This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft File: dKTzwLZqTJPoD_X22JrYZz6UPF8.mft (raw, json) Hash identifier: rVB+O9tsXcTopYc8HWwOf44EKTUV76uGOwTBqzAyIqY= Subject key identifier: B2:1E:D7:0B:14:BB:E8:D5:CE:EC:A1:D7:03:1B:A3:47:71:DB:63:EB Authority key identifier: 74:A4:F3:C0:B6:6A:4C:93:E8:0F:F5:F6:D8:9A:D8:67:3E:94:3C:5F Certificate issuer: /CN=74a4f3c0b66a4c93e80ff5f6d89ad8673e943c5f Certificate serial: 019B37C53B5F8C0CF612FF66F77F743FF029 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKTzwLZqTJPoD_X22JrYZz6UPF8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft Manifest number: 1785 Signing time: Fri 19 Dec 2025 18:00:31 +0000 Manifest this update: Fri 19 Dec 2025 18:00:31 +0000 Manifest next update: Sat 20 Dec 2025 18:00:31 +0000 Files and hashes: 1: 1-MmN0tsEmoim2sae335BAlf2iMY.roa (hash: BOjGK2JKa11z5em/Dgc+q3/nSr0kFU/3HDEjsSjRF+k=) 2: dKTzwLZqTJPoD_X22JrYZz6UPF8.crl (hash: xvjp5dFs7FKDFcR/G5VnPvVyIeWMVKXCKR2m0YHdoUY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft rsync://rpki.ripe.net/repository/DEFAULT/dKTzwLZqTJPoD_X22JrYZz6UPF8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:c5:3b:5f:8c:0c:f6:12:ff:66:f7:7f:74:3f:f0:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74a4f3c0b66a4c93e80ff5f6d89ad8673e943c5f Validity Not Before: Dec 19 18:00:31 2025 GMT Not After : Dec 20 18:00:31 2025 GMT Subject: CN=b21ed70b14bbe8d5ceeca1d7031ba34771db63eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:7b:cd:c7:74:24:eb:41:e2:ad:94:d6:e0:70: dd:59:4e:2d:b6:59:36:92:43:c2:75:0d:cd:53:a9: 48:d1:72:6f:fa:33:55:55:45:bf:fc:a7:58:62:a9: 95:87:e4:3d:4a:b3:bd:63:4d:55:a3:af:87:6a:b3: 02:09:c1:79:ba:9e:3e:b4:62:55:00:44:83:f7:b6: b7:37:6d:54:73:57:cd:4c:6a:ce:eb:c3:90:7e:99: c8:26:dd:f9:2b:af:85:47:49:1c:1a:e6:5c:8b:c6: c1:d4:3b:02:b1:cd:c9:13:01:90:ae:c5:81:a5:be: 42:ca:00:fc:7d:19:8d:7a:aa:76:e2:04:4a:5a:19: b0:20:f7:12:09:0e:2b:ca:af:68:87:8d:b7:81:69: 93:04:bd:b4:87:f2:b6:87:2d:f0:da:89:54:82:a2: 82:44:57:bd:dc:6c:89:5b:c9:49:3e:6e:ec:83:42: a6:3c:fb:ce:bb:a4:67:af:19:90:4f:a4:3b:c0:e9: 6a:f1:d3:e0:33:b9:d9:a9:6f:d9:ef:da:c0:a4:eb: d0:6f:fc:63:d9:f2:6a:5b:90:14:ae:b6:00:36:85: 86:18:a8:e7:c5:5f:f6:81:d4:ed:ee:87:07:00:a4: 9a:06:27:57:eb:76:7d:e2:3a:65:39:c1:11:56:5f: f4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:1E:D7:0B:14:BB:E8:D5:CE:EC:A1:D7:03:1B:A3:47:71:DB:63:EB X509v3 Authority Key Identifier: keyid:74:A4:F3:C0:B6:6A:4C:93:E8:0F:F5:F6:D8:9A:D8:67:3E:94:3C:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKTzwLZqTJPoD_X22JrYZz6UPF8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/699704-8004-4614-b44c-2ca492f6d7a8/1/dKTzwLZqTJPoD_X22JrYZz6UPF8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:1f:65:5f:03:3b:1b:1c:80:e7:38:a6:32:36:ef:f8:03:d9: 