This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft File: DUt01InEknijADmUrJf9QH1yNuU.mft (raw, json) Hash identifier: bwWF50x5NxTyMBKZt4NtA++LxJ7vH+aBnmnKM6OdbyU= Subject key identifier: 59:F0:8D:85:60:ED:BA:79:C5:E2:0A:9D:0C:84:0B:F2:29:3B:1E:1F Authority key identifier: 0D:4B:74:D4:89:C4:92:78:A3:00:39:94:AC:97:FD:40:7D:72:36:E5 Certificate issuer: /CN=0d4b74d489c49278a3003994ac97fd407d7236e5 Certificate serial: 019B39467D462439C71A662781AB441D3FEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft Manifest number: 178D Signing time: Sat 20 Dec 2025 01:01:19 +0000 Manifest this update: Sat 20 Dec 2025 01:01:19 +0000 Manifest next update: Sun 21 Dec 2025 01:01:19 +0000 Files and hashes: 1: DUt01InEknijADmUrJf9QH1yNuU.crl (hash: 3pQF2UmwLDpjaBYgWUjwSr+CPfTQC9SVhS2mh1ZEbeM=) 2: UfRDoAWDKGsXBQFJZfp7lG85sGU.roa (hash: 9M4lkZntB8nlVH2p7zUMp7EJK070pmxoOnJnaHWBY5g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.crl rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:46:7d:46:24:39:c7:1a:66:27:81:ab:44:1d:3f:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d4b74d489c49278a3003994ac97fd407d7236e5 Validity Not Before: Dec 20 01:01:19 2025 GMT Not After : Dec 21 01:01:19 2025 GMT Subject: CN=59f08d8560edba79c5e20a9d0c840bf2293b1e1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:7c:11:bd:5a:ca:db:2e:a0:22:04:68:5c:95: 37:2e:b0:37:4e:33:53:af:3d:a6:ed:ec:64:bf:89: 90:c5:ca:6d:4c:59:c0:84:40:a5:57:df:89:e8:b1: 43:c4:a5:b8:6d:39:1f:42:99:7d:d7:35:55:bf:b3: c0:68:5c:45:1a:5b:cc:c7:2a:10:e8:4d:5b:31:48: 39:f8:88:70:da:bd:32:2a:fe:51:b7:e8:aa:4d:58: b6:47:97:9f:77:30:36:ee:0b:69:ab:cc:8f:ad:55: 42:49:39:dd:12:1d:72:5f:08:be:cc:01:0a:05:47: ca:4e:59:ca:b4:51:bf:cf:16:ee:d0:c7:e7:76:34: 0f:56:67:86:07:47:5d:90:92:e1:46:dc:2b:33:62: 63:e6:e9:6c:4e:55:60:45:9e:d3:75:f7:c4:3d:7c: f1:62:48:f4:3e:eb:b2:7d:a9:ee:1a:25:f8:dc:ef: 4c:5b:81:b8:4f:ac:c9:0d:d4:b6:23:70:22:dc:5b: f3:65:68:38:53:b7:c3:29:4d:ce:37:57:91:7e:03: d6:e7:a2:40:d7:11:88:f0:ed:6e:d0:a6:51:ce:9a: 19:e9:9c:c7:ca:c6:fd:e1:5c:5a:a9:60:b2:cb:31: 4e:79:ef:53:91:1f:10:7b:6a:a4:e7:7b:df:e4:fc: ef:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:F0:8D:85:60:ED:BA:79:C5:E2:0A:9D:0C:84:0B:F2:29:3B:1E:1F X509v3 Authority Key Identifier: keyid:0D:4B:74:D4:89:C4:92:78:A3:00:39:94:AC:97:FD:40:7D:72:36:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:db:33:8d:a8:e7:b0:af:e3:10:d5:e1:07:f1:56:47:0a:d0: c5:a1:59:5c:7d:8d:68:c7:a2:c2:ba:89:c7:d0:80:c3:7c:24: 87:1e:e1:2b:8e:aa:bd:31:5c:0f:b7:4f:d6:87:ef:18:b7:c7: 39:64:72:35:7a:fc:f3:c9:f7:d9:bc:16:58:b2:08:97:ff:4f: 41:72:96:22:16:4d:01:23:21:ec:d9:4c:c0:91:c5:f7:a6:b6: 37:d5:1d:fe:4f:17:fe:c8:de:f6:77:fa:29:a9:80:2b:1d:5e: 83:02:56:34:cc:fa:20:31:00:bb:41:0b:c8:8b:44:f2:80:65: 1d:d1:50:17:fb:b7:85:5d:5b:d7:5a:d8:c7:cb:78:09:f2:63: 3e:ba:e1:c6:ef:96:7c:20:10:ed:5b:00:b1:b0:4f:54:a6:75: a5:f2:83:97:91:7c:58:99:b2:db:65:94:b6:a0:f5:0c:72:d1: 71:1b:58:9f:f6:48:71:a2:67:38:1b:57:c0:87:bb:be:d7:d1: 6c:7a:10:87:a9:62:4d:76:ea:e3:81:ed:b2:82:f1:f0:b3:78: 10:1f:59:cf:68:de:5d:45:ff:42:56:09:00:7b:00:d2:13:70: 91:11:25:7b:f7:de:71:11:1f:96:dd:22:f5:a9:28:61:bd:71: 8e:f6:5b:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5Rn1GJDnHGmYngatEHT/uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNGI3NGQ0ODljNDkyNzhhMzAwMzk5NGFjOTdmZDQwN2Q3 MjM2ZTUwHhcNMjUxMjIwMDEwMTE5WhcNMjUxMjIxMDEwMTE5WjAzMTEwLwYDVQQD Eyg1OWYwOGQ4NTYwZWRiYTc5YzVlMjBhOWQwYzg0MGJmMjI5M2IxZTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XwRvVrK2y6gIgRoXJU3LrA3TjNT rz2m7exkv4mQxcptTFnAhEClV9+J6LFDxKW4bTkfQpl91zVVv7PAaFxFGlvMxyoQ 6E1bMUg5+Ihw2r0yKv5Rt+iqTVi2R5efdzA27gtpq8yPrVVCSTndEh1yXwi+zAEK BUfKTlnKtFG/zxbu0MfndjQPVmeGB0ddkJLhRtwrM2Jj5ulsTlVgRZ7TdffEPXzx Ykj0PuuyfanuGiX43O9MW4G4T6zJDdS2I3Ai3FvzZWg4U7fDKU3ON1eRfgPW56JA 1xGI8O1u0KZRzpoZ6ZzHysb94VxaqWCyyzFOee9TkR8Qe2qk53vf5PzveQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFnwjYVg7bp5xeIKnQyEC/IpOx4fMB8GA1UdIwQY MBaAFA1LdNSJxJJ4owA5lKyX/UB9cjblMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFV0MDFJbkVrbmlqQURtVXJKZjlRSDF5TnVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9iNjk2MzMtYzAzMS00ZDI1LTllMGUt NjU2NDBmMWMxNzlhLzEvRFV0MDFJbkVrbmlqQURtVXJKZjlRSDF5TnVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9iNjk2MzMtYzAzMS00ZDI1LTllMGUtNjU2NDBmMWMxNzlh LzEvRFV0MDFJbkVrbmlqQURtVXJKZjlRSDF5TnVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOdszjajn sK/jENXhB/FWRwrQxaFZXH2NaMeiwrqJx9CAw3wkhx7hK46qvTFcD7dP1ofvGLfH OWRyNXr888n32bwWWLIIl/9PQXKWIhZNASMh7NlMwJHF96a2N9Ud/k8X/sje9nf6 KamAKx1egwJWNMz6IDEAu0ELyItE8oBlHdFQF/u3hV1b11rYx8t4CfJjPrrhxu+W fCAQ7VsAsbBPVKZ1pfKDl5F8WJmy22WUtqD1DHLRcRtYn/ZIcaJnOBtXwIe7vtfR bHoQh6liTXbq44HtsoLx8LN4EB9Zz2jeXUX/QlYJAHsA0hNwkREle/fecREflt0i 9akoYb1xjvZbpg== -----END CERTIFICATE-----Generated at Sat Dec 20 07:38:54 2025 by rpki-client