This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft File: dxBykg2MmitA6zoEXx8qbjNKRJY.mft (raw, json) Hash identifier: a13UHHZPJeGQcLYrmURWYDrshVXWxiPpGyjySCtGV70= Subject key identifier: 2E:B5:12:89:DC:AF:CB:54:47:48:51:45:14:DE:EC:BF:BA:90:CF:E6 Authority key identifier: 77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96 Certificate issuer: /CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496 Certificate serial: 019AE7854D1957FCA7F96CA419901E6BD1FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft Manifest number: 175E Signing time: Thu 04 Dec 2025 04:01:04 +0000 Manifest this update: Thu 04 Dec 2025 04:01:04 +0000 Manifest next update: Fri 05 Dec 2025 04:01:04 +0000 Files and hashes: 1: YkTwnLLBjio1cr_ngfAfzZs1Hh0.roa (hash: Y9RRPtZapEofyZ5MjGOGJpjlqTcZ/UM1TnoKmtwIB40=) 2: dxBykg2MmitA6zoEXx8qbjNKRJY.crl (hash: Ohgm5SRmdedD9hzzvEx2RcvIEtwxeiBgwBkKgWu+Jt8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 04:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e7:85:4d:19:57:fc:a7:f9:6c:a4:19:90:1e:6b:d1:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=771072920d8c9a2b40eb3a045f1f2a6e334a4496 Validity Not Before: Dec 4 04:01:04 2025 GMT Not After : Dec 5 04:01:04 2025 GMT Subject: CN=2eb51289dcafcb544748514514deecbfba90cfe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:84:4a:07:cd:24:8c:7f:de:fe:b3:bf:02:43: d3:ce:c2:5a:54:c7:10:66:a8:ca:d9:86:15:7d:06: 43:57:01:51:87:8d:ef:00:d3:4d:d9:c1:40:c9:58: 42:08:18:93:11:04:99:9c:d5:a0:65:79:1e:36:04: e2:ae:4e:01:5a:98:49:81:f6:d1:d0:9c:fc:c4:a6: c0:a2:a2:08:96:43:9e:1d:ee:36:d0:cb:37:57:2e: 1a:5e:c0:c4:bb:c9:62:16:26:63:1f:56:f2:70:00: 81:0c:91:48:9b:a0:7c:cf:a2:d2:1e:7e:24:5e:5d: 6a:0e:94:cc:2e:a8:5b:cb:05:a5:40:fc:f7:c7:41: 4f:8c:98:4a:26:85:41:1f:5d:99:cf:fd:48:65:a4: e8:f4:49:e2:79:6b:7d:ce:ae:b9:d5:02:1b:b7:1d: 99:a8:83:92:9b:3a:98:34:00:eb:99:30:aa:8f:5d: f0:e1:8e:ba:fa:3c:e6:36:3f:51:63:0b:7a:c1:cc: 24:dc:16:05:58:e6:dd:35:ef:bb:80:57:6a:bc:66: 7c:ef:6c:2a:2f:cf:43:74:cf:02:d3:84:3a:da:1e: 98:db:ad:ae:b3:fb:77:a9:c9:1e:76:15:0a:40:84: b1:f1:de:6d:0b:1d:b7:5e:3c:13:8e:e1:4f:c0:b9: 60:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:B5:12:89:DC:AF:CB:54:47:48:51:45:14:DE:EC:BF:BA:90:CF:E6 X509v3 Authority Key Identifier: keyid:77:10:72:92:0D:8C:9A:2B:40:EB:3A:04:5F:1F:2A:6E:33:4A:44:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxBykg2MmitA6zoEXx8qbjNKRJY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/9ec134-f04f-4423-8be5-7f5e1759f84e/1/dxBykg2MmitA6zoEXx8qbjNKRJY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:31:dd:3a:c0:03:4e:f8:5c:e6:ca:a1:80:9d:04:f2:63:16: 