15:d4:0b:1d:42:49:cf:3c:fc:65:24:cc:87:52:45:cf:9e:c9: 3f:90:e6:ab:43:cd:dd:94:b6:84:dc:a5:f9:49:75:8c:c9:94: 4b:74:fb:00:20:8f:61:04:4e:a9:ba:b9:54:5e:b8:2a:23:63: 6d:6d:fb:a0:ee:a9:47:bf:5b:62:3f:15:2c:8c:00:14:69:1d: 52:60:11:1c:8c:75:ae:16:e0:b3:e8:37:41:5e:40:30:e1:6b: c6:e5:04:15:59:e3:b5:21:ff:93:ed:fa:44:87:d7:ee:fc:4d: 82:c4:c8:dd:23:cd:6d:9f:74:f3:0d:c0:1d:6d:60:52:d8:43: ca:7c:46:34:d5:00:bb:20:e6:f8:a1:af:5a:ad:cd:1e:f1:af: 28:2c:8a:10:c4:c7:23:b8:26:66:09:f4:98:5b:b2:54:8a:b8: 3f:dc:f3:8e:46:55:9e:d4:0a:b8:2a:c5:ec:eb:40:5b:dc:a2: c2:cb:e5:82:60:2b:5c:29:e4:27:eb:26:ff:47:88:5b:19:64: d3:21:e8:0a:f6:b0:37:67:47:e1:69:d5:d5:ec:06:48:8c:5e: ec:f1:26:8a:46:2f:34:e9:dd:9b:33:f8:e4:75:4a:fe:c4:d3: db:d8:33:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3xTtfjAz2Ev9m9390P/ApMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0YTRmM2MwYjY2YTRjOTNlODBmZjVmNmQ4OWFkODY3M2U5 NDNjNWYwHhcNMjUxMjE5MTgwMDMxWhcNMjUxMjIwMTgwMDMxWjAzMTEwLwYDVQQD EyhiMjFlZDcwYjE0YmJlOGQ1Y2VlY2ExZDcwMzFiYTM0NzcxZGI2M2ViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnvNx3Qk60HirZTW4HDdWU4ttlk2 kkPCdQ3NU6lI0XJv+jNVVUW//KdYYqmVh+Q9SrO9Y01Vo6+HarMCCcF5up4+tGJV AESD97a3N21Uc1fNTGrO68OQfpnIJt35K6+FR0kcGuZci8bB1DsCsc3JEwGQrsWB pb5CygD8fRmNeqp24gRKWhmwIPcSCQ4ryq9oh423gWmTBL20h/K2hy3w2olUgqKC RFe93GyJW8lJPm7sg0KmPPvOu6RnrxmQT6Q7wOlq8dPgM7nZqW/Z79rApOvQb/xj 2fJqW5AUrrYANoWGGKjnxV/2gdTt7ocHAKSaBidX63Z94jplOcERVl/0SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLIe1wsUu+jVzuyh1wMbo0dx22PrMB8GA1UdIwQY MBaAFHSk88C2akyT6A/19tia2Gc+lDxfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEtUendMWnFUSlBvRF9YMjJKcllaejZVUEY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi82OTk3MDQtODAwNC00NjE0LWI0NGMt MmNhNDkyZjZkN2E4LzEvZEtUendMWnFUSlBvRF9YMjJKcllaejZVUEY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi82OTk3MDQtODAwNC00NjE0LWI0NGMtMmNhNDkyZjZkN2E4 LzEvZEtUendMWnFUSlBvRF9YMjJKcllaejZVUEY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMh9lXwM7 GxyA5zimMjbv+APZFdQLHUJJzzz8ZSTMh1JFz57JP5Dmq0PN3ZS2hNyl+Ul1jMmU S3T7ACCPYQROqbq5VF64KiNjbW37oO6pR79bYj8VLIwAFGkdUmARHIx1rhbgs+g3 QV5AMOFrxuUEFVnjtSH/k+36RIfX7vxNgsTI3SPNbZ908w3AHW1gUthDynxGNNUA uyDm+KGvWq3NHvGvKCyKEMTHI7gmZgn0mFuyVIq4P9zzjkZVntQKuCrF7OtAW9yi wsvlgmArXCnkJ+sm/0eIWxlk0yHoCvawN2dH4WnV1ewGSIxe7PEmikYvNOndmzP4 5HVK/sTT29gzog== -----END CERTIFICATE-----Generated at Fri Dec 19 23:42:21 2025 by rpki-client