This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.mft File: DkGjlotidBs200i-DSyRxdSxM6I.mft (raw, json) Hash identifier: 5WR8xZIBoYZkxw4CwMarhWuh+uWfSqFEwMhSrENT27Y= Subject key identifier: C8:C1:39:15:1D:8C:9A:38:E5:1B:60:BD:B8:01:83:11:03:E2:55:E4 Authority key identifier: 0E:41:A3:96:8B:62:74:1B:36:D3:48:BE:0D:2C:91:C5:D4:B1:33:A2 Certificate issuer: /CN=0e41a3968b62741b36d348be0d2c91c5d4b133a2 Certificate serial: 019B4B153365FD5F0938E2A93894707176BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkGjlotidBs200i-DSyRxdSxM6I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.mft Manifest number: 1790 Signing time: Tue 23 Dec 2025 12:00:39 +0000 Manifest this update: Tue 23 Dec 2025 12:00:39 +0000 Manifest next update: Wed 24 Dec 2025 12:00:39 +0000 Files and hashes: 1: DkGjlotidBs200i-DSyRxdSxM6I.crl (hash: opGhVe46Od7xrx3ljr+4vHppJ3It86hGj+eG2sYAoXg=) 2: nHnuu4F-Ic_WUkHgNlM9Go5lrwU.roa (hash: 5dkmrGwUAjAB3N+7M+2yibV5BDpF46oezVix+Yio7q4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.crl rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.mft rsync://rpki.ripe.net/repository/DEFAULT/DkGjlotidBs200i-DSyRxdSxM6I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 12:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:15:33:65:fd:5f:09:38:e2:a9:38:94:70:71:76:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e41a3968b62741b36d348be0d2c91c5d4b133a2 Validity Not Before: Dec 23 12:00:39 2025 GMT Not After : Dec 24 12:00:39 2025 GMT Subject: CN=c8c139151d8c9a38e51b60bdb801831103e255e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cd:75:6b:bd:bf:26:a1:80:6d:2b:cc:8c:65: 31:cf:48:b4:36:d4:fd:0d:a1:72:3f:a3:ee:7b:26: f5:0f:ca:22:e5:8c:4d:df:ea:0a:0a:a6:d1:a4:36: 03:8e:21:90:dc:c5:a4:4f:f0:64:aa:bb:ff:07:79: fa:3c:4c:c2:7a:b3:53:61:88:13:46:77:3d:f9:ba: 14:0f:e0:02:7a:87:f1:a7:3f:ef:7d:0e:93:49:00: 23:e8:b4:0b:44:b9:bf:88:55:ee:17:d8:77:9c:e2: 24:cf:7c:6d:29:8b:74:57:c8:48:1c:ce:a9:14:d1: 7c:cf:96:2b:e1:60:61:43:b5:30:ee:c4:aa:92:7e: f7:1d:ae:54:53:7f:55:b9:e4:8e:cd:74:17:ef:1b: db:54:96:96:b0:04:39:d7:ce:fe:ea:fa:dc:d4:c1: b4:42:92:42:09:56:9a:75:84:82:65:5e:c4:86:a1: a5:4b:66:83:fa:62:b5:d0:ab:64:e3:4c:3b:16:a7: b3:b4:3a:7f:f1:be:42:9d:87:4f:ba:04:18:63:2d: 53:63:f9:d9:76:35:50:5f:59:47:04:1b:4b:c7:4b: 03:01:a4:8e:30:53:73:07:91:d8:88:5b:97:d2:59: a9:d0:63:2e:5b:cf:27:84:86:25:9f:18:88:a3:ee: e6:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C1:39:15:1D:8C:9A:38:E5:1B:60:BD:B8:01:83:11:03:E2:55:E4 X509v3 Authority Key Identifier: