This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft File: DXQT3PU3N0pw2qMf2amf0psDMjk.mft (raw, json) Hash identifier: BOpOUdrMTvaD8vMWCygmAJccwRQrrqTthO2Py7e+6fE= Subject key identifier: 14:B1:E5:90:EC:C5:46:81:BC:DA:A1:FE:77:49:D1:BD:32:1B:18:93 Authority key identifier: 0D:74:13:DC:F5:37:37:4A:70:DA:A3:1F:D9:A9:9F:D2:9B:03:32:39 Certificate issuer: /CN=0d7413dcf537374a70daa31fd9a99fd29b033239 Certificate serial: 019B26D281203433FD4095797408EA4134CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft Manifest number: 1542 Signing time: Tue 16 Dec 2025 11:01:28 +0000 Manifest this update: Tue 16 Dec 2025 11:01:28 +0000 Manifest next update: Wed 17 Dec 2025 11:01:28 +0000 Files and hashes: 1: DXQT3PU3N0pw2qMf2amf0psDMjk.crl (hash: W9c69Ms32nS/0mk3KUz8KAG4/E+EdwmpvATDfuHE9dI=) 2: ka4zet-SkUrSnEvI5_4fHR-JIQI.roa (hash: EBw/ap+q2JTBNlcLQGiKoKAynchkYNGQi71a58xmflM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.crl rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 11:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:d2:81:20:34:33:fd:40:95:79:74:08:ea:41:34:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d7413dcf537374a70daa31fd9a99fd29b033239 Validity Not Before: Dec 16 11:01:28 2025 GMT Not After : Dec 17 11:01:28 2025 GMT Subject: CN=14b1e590ecc54681bcdaa1fe7749d1bd321b1893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c8:93:2a:a9:13:16:b4:00:08:9c:66:b3:78: 52:bf:51:f3:60:3c:29:d6:aa:0a:03:90:e0:5b:3d: 70:77:d0:c7:b6:db:27:f7:13:62:a1:a0:cf:c5:bf: 03:4e:b4:e4:64:f4:8c:49:e1:79:2f:9a:64:29:7c: 7f:29:a9:c5:5a:a0:24:c9:97:f3:6c:f3:95:74:c7: 9d:7a:91:4a:45:b2:6e:b7:6e:b5:61:c7:d5:01:6f: c2:35:88:6a:50:93:c5:90:bc:81:25:30:82:1a:b1: 40:62:98:bd:88:ac:8a:2c:6c:ca:29:96:cd:79:df: b5:0f:2b:06:6f:72:e4:b9:e4:50:b0:88:5a:ad:47: f6:27:e0:eb:59:b6:32:bc:e4:54:54:bd:7a:b0:de: 2a:f6:a3:77:f6:10:66:9d:55:52:19:e2:de:16:7d: 80:45:b7:6e:34:56:d8:a2:85:e5:84:8f:80:89:89: 7b:f6:fa:4e:f3:b0:35:df:bb:77:da:34:0a:0e:f8: bd:21:39:07:e9:15:bf:4c:76:12:88:85:91:ee:09: b1:85:2e:76:2a:02:4a:c4:0a:51:cb:5e:67:63:fc: 1a:30:69:8a:5c:11:c5:f5:87:1b:31:51:18:98:9d: ae:72:3a:2e:e8:3c:00:b7:8d:25:11:d4:d0:af:3b: 7b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:B1:E5:90:EC:C5:46:81:BC:DA:A1:FE:77:49:D1:BD:32:1B:18:93 X509v3 Authority Key Identifier: keyid:0D:74:13:DC:F5:37:37:4A:70:DA:A3:1F:D9:A9:9F:D2:9B:03:32:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:a7:fa:51:15:55:f0:65:5c:31:f6:0e:ba:5d:a1:d9:11:1b: