This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.mft File: dKR-OmcWCuRmLg68ztepIzzker8.mft (raw, json) Hash identifier: pPiVgb94p9yS3oXrxYz7lqCo5oCMHGJMPw0ZjgmkO2Y= Subject key identifier: 45:CC:EB:AF:7C:EC:92:B4:80:1F:44:1B:9F:A4:A2:48:F0:F8:6E:B5 Authority key identifier: 74:A4:7E:3A:67:16:0A:E4:66:2E:0E:BC:CE:D7:A9:23:3C:E4:7A:BF Certificate issuer: /CN=74a47e3a67160ae4662e0ebcced7a9233ce47abf Certificate serial: 019B10811E36F8650C9ADCD3DD8C52DEBA8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKR-OmcWCuRmLg68ztepIzzker8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.mft Manifest number: 13C4 Signing time: Fri 12 Dec 2025 03:00:55 +0000 Manifest this update: Fri 12 Dec 2025 03:00:55 +0000 Manifest next update: Sat 13 Dec 2025 03:00:55 +0000 Files and hashes: 1: 6S1fN0Slf3Y95btQEfpy__y_tiw.roa (hash: 5FWi2gr8yiM3yt2DtW3oiI0p1G9KyA1KVfzD3/JWlJI=) 2: dKR-OmcWCuRmLg68ztepIzzker8.crl (hash: 5tdi4DXNMirZyxh0F2XGYfg6zxaMKkKxZQZrpJPUbQU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.crl rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.mft rsync://rpki.ripe.net/repository/DEFAULT/dKR-OmcWCuRmLg68ztepIzzker8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:81:1e:36:f8:65:0c:9a:dc:d3:dd:8c:52:de:ba:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74a47e3a67160ae4662e0ebcced7a9233ce47abf Validity Not Before: Dec 12 03:00:55 2025 GMT Not After : Dec 13 03:00:55 2025 GMT Subject: CN=45ccebaf7cec92b4801f441b9fa4a248f0f86eb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c1:db:d7:b0:a7:ff:3e:13:b9:4b:82:37:d9: 32:50:97:6d:b6:88:d3:ec:cd:64:f1:54:61:d2:7a: 22:b7:f0:21:1d:27:8c:c0:4a:b4:0b:39:e6:9c:bf: 62:c5:34:35:3c:e0:1f:f9:0f:1d:b3:15:c4:38:75: f0:2e:04:48:96:96:57:84:d5:a4:c4:01:37:9d:bf: 96:04:e3:ff:ed:64:5a:2d:34:bc:66:50:54:81:d4: 80:61:7c:10:b4:ae:d4:b5:aa:e1:78:84:9c:de:bd: d8:15:a0:64:2e:db:b9:5d:48:83:b1:39:58:57:5b: 18:29:bf:cb:a9:9b:64:dc:99:bd:04:a5:ed:13:38: 22:5d:d7:66:c7:89:67:c9:4c:9f:d4:6f:b4:0f:47: 56:ac:d1:af:22:e1:c4:4f:2b:f2:ee:09:06:af:68: 4c:28:5b:53:ac:02:d3:2e:08:76:1c:e4:f7:7a:2f: 31:44:6e:6e:d7:04:1d:71:ac:5d:f8:8a:01:5d:50: 60:14:06:b5:63:ae:f6:5e:09:3a:f0:bd:14:60:c8: 70:41:54:a7:69:ee:cd:ea:61:00:97:82:3b:2f:53: 88:42:1c:fa:82:4a:0c:86:75:dc:1f:1c:d2:52:ee: c1:03:b0:39:b3:57:5e:64:0d:43:63:b5:b0:0c:a2: bb:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:CC:EB:AF:7C:EC:92:B4:80:1F:44:1B:9F:A4:A2:48:F0:F8:6E:B5 X509v3 Authority Key Identifier: