This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft File: dkkoqXvpVTdwE9OCxilA6VDdISs.mft (raw, json) Hash identifier: RTmaRWXv/zUbpOSOdCL0sYqUjRXyJFTH+Byc9u0MFPA= Subject key identifier: F3:2B:E9:B3:74:BC:98:9E:AE:46:FA:9C:82:68:F2:6E:F7:D7:30:54 Authority key identifier: 76:49:28:A9:7B:E9:55:37:70:13:D3:82:C6:29:40:E9:50:DD:21:2B Certificate issuer: /CN=764928a97be955377013d382c62940e950dd212b Certificate serial: 019B0F6ED31ABE9B7A03F0A92FE0218DDB8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft Manifest number: 124C Signing time: Thu 11 Dec 2025 22:01:19 +0000 Manifest this update: Thu 11 Dec 2025 22:01:19 +0000 Manifest next update: Fri 12 Dec 2025 22:01:19 +0000 Files and hashes: 1: Boq3yDWVANB56Y7DdPt7_dRYcLU.roa (hash: BStaHVeGVGavPOImRXWb924Lp/RocgyKTH8C5s1+NHU=) 2: FcY_QKqq9c1xfH6rECvdKY1Kcu8.roa (hash: Ju8mYMjl2LUkVKbzqtiMt1rTH2nwPvl1R7kMAYH3RPc=) 3: IeAOnvbZbd0JxF7ran2IKsJXZmY.roa (hash: a22ZpV1PraD9QyqLIF4t6hPyMcIcLe+GxaE9NUf90hg=) 4: bHETVGvggsNe0a6WvXBELNSVwc4.roa (hash: ghxBEvOC//7xSO8+ytfjs+nd2Bn+dpSbYc1UKClOMyw=) 5: dkkoqXvpVTdwE9OCxilA6VDdISs.crl (hash: 9dNWKGZd+IBlCLBzr+L9gWoy0U0LVNk3ZfDbREcE6z8=) 6: qJx6x_1Si80i7zgxLEJabwqPPdM.roa (hash: VSNbxo3HViYCFTqzC6xV6bqWlabz9RKcmoeLCtu/aVM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.crl rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:d3:1a:be:9b:7a:03:f0:a9:2f:e0:21:8d:db:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=764928a97be955377013d382c62940e950dd212b Validity Not Before: Dec 11 22:01:19 2025 GMT Not After : Dec 12 22:01:19 2025 GMT Subject: CN=f32be9b374bc989eae46fa9c8268f26ef7d73054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:45:f5:97:e5:49:24:b9:3a:58:25:54:b4:61: c5:16:97:bc:2a:0a:8e:15:26:60:4c:39:e5:25:97: 1e:16:5b:5c:bc:30:b9:ab:9c:52:af:a3:e4:6e:20: 90:20:ed:67:69:3f:f0:77:c5:20:64:9f:db:5e:b0: a7:32:a3:f1:2f:ac:d8:d3:e2:60:9c:32:81:66:5c: db:87:35:8b:a7:cb:14:67:00:ee:73:cc:03:8f:fe: 58:6c:be:fa:72:eb:70:5e:58:9e:1a:b8:65:24:bf: d8:0a:77:1f:02:73:1d:2f:94:1b:2e:ab:aa:90:28: 68:be:91:3b:0f:e8:5b:dd:13:af:25:e8:9c:1e:58: 22:66:f0:c0:a3:8d:3e:3c:2b:d9:78:8f:8b:01:8d: 62:75:57:da:b2:ee:4d:d2:71:d7:a5:b4:fa:d3:d3: e1:f9:22:80:96:78:2a:da:76:e7:82:54:66:9b:2c: 1c:09:df:4c:45:78:19:ca:30:b4:84:78:84:b9:15: 66:6c:8d:3e:ea:58:e1:43:13:7b:79:a5:ca:ba:6d: be:66:4d:94:95:ac:93:ee:f0:ff:99:51:dc:f9:3e: b7:b6:c6:5a:7e:9b:aa:d5:1b:e7:c5:87:85:1e:35: df:2d:ce:70:8d:5b:8d:4f:78:1b:7d:9e:5a:2d:4b: 6c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:2B:E9:B3:74:BC:98:9E:AE:46:FA:9C:82:68:F2:6E:F7:D7:30:54 X509v3 Authority