This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft File: DKqIQOU7uWW-UZLIW3QDReegZSw.mft (raw, json) Hash identifier: hr4PJdSJL3qcAGENAwkfU1Qw+vjiln1U81+ypUPy42o= Subject key identifier: 04:82:DF:89:6C:B0:14:53:01:C9:5D:70:CF:94:27:04:0D:F4:09:28 Authority key identifier: 0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C Certificate issuer: /CN=0caa8840e53bb965be5192c85b740345e7a0652c Certificate serial: 019B5975A98567AAFA54B7FEDC3F59534195 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft Manifest number: 0D6B Signing time: Fri 26 Dec 2025 07:00:41 +0000 Manifest this update: Fri 26 Dec 2025 07:00:41 +0000 Manifest next update: Sat 27 Dec 2025 07:00:41 +0000 Files and hashes: 1: 6a6m2sY5irDHLsl4ebhsVtwBNoA.roa (hash: CJz/QYXYByZR8HyEy/tvD2Zb/IQMDG9xzZSpgVMTt6I=) 2: DKqIQOU7uWW-UZLIW3QDReegZSw.crl (hash: FP2GXSUcEYeN8+mKxwZpi6sOZDR1v8b3N1zQ+li6NqE=) 3: VBefpoqrDUHQSpoj27BSrozRznM.roa (hash: agBfgG2iYmaXn7ObPl+WmZUGarHOkDC9u5AsUTrfJ94=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:a9:85:67:aa:fa:54:b7:fe:dc:3f:59:53:41:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0caa8840e53bb965be5192c85b740345e7a0652c Validity Not Before: Dec 26 07:00:41 2025 GMT Not After : Dec 27 07:00:41 2025 GMT Subject: CN=0482df896cb0145301c95d70cf9427040df40928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:62:6d:9f:b2:c7:66:32:56:e7:00:2f:ef:43: 1c:f8:ca:e6:7f:62:7b:67:6a:27:50:ad:a6:21:b3: b7:ae:52:a0:8b:68:5a:81:82:a6:19:0e:7f:98:85: ac:f2:8f:81:f0:a1:81:4a:e7:41:61:c6:49:64:ec: 4f:ca:f8:c7:3e:c7:42:a2:5a:42:57:4a:b3:66:c5: 34:a9:7d:e7:39:8a:8d:13:61:61:7b:ac:2f:eb:b2: 3d:4e:2b:31:a6:3a:3b:fc:82:e9:87:71:05:9b:de: 32:aa:3a:11:d3:c9:d7:0b:c4:a7:62:eb:76:bd:50: bb:cb:1f:6c:cd:73:f6:de:0f:0e:ef:91:d1:91:2a: 3d:96:7b:63:82:be:6f:c4:fe:b9:d7:a9:ef:89:ea: 43:ed:23:5a:34:20:60:54:28:1d:d7:48:b1:dc:ee: 75:bb:33:36:23:4f:8f:42:61:9f:1d:f8:cd:59:8d: 8b:76:82:04:9f:fb:7f:86:f0:20:4a:fa:70:b6:91: 91:ed:4f:d1:5f:79:bc:2d:f2:46:dd:b8:40:a5:ba: e4:e2:3f:5f:2e:ff:23:57:1f:49:e3:d9:a4:14:3b: 2e:46:17:fd:af:08:37:61:39:27:7b:57:8f:9c:52: 19:22:ad:ae:cd:a9:2e:dc:2e:6e:12:8c:85:86:3c: 6b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:82:DF:89:6C:B0:14:53:01:C9:5D:70:CF:94:27:04:0D:F4:09:28 X509v3 Authority Key Identifier: keyid:0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:73:7f:20:87:f3:60:2f:03:e2:dd:f5:2d:56:d0:00:62:08: 