This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.mft File: do_utqkKhqzxGHHk5Xii6n7Cgdk.mft (raw, json) Hash identifier: ah55NkAKcrroDNpcX3i4UoOccpWLFDRFSunQdgPrHEI= Subject key identifier: 6B:B0:ED:3E:DF:D0:95:A4:0C:65:0D:D8:5F:9B:AF:C9:7D:35:F6:09 Authority key identifier: 76:8F:EE:B6:A9:0A:86:AC:F1:18:71:E4:E5:78:A2:EA:7E:C2:81:D9 Certificate issuer: /CN=768feeb6a90a86acf11871e4e578a2ea7ec281d9 Certificate serial: 019B1B0545D9ADC4F2AF3A4475135A9FBE42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/do_utqkKhqzxGHHk5Xii6n7Cgdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.mft Manifest number: 0282 Signing time: Sun 14 Dec 2025 04:01:28 +0000 Manifest this update: Sun 14 Dec 2025 04:01:28 +0000 Manifest next update: Mon 15 Dec 2025 04:01:28 +0000 Files and hashes: 1: ZZ126kZc2Gs9amlt5Rc0VmUZOPw.roa (hash: laA9ImB0VtnpNlOC8RmvM5URSIvzaqpg8ewZvS5hOLw=) 2: do_utqkKhqzxGHHk5Xii6n7Cgdk.crl (hash: ZjfDHgssq039W7azwEgUukAKUY74iWXs5ui5L3vlzko=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.mft rsync://rpki.ripe.net/repository/DEFAULT/do_utqkKhqzxGHHk5Xii6n7Cgdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 04:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:05:45:d9:ad:c4:f2:af:3a:44:75:13:5a:9f:be:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=768feeb6a90a86acf11871e4e578a2ea7ec281d9 Validity Not Before: Dec 14 04:01:28 2025 GMT Not After : Dec 15 04:01:28 2025 GMT Subject: CN=6bb0ed3edfd095a40c650dd85f9bafc97d35f609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:65:1a:b8:dd:14:3f:bb:be:0d:6f:81:de:42: 44:58:7f:28:78:76:c7:c3:32:01:39:df:7d:89:e2: 08:63:fd:ef:52:c9:3b:4d:11:a9:61:25:97:ce:f4: e9:42:6c:d6:fb:2b:c1:89:27:8f:e4:41:bb:69:14: 71:46:a9:a2:97:ab:c3:9d:b4:8d:16:c6:bc:16:6e: 69:e0:5d:a4:ed:d1:86:f1:67:63:b4:01:4c:4b:d2: d2:55:a7:a7:1c:84:49:6d:fd:65:02:03:62:8d:33: c8:d2:ae:cf:ab:ff:84:ef:d5:5c:3e:ae:8b:7c:67: a8:0f:ff:1e:e7:32:25:fa:ea:5a:04:49:20:27:8a: fd:75:4d:31:66:12:dd:6b:e0:2b:40:e7:b0:37:7f: 5d:57:5f:72:41:72:c9:13:14:a4:4e:b0:72:2e:58: 82:fd:f2:ba:1f:01:c6:65:cb:48:2a:07:8f:c0:f3: f4:97:e0:54:27:85:57:9d:a7:1c:5e:27:67:da:41: f4:6b:d9:02:dc:12:ee:47:30:7a:01:6f:8f:f0:be: c3:ac:1d:95:8b:87:0b:d7:b8:76:bd:b4:9b:80:11: 61:de:91:18:1d:d6:77:61:31:c8:a7:40:f3:f8:27: ec:a2:a2:b6:ea:69:69:2a:78:4e:90:07:97:29:99: e4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:B0:ED:3E:DF:D0:95:A4:0C:65:0D:D8:5F:9B:AF:C9:7D:35:F6:09 X509v3 Authority Key Identifier: keyid:76:8F:EE:B6:A9:0A:86:AC:F1:18:71:E4:E5:78:A2:EA:7E:C2:81:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/do_utqkKhqzxGHHk5Xii6n7Cgdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:ae:5b:4f:0b:7b:2e:a5:9b:fe:49:95:ec:f3:fe:05:b2:50: f9:cf:bc:c2:84:76:74:21:67:0a:bb:90:11:54:a9:d4:41:d4: 2a:05:1b:87:ce:5d:79:29:83:95:53:18:db:ab:fd:02:c1:69: a5:b6:69:bc:6d:33:b1:c5:1c:da:38:0f:1e:87:0e:99:81:ab: 49:07:74:f3:20:f9:82:88:ef:c6:9e:45:18:6f:bd:b8:8c:a9: 18:78:98:5c:04:b0:e3:85:0a:45:b9:17:92:c5:19:c6:e3:10: c1:62:55:ab:30:70:f4:79:d5:f0:75:f7:ce:04:ff:ae:11:cd: 46:97:2d:3c:00:80:e8:88:9a:c8:05:bf:e2:bc:1f:53:32:8d: 24:0a:12:a0:45:7b:98:04:1f:49:06:02:60:5c:85:e0:0a:83: 68:9d:e1:6b:15:b0:a9:b6:19:5d:49:30:ca:d7:57:e4:45:e1: ed:50:88:a9:f5:1e:5e:0d:7f:26:1b:68:1b:ea:66:29:e4:4a: 6f:c9:ec:0a:e2:1d:19:2d:61:f5:34:2f:98:0c:69:fb:40:91: b0:f3:c5:e7:3c:78:a7:6e:7a:41:3b:50:f2:dd:13:f8:b9:88: e2:d9:c4:8c:c7:e5:1e:f1:b7:f9:f2:d0:e2:bd:70:9c:fa:2f: 30:67:42:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbBUXZrcTyrzpEdRNan75CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2OGZlZWI2YTkwYTg2YWNmMTE4NzFlNGU1NzhhMmVhN2Vj MjgxZDkwHhcNMjUxMjE0MDQwMTI4WhcNMjUxMjE1MDQwMTI4WjAzMTEwLwYDVQQD Eyg2YmIwZWQzZWRmZDA5NWE0MGM2NTBkZDg1ZjliYWZjOTdkMzVmNjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWUauN0UP7u+DW+B3kJEWH8oeHbH wzIBOd99ieIIY/3vUsk7TRGpYSWXzvTpQmzW+yvBiSeP5EG7aRRxRqmil6vDnbSN Fsa8Fm5p4F2k7dGG8WdjtAFMS9LSVaenHIRJbf1lAgNijTPI0q7Pq/+E79VcPq6L fGeoD/8e5zIl+upaBEkgJ4r9dU0xZhLda+ArQOewN39dV19yQXLJExSkTrByLliC /fK6HwHGZctIKgePwPP0l+BUJ4VXnaccXidn2kH0a9kC3BLuRzB6AW+P8L7DrB2V i4cL17h2vbSbgBFh3pEYHdZ3YTHIp0Dz+CfsoqK26mlpKnhOkAeXKZnkrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGuw7T7f0JWkDGUN2F+br8l9NfYJMB8GA1UdIwQY MBaAFHaP7rapCoas8Rhx5OV4oup+woHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG9fdXRxa0tocXp4R0hIazVYaWk2bjdDZ2RrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82NjY2M2EtZWFmMS00YTg5LTgwNGMt MGMxZjRkMzM3ODNlLzEvZG9fdXRxa0tocXp4R0hIazVYaWk2bjdDZ2RrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi82NjY2M2EtZWFmMS00YTg5LTgwNGMtMGMxZjRkMzM3ODNl LzEvZG9fdXRxa0tocXp4R0hIazVYaWk2bjdDZ2RrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFq5bTwt7 LqWb/kmV7PP+BbJQ+c+8woR2dCFnCruQEVSp1EHUKgUbh85deSmDlVMY26v9AsFp pbZpvG0zscUc2jgPHocOmYGrSQd08yD5gojvxp5FGG+9uIypGHiYXASw44UKRbkX ksUZxuMQwWJVqzBw9HnV8HX3zgT/rhHNRpctPACA6IiayAW/4rwfUzKNJAoSoEV7 mAQfSQYCYFyF4AqDaJ3haxWwqbYZXUkwytdX5EXh7VCIqfUeXg1/JhtoG+pmKeRK b8nsCuIdGS1h9TQvmAxp+0CRsPPF5zx4p256QTtQ8t0T+LmI4tnEjMflHvG3+fLQ 4r1wnPovMGdCdQ== -----END CERTIFICATE-----Generated at Sun Dec 14 13:53:24 2025 by rpki-client