This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft File: DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft (raw, json) Hash identifier: ZoDeu8NPjAOer/uaCFw3XEFVFY11QM0PpROdkT6gUq8= Subject key identifier: 01:98:5A:3E:8E:B2:5E:AA:4A:E5:41:19:6A:73:18:64:B6:A8:2F:2B Authority key identifier: 0C:A4:BB:69:B3:F5:68:05:14:0E:FA:E2:43:E4:DD:4B:36:C0:DD:1B Certificate issuer: /CN=0ca4bb69b3f56805140efae243e4dd4b36c0dd1b Certificate serial: 019B34FB35FDA4D3AF5E073BD2AE15B3379C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft Manifest number: 1784 Signing time: Fri 19 Dec 2025 05:00:37 +0000 Manifest this update: Fri 19 Dec 2025 05:00:37 +0000 Manifest next update: Sat 20 Dec 2025 05:00:37 +0000 Files and hashes: 1: 1cBDORiVvrRChAcdm2hc6y292d0.roa (hash: XIDQHNSLIfpf1kaFUtLQNCl28oalABx/0LdYZxGeMgk=) 2: DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl (hash: ZgiBnO8KT6dcFynejejjFLTP3QdgOTF/xbG0rowVcog=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 05:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:35:fd:a4:d3:af:5e:07:3b:d2:ae:15:b3:37:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ca4bb69b3f56805140efae243e4dd4b36c0dd1b Validity Not Before: Dec 19 05:00:37 2025 GMT Not After : Dec 20 05:00:37 2025 GMT Subject: CN=01985a3e8eb25eaa4ae541196a731864b6a82f2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e5:68:d7:32:c2:ce:f2:17:29:63:68:8a:dd: c8:36:11:d0:4b:5e:30:79:ad:ed:33:ad:dd:f0:c9: 97:63:92:c5:7e:dd:71:44:8c:65:ec:42:ef:e6:bb: ee:77:3c:d9:23:da:c5:3f:de:ee:eb:6e:07:77:5b: cf:0b:0d:a9:4f:a8:fc:73:e7:c3:ac:89:9d:2d:87: 5a:78:1d:66:b9:54:19:ae:9a:d2:1c:93:60:2d:bf: 67:2d:5c:44:b7:1b:2e:b5:4f:ac:fe:1b:ab:c6:d1: c1:03:3d:86:06:28:0d:53:f9:74:da:9f:31:d5:d9: 87:58:8f:3b:36:68:d6:aa:af:43:a5:f9:5b:fc:ed: 02:e9:d6:24:76:45:2f:d3:65:15:9e:6e:8b:be:66: 7e:24:eb:c5:70:e4:11:3f:b6:4d:d1:6f:c0:0f:f3: ee:ec:2a:12:85:6d:48:c2:0c:81:7a:56:f8:13:db: 78:9f:cf:69:14:75:44:b2:dd:e4:bd:6b:6b:e7:ba: 70:56:1a:b7:4f:f5:a9:8a:e0:c3:b4:15:99:5d:98: 5c:71:bc:9b:98:ad:e8:bb:05:07:18:d5:9a:68:08: 69:f2:d1:e3:bb:63:71:91:c6:6f:8d:2a:38:43:11: b4:f8:e1:19:84:6b:a8:76:03:92:8c:94:1e:04:05: a9:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:98:5A:3E:8E:B2:5E:AA:4A:E5:41:19:6A:73:18:64:B6:A8:2F:2B X509v3 Authority Key Identifier: keyid:0C:A4:BB:69:B3:F5:68:05:14:0E:FA:E2:43:E4:DD:4B:36:C0:DD:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:a0:d1:96:42:2b:56:d0:58:bf:02:f2:91:ee:b5:db:d7:21: 