This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft File: DmT4G542uEmRd4dnjQFNtL_O8xE.mft (raw, json) Hash identifier: OCkBC69lFXXy0Azy+wRbqhvxzJ7ZS/3KCx7czRSLfx4= Subject key identifier: F4:BB:DA:DD:BA:E0:B4:0C:9D:47:0F:B6:6A:60:F6:9E:0C:2B:38:7D Authority key identifier: 0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11 Certificate issuer: /CN=0e64f81b9e36b849917787678d014db4bfcef311 Certificate serial: 019B1C4EA20C88096ED487E8F250E2436445 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft Manifest number: 07B4 Signing time: Sun 14 Dec 2025 10:01:13 +0000 Manifest this update: Sun 14 Dec 2025 10:01:13 +0000 Manifest next update: Mon 15 Dec 2025 10:01:13 +0000 Files and hashes: 1: DmT4G542uEmRd4dnjQFNtL_O8xE.crl (hash: 3nxU3t1M5oRSWQbw55fX1ACKyBRPDRv9XDrAq7hZW/4=) 2: EEHOXZie7GfjFP8O_aL3DaZW-cs.roa (hash: X68IlMoKqFdfJQq29aFoZvl4dyUrIU6qUuNNpdY5QY0=) 3: GRNi9FaG_cegQglT0i8FIDNWU2U.roa (hash: bCWNDCmq66YbcJ+QlNZxut5x3FKlyihHpYRCb3I31oo=) 4: R6j9VFf9hyGNWvQI3K-rac4qKtM.roa (hash: OsF+wduGV2ZDH6UXcdpVcVuvDncNr0AEm//3Zi2I5P8=) 5: XVq1TrlQkDFo2a7BPxVZPb6kuUE.roa (hash: aTCk4tDEozYvDRrFyrZ3f3BlxhXKcnoh7F4+cF/wfgQ=) 6: a543lKmyyGMa0HBPrwfoutV1h7c.roa (hash: LmAVwRAD65X9ZkrQl9CW8/V9eNzAq0UoEpMZCq2ur1o=) 7: jR8-xAGcr5eXfnf9PQ-gCr4sqBU.roa (hash: xAyKDInYSvUkNUl6uz5vwMUk+j1zJC/E+Ymsw/w0qH0=) 8: mK6Hd1l33q60MXDCDb-v3OAM0UE.roa (hash: BlNVjbSzLjZletHX6nfFNTrDwvaIRsmo9MnmSGytaUo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:4e:a2:0c:88:09:6e:d4:87:e8:f2:50:e2:43:64:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e64f81b9e36b849917787678d014db4bfcef311 Validity Not Before: Dec 14 10:01:13 2025 GMT Not After : Dec 15 10:01:13 2025 GMT Subject: CN=f4bbdaddbae0b40c9d470fb66a60f69e0c2b387d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bb:cf:92:59:a9:43:91:65:46:fd:eb:b3:66: b1:d7:56:29:d1:8d:6e:55:fa:cc:3d:3f:17:e9:e9: c5:0a:90:6d:2a:37:4f:82:db:02:22:c9:a3:9c:48: b3:fd:3d:50:ef:46:6e:76:6f:fc:57:75:ca:64:b0: 50:5a:bc:f1:e5:1c:b5:20:5f:6e:b0:f4:87:ef:bb: 43:34:95:0b:87:17:7a:fb:18:4f:e0:cd:6b:86:18: bc:b8:c5:f3:eb:67:52:49:1b:fa:d2:7b:f2:a1:6d: cd:b2:1c:e3:19:6c:e2:be:76:4c:e6:a6:b8:62:95: df:cb:6c:89:af:41:af:ef:9b:91:fe:cf:d2:09:cc: ef:4e:5f:5d:9c:94:15:a3:3b:6b:14:4a:bd:d9:b5: 76:d8:d4:39:bd:5d:bc:86:1e:78:eb:c5:b3:b2:be: 52:63:32:f2:f6:50:4c:67:0e:cd:f8:8d:d6:1e:8c: 02:a7:d1:92:f9:e5:f0:a2:5c:3c:ce:84:bc:fd:d2: fd:ca:49:90:a0:5f:bc:f3:97:66:b4:69:a0:83:d6: 8f:3b:17:f3:99:dd:6c:65:25:8f:f0:a6:27:1e:ff: bb:21:fb:ac:e5:f3:89:14:01:39:26:2b:a4:0a:37: b2:6d:01:f5:a7:90:11:41:1a:7e:6b:22:b9:7b:a2: 51:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:BB:DA:DD:BA:E0:B4:0C:9D:47:0F:B6:6A:60:F6:9E:0C:2B:38:7D X509v3 Authority Key Identifier: keyid:0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:cb:2e:a5:bf:f9:7b:4c:23:82:a7:4b:37:e7:1e:0c:6c:89: 6e:ca:a3:0c:e3:25:af:fb:37:23:d9:46:c9:70:a6:94:fb:36: 12:ba:e7:d1:da:a0:0c:66:e9:01:ce:8f:9f:4e:c3:c1:f2:78: 90:13:cb:2d:85:87:3c:b2:b3:17:3c:68:a8:c0:d5:7a:58:c0: 1a:3f:f5:e4:d3:ea:f2:05:04:09:ee:ce:4d:62:f6:37:ad:c9: 2d:f3:5f:a2:6b:76:fa:c8:48:18:c6:80:80:2a:6f:25:1a:58: 23:8d:b3:d0:78:24:94:32:1a:c5:36:d3:29:2e:ea:07:be:b6: 6c:dd:be:21:0a:73:3e:1d:55:ec:5a:27:fb:b9:a1:ea:1f:24: 69:d7:6a:11:5b:9b:8b:c2:10:14:d0:9f:4b:2a:42:45:cc:e9: 95:30:b1:4f:cc:34:a6:29:c8:61:7b:88:7d:7b:0d:dc:52:f2: 57:03:e3:31:ed:05:cb:0f:7f:2a:39:53:d7:a0:d3:24:88:a5: d9:68:19:cd:52:1b:7b:32:02:61:e3:2a:b0:98:20:e7:69:95: 40:3b:c9:d5:bc:dc:30:0e:e5:78:69:24:f7:a3:01:7e:87:53: d3:a6:6e:87:88:14:05:56:da:e8:4c:09:98:17:34:e5:cd:63: 33:cf:7f:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscTqIMiAlu1Ifo8lDiQ2RFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNjRmODFiOWUzNmI4NDk5MTc3ODc2NzhkMDE0ZGI0YmZj ZWYzMTEwHhcNMjUxMjE0MTAwMTEzWhcNMjUxMjE1MTAwMTEzWjAzMTEwLwYDVQQD EyhmNGJiZGFkZGJhZTBiNDBjOWQ0NzBmYjY2YTYwZjY5ZTBjMmIzODdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7vPklmpQ5FlRv3rs2ax11Yp0Y1u VfrMPT8X6enFCpBtKjdPgtsCIsmjnEiz/T1Q70Zudm/8V3XKZLBQWrzx5Ry1IF9u sPSH77tDNJULhxd6+xhP4M1rhhi8uMXz62dSSRv60nvyoW3NshzjGWzivnZM5qa4 YpXfy2yJr0Gv75uR/s/SCczvTl9dnJQVoztrFEq92bV22NQ5vV28hh5468Wzsr5S YzLy9lBMZw7N+I3WHowCp9GS+eXwolw8zoS8/dL9ykmQoF+885dmtGmgg9aPOxfz md1sZSWP8KYnHv+7Ifus5fOJFAE5JiukCjeybQH1p5ARQRp+ayK5e6JR1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPS72t264LQMnUcPtmpg9p4MKzh9MB8GA1UdIwQY MBaAFA5k+BueNrhJkXeHZ40BTbS/zvMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG1UNEc1NDJ1RW1SZDRkbmpRRk50TF9POHhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy81OTRkMjUtZjFjNi00MDQ0LWE4YTct YzhmMTgyZTk1ZWE1LzEvRG1UNEc1NDJ1RW1SZDRkbmpRRk50TF9POHhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy81OTRkMjUtZjFjNi00MDQ0LWE4YTctYzhmMTgyZTk1ZWE1 LzEvRG1UNEc1NDJ1RW1SZDRkbmpRRk50TF9POHhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb8supb/5 e0wjgqdLN+ceDGyJbsqjDOMlr/s3I9lGyXCmlPs2Errn0dqgDGbpAc6Pn07DwfJ4 kBPLLYWHPLKzFzxoqMDVeljAGj/15NPq8gUECe7OTWL2N63JLfNfomt2+shIGMaA gCpvJRpYI42z0HgklDIaxTbTKS7qB762bN2+IQpzPh1V7Fon+7mh6h8kaddqEVub i8IQFNCfSypCRczplTCxT8w0pinIYXuIfXsN3FLyVwPjMe0Fyw9/KjlT16DTJIil 2WgZzVIbezICYeMqsJgg52mVQDvJ1bzcMA7leGkk96MBfodT06Zuh4gUBVba6EwJ mBc05c1jM89/aw== -----END CERTIFICATE-----Generated at Sun Dec 14 13:48:50 2025 by rpki-client