Key Identifier: keyid:76:49:28:A9:7B:E9:55:37:70:13:D3:82:C6:29:40:E9:50:DD:21:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:3f:3f:7f:cf:80:b3:f2:af:c7:52:60:93:39:fe:1c:4d:57: d1:11:6f:d9:50:f4:5b:ce:83:9a:a6:9c:c9:fb:79:62:fe:57: 38:1f:11:3b:ec:b6:08:97:a5:f2:4b:43:eb:f4:14:2c:f1:e1: 37:09:24:09:80:dc:34:e6:f0:31:b1:25:56:87:30:6d:a9:0a: 4c:08:32:93:c0:23:27:10:23:9a:5d:2e:17:4a:b6:33:bb:ef: f9:55:38:5d:8e:25:2f:2d:5e:a6:23:6c:98:0a:d3:9a:19:21: 0b:29:1a:a7:14:19:af:35:3e:fd:2b:48:44:7f:62:fc:36:22: 9f:05:17:7b:bc:de:ac:b6:42:79:eb:23:bd:93:09:17:04:c4: af:f1:b1:cd:64:64:fc:cc:e4:80:f0:0a:7f:d0:01:55:c2:3e: c1:28:a1:d8:b2:eb:e4:a5:56:1d:6a:92:51:eb:cc:fa:b3:37: 77:11:49:a2:12:0b:e3:70:3b:ed:15:13:c1:d4:50:18:36:f3: e9:3a:dc:82:c4:88:31:03:21:7c:ca:c3:cf:9c:90:f9:8c:7a: e9:6a:96:9b:9b:cd:4c:7f:5c:c4:2f:40:7d:9d:4d:0e:7a:4d: 9a:4e:a2:78:6e:d4:e9:77:d3:a6:2f:a0:e1:d0:f4:a9:76:69: ce:33:fe:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbtMavpt6A/CpL+AhjduKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NDkyOGE5N2JlOTU1Mzc3MDEzZDM4MmM2Mjk0MGU5NTBk ZDIxMmIwHhcNMjUxMjExMjIwMTE5WhcNMjUxMjEyMjIwMTE5WjAzMTEwLwYDVQQD EyhmMzJiZTliMzc0YmM5ODllYWU0NmZhOWM4MjY4ZjI2ZWY3ZDczMDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskX1l+VJJLk6WCVUtGHFFpe8KgqO FSZgTDnlJZceFltcvDC5q5xSr6PkbiCQIO1naT/wd8UgZJ/bXrCnMqPxL6zY0+Jg nDKBZlzbhzWLp8sUZwDuc8wDj/5YbL76cutwXlieGrhlJL/YCncfAnMdL5QbLquq kChovpE7D+hb3ROvJeicHlgiZvDAo40+PCvZeI+LAY1idVfasu5N0nHXpbT609Ph +SKAlngq2nbnglRmmywcCd9MRXgZyjC0hHiEuRVmbI0+6ljhQxN7eaXKum2+Zk2U layT7vD/mVHc+T63tsZafpuq1RvnxYeFHjXfLc5wjVuNT3gbfZ5aLUtsvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPMr6bN0vJierkb6nIJo8m731zBUMB8GA1UdIwQY MBaAFHZJKKl76VU3cBPTgsYpQOlQ3SErMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGtrb3FYdnBWVGR3RTlPQ3hpbEE2VkRkSVNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My85NTM2ZjUtZjU2Ni00YzgwLWE3ZDkt YmMxNTIyNzg5ZDNiLzEvZGtrb3FYdnBWVGR3RTlPQ3hpbEE2VkRkSVNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My85NTM2ZjUtZjU2Ni00YzgwLWE3ZDktYmMxNTIyNzg5ZDNi LzEvZGtrb3FYdnBWVGR3RTlPQ3hpbEE2VkRkSVNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIz8/f8+A s/Kvx1Jgkzn+HE1X0RFv2VD0W86Dmqacyft5Yv5XOB8RO+y2CJel8ktD6/QULPHh NwkkCYDcNObwMbElVocwbakKTAgyk8AjJxAjml0uF0q2M7vv+VU4XY4lLy1epiNs mArTmhkhCykapxQZrzU+/StIRH9i/DYinwUXe7zerLZCeesjvZMJFwTEr/GxzWRk /MzkgPAKf9ABVcI+wSih2LLr5KVWHWqSUevM+rM3dxFJohIL43A77RUTwdRQGDbz 6TrcgsSIMQMhfMrDz5yQ+Yx66WqWm5vNTH9cxC9AfZ1NDnpNmk6ieG7U6XfTpi+g 4dD0qXZpzjP+yQ== -----END CERTIFICATE-----Generated at Fri Dec 12 02:39:01 2025 by rpki-client