This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.mft File: dkE2w82_1ftgyv1Kmx1HOjtnJjU.mft (raw, json) Hash identifier: gnbJxruApm1yVLmwVXiGXpUa+ukvRlNuRdJUj77sNSY= Subject key identifier: 65:5D:DC:91:45:C8:44:75:47:2E:8A:3B:93:D8:C8:91:9A:BD:FF:93 Authority key identifier: 76:41:36:C3:CD:BF:D5:FB:60:CA:FD:4A:9B:1D:47:3A:3B:67:26:35 Certificate issuer: /CN=764136c3cdbfd5fb60cafd4a9b1d473a3b672635 Certificate serial: 019B38A208031FBD97AF76724D170CCFA392 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkE2w82_1ftgyv1Kmx1HOjtnJjU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.mft Manifest number: 0B6B Signing time: Fri 19 Dec 2025 22:01:41 +0000 Manifest this update: Fri 19 Dec 2025 22:01:41 +0000 Manifest next update: Sat 20 Dec 2025 22:01:41 +0000 Files and hashes: 1: dkE2w82_1ftgyv1Kmx1HOjtnJjU.crl (hash: rl7SLy9BiJ7rKaAQVoJVdXY5AzF4kxjscpyiJ++M+FQ=) 2: uTA8mSJ_3Pm9uHRtbBQGox8CCms.roa (hash: JKMyKU4R0Hs07ETR6QJe5cFRF5p9HW1pjj1e0SHJl68=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.crl rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.mft rsync://rpki.ripe.net/repository/DEFAULT/dkE2w82_1ftgyv1Kmx1HOjtnJjU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:08:03:1f:bd:97:af:76:72:4d:17:0c:cf:a3:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=764136c3cdbfd5fb60cafd4a9b1d473a3b672635 Validity Not Before: Dec 19 22:01:41 2025 GMT Not After : Dec 20 22:01:41 2025 GMT Subject: CN=655ddc9145c84475472e8a3b93d8c8919abdff93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d8:ed:af:ea:1e:13:5a:73:0f:b4:ed:bb:63: cb:c2:04:1d:cd:61:4f:15:53:d1:81:76:d9:7d:e7: c9:89:ff:68:b0:e1:e4:93:d4:44:ca:9b:40:f0:3b: d6:a0:4a:21:bf:0c:40:26:11:c8:e1:0d:fb:02:29: 09:4f:e4:ff:61:b7:19:87:b8:48:fc:f1:c5:eb:eb: e8:31:46:76:52:ed:b9:9d:3b:4e:b6:f1:c6:85:67: 8b:73:80:b4:58:27:e9:5d:45:0a:12:ba:80:ee:a3: cd:ff:99:9f:90:b3:1a:29:e2:43:3f:59:bc:5e:4c: fd:3e:52:23:7a:b4:26:fb:b3:46:89:c9:cb:89:54: c0:9b:77:1a:85:c7:29:13:7a:81:66:05:bd:64:9a: 7a:d7:64:0d:d3:2a:0e:e5:16:39:8b:b3:50:53:f6: c6:21:e7:1f:9b:74:9c:d2:78:05:ac:e3:c4:b2:0b: b7:90:51:91:b1:c1:1e:ec:f3:b1:b6:7c:cb:b4:ba: 3f:48:9d:59:52:8f:d9:ac:02:5f:0f:f0:a4:b6:26: 9d:ca:88:ff:0b:43:b8:f4:2c:f9:f0:4e:d2:46:5e: 57:cf:93:77:f1:ba:d3:59:5c:d9:59:3d:d3:8f:c7: 2b:3f:4b:6a:e4:e2:c4:18:5d:f2:07:8b:99:df:a0: 52:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:5D:DC:91:45:C8:44:75:47:2E:8A:3B:93:D8:C8:91:9A:BD:FF:93 X509v3 Authority Key Identifier: keyid:76:41:36:C3:CD:BF:D5:FB:60:CA:FD:4A:9B:1D:47:3A:3B:67:26:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkE2w82_1ftgyv1Kmx1HOjtnJjU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5246e6-72c6-4f47-a3a3-e4df5a87d4ed/1/dkE2w82_1ftgyv1Kmx1HOjtnJjU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:bd:45:4c:1d:4a:20:d3:be:53:ab:c7:c3:99:e8:3a:ca:4d: 8b:6c:f1:c1:00:9b:ea:c0:71:cb:46:7b:f9:64:70:2d:42:e5: 9d:6c:a7:9c:0b:78:bd:e2:98:77:ac:4d:21:8d:09:7a:47:99: 5f:5d:25:4a:12:12:3c:8a:c8:f2:16:86:ac:d4:a7:7a:d6:92: 59:fb:e2:e4:16:c9:47:e9:1f:48:00:4f:b8:68:6e:b6:ed:3f: 4f:d5:3a:e8:df:91:1f:43:42:44:71:5d:2f:e8:69:21:ba:e3: af:a7:0d:46:af:2b:48:68:da:98:f3:da:da:cf:46:6f:02:ea: d6:a4:49:06:5f:6f:79:c7:bb:e9:42:70:0a:4b:8f:68:58:d6: 56:51:66:83:14:e7:4e:f0:47:9f:ce:4f:97:df:af:b7:08:e4: ee:47:46:a7:92:05:bf:93:6e:76:61:27:7e:33:fa:bf:e2:fc: b5:65:a5:39:80:33:d4:2f:03:7e:f2:49:02:87:68:05:38:a8: bb:e8:0e:b4:47:0a:33:6d:ab:9e:77:c3:78:e5:ce:29:3c:b3: f3:af:14:bf:80:36:5a:3a:49:76:0b:17:b2:70:c4:a4:44:0b: 56:39:cb:4f:2b:ac:b1:c9:af:a7:c5:4c:f5:7b:a5:87:af:d8: de:fb:89:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oggDH72Xr3ZyTRcMz6OSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NDEzNmMzY2RiZmQ1ZmI2MGNhZmQ0YTliMWQ0NzNhM2I2 NzI2MzUwHhcNMjUxMjE5MjIwMTQxWhcNMjUxMjIwMjIwMTQxWjAzMTEwLwYDVQQD Eyg2NTVkZGM5MTQ1Yzg0NDc1NDcyZThhM2I5M2Q4Yzg5MTlhYmRmZjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutjtr+oeE1pzD7Ttu2PLwgQdzWFP FVPRgXbZfefJif9osOHkk9REyptA8DvWoEohvwxAJhHI4Q37AikJT+T/YbcZh7hI /PHF6+voMUZ2Uu25nTtOtvHGhWeLc4C0WCfpXUUKErqA7qPN/5mfkLMaKeJDP1m8 Xkz9PlIjerQm+7NGicnLiVTAm3cahccpE3qBZgW9ZJp612QN0yoO5RY5i7NQU/bG Iecfm3Sc0ngFrOPEsgu3kFGRscEe7POxtnzLtLo/SJ1ZUo/ZrAJfD/Cktiadyoj/ C0O49Cz58E7SRl5Xz5N38brTWVzZWT3Tj8crP0tq5OLEGF3yB4uZ36BSMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGVd3JFFyER1Ry6KO5PYyJGavf+TMB8GA1UdIwQY MBaAFHZBNsPNv9X7YMr9SpsdRzo7ZyY1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGtFMnc4Ml8xZnRneXYxS214MUhPanRuSmpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My81MjQ2ZTYtNzJjNi00ZjQ3LWEzYTMt ZTRkZjVhODdkNGVkLzEvZGtFMnc4Ml8xZnRneXYxS214MUhPanRuSmpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My81MjQ2ZTYtNzJjNi00ZjQ3LWEzYTMtZTRkZjVhODdkNGVk LzEvZGtFMnc4Ml8xZnRneXYxS214MUhPanRuSmpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALL1FTB1K INO+U6vHw5noOspNi2zxwQCb6sBxy0Z7+WRwLULlnWynnAt4veKYd6xNIY0JekeZ X10lShISPIrI8haGrNSnetaSWfvi5BbJR+kfSABPuGhutu0/T9U66N+RH0NCRHFd L+hpIbrjr6cNRq8rSGjamPPa2s9GbwLq1qRJBl9vece76UJwCkuPaFjWVlFmgxTn TvBHn85Pl9+vtwjk7kdGp5IFv5NudmEnfjP6v+L8tWWlOYAz1C8DfvJJAodoBTio u+gOtEcKM22rnnfDeOXOKTyz868Uv4A2WjpJdgsXsnDEpEQLVjnLTyusscmvp8VM 9Xulh6/Y3vuJSw== -----END CERTIFICATE-----Generated at Sat Dec 20 07:14:56 2025 by rpki-client