This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft File: DU7hk7MBZltW9ngPIl_UTRRAk68.mft (raw, json) Hash identifier: lDSrgrjiqAi54fxKrwXi+BlBlCzwxtSKFNgFZU4J4ak= Subject key identifier: 63:08:C9:0B:1A:C4:45:04:A6:35:59:A2:D1:F2:6B:F8:2E:2C:D5:C1 Authority key identifier: 0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF Certificate issuer: /CN=0d4ee193b301665b56f6780f225fd44d144093af Certificate serial: 019B0F3758286EB85B54D648332CAE3C537B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft Manifest number: 1776 Signing time: Thu 11 Dec 2025 21:00:43 +0000 Manifest this update: Thu 11 Dec 2025 21:00:43 +0000 Manifest next update: Fri 12 Dec 2025 21:00:43 +0000 Files and hashes: 1: 1YRiu8peow1lTJm9FFHNR8FDAbc.roa (hash: M9tDjK8KKMnpI4O/RkjitSO923bPcK4J9p0X6jE60uA=) 2: DU7hk7MBZltW9ngPIl_UTRRAk68.crl (hash: 0ZWnU2uT/179hjjujG5/2dUUySLM5GV2QiD16deOpcw=) 3: PGW1u6hsibHWgf5RkDB15fW7nFU.roa (hash: 0InCSbIA5SExLZ91M4uEAsM9+kvbm4v2lPuTA9ZO2w0=) 4: Rywj_aQoQHnt260cmm4BjBhDxUY.roa (hash: YR+g76t/hDT4XdE58vT7jt0pb9k9/4GBzS42rk3Jatg=) 5: UeY-6eT8AWic-hKV67W_oibJpb0.roa (hash: P9rAEKkeAqwEaQF6epHGIcD5QsTjObpMNhsoMNWv7oU=) 6: WrHytc5z_RMrlF1ugU748saPCOY.roa (hash: aZHYeaaNVTa6TtaiWMmR/j6toZEkqeQ4kR1tqb6QqNc=) 7: Z0NstpNFGmZvTmitOe-bpzN3pog.roa (hash: vOxHYK5BHjTLsLb9PBk4RNol3oeaceKJ5r4uuQeEoSc=) 8: m6l4SopMeawwf-xaFHTLkByhnNs.roa (hash: S7Ljuk3eaMITMnrAZF6Kgxf8yU/v0CtwtarS6ZzuIMk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:58:28:6e:b8:5b:54:d6:48:33:2c:ae:3c:53:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d4ee193b301665b56f6780f225fd44d144093af Validity Not Before: Dec 11 21:00:43 2025 GMT Not After : Dec 12 21:00:43 2025 GMT Subject: CN=6308c90b1ac44504a63559a2d1f26bf82e2cd5c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:06:78:26:47:48:ea:e8:8c:bf:66:b9:9f:03: 64:eb:c1:6b:06:83:af:ae:bc:32:d8:1b:cf:3a:c3: d8:f7:9a:55:1a:bb:97:d0:b1:60:95:92:db:c5:36: 90:64:0a:d2:a4:89:12:36:89:3d:12:37:5e:de:e3: 96:e3:2a:f8:e2:f5:c8:83:da:98:5c:95:3a:76:80: 6b:2d:a3:74:57:10:8b:62:37:8c:58:1e:57:20:7f: b7:1f:36:a6:4b:9c:8f:86:91:6f:0e:8b:db:f2:56: 31:7a:17:b4:38:31:4b:bd:d5:c7:12:98:2d:1f:46: 92:8a:9a:4f:cc:e7:98:93:99:8f:17:3e:dd:94:af: 18:4a:95:1c:43:9b:3a:5a:aa:a2:24:61:80:d8:b7: 0a:10:2f:40:6a:6e:c7:9d:6f:d2:b2:0f:9b:90:73: 4b:8a:c4:e2:23:eb:74:4f:cb:97:bf:14:ff:35:c8: 30:50:e5:14:9b:0b:ce:56:a7:1c:7a:3a:1c:c6:96: b7:9e:4d:3e:59:5b:90:fd:8c:10:5c:f4:a7:ac:4d: a9:b7:3a:60:f7:74:97:8b:ca:e1:ab:e6:13:0a:06: a3:3d:35:ed:a0:5e:8a:f2:42:4e:c0:9f:0c:79:9d: 70:26:d8:c7:a0:93:5b:f4:b2:49:a9:97:15:49:bd: 07:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:08:C9:0B:1A:C4:45:04:A6:35:59:A2:D1:F2:6B:F8:2E:2C:D5:C1 X509v3 Authority Key Identifier: keyid:0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:f0:c0:1a:57:1c:bf:6c:bd:46:15:5d:dd:8c:bd:66:54:f2: 65:56:91:40:1c:70:07:1a:eb:f9:5e:fa:60:fa:6f:2f:5f:29: b6:e2:16:c9:db:8e:c3:5f:eb:b7:e9:84:46:40:df:04:6d:52: 08:43:90:bc:b2:88:ea:1a:73:b1:0e:39:bf:04:ab:36:db:e3: b2:f8:ef:3a:44:61:4f:e5:65:cf:7c:47:e8:de:9f:b8:7a:42: 1c:52:bd:2c:e3:d7:71:5b:cf:53:5c:f6:b7:c5:da:58:b9:68: 5e:b2:54:4e:80:dc:d9:cf:68:e1:d9:ea:7e:32:ee:7b:ea:e5: a4:0d:8f:86:38:81:bd:cf:f2:6e:a4:8d:d6:88:7c:b7:65:1b: 94:b1:f1:b0:1e:10:00:c9:d5:a4:f0:f7:c4:21:04:b7:e8:8e: 17:f5:11:e8:c9:71:a8:1f:2b:f9:91:a0:4f:0d:d8:01:e2:b1: a6:2a:df:e7:5e:8f:50:9d:bf:d9:bc:e9:fb:e3:4d:f5:df:eb: db:0f:20:c6:8a:5f:76:08:0f:b2:57:0a:a1:43:b7:85:3a:d4: 53:ad:8e:34:f6:51:58:f1:de:7a:7c:d7:bc:73:ba:a1:46:ba: 27:03:e4:97:a7:1b:0a:9a:dc:7e:ac:77:d0:90:67:31:2f:94: 79:ec:87:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN1gobrhbVNZIMyyuPFN7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNGVlMTkzYjMwMTY2NWI1NmY2NzgwZjIyNWZkNDRkMTQ0 MDkzYWYwHhcNMjUxMjExMjEwMDQzWhcNMjUxMjEyMjEwMDQzWjAzMTEwLwYDVQQD Eyg2MzA4YzkwYjFhYzQ0NTA0YTYzNTU5YTJkMWYyNmJmODJlMmNkNWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQZ4JkdI6uiMv2a5nwNk68FrBoOv rrwy2BvPOsPY95pVGruX0LFglZLbxTaQZArSpIkSNok9Ejde3uOW4yr44vXIg9qY XJU6doBrLaN0VxCLYjeMWB5XIH+3HzamS5yPhpFvDovb8lYxehe0ODFLvdXHEpgt H0aSippPzOeYk5mPFz7dlK8YSpUcQ5s6WqqiJGGA2LcKEC9Aam7HnW/Ssg+bkHNL isTiI+t0T8uXvxT/NcgwUOUUmwvOVqccejocxpa3nk0+WVuQ/YwQXPSnrE2ptzpg 93SXi8rhq+YTCgajPTXtoF6K8kJOwJ8MeZ1wJtjHoJNb9LJJqZcVSb0HUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGMIyQsaxEUEpjVZotHya/guLNXBMB8GA1UdIwQY MBaAFA1O4ZOzAWZbVvZ4DyJf1E0UQJOvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFU3aGs3TUJabHRXOW5nUElsX1VUUlJBazY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wOTcxMTEtMzA5OC00Y2Y3LWFjMGYt OWY3ZTBmODYyZjFlLzEvRFU3aGs3TUJabHRXOW5nUElsX1VUUlJBazY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8wOTcxMTEtMzA5OC00Y2Y3LWFjMGYtOWY3ZTBmODYyZjFl LzEvRFU3aGs3TUJabHRXOW5nUElsX1VUUlJBazY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVfDAGlcc v2y9RhVd3Yy9ZlTyZVaRQBxwBxrr+V76YPpvL18ptuIWyduOw1/rt+mERkDfBG1S CEOQvLKI6hpzsQ45vwSrNtvjsvjvOkRhT+Vlz3xH6N6fuHpCHFK9LOPXcVvPU1z2 t8XaWLloXrJUToDc2c9o4dnqfjLue+rlpA2PhjiBvc/ybqSN1oh8t2UblLHxsB4Q AMnVpPD3xCEEt+iOF/UR6MlxqB8r+ZGgTw3YAeKxpirf516PUJ2/2bzp++NN9d/r 2w8gxopfdggPslcKoUO3hTrUU62ONPZRWPHeenzXvHO6oUa6JwPkl6cbCprcfqx3 0JBnMS+UeeyHlA== -----END CERTIFICATE-----Generated at Fri Dec 12 03:42:51 2025 by rpki-client