keyid:74:A4:7E:3A:67:16:0A:E4:66:2E:0E:BC:CE:D7:A9:23:3C:E4:7A:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKR-OmcWCuRmLg68ztepIzzker8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d6d625-dda2-4f2f-b8cf-92c7d46ddb89/1/dKR-OmcWCuRmLg68ztepIzzker8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:30:39:a6:ed:67:69:ca:e0:93:af:a1:a5:20:9c:cb:19:aa: 01:3a:81:36:af:03:90:14:a0:13:87:f6:83:5a:5d:4b:80:0b: c6:fa:1f:2e:4b:85:3b:cc:85:8e:0d:72:fc:8b:08:eb:45:71: e2:65:74:b6:c8:dc:87:7a:f0:ee:3d:90:9c:44:f5:30:4e:f3: 21:f8:74:17:08:da:5e:49:c5:32:19:fb:04:45:38:af:7b:44: 6d:4a:9a:7f:a9:fc:c4:23:23:5e:95:d6:6c:c6:8d:4d:49:34: e5:bf:e0:26:af:94:5a:a4:8f:71:d2:9a:e8:9e:5b:c0:1b:12: a1:ad:ea:ee:70:3a:54:a2:75:e1:4f:51:41:f0:59:23:17:ab: 29:62:bc:c0:8c:20:f5:c6:57:5b:34:7d:5b:54:8e:b5:8e:6e: d3:03:e4:be:09:82:dd:da:f4:cf:6f:4b:60:94:2f:c7:5e:02: 77:ad:e4:7e:f4:6d:47:c9:9c:3e:dc:a7:4d:a2:c6:28:3a:04: e0:12:77:27:60:c1:1f:e3:0e:fc:d3:b7:22:f0:df:c1:e1:32: 07:df:35:f6:ba:2b:51:88:a9:28:ee:a0:06:8f:5d:c6:d5:1d: 08:13:73:be:e9:3d:16:59:b4:1b:cb:37:6a:73:32:2f:82:92: 69:6d:e7:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQgR42+GUMmtzT3YxS3rqNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0YTQ3ZTNhNjcxNjBhZTQ2NjJlMGViY2NlZDdhOTIzM2Nl NDdhYmYwHhcNMjUxMjEyMDMwMDU1WhcNMjUxMjEzMDMwMDU1WjAzMTEwLwYDVQQD Eyg0NWNjZWJhZjdjZWM5MmI0ODAxZjQ0MWI5ZmE0YTI0OGYwZjg2ZWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksHb17Cn/z4TuUuCN9kyUJdttojT 7M1k8VRh0noit/AhHSeMwEq0CznmnL9ixTQ1POAf+Q8dsxXEOHXwLgRIlpZXhNWk xAE3nb+WBOP/7WRaLTS8ZlBUgdSAYXwQtK7UtarheISc3r3YFaBkLtu5XUiDsTlY V1sYKb/LqZtk3Jm9BKXtEzgiXddmx4lnyUyf1G+0D0dWrNGvIuHETyvy7gkGr2hM KFtTrALTLgh2HOT3ei8xRG5u1wQdcaxd+IoBXVBgFAa1Y672Xgk68L0UYMhwQVSn ae7N6mEAl4I7L1OIQhz6gkoMhnXcHxzSUu7BA7A5s1deZA1DY7WwDKK7MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEXM66987JK0gB9EG5+kokjw+G61MB8GA1UdIwQY MBaAFHSkfjpnFgrkZi4OvM7XqSM85Hq/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEtSLU9tY1dDdVJtTGc2OHp0ZXBJenprZXI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9kNmQ2MjUtZGRhMi00ZjJmLWI4Y2Yt OTJjN2Q0NmRkYjg5LzEvZEtSLU9tY1dDdVJtTGc2OHp0ZXBJenprZXI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny9kNmQ2MjUtZGRhMi00ZjJmLWI4Y2YtOTJjN2Q0NmRkYjg5 LzEvZEtSLU9tY1dDdVJtTGc2OHp0ZXBJenprZXI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmDA5pu1n acrgk6+hpSCcyxmqATqBNq8DkBSgE4f2g1pdS4ALxvofLkuFO8yFjg1y/IsI60Vx 4mV0tsjch3rw7j2QnET1ME7zIfh0FwjaXknFMhn7BEU4r3tEbUqaf6n8xCMjXpXW bMaNTUk05b/gJq+UWqSPcdKa6J5bwBsSoa3q7nA6VKJ14U9RQfBZIxerKWK8wIwg 9cZXWzR9W1SOtY5u0wPkvgmC3dr0z29LYJQvx14Cd63kfvRtR8mcPtynTaLGKDoE 4BJ3J2DBH+MO/NO3IvDfweEyB9819rorUYipKO6gBo9dxtUdCBNzvuk9Flm0G8s3 anMyL4KSaW3nIQ== -----END CERTIFICATE-----Generated at Fri Dec 12 05:32:57 2025 by rpki-client