This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.mft File: dxToFxWNwwfu1NTG7fUaieVwPs8.mft (raw, json) Hash identifier: 0NYb8g6v90xlYAsth5252/xZ0FIs8vw9Vp3eGkFf83E= Subject key identifier: 42:3E:7B:E5:31:5B:D8:C4:B2:82:91:1D:A0:73:8E:9C:0D:B2:B6:31 Authority key identifier: 77:14:E8:17:15:8D:C3:07:EE:D4:D4:C6:ED:F5:1A:89:E5:70:3E:CF Certificate issuer: /CN=7714e817158dc307eed4d4c6edf51a89e5703ecf Certificate serial: 019B300C43385A89EC9C7BB484C1B4F37DBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxToFxWNwwfu1NTG7fUaieVwPs8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.mft Manifest number: 0F5A Signing time: Thu 18 Dec 2025 06:01:08 +0000 Manifest this update: Thu 18 Dec 2025 06:01:08 +0000 Manifest next update: Fri 19 Dec 2025 06:01:08 +0000 Files and hashes: 1: dxToFxWNwwfu1NTG7fUaieVwPs8.crl (hash: FuzQ7rz17IniUAc++ldPksMsRQQY1C7IcThUnQEjO6w=) 2: o7ZIAxzewawQhSKUHd5kW91Ui0M.roa (hash: 7Wl8txa2QHhpsFyrY5UBiQUfswNeOV1rDFLck1u7018=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.mft rsync://rpki.ripe.net/repository/DEFAULT/dxToFxWNwwfu1NTG7fUaieVwPs8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:0c:43:38:5a:89:ec:9c:7b:b4:84:c1:b4:f3:7d:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7714e817158dc307eed4d4c6edf51a89e5703ecf Validity Not Before: Dec 18 06:01:08 2025 GMT Not After : Dec 19 06:01:08 2025 GMT Subject: CN=423e7be5315bd8c4b282911da0738e9c0db2b631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:40:43:82:35:96:9d:be:66:8b:e6:5d:d4:6c: a6:c7:9b:80:6f:ca:b3:2a:4b:3f:12:1d:39:c7:f5: fd:62:9f:b1:bb:8c:63:97:3a:76:89:c2:36:e7:12: 3b:60:d3:83:b3:f1:92:bd:70:7a:b6:05:32:99:ff: 9b:dd:a1:fc:fe:90:c1:90:3a:20:7c:aa:88:03:ad: 3f:33:4a:e7:5c:30:3b:6f:bd:d6:9b:6e:1e:79:b0: 69:d4:eb:7c:85:62:0d:dd:34:68:5e:f8:25:da:f1: e8:61:76:e9:cc:09:8c:7d:74:d1:d2:a2:29:bc:69: 95:37:84:6f:39:fe:32:af:86:d9:6f:b4:58:3c:44: 5e:b7:1a:c2:f0:ea:be:97:a2:d4:64:11:f7:fa:8e: 24:7a:56:ea:c8:05:86:a9:0a:be:76:dd:a1:26:b1: 9a:23:30:fa:e3:82:7a:90:73:91:c6:0b:36:0e:f5: be:74:5e:01:12:c6:63:1c:79:5c:bc:51:42:e5:f2: 44:04:0e:12:2a:f1:bc:bd:d4:b3:12:1f:15:7d:07: 5e:b9:41:a2:04:d3:1d:34:20:c8:4e:5d:9a:cd:a2: 5b:07:bf:ff:66:00:b2:7d:e3:66:11:2a:b3:c9:ec: d4:20:1d:1c:b6:02:8e:77:87:d2:bd:f3:d8:c2:d6: a1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:3E:7B:E5:31:5B:D8:C4:B2:82:91:1D:A0:73:8E:9C:0D:B2:B6:31 X509v3 Authority Key Identifier: keyid:77:14:E8:17:15:8D:C3:07:EE:D4:D4:C6:ED:F5:1A:89:E5:70:3E:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxToFxWNwwfu1NTG7fUaieVwPs8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:30:90:d1:b1:97:f0:72:36:2d:71:14:74:27:b3:fa:82:73: fb:b8:d6:42:20:5b:db:47:a9:de:50:de:fc:7a:7c:1a:89:55: 14:57:ce:aa:93:33:26:cc:22:8d:80:77:a9:9a:e7:3b:0b:f7: 36:ff:d0:fa:55:d4:0d:82:da:de:42:3e:52:3a:54:cb:21:69: b7:79:34:f8:f7:1e:a0:10:a1:2b:b4:58:70:61:1f:67:68:9b: 40:40:73:3c:6b:04:f4:6a:10:50:e9:d7:01:9c:18:27:92:30: dd:69:92:59:59:3d:06:d1:47:62:e3:fd:a9:76:1a:89:eb:64: 53:b6:4b:a9:e5:99:1c:8e:aa:c5:3e:0c:e0:d8:e5:75:b0:83: 1c:2a:64:34:53:53:9b:39:8a:d7:ad:fb:6a:67:94:24:a8:8e: 76:f7:fc:32:aa:1d:02:e3:13:63:62:04:09:f9:53:ae:ed:7a: f7:d1:61:a7:e5:7e:91:f5:60:dc:25:71:b7:fe:9b:33:d7:21: b2:37:57:11:25:a3:93:17:c6:c3:59:54:96:82:ca:07:76:45: 17:33:1c:26:e0:1e:ec:27:3d:0b:c4:47:fc:f6:70:8f:08:05: d1:79:ce:69:77:79:2f:b0:cb:61:60:81:e7:7a:16:2b:7e:bd: 6a:38:ec:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswDEM4WonsnHu0hMG08327MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MTRlODE3MTU4ZGMzMDdlZWQ0ZDRjNmVkZjUxYTg5ZTU3 MDNlY2YwHhcNMjUxMjE4MDYwMTA4WhcNMjUxMjE5MDYwMTA4WjAzMTEwLwYDVQQD Eyg0MjNlN2JlNTMxNWJkOGM0YjI4MjkxMWRhMDczOGU5YzBkYjJiNjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0BDgjWWnb5mi+Zd1Gymx5uAb8qz Kks/Eh05x/X9Yp+xu4xjlzp2icI25xI7YNODs/GSvXB6tgUymf+b3aH8/pDBkDog fKqIA60/M0rnXDA7b73Wm24eebBp1Ot8hWIN3TRoXvgl2vHoYXbpzAmMfXTR0qIp vGmVN4RvOf4yr4bZb7RYPERetxrC8Oq+l6LUZBH3+o4kelbqyAWGqQq+dt2hJrGa IzD644J6kHORxgs2DvW+dF4BEsZjHHlcvFFC5fJEBA4SKvG8vdSzEh8VfQdeuUGi BNMdNCDITl2azaJbB7//ZgCyfeNmESqzyezUIB0ctgKOd4fSvfPYwtahxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEI+e+UxW9jEsoKRHaBzjpwNsrYxMB8GA1UdIwQY MBaAFHcU6BcVjcMH7tTUxu31GonlcD7PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHhUb0Z4V053d2Z1MU5URzdmVWFpZVZ3UHM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8xZTZkNTktMjdjZi00MTlmLWFkMWQt NjIxMDY0MWU1MmQ2LzEvZHhUb0Z4V053d2Z1MU5URzdmVWFpZVZ3UHM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi8xZTZkNTktMjdjZi00MTlmLWFkMWQtNjIxMDY0MWU1MmQ2 LzEvZHhUb0Z4V053d2Z1MU5URzdmVWFpZVZ3UHM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhDCQ0bGX 8HI2LXEUdCez+oJz+7jWQiBb20ep3lDe/Hp8GolVFFfOqpMzJswijYB3qZrnOwv3 Nv/Q+lXUDYLa3kI+UjpUyyFpt3k0+PceoBChK7RYcGEfZ2ibQEBzPGsE9GoQUOnX AZwYJ5Iw3WmSWVk9BtFHYuP9qXYaietkU7ZLqeWZHI6qxT4M4NjldbCDHCpkNFNT mzmK1637ameUJKiOdvf8MqodAuMTY2IECflTru1699Fhp+V+kfVg3CVxt/6bM9ch sjdXESWjkxfGw1lUloLKB3ZFFzMcJuAe7Cc9C8RH/PZwjwgF0XnOaXd5L7DLYWCB 53oWK369ajjsxA== -----END CERTIFICATE-----Generated at Thu Dec 18 08:00:40 2025 by rpki-client