keyid:0E:41:A3:96:8B:62:74:1B:36:D3:48:BE:0D:2C:91:C5:D4:B1:33:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkGjlotidBs200i-DSyRxdSxM6I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:97:20:7f:4e:82:63:3d:df:b9:e2:8b:14:7b:31:36:57:70: 85:96:2f:7f:fe:fe:7e:08:76:f8:54:80:78:e8:65:5e:08:aa: e3:22:75:9e:3a:3d:fd:b3:9d:76:6a:75:35:df:1d:52:69:8f: 87:2e:3f:68:53:46:76:67:3a:14:b8:b8:83:e0:9a:e7:3e:42: 30:71:37:6f:c5:44:77:ea:33:2c:dd:cb:fe:0a:ea:01:dc:18: 8b:99:d7:d5:87:73:85:d2:ae:dc:0f:8a:89:73:9c:3a:ee:73: d9:da:2b:1a:ad:f3:16:da:ff:b9:6c:c3:8b:8f:ce:7f:18:94: 8b:2a:c2:81:fe:be:d7:49:84:fa:39:a8:75:4c:49:7f:87:c7: f9:7e:12:89:e9:26:be:00:e0:06:d6:3d:d7:9e:17:96:64:26: b4:1d:a9:fa:64:6b:63:e9:8d:5b:5d:de:d4:a9:56:89:a9:e1: a8:db:22:c8:25:9f:9f:41:d3:11:c9:1b:13:a2:ab:24:c6:4f: 52:ed:d1:17:9e:91:38:4e:83:41:78:6e:e8:c4:7c:34:67:99: dc:bb:c0:9f:9a:2e:74:e8:7d:a9:e5:5a:9a:d1:14:ff:7f:3f: d7:1f:74:02:be:4d:40:a7:b6:f4:cb:4b:e7:de:e0:e8:2e:aa: 46:ea:6b:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLFTNl/V8JOOKpOJRwcXa+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNDFhMzk2OGI2Mjc0MWIzNmQzNDhiZTBkMmM5MWM1ZDRi MTMzYTIwHhcNMjUxMjIzMTIwMDM5WhcNMjUxMjI0MTIwMDM5WjAzMTEwLwYDVQQD EyhjOGMxMzkxNTFkOGM5YTM4ZTUxYjYwYmRiODAxODMxMTAzZTI1NWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuM11a72/JqGAbSvMjGUxz0i0NtT9 DaFyP6Pueyb1D8oi5YxN3+oKCqbRpDYDjiGQ3MWkT/Bkqrv/B3n6PEzCerNTYYgT Rnc9+boUD+ACeofxpz/vfQ6TSQAj6LQLRLm/iFXuF9h3nOIkz3xtKYt0V8hIHM6p FNF8z5Yr4WBhQ7Uw7sSqkn73Ha5UU39VueSOzXQX7xvbVJaWsAQ5187+6vrc1MG0 QpJCCVaadYSCZV7EhqGlS2aD+mK10Ktk40w7FqeztDp/8b5CnYdPugQYYy1TY/nZ djVQX1lHBBtLx0sDAaSOMFNzB5HYiFuX0lmp0GMuW88nhIYlnxiIo+7mkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMjBORUdjJo45RtgvbgBgxED4lXkMB8GA1UdIwQY MBaAFA5Bo5aLYnQbNtNIvg0skcXUsTOiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGtHamxvdGlkQnMyMDBpLURTeVJ4ZFN4TTZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8wNWIxZjgtNGIzNS00MGJiLWEwMzQt NzQ3NTIzMTkyMzYzLzEvRGtHamxvdGlkQnMyMDBpLURTeVJ4ZFN4TTZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8wNWIxZjgtNGIzNS00MGJiLWEwMzQtNzQ3NTIzMTkyMzYz LzEvRGtHamxvdGlkQnMyMDBpLURTeVJ4ZFN4TTZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvZcgf06C Yz3fueKLFHsxNldwhZYvf/7+fgh2+FSAeOhlXgiq4yJ1njo9/bOddmp1Nd8dUmmP hy4/aFNGdmc6FLi4g+Ca5z5CMHE3b8VEd+ozLN3L/grqAdwYi5nX1YdzhdKu3A+K iXOcOu5z2dorGq3zFtr/uWzDi4/OfxiUiyrCgf6+10mE+jmodUxJf4fH+X4Siekm vgDgBtY9154XlmQmtB2p+mRrY+mNW13e1KlWianhqNsiyCWfn0HTEckbE6KrJMZP Uu3RF56ROE6DQXhu6MR8NGeZ3LvAn5oudOh9qeVamtEU/38/1x90Ar5NQKe29MtL 597g6C6qRuprFg== -----END CERTIFICATE-----Generated at Tue Dec 23 18:58:19 2025 by rpki-client