This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft File: dxvOKaNsveiYrABwfblRQ_hqeSI.mft (raw, json) Hash identifier: CMf1/vhoAKznJPofUf2S42Y/3gwGBz8bo6HmzyohG5c= Subject key identifier: F4:2C:39:09:43:7F:D3:4F:9E:DB:AC:8F:A8:06:CF:A2:AE:F5:D9:C6 Authority key identifier: 77:1B:CE:29:A3:6C:BD:E8:98:AC:00:70:7D:B9:51:43:F8:6A:79:22 Certificate issuer: /CN=771bce29a36cbde898ac00707db95143f86a7922 Certificate serial: 019B1C858C466A9305660516C00C85101EA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft Manifest number: 0F56 Signing time: Sun 14 Dec 2025 11:01:12 +0000 Manifest this update: Sun 14 Dec 2025 11:01:12 +0000 Manifest next update: Mon 15 Dec 2025 11:01:12 +0000 Files and hashes: 1: Fu0lK4Mcztssv3LosrHSeGC9v5I.roa (hash: u/9ObfX95800lVIP5yQNITdaQtRd2zqHQxCUamlQIjU=) 2: dxvOKaNsveiYrABwfblRQ_hqeSI.crl (hash: H0t9iMfJcJo03TpgyZp+1ldK//oRFid/VM5mFQafgOo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.crl rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:85:8c:46:6a:93:05:66:05:16:c0:0c:85:10:1e:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=771bce29a36cbde898ac00707db95143f86a7922 Validity Not Before: Dec 14 11:01:12 2025 GMT Not After : Dec 15 11:01:12 2025 GMT Subject: CN=f42c3909437fd34f9edbac8fa806cfa2aef5d9c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9d:75:38:35:11:a9:d0:76:9b:69:a0:82:5e: 42:8f:dc:94:70:38:af:bc:c3:c0:6c:1a:8a:a5:80: 43:4c:59:72:f0:68:0d:6b:57:35:f7:5f:95:d0:a4: 6e:de:ba:e2:30:d0:e7:27:6f:06:56:ee:9b:ab:dd: 67:ba:81:4f:22:7d:81:b4:55:9d:e6:a9:60:5f:65: 77:ed:d1:88:e8:73:ca:43:73:4e:b6:21:f4:a2:04: 7e:37:20:a0:18:ea:39:b3:5d:f2:a4:74:83:53:6a: 0d:28:8c:ea:fb:0a:3e:61:ec:5b:15:c1:e1:d4:e8: 16:03:7f:9b:4e:6f:32:b6:4f:28:e7:90:ab:b4:75: c9:33:96:73:28:e0:75:ab:fa:de:3d:3a:43:c3:fa: f5:ea:c3:0a:25:4f:f5:86:bb:e9:35:2e:01:d1:d6: 1d:ba:3b:51:20:de:7f:55:fd:c0:db:94:8f:95:fa: e7:23:7f:de:36:8a:78:8c:0b:bd:09:1e:51:c3:52: 54:8a:18:80:c3:2b:2b:4c:05:cc:4c:f3:e0:97:5a: b0:52:bf:66:74:3d:25:bd:9a:37:cf:9b:c0:55:f2: a9:b0:b3:63:f2:25:cd:1a:fc:9a:7b:21:fd:b6:14: 4d:13:47:54:c5:45:e0:43:55:14:7f:57:e1:6f:b5: 46:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:2C:39:09:43:7F:D3:4F:9E:DB:AC:8F:A8:06:CF:A2:AE:F5:D9:C6 X509v3 Authority Key Identifier: keyid:77:1B:CE:29:A3:6C:BD:E8:98:AC:00:70:7D:B9:51:43:F8:6A:79:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:d2:4c:f7:02:fd:a6:e2:78:1a:67:3e:ab:1c:0d:8a:84:d1: 