9:E5:58:AE:B7:27:EA:8E Authority key identifier: 0E:44:F1:33:F3:87:59:3A:AF:A2:BE:AB:38:88:49:04:FA:C9:BD:19 Certificate issuer: /CN=0e44f133f387593aafa2beab38884904fac9bd19 Certificate serial: 019B18A89DE0449B000A565BFEE8AA2FD84D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkTxM_OHWTqvor6rOIhJBPrJvRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.mft Manifest number: 0401 Signing time: Sat 13 Dec 2025 17:01:02 +0000 Manifest this update: Sat 13 Dec 2025 17:01:02 +0000 Manifest next update: Sun 14 Dec 2025 17:01:02 +0000 Files and hashes: 1: DkTxM_OHWTqvor6rOIhJBPrJvRk.crl (hash: koESTi7BagYBjUc4Xnwh1OAcuFIJoDHHRBfcqz/cSc0=) 2: Wiv0DHdRF2zh8D5DY6J3_PLSV6Q.roa (hash: /xs5AGgsSlLOCnLD+1aaT+DfL+K36ivL9muQHygs7c4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.mft rsync://rpki.ripe.net/repository/DEFAULT/DkTxM_OHWTqvor6rOIhJBPrJvRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:a8:9d:e0:44:9b:00:0a:56:5b:fe:e8:aa:2f:d8:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e44f133f387593aafa2beab38884904fac9bd19 Validity Not Before: Dec 13 17:01:02 2025 GMT Not After : Dec 14 17:01:02 2025 GMT Subject: CN=920931e35f6a16a6f44deb26e9e558aeb727ea8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a7:c4:95:9f:4d:15:7f:35:4c:97:34:76:5f: 14:bd:42:22:19:a4:27:6f:69:27:48:62:8e:ed:4e: de:21:cc:3a:2d:13:83:bc:58:ec:c6:df:3d:81:9a: b6:70:65:17:47:56:eb:ea:49:8e:23:49:6d:b8:95: b8:f9:f9:b5:0c:1d:e1:d5:22:d4:5b:4b:5d:3b:a3: 93:36:be:70:c6:6d:c6:ae:1a:20:f6:79:0a:cb:f6: ba:bc:92:91:40:3b:19:73:16:e9:94:a5:c8:ba:bf: 48:d2:10:63:1a:9a:9c:7b:45:be:ef:2c:cd:d4:bf: af:4a:5a:5c:c1:ce:55:03:34:52:20:05:18:0a:2a: b7:d4:df:3c:c2:53:eb:de:17:29:55:a8:0d:b4:f4: 4f:54:c5:ba:9d:4a:3f:07:ad:9c:48:78:08:3b:e6: 5c:5b:34:9b:75:bc:ab:d5:02:2e:70:44:3a:c9:39: 8e:96:23:38:32:bd:59:bc:4f:41:63:c3:fc:8e:45: d1:6d:46:ab:ae:12:b2:74:c9:3e:c5:0b:fc:da:79: c9:73:41:c4:9d:9e:4c:25:f6:0a:49:d5:67:7a:e7: eb:b0:c9:6b:b7:34:e4:54:a4:67:5b:63:27:f4:f4: c0:a2:df:f3:4b:52:37:88:14:fc:6e:8b:c0:cc:d9: 7a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:09:31:E3:5F:6A:16:A6:F4:4D:EB:26:E9:E5:58:AE:B7:27:EA:8E X509v3 Authority Key Identifier: keyid:0E:44:F1:33:F3:87:59:3A:AF:A2:BE:AB:38:88:49:04:FA:C9:BD:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkTxM_OHWTqvor6rOIhJBPrJvRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:b6:b5:25:f3:d7:90:15:7c:e0:6e:a0:00:cf:ed:e3:6b:f3: 