53:22:a1:f4:19:4b:b8:6f:bc:7a:0a:58:24:a6:85:af:08:ac: 4f:30:28:14:6b:ee:0f:35:45:eb:9d:b3:55:47:71:bf:da:c5: de:8c:86:f2:84:d6:ca:32:f7:94:4d:2c:5f:2f:7d:9b:64:9e: 50:19:64:67:b0:b3:c4:f7:5d:ba:27:65:1b:de:5b:cb:9c:21: e0:d3:50:44:44:b4:de:f8:ad:28:8e:a9:11:63:94:0c:cd:d0: 79:7e:bc:a1:48:39:2b:72:4d:8e:c8:75:d2:d0:78:7c:25:1d: 91:ff:53:c2:fa:ae:e4:ce:d3:3c:ee:0b:52:57:40:99:bf:5f: cf:18:ed:77:55:25:3b:82:b8:1f:69:c1:96:ed:53:2e:ef:d5: 2b:3a:b1:8a:ee:3b:7d:6b:61:17:12:50:d0:00:95:66:a9:fb: 13:e3:c5:01:51:85:be:cf:3d:01:8d:db:ab:80:3e:86:42:54: 67:a1:d1:a4:37:41:36:11:0c:0a:a5:cb:ab:5c:05:12:f2:29: 4a:6c:f9:a8:7f:f7:18:65:e2:f5:2e:f2:c6:79:22:6d:69:3e: cd:a5:26:87:ce:73:12:a9:44:97:77:b5:a2:86:4a:22:42:39: 69:00:bf:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+zX9pNOvXgc70q4VszecMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjYTRiYjY5YjNmNTY4MDUxNDBlZmFlMjQzZTRkZDRiMzZj MGRkMWIwHhcNMjUxMjE5MDUwMDM3WhcNMjUxMjIwMDUwMDM3WjAzMTEwLwYDVQQD EygwMTk4NWEzZThlYjI1ZWFhNGFlNTQxMTk2YTczMTg2NGI2YTgyZjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuVo1zLCzvIXKWNoit3INhHQS14w ea3tM63d8MmXY5LFft1xRIxl7ELv5rvudzzZI9rFP97u624Hd1vPCw2pT6j8c+fD rImdLYdaeB1muVQZrprSHJNgLb9nLVxEtxsutU+s/hurxtHBAz2GBigNU/l02p8x 1dmHWI87NmjWqq9Dpflb/O0C6dYkdkUv02UVnm6LvmZ+JOvFcOQRP7ZN0W/AD/Pu 7CoShW1IwgyBelb4E9t4n89pFHVEst3kvWtr57pwVhq3T/WpiuDDtBWZXZhccbyb mK3ouwUHGNWaaAhp8tHju2NxkcZvjSo4QxG0+OEZhGuodgOSjJQeBAWpFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAGYWj6Osl6qSuVBGWpzGGS2qC8rMB8GA1UdIwQY MBaAFAyku2mz9WgFFA764kPk3Us2wN0bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREtTN2FiUDFhQVVVRHZyaVEtVGRTemJBM1JzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC82ODZjZmQtYTAyYy00MDczLTk5ZGQt ZDdmNDVlMGE3NzM2LzEvREtTN2FiUDFhQVVVRHZyaVEtVGRTemJBM1JzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC82ODZjZmQtYTAyYy00MDczLTk5ZGQtZDdmNDVlMGE3NzM2 LzEvREtTN2FiUDFhQVVVRHZyaVEtVGRTemJBM1JzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFKDRlkIr VtBYvwLyke6129chUyKh9BlLuG+8egpYJKaFrwisTzAoFGvuDzVF652zVUdxv9rF 3oyG8oTWyjL3lE0sXy99m2SeUBlkZ7CzxPdduidlG95by5wh4NNQRES03vitKI6p EWOUDM3QeX68oUg5K3JNjsh10tB4fCUdkf9Twvqu5M7TPO4LUldAmb9fzxjtd1Ul O4K4H2nBlu1TLu/VKzqxiu47fWthFxJQ0ACVZqn7E+PFAVGFvs89AY3bq4A+hkJU Z6HRpDdBNhEMCqXLq1wFEvIpSmz5qH/3GGXi9S7yxnkibWk+zaUmh85zEqlEl3e1 ooZKIkI5aQC/3Q== -----END CERTIFICATE-----Generated at Fri Dec 19 09:36:34 2025 by rpki-client