75:db:b2:97:a5:4d:e3:f0:d7:4e:80:b0:76:31:05:55:0f:2c: 9f:c2:ba:10:02:2f:c8:65:69:55:bf:3b:5c:b7:75:ea:21:c6: 5b:39:16:aa:25:4d:6b:0b:82:35:f6:71:49:2b:ef:56:18:75: e2:89:13:25:11:ad:55:9e:f6:16:bd:9c:0f:be:c1:d9:e8:ed: a2:a2:de:fd:c7:c9:22:66:ec:a5:b1:6f:08:a6:45:58:3f:fd: 07:5b:60:8e:f7:63:48:d4:9b:1a:17:93:12:eb:12:17:17:2c: d7:d0:91:40:db:f8:bd:7e:e5:23:b0:9c:c8:31:62:4c:e1:60: 85:54:67:b5:21:f3:53:15:c7:b2:b2:b1:07:a7:e4:74:1a:39: 5d:4e:02:26:5a:f9:cd:c1:48:bf:fe:25:ae:95:00:06:f6:29: 30:fb:5d:9f:af:67:0d:77:a8:5c:48:23:86:ed:87:95:29:e6: 9f:c8:3c:54:ba:1b:aa:ac:15:7c:dd:6c:b2:8c:fc:e1:dc:eb: 8b:f0:ef:ad:b8:1f:73:67:3f:ea:9b:7b:56:1d:43:ee:13:c3: 86:c4:b2:9d:24:91:87:85:22:21:bf:79:3b:49:f7:72:93:cd: 4a:d7:7d:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZschYxGapMFZgUWwAyFEB6lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MWJjZTI5YTM2Y2JkZTg5OGFjMDA3MDdkYjk1MTQzZjg2 YTc5MjIwHhcNMjUxMjE0MTEwMTEyWhcNMjUxMjE1MTEwMTEyWjAzMTEwLwYDVQQD EyhmNDJjMzkwOTQzN2ZkMzRmOWVkYmFjOGZhODA2Y2ZhMmFlZjVkOWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJ11ODURqdB2m2mggl5Cj9yUcDiv vMPAbBqKpYBDTFly8GgNa1c191+V0KRu3rriMNDnJ28GVu6bq91nuoFPIn2BtFWd 5qlgX2V37dGI6HPKQ3NOtiH0ogR+NyCgGOo5s13ypHSDU2oNKIzq+wo+YexbFcHh 1OgWA3+bTm8ytk8o55CrtHXJM5ZzKOB1q/rePTpDw/r16sMKJU/1hrvpNS4B0dYd ujtRIN5/Vf3A25SPlfrnI3/eNop4jAu9CR5Rw1JUihiAwysrTAXMTPPgl1qwUr9m dD0lvZo3z5vAVfKpsLNj8iXNGvyaeyH9thRNE0dUxUXgQ1UUf1fhb7VG+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPQsOQlDf9NPntusj6gGz6Ku9dnGMB8GA1UdIwQY MBaAFHcbzimjbL3omKwAcH25UUP4ankiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHh2T0thTnN2ZWlZckFCd2ZibFJRX2hxZVNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9kZDZlYTctYmRiOC00N2MzLTk2NGYt MmFmOTE3ODM4MmZiLzEvZHh2T0thTnN2ZWlZckFCd2ZibFJRX2hxZVNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9kZDZlYTctYmRiOC00N2MzLTk2NGYtMmFmOTE3ODM4MmZi LzEvZHh2T0thTnN2ZWlZckFCd2ZibFJRX2hxZVNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB9JM9wL9 puJ4Gmc+qxwNioTRdduyl6VN4/DXToCwdjEFVQ8sn8K6EAIvyGVpVb87XLd16iHG WzkWqiVNawuCNfZxSSvvVhh14okTJRGtVZ72Fr2cD77B2ejtoqLe/cfJImbspbFv CKZFWD/9B1tgjvdjSNSbGheTEusSFxcs19CRQNv4vX7lI7CcyDFiTOFghVRntSHz UxXHsrKxB6fkdBo5XU4CJlr5zcFIv/4lrpUABvYpMPtdn69nDXeoXEgjhu2HlSnm n8g8VLobqqwVfN1ssoz84dzri/Dvrbgfc2c/6pt7Vh1D7hPDhsSynSSRh4UiIb95 O0n3cpPNStd9tw== -----END CERTIFICATE-----Generated at Sun Dec 14 12:27:02 2025 by rpki-client