03:1c:44:82:23:84:cf:e8:b3:79:80:0b:52:de:f0:95:c5:28: f2:fc:fd:3a:c3:1b:05:fe:13:93:9a:1a:2e:ec:3c:3d:20:21: 83:e8:26:39:22:6a:e3:c2:11:59:24:cb:0c:4e:91:aa:83:92: 8d:74:21:ec:51:15:10:a1:24:14:f9:61:a9:ff:19:d6:34:d4: ae:60:1a:ed:b3:6a:41:45:d6:79:cb:70:e5:3c:d6:7c:d0:b4: 9c:fc:b5:fb:ca:a4:3b:66:e5:e0:64:5f:ac:9c:99:cd:e9:b1: ad:88:4c:45:87:fc:26:f6:4d:08:78:2a:ce:fe:1e:a1:ef:f4: 23:27:0b:33:7e:b4:bf:dc:bf:b1:78:13:ec:ba:c5:01:32:f2: 53:5e:9e:d6:fa:f4:bc:a7:1b:45:e0:90:97:f3:27:2c:38:b1: 0f:65:d3:ca:6e:87:e7:ab:8f:74:c7:d8:46:a0:49:05:63:79: 1c:ce:27:72:28:14:6e:a2:db:54:e4:a1:fc:a9:92:a2:78:2a: 40:75:72:f3:58:d7:d2:b1:72:2b:a8:54:95:83:08:ae:83:a9: 94:97:13:95:22:a7:9d:0a:b6:58:03:ee:b5:87:67:8b:93:bd: dd:13:95:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrnhU0ZV/yn+WykGZAea9H/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MTA3MjkyMGQ4YzlhMmI0MGViM2EwNDVmMWYyYTZlMzM0 YTQ0OTYwHhcNMjUxMjA0MDQwMTA0WhcNMjUxMjA1MDQwMTA0WjAzMTEwLwYDVQQD EygyZWI1MTI4OWRjYWZjYjU0NDc0ODUxNDUxNGRlZWNiZmJhOTBjZmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYRKB80kjH/e/rO/AkPTzsJaVMcQ ZqjK2YYVfQZDVwFRh43vANNN2cFAyVhCCBiTEQSZnNWgZXkeNgTirk4BWphJgfbR 0Jz8xKbAoqIIlkOeHe420Ms3Vy4aXsDEu8liFiZjH1bycACBDJFIm6B8z6LSHn4k Xl1qDpTMLqhbywWlQPz3x0FPjJhKJoVBH12Zz/1IZaTo9EnieWt9zq651QIbtx2Z qIOSmzqYNADrmTCqj13w4Y66+jzmNj9RYwt6wcwk3BYFWObdNe+7gFdqvGZ872wq L89DdM8C04Q62h6Y262us/t3qckedhUKQISx8d5tCx23XjwTjuFPwLlgmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC61Eoncr8tUR0hRRRTe7L+6kM/mMB8GA1UdIwQY MBaAFHcQcpINjJorQOs6BF8fKm4zSkSWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHhCeWtnMk1taXRBNnpvRVh4OHFiak5LUkpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC85ZWMxMzQtZjA0Zi00NDIzLThiZTUt N2Y1ZTE3NTlmODRlLzEvZHhCeWtnMk1taXRBNnpvRVh4OHFiak5LUkpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC85ZWMxMzQtZjA0Zi00NDIzLThiZTUtN2Y1ZTE3NTlmODRl LzEvZHhCeWtnMk1taXRBNnpvRVh4OHFiak5LUkpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjTHdOsAD Tvhc5sqhgJ0E8mMWAxxEgiOEz+izeYALUt7wlcUo8vz9OsMbBf4Tk5oaLuw8PSAh g+gmOSJq48IRWSTLDE6RqoOSjXQh7FEVEKEkFPlhqf8Z1jTUrmAa7bNqQUXWectw 5TzWfNC0nPy1+8qkO2bl4GRfrJyZzemxrYhMRYf8JvZNCHgqzv4eoe/0IycLM360 v9y/sXgT7LrFATLyU16e1vr0vKcbReCQl/MnLDixD2XTym6H56uPdMfYRqBJBWN5 HM4ncigUbqLbVOSh/KmSongqQHVy81jX0rFyK6hUlYMIroOplJcTlSKnnQq2WAPu tYdni5O93ROVWg== -----END CERTIFICATE-----Generated at Thu Dec 4 11:24:31 2025 by rpki-client