25:a9:98:d4:e7:12:74:ac:a3:f6:a9:5f:c5:9c:de:48:2c:10: 8a:aa:7f:22:98:83:9f:3f:fd:00:42:9c:3b:0f:2a:95:99:61: 32:08:02:76:93:14:4d:e8:5e:53:bc:98:3a:20:95:3d:8d:84: 50:ca:fc:c3:3b:26:b0:eb:c5:f2:38:61:87:21:e0:c1:30:29: 23:3a:2a:67:c8:db:34:66:e4:7d:21:8e:22:5a:1a:7a:bd:db: 2b:4d:24:34:17:5c:d7:43:fa:d5:9a:79:e2:43:e1:c7:75:90: 2a:cc:00:5c:18:58:98:93:0b:1d:af:cd:9a:7c:68:8d:0c:c2: 06:a3:f8:f2:df:76:1a:85:90:bc:7a:3c:1d:86:96:3b:0a:86: 8a:11:9f:16:4b:cd:0d:af:c8:26:5c:db:b6:c3:27:f0:74:45: 8d:e2:9a:54:22:08:af:bc:39:8b:3a:35:5e:89:7f:af:5f:b3: 6c:fd:35:f9:a3:e8:f7:3a:f1:ba:77:7d:fa:bb:bf:c5:6f:db: 8a:a0:c3:bb:8a:3a:75:7c:5b:f5:2e:45:e4:8e:be:9e:ad:39: 7d:20:1f:8f:5a:56:16:99:71:f1:d2:4f:e8:44:af:fc:7e:a5: d2:2a:1e:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYqJ3gRJsAClZb/uiqL9hNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNDRmMTMzZjM4NzU5M2FhZmEyYmVhYjM4ODg0OTA0ZmFj OWJkMTkwHhcNMjUxMjEzMTcwMTAyWhcNMjUxMjE0MTcwMTAyWjAzMTEwLwYDVQQD Eyg5MjA5MzFlMzVmNmExNmE2ZjQ0ZGViMjZlOWU1NThhZWI3MjdlYThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKfElZ9NFX81TJc0dl8UvUIiGaQn b2knSGKO7U7eIcw6LRODvFjsxt89gZq2cGUXR1br6kmOI0ltuJW4+fm1DB3h1SLU W0tdO6OTNr5wxm3Grhog9nkKy/a6vJKRQDsZcxbplKXIur9I0hBjGpqce0W+7yzN 1L+vSlpcwc5VAzRSIAUYCiq31N88wlPr3hcpVagNtPRPVMW6nUo/B62cSHgIO+Zc WzSbdbyr1QIucEQ6yTmOliM4Mr1ZvE9BY8P8jkXRbUarrhKydMk+xQv82nnJc0HE nZ5MJfYKSdVneufrsMlrtzTkVKRnW2Mn9PTAot/zS1I3iBT8bovAzNl6xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJIJMeNfaham9E3rJunlWK63J+qOMB8GA1UdIwQY MBaAFA5E8TPzh1k6r6K+qziISQT6yb0ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGtUeE1fT0hXVHF2b3I2ck9JaEpCUHJKdlJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8wYjY4ZGMtYzVjOS00MGRkLTlkOGYt ZGJmZjBlZTFlMDllLzEvRGtUeE1fT0hXVHF2b3I2ck9JaEpCUHJKdlJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC8wYjY4ZGMtYzVjOS00MGRkLTlkOGYtZGJmZjBlZTFlMDll LzEvRGtUeE1fT0hXVHF2b3I2ck9JaEpCUHJKdlJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMba1JfPX kBV84G6gAM/t42vzJamY1OcSdKyj9qlfxZzeSCwQiqp/IpiDnz/9AEKcOw8qlZlh MggCdpMUTeheU7yYOiCVPY2EUMr8wzsmsOvF8jhhhyHgwTApIzoqZ8jbNGbkfSGO Iloaer3bK00kNBdc10P61Zp54kPhx3WQKswAXBhYmJMLHa/NmnxojQzCBqP48t92 GoWQvHo8HYaWOwqGihGfFkvNDa/IJlzbtsMn8HRFjeKaVCIIr7w5izo1Xol/r1+z bP01+aPo9zrxund9+ru/xW/biqDDu4o6dXxb9S5F5I6+nq05fSAfj1pWFplx8dJP 6ESv/H6l0ioexw== -----END CERTIFICATE-----Generated at Sun Dec 14 01:52:53 2025 by rpki-client