This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft File: dixgr01zclhFzq8Le1hed1cGaWU.mft (raw, json) Hash identifier: fuM3HcezhSSbg7givv/qC3kL0Fba+rHLEtkWcwjn1b4= Subject key identifier: 34:D1:BD:FE:EC:C9:C3:91:6A:26:58:31:B0:CA:FB:C6:5E:2A:82:C5 Authority key identifier: 76:2C:60:AF:4D:73:72:58:45:CE:AF:0B:7B:58:5E:77:57:06:69:65 Certificate issuer: /CN=762c60af4d73725845ceaf0b7b585e7757066965 Certificate serial: 019B0F6E64DE42A0CE9D62AE955F8DF756D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft Manifest number: 1770 Signing time: Thu 11 Dec 2025 22:00:51 +0000 Manifest this update: Thu 11 Dec 2025 22:00:51 +0000 Manifest next update: Fri 12 Dec 2025 22:00:51 +0000 Files and hashes: 1: dixgr01zclhFzq8Le1hed1cGaWU.crl (hash: b/KE+UL1Pym0KbaZGJ9qyl9q5rAQKq3o1uFX7J22lr0=) 2: dldB0wg3sOKFlgEWz6LNxn-RMtU.roa (hash: A/mZd0VT9lvf5tIKF1PGUACWDIq15nwU2xObWbHt5Q0=) 3: fGaPq4YA6maqB6noR_KA3CoM-Rc.roa (hash: INJZ5oK620NZUOOr9nOKGmnHUYB9fAHODj6emd7n2KE=) 4: fVcVxVJ7p62rticmypgxz96e8JQ.roa (hash: 0G0V21w8vjbyE9Yv5tuFynWy+aBCDfEtQfkWhN6p7OY=) 5: muQqhNcFqaAhliY1Xe6uhTF-w60.roa (hash: 5ol3Dy/oyYKpD5jnMaSN9uea7FQti15q53TRbPs48Kg=) 6: z1dSMhrf6i9m8VW8FnaeYoIuN2Y.roa (hash: s3koYJ0MAG3XeNvRc7EhqxMmZm+M8QlbPEJh3Wi8tyU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.crl rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:64:de:42:a0:ce:9d:62:ae:95:5f:8d:f7:56:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=762c60af4d73725845ceaf0b7b585e7757066965 Validity Not Before: Dec 11 22:00:51 2025 GMT Not After : Dec 12 22:00:51 2025 GMT Subject: CN=34d1bdfeecc9c3916a265831b0cafbc65e2a82c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ff:81:e2:a4:83:c9:e2:9c:b8:ac:94:dd:5f: f2:6f:de:28:58:51:02:f2:d2:81:7b:cf:dc:55:0e: 79:1f:73:54:a6:bd:32:78:47:14:81:35:11:be:8e: 4d:29:7a:80:5e:44:0f:d7:a3:85:ea:b7:15:f9:03: be:e4:9e:79:4d:1e:ec:4a:be:6f:53:3b:9e:5a:f7: 99:bc:ea:15:4a:2b:9e:2f:ee:a6:8e:45:49:de:34: 1c:e3:c7:44:29:45:18:e5:fe:65:1a:2b:66:a9:c8: 8a:4d:4b:7d:cb:2c:b7:b0:eb:3f:c4:57:b6:9f:f8: b7:8b:5b:74:88:89:e8:45:8e:ad:af:4f:23:0e:3f: ad:ef:d2:01:17:c6:f4:8f:59:8c:e7:e1:7c:06:c7: 8d:01:11:43:8a:9d:78:4f:6b:c4:ed:f9:fc:48:0e: 82:d0:23:74:3f:0d:02:81:9b:51:71:23:ce:ad:9f: 86:ed:c4:87:74:f9:a5:fa:52:a8:8c:ee:ae:e0:1f: 27:51:2a:2e:27:01:29:1a:6d:49:5f:bd:80:7a:fd: 0f:9f:0b:e7:63:2a:0e:93:4c:5e:4b:fb:5d:18:11: e1:0a:0e:9e:8a:68:8a:0d:5c:eb:5b:09:ab:5b:99: 21:91:ee:2f:6b:06:f6:c1:a9:ce:df:46:55:ae:c4: 7d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D1:BD:FE:EC:C9:C3:91:6A:26:58:31:B0:CA:FB:C6:5E:2A:82:C5 X509v3 Authority Key Identifier: keyid:76:2C:60:AF:4D:73:72:58:45:CE:AF:0B:7B:58:5E:77:57:06:69:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dixgr01zclhFzq8Le1hed1cGaWU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e6a02e-0146-44a6-9dfc-d4209fc7f3c9/1/dixgr01zclhFzq8Le1hed1cGaWU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:5c:b9:c1:1a:c6:02:d6:01:3d:06:fa:93:ca:f6:75:fd:0b: 69:e2:8d:94:53:e7:7b:c9:7e:1a:1e:56:dd:52:55:ee:0e:91: 68:a2:82:a1:94:56:08:9c:ca:34:e7:6d:b2:45:ed:59:29:3e: 34:40:d1:cc:12:2f:a5:57:51:e9:fc:67:15:24:bd:c3:5f:d5: 8d:d9:8b:08:7a:8b:92:f8:9a:0e:5c:07:7b:d6:c8:7c:1d:17: cd:e2:d3:79:0c:ac:00:68:24:38:fe:05:a0:01:d6:73:f9:9e: 96:af:e1:fa:9c:f9:1d:5e:73:94:8f:ce:df:64:e3:61:69:7f: db:40:17:12:89:e5:c4:97:56:00:b9:76:41:40:59:d4:de:3b: 79:b6:af:2b:4a:94:2f:7d:fa:0f:8e:d0:b8:f2:6f:e9:79:33: d7:bc:2f:dd:b2:26:4e:7f:00:62:e1:e4:e7:cc:2b:8e:68:5f: b0:d6:b1:c6:76:61:98:68:af:3b:0a:7d:92:1a:12:91:3b:48: 0e:ae:15:ec:da:a3:78:01:ee:01:a1:bb:02:1f:f1:cd:ee:38: 6f:9f:3c:39:c5:f5:a0:06:11:9c:d0:b3:ff:61:e3:f0:92:02: 16:2a:10:d2:db:cb:12:9d:95:d4:dd:a8:6f:85:49:6c:99:67: 0a:e8:35:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbmTeQqDOnWKulV+N91bWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2MmM2MGFmNGQ3MzcyNTg0NWNlYWYwYjdiNTg1ZTc3NTcw NjY5NjUwHhcNMjUxMjExMjIwMDUxWhcNMjUxMjEyMjIwMDUxWjAzMTEwLwYDVQQD EygzNGQxYmRmZWVjYzljMzkxNmEyNjU4MzFiMGNhZmJjNjVlMmE4MmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsf+B4qSDyeKcuKyU3V/yb94oWFEC 8tKBe8/cVQ55H3NUpr0yeEcUgTURvo5NKXqAXkQP16OF6rcV+QO+5J55TR7sSr5v UzueWveZvOoVSiueL+6mjkVJ3jQc48dEKUUY5f5lGitmqciKTUt9yyy3sOs/xFe2 n/i3i1t0iInoRY6tr08jDj+t79IBF8b0j1mM5+F8BseNARFDip14T2vE7fn8SA6C 0CN0Pw0CgZtRcSPOrZ+G7cSHdPml+lKojO6u4B8nUSouJwEpGm1JX72Aev0Pnwvn YyoOk0xeS/tdGBHhCg6eimiKDVzrWwmrW5khke4vawb2wanO30ZVrsR9cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDTRvf7sycORaiZYMbDK+8ZeKoLFMB8GA1UdIwQY MBaAFHYsYK9Nc3JYRc6vC3tYXndXBmllMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGl4Z3IwMXpjbGhGenE4TGUxaGVkMWNHYVdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9lNmEwMmUtMDE0Ni00NGE2LTlkZmMt ZDQyMDlmYzdmM2M5LzEvZGl4Z3IwMXpjbGhGenE4TGUxaGVkMWNHYVdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9lNmEwMmUtMDE0Ni00NGE2LTlkZmMtZDQyMDlmYzdmM2M5 LzEvZGl4Z3IwMXpjbGhGenE4TGUxaGVkMWNHYVdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn1y5wRrG AtYBPQb6k8r2df0LaeKNlFPne8l+Gh5W3VJV7g6RaKKCoZRWCJzKNOdtskXtWSk+ NEDRzBIvpVdR6fxnFSS9w1/VjdmLCHqLkviaDlwHe9bIfB0XzeLTeQysAGgkOP4F oAHWc/melq/h+pz5HV5zlI/O32TjYWl/20AXEonlxJdWALl2QUBZ1N47ebavK0qU L336D47QuPJv6Xkz17wv3bImTn8AYuHk58wrjmhfsNaxxnZhmGivOwp9khoSkTtI Dq4V7NqjeAHuAaG7Ah/xze44b588OcX1oAYRnNCz/2Hj8JICFioQ0tvLEp2V1N2o b4VJbJlnCug1GA== -----END CERTIFICATE-----Generated at Fri Dec 12 04:02:08 2025 by rpki-client