38:c3:73:4c:9b:c9:ad:45:cd:af:f8:1a:3d:f0:81:21:1b:2a: 5d:46:dd:3b:2e:ea:98:fb:52:0a:d7:51:77:ff:7d:17:48:9e: 16:94:85:c4:cc:90:ea:8f:41:db:dc:75:6a:9b:67:06:6e:fd: 21:2c:76:f7:cd:9e:ee:93:62:1e:d9:04:a7:92:73:09:a4:f2: 86:88:33:f4:26:93:8e:fc:14:6a:01:40:13:39:54:11:0d:b9: 17:0c:dc:6d:8a:90:a2:61:94:4d:24:b9:43:82:97:bb:b1:3c: 48:b9:90:3c:b4:65:cb:17:af:12:aa:e2:41:6b:7b:30:1e:39: 68:fa:fc:b9:99:98:52:5a:aa:4f:c4:ac:a3:91:e0:78:82:4a: 66:80:47:c7:c2:99:4a:e7:81:7e:47:12:91:1e:0f:c2:0f:a2: 2b:38:10:79:12:60:51:68:80:d9:f9:f1:98:1c:4b:91:9b:9d: d1:a4:b6:58:73:fc:da:61:22:00:fe:0c:8c:37:d7:a1:3e:d5: 27:69:cc:59:25:86:12:6e:b4:95:3b:de:e3:0c:13:ad:16:ef: ff:45:a1:8b:7e:b0:ac:e1:74:3d:13:a4:a1:0f:fa:40:30:0c: 3b:a4:3f:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdamFZ6r6VLf+3D9ZU0GVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjYWE4ODQwZTUzYmI5NjViZTUxOTJjODViNzQwMzQ1ZTdh MDY1MmMwHhcNMjUxMjI2MDcwMDQxWhcNMjUxMjI3MDcwMDQxWjAzMTEwLwYDVQQD EygwNDgyZGY4OTZjYjAxNDUzMDFjOTVkNzBjZjk0MjcwNDBkZjQwOTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmJtn7LHZjJW5wAv70Mc+Mrmf2J7 Z2onUK2mIbO3rlKgi2hagYKmGQ5/mIWs8o+B8KGBSudBYcZJZOxPyvjHPsdColpC V0qzZsU0qX3nOYqNE2Fhe6wv67I9Tisxpjo7/ILph3EFm94yqjoR08nXC8SnYut2 vVC7yx9szXP23g8O75HRkSo9lntjgr5vxP6516nviepD7SNaNCBgVCgd10ix3O51 uzM2I0+PQmGfHfjNWY2LdoIEn/t/hvAgSvpwtpGR7U/RX3m8LfJG3bhApbrk4j9f Lv8jVx9J49mkFDsuRhf9rwg3YTkne1ePnFIZIq2uzaku3C5uEoyFhjxr4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFASC34lssBRTAcldcM+UJwQN9AkoMB8GA1UdIwQY MBaAFAyqiEDlO7llvlGSyFt0A0XnoGUsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREtxSVFPVTd1V1ctVVpMSVczUURSZWVnWlN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9jNjdjM2UtNDVjNi00YzgxLTk3Mzgt YzQ0ZGRmZmE2OWFiLzEvREtxSVFPVTd1V1ctVVpMSVczUURSZWVnWlN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9jNjdjM2UtNDVjNi00YzgxLTk3MzgtYzQ0ZGRmZmE2OWFi LzEvREtxSVFPVTd1V1ctVVpMSVczUURSZWVnWlN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt3N/IIfz YC8D4t31LVbQAGIIOMNzTJvJrUXNr/gaPfCBIRsqXUbdOy7qmPtSCtdRd/99F0ie FpSFxMyQ6o9B29x1aptnBm79ISx2982e7pNiHtkEp5JzCaTyhogz9CaTjvwUagFA EzlUEQ25FwzcbYqQomGUTSS5Q4KXu7E8SLmQPLRlyxevEqriQWt7MB45aPr8uZmY UlqqT8Sso5HgeIJKZoBHx8KZSueBfkcSkR4Pwg+iKzgQeRJgUWiA2fnxmBxLkZud 0aS2WHP82mEiAP4MjDfXoT7VJ2nMWSWGEm60lTve4wwTrRbv/0Whi36wrOF0PROk oQ/6QDAMO6Q/Xw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:35 2025 by rpki-client