a5:6d:92:09:cd:18:51:e4:d2:77:dd:c6:4d:c4:0c:ea:f6:da: 8e:1e:c2:b6:a1:6b:c9:39:15:c8:e6:6c:48:2f:65:ee:39:f2: 73:f3:fa:de:3a:88:9e:9c:4e:6b:f6:2b:a2:69:9a:d1:45:39: c4:34:b1:1f:a7:d2:9b:6e:59:22:45:52:a3:dd:b7:27:91:c3: eb:ee:1d:9a:27:de:2b:22:12:be:a4:8a:b6:5e:71:df:74:22: 9e:fd:e3:20:ba:bc:5b:05:99:90:8d:d9:73:a8:d5:8f:da:7d: 6b:3f:53:d6:b8:05:9c:ab:ae:2a:72:0a:d9:45:fa:98:9a:9c: 18:e5:89:fd:ba:bc:8d:85:5a:52:1a:e0:6b:a2:e6:82:1b:1c: 74:89:3c:ec:76:45:68:1f:80:cb:1b:a6:e9:77:c3:9e:48:ab: 65:b4:36:e1:27:e6:0b:a8:26:ad:69:22:0b:db:48:a4:74:21: ed:8d:6e:e9:e4:77:ad:1c:4b:fe:b0:9d:76:1d:89:63:55:36: 2c:7b:43:01:d7:95:27:a7:27:6e:20:7e:73:4f:ca:5f:54:e5: 50:05:dc:c2:ea:a6:a5:ee:9b:7e:1e:79:30:35:a4:a5:6c:e1: a1:60:75:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsm0oEgNDP9QJV5dAjqQTTNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzQxM2RjZjUzNzM3NGE3MGRhYTMxZmQ5YTk5ZmQyOWIw MzMyMzkwHhcNMjUxMjE2MTEwMTI4WhcNMjUxMjE3MTEwMTI4WjAzMTEwLwYDVQQD EygxNGIxZTU5MGVjYzU0NjgxYmNkYWExZmU3NzQ5ZDFiZDMyMWIxODkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMiTKqkTFrQACJxms3hSv1HzYDwp 1qoKA5DgWz1wd9DHttsn9xNioaDPxb8DTrTkZPSMSeF5L5pkKXx/KanFWqAkyZfz bPOVdMedepFKRbJut261YcfVAW/CNYhqUJPFkLyBJTCCGrFAYpi9iKyKLGzKKZbN ed+1DysGb3LkueRQsIharUf2J+DrWbYyvORUVL16sN4q9qN39hBmnVVSGeLeFn2A RbduNFbYooXlhI+AiYl79vpO87A137t32jQKDvi9ITkH6RW/THYSiIWR7gmxhS52 KgJKxApRy15nY/waMGmKXBHF9YcbMVEYmJ2ucjou6DwAt40lEdTQrzt7+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBSx5ZDsxUaBvNqh/ndJ0b0yGxiTMB8GA1UdIwQY MBaAFA10E9z1NzdKcNqjH9mpn9KbAzI5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhRVDNQVTNOMHB3MnFNZjJhbWYwcHNETWprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9lMzI2YjktNzk1Zi00YTBiLTllZmQt ZTY5YmUzOTViMGY3LzEvRFhRVDNQVTNOMHB3MnFNZjJhbWYwcHNETWprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9lMzI2YjktNzk1Zi00YTBiLTllZmQtZTY5YmUzOTViMGY3 LzEvRFhRVDNQVTNOMHB3MnFNZjJhbWYwcHNETWprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEKf6URVV 8GVcMfYOul2h2REbpW2SCc0YUeTSd93GTcQM6vbajh7CtqFryTkVyOZsSC9l7jny c/P63jqInpxOa/Yromma0UU5xDSxH6fSm25ZIkVSo923J5HD6+4dmifeKyISvqSK tl5x33Qinv3jILq8WwWZkI3Zc6jVj9p9az9T1rgFnKuuKnIK2UX6mJqcGOWJ/bq8 jYVaUhrga6LmghscdIk87HZFaB+Ayxum6XfDnkirZbQ24SfmC6gmrWkiC9tIpHQh 7Y1u6eR3rRxL/rCddh2JY1U2LHtDAdeVJ6cnbiB+c0/KX1TlUAXcwuqmpe6bfh55 MDWkpWzhoWB1mw== -----END CERTIFICATE-----Generated at Tue Dec 16 20:20:14 2025 by rpki-client