This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft File: DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft (raw, json) Hash identifier: 0/JfKc/YpYOwQrGTu1AiL+1s5obJKWRyue9to/HbtcA= Subject key identifier: D7:DE:62:90:95:2F:28:EC:D7:4E:C4:8A:B9:C1:0B:0E:47:93:97:D4 Authority key identifier: 0C:A5:19:90:CE:0C:89:F0:D2:10:60:9E:67:E9:E8:07:56:5C:13:1F Certificate issuer: /CN=0ca51990ce0c89f0d210609e67e9e807565c131f Certificate serial: 019B5ABFD9C28CE9EB0190C0E6C14E2B6E47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKUZkM4MifDSEGCeZ-noB1ZcEx8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft Manifest number: 15 Signing time: Fri 26 Dec 2025 13:01:21 +0000 Manifest this update: Fri 26 Dec 2025 13:01:21 +0000 Manifest next update: Sat 27 Dec 2025 13:01:21 +0000 Files and hashes: 1: 2OHFPQVJVgVn60Ld5ccjFPlW1i0.asa (hash: +IoXSl7cJZOwMQhzd2pQ1n8sh9/7YWkQ4/mMli/beos=) 2: DKUZkM4MifDSEGCeZ-noB1ZcEx8.crl (hash: vqBH8PqWEDX6E9igqOPeVDm+aFLsHfQtWBLUahWT5Mo=) 3: bXExQtE2rsssLcHm9zFscNvg6uU.roa (hash: +TlfvfkpHkxj8edMDvPQZBfnz+Yh21yBEM7LNlWsTfU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.crl rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft rsync://rpki.ripe.net/repository/DEFAULT/DKUZkM4MifDSEGCeZ-noB1ZcEx8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:d9:c2:8c:e9:eb:01:90:c0:e6:c1:4e:2b:6e:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ca51990ce0c89f0d210609e67e9e807565c131f Validity Not Before: Dec 26 13:01:21 2025 GMT Not After : Dec 27 13:01:21 2025 GMT Subject: CN=d7de6290952f28ecd74ec48ab9c10b0e479397d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e6:49:77:18:b8:f8:d9:e1:d5:89:7a:89:a1: 54:fe:3b:cc:18:07:15:30:e2:6e:df:3a:76:e8:be: ce:d0:1e:ab:0b:a9:56:0b:f6:bb:f2:14:ed:12:6d: db:7b:bd:cd:ad:e4:8f:66:01:d1:7a:fa:3a:a1:cb: 77:66:a4:32:f6:55:5a:ef:eb:c1:fe:ca:ae:f2:51: dd:ef:a4:cb:f9:c9:16:a6:a0:36:7b:8f:15:a4:e0: a4:30:80:a8:2a:32:a8:16:f3:6f:ed:aa:ff:0d:ce: c9:58:b7:ac:59:82:2f:79:ba:83:95:c7:20:ed:1a: 7b:63:ad:b8:aa:62:1c:7c:7a:d4:0b:c5:14:2a:b4: 5e:7c:d4:c6:00:17:30:6b:63:ef:99:b1:1f:22:88: b3:2a:7e:f1:e3:f2:6c:75:71:41:c8:fa:86:30:20: 40:06:21:75:d3:91:98:e2:32:7a:7b:11:9e:4b:d1: e0:7c:9b:45:bc:dc:73:8b:37:49:3f:40:e8:7c:1b: 05:26:5a:7f:40:5c:e2:78:89:52:da:c0:32:93:3d: 69:c8:ad:c4:9c:87:a1:fc:9b:f4:79:0c:79:83:06: 8e:6e:8c:da:ed:79:47:1f:64:8a:43:1b:fc:cb:5e: 2c:70:c0:2f:7b:de:85:da:e0:df:e1:35:89:74:7b: f5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:DE:62:90:95:2F:28:EC:D7:4E:C4:8A:B9:C1:0B:0E:47:93:97:D4 X509v3 Authority Key Identifier: keyid:0C:A5:19:90:CE:0C:89:F0:D2:10:60:9E:67:E9:E8:07:56:5C:13:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKUZkM4MifDSEGCeZ-noB1ZcEx8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:92:20:f0:6b:db:73:ed:35:10:53:62:36:c1:8c:75:f5:64: 3a:34:78:25:07:76:7c:ac:19:5e:b3:fc:4c:c3:a0:86:c6:d1: 23:02:3d:82:4c:ff:05:98:35:8b:1c:c1:5d:8c:8c:70:82:32: a7:b0:05:e6:47:23:79:2f:c7:bb:21:a2:8c:fc:e6:23:c2:8b: de:70:3c:60:b4:c2:d0:15:8b:30:06:c3:56:b2:e0:b7:5e:47: 22:15:c5:bf:3c:a1:82:2e:9f:73:5e:28:97:dc:71:39:d9:b2: bc:80:c7:87:ff:1c:b7:72:aa:2d:49:d8:92:ff:04:ae:00:2c: 9b:96:55:e2:fa:95:32:c6:ca:7f:b8:2c:c7:c5:dd:60:f4:c7: d9:fc:07:38:3f:14:f9:90:32:85:44:4a:8e:f9:bf:45:9f:45: 06:2b:3e:b8:0c:be:1f:22:87:a9:61:ab:c6:c3:8e:2e:eb:e0: 4f:b0:d3:53:de:fb:52:77:bf:82:b3:83:d5:cc:69:f9:09:82: 10:18:60:52:a5:92:5d:41:53:2a:bf:d6:46:8c:41:4d:1a:62: 3f:7f:e4:48:76:58:9a:e1:d4:1e:84:1e:bc:77:ac:48:f2:82: a8:48:16:50:3a:46:68:06:b8:0e:71:dd:4a:fa:b2:d1:48:38: 31:58:af:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav9nCjOnrAZDA5sFOK25HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjYTUxOTkwY2UwYzg5ZjBkMjEwNjA5ZTY3ZTllODA3NTY1 YzEzMWYwHhcNMjUxMjI2MTMwMTIxWhcNMjUxMjI3MTMwMTIxWjAzMTEwLwYDVQQD EyhkN2RlNjI5MDk1MmYyOGVjZDc0ZWM0OGFiOWMxMGIwZTQ3OTM5N2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+ZJdxi4+Nnh1Yl6iaFU/jvMGAcV MOJu3zp26L7O0B6rC6lWC/a78hTtEm3be73NreSPZgHRevo6oct3ZqQy9lVa7+vB /squ8lHd76TL+ckWpqA2e48VpOCkMICoKjKoFvNv7ar/Dc7JWLesWYIvebqDlccg 7Rp7Y624qmIcfHrUC8UUKrRefNTGABcwa2PvmbEfIoizKn7x4/JsdXFByPqGMCBA BiF105GY4jJ6exGeS9HgfJtFvNxzizdJP0DofBsFJlp/QFzieIlS2sAykz1pyK3E nIeh/Jv0eQx5gwaOboza7XlHH2SKQxv8y14scMAve96F2uDf4TWJdHv1ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNfeYpCVLyjs107EirnBCw5Hk5fUMB8GA1UdIwQY MBaAFAylGZDODInw0hBgnmfp6AdWXBMfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREtVWmtNNE1pZkRTRUdDZVotbm9CMVpjRXg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9mNjMwYTgtNzE3OS00MDA1LTg1ZWYt OWI2ZGIxZTcyMDg4LzEvREtVWmtNNE1pZkRTRUdDZVotbm9CMVpjRXg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9mNjMwYTgtNzE3OS00MDA1LTg1ZWYtOWI2ZGIxZTcyMDg4 LzEvREtVWmtNNE1pZkRTRUdDZVotbm9CMVpjRXg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg5Ig8Gvb c+01EFNiNsGMdfVkOjR4JQd2fKwZXrP8TMOghsbRIwI9gkz/BZg1ixzBXYyMcIIy p7AF5kcjeS/HuyGijPzmI8KL3nA8YLTC0BWLMAbDVrLgt15HIhXFvzyhgi6fc14o l9xxOdmyvIDHh/8ct3KqLUnYkv8ErgAsm5ZV4vqVMsbKf7gsx8XdYPTH2fwHOD8U +ZAyhURKjvm/RZ9FBis+uAy+HyKHqWGrxsOOLuvgT7DTU977Une/grOD1cxp+QmC EBhgUqWSXUFTKr/WRoxBTRpiP3/kSHZYmuHUHoQevHesSPKCqEgWUDpGaAa4DnHd Svqy0Ug4MVivIA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:18 2025 by rpki-client