This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft File: du8KDuj6FU162kOK8SEiac4KzEE.mft (raw, json) Hash identifier: QNcGcZ8JQTrb5gIaHl+F8ibWVUKOrRX47RugFx3yVyE= Subject key identifier: 8B:63:23:8A:FE:AC:49:90:C6:7F:82:1E:FF:12:72:4F:0F:37:F8:B5 Authority key identifier: 76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41 Certificate issuer: /CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41 Certificate serial: 019B3532B73DBA9D91CF9C0BDEB53CE608B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft Manifest number: 06FA Signing time: Fri 19 Dec 2025 06:01:14 +0000 Manifest this update: Fri 19 Dec 2025 06:01:14 +0000 Manifest next update: Sat 20 Dec 2025 06:01:14 +0000 Files and hashes: 1: 2CWxlLP-g2_NKa4Kkpj2mT541B8.roa (hash: mmFiMDnNmanIcg6TQLMQsrDR/+z17sNvs6gtqCoQhp0=) 2: _fP9Z6Qv2kJn-Wq44o76SeffPHk.roa (hash: 4imK77f8nPoaw3AiGFAa7c39oqo+0JEgUABlegcK0lE=) 3: du8KDuj6FU162kOK8SEiac4KzEE.crl (hash: 5obZxvbaE4xfPZCheI83wC36ZF505Jv/UzbRzcLAH74=) 4: l65724QI29Rvj8Dehw-WDE4zXrs.roa (hash: GIynNXgCpE42jnQGxrKvLDY9GYzVvsdz2aApBnrj/3E=) 5: zGpb-ZeCY1IKeaoUCFy7z97Xemo.roa (hash: mbhMc1h15zK2CFg+s3mq9POrXrfojhoCA2jehVwrtX4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.crl rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:b7:3d:ba:9d:91:cf:9c:0b:de:b5:3c:e6:08:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41 Validity Not Before: Dec 19 06:01:14 2025 GMT Not After : Dec 20 06:01:14 2025 GMT Subject: CN=8b63238afeac4990c67f821eff12724f0f37f8b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f4:f8:be:fa:f5:e6:99:17:e1:ba:8b:e4:22: 01:2d:f1:d0:56:53:1b:c1:5d:e4:48:81:31:eb:93: ac:56:64:96:6b:f0:7a:2f:ec:45:af:c5:76:5c:af: 67:e4:aa:85:06:61:85:2d:7d:8e:53:8b:ca:07:0e: f0:fb:e6:c1:92:e4:8e:1a:e6:c5:41:af:5c:a0:9b: 9c:9c:40:33:c5:7c:bb:28:4a:a0:ab:a6:8b:0d:11: ea:e2:05:3b:5e:4c:10:f1:81:30:eb:ce:a6:a9:49: a4:b3:d4:11:2a:d7:6d:15:e6:9e:d3:bb:09:20:b3: d8:99:e6:60:1e:8a:f0:ca:1d:4b:39:16:11:6d:81: d8:c6:60:8d:a8:04:d0:88:a6:b4:ef:a2:47:4c:34: e7:13:74:de:6e:74:aa:64:87:e2:66:c3:16:40:6b: af:03:3c:18:c4:e1:3b:48:c9:2d:d3:75:e5:73:57: ac:be:8c:5b:08:c3:d4:bf:e2:ee:c1:85:50:54:ea: 78:68:f9:ba:c6:3d:cc:ea:a7:32:8f:2a:bb:bd:55: 99:73:85:4d:55:1e:d6:ec:c6:bc:e1:e8:05:31:bd: 3c:85:e0:83:2f:a2:fe:9f:75:ac:fd:40:2a:2f:62: b8:33:84:23:af:71:23:41:a9:12:cc:87:41:68:a7: 4b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:63:23:8A:FE:AC:49:90:C6:7F:82:1E:FF:12:72:4F:0F:37:F8:B5 X509v3 Authority Key Identifier: keyid:76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:67:9c:2e:a7:94:38:62:c6:c6:8e:57:89:9c:f0:6a:d1:70: 96:f7:05:cd:72:19:b2:44:4d:d2:9f:a1:1b:e8:17:bc:b8:1a: 57:cb:db:4a:13:f0:76:fa:0b:06:a9:4d:4f:aa:33:70:0e:46: 91:79:da:db:7b:4f:1a:6d:58:ac:08:7f:1a:19:a7:ff:f2:5c: 01:2d:06:be:b8:6a:ab:63:04:70:08:29:ba:18:55:75:50:25: b7:71:be:7e:d1:01:f6:22:f5:62:65:12:ca:45:3b:8a:f1:f5: 7d:cc:68:cc:9d:d1:cb:57:21:76:cc:14:5d:c3:a3:f9:43:1b: 73:38:26:5f:25:9b:46:f8:8f:2d:d3:d8:c9:59:f4:66:fc:40: f4:ac:4d:59:b7:8f:44:04:d3:38:08:d5:5f:c5:5e:b3:c7:9d: 3b:c9:cd:a2:13:97:8e:a2:81:63:46:44:7e:f1:87:c3:6d:a6: 04:08:07:65:c9:5f:b3:70:1f:ce:42:42:44:cc:92:6e:37:38: 1c:2e:15:3e:4b:b3:33:7e:6d:1c:54:e6:a0:42:fb:02:75:67: 02:53:e9:f2:67:ba:21:bc:37:af:df:3b:48:fc:e7:b7:78:4d: 7d:3d:b8:58:de:b1:3e:47:ce:98:3a:69:40:95:bb:e5:13:1b: 15:06:d2:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1Mrc9up2Rz5wL3rU85gi0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2ZWYwYTBlZThmYTE1NGQ3YWRhNDM4YWYxMjEyMjY5Y2Uw YWNjNDEwHhcNMjUxMjE5MDYwMTE0WhcNMjUxMjIwMDYwMTE0WjAzMTEwLwYDVQQD Eyg4YjYzMjM4YWZlYWM0OTkwYzY3ZjgyMWVmZjEyNzI0ZjBmMzdmOGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvT4vvr15pkX4bqL5CIBLfHQVlMb wV3kSIEx65OsVmSWa/B6L+xFr8V2XK9n5KqFBmGFLX2OU4vKBw7w++bBkuSOGubF Qa9coJucnEAzxXy7KEqgq6aLDRHq4gU7XkwQ8YEw686mqUmks9QRKtdtFeae07sJ ILPYmeZgHorwyh1LORYRbYHYxmCNqATQiKa076JHTDTnE3TebnSqZIfiZsMWQGuv AzwYxOE7SMkt03Xlc1esvoxbCMPUv+LuwYVQVOp4aPm6xj3M6qcyjyq7vVWZc4VN VR7W7Ma84egFMb08heCDL6L+n3Ws/UAqL2K4M4Qjr3EjQakSzIdBaKdL4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFItjI4r+rEmQxn+CHv8Sck8PN/i1MB8GA1UdIwQY MBaAFHbvCg7o+hVNetpDivEhImnOCsxBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHU4S0R1ajZGVTE2MmtPSzhTRWlhYzRLekVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8xNjg2YzMtZGE3MC00YjU0LWFiMmIt M2JlOTk1ZDJiYmRhLzEvZHU4S0R1ajZGVTE2MmtPSzhTRWlhYzRLekVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8xNjg2YzMtZGE3MC00YjU0LWFiMmItM2JlOTk1ZDJiYmRh LzEvZHU4S0R1ajZGVTE2MmtPSzhTRWlhYzRLekVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACWecLqeU OGLGxo5XiZzwatFwlvcFzXIZskRN0p+hG+gXvLgaV8vbShPwdvoLBqlNT6ozcA5G kXna23tPGm1YrAh/Ghmn//JcAS0Gvrhqq2MEcAgpuhhVdVAlt3G+ftEB9iL1YmUS ykU7ivH1fcxozJ3Ry1chdswUXcOj+UMbczgmXyWbRviPLdPYyVn0ZvxA9KxNWbeP RATTOAjVX8Ves8edO8nNohOXjqKBY0ZEfvGHw22mBAgHZclfs3AfzkJCRMySbjc4 HC4VPkuzM35tHFTmoEL7AnVnAlPp8me6Ibw3r987SPznt3hNfT24WN6xPkfOmDpp QJW75RMbFQbS7Q== -----END CERTIFICATE-----Generated at Fri Dec 19 11:29:36 2025 by rpki-client