This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft File: Dkbx623dT_7-GDgAMCvmNs_pZTc.mft (raw, json) Hash identifier: dkXSGbeZXezD8635ugOi2xLWUrJeWKH7RgiyhTbZv34= Subject key identifier: 6C:0B:A0:48:1F:7E:9E:5A:06:70:4F:3A:BC:15:12:28:86:49:B8:D4 Authority key identifier: 0E:46:F1:EB:6D:DD:4F:FE:FE:18:38:00:30:2B:E6:36:CF:E9:65:37 Certificate issuer: /CN=0e46f1eb6ddd4ffefe183800302be636cfe96537 Certificate serial: 019B32D76122CD00542E5426C60AF5AD5BD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dkbx623dT_7-GDgAMCvmNs_pZTc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft Manifest number: 177F Signing time: Thu 18 Dec 2025 19:02:14 +0000 Manifest this update: Thu 18 Dec 2025 19:02:14 +0000 Manifest next update: Fri 19 Dec 2025 19:02:14 +0000 Files and hashes: 1: Dkbx623dT_7-GDgAMCvmNs_pZTc.crl (hash: 1soaV1j/Xuc129P40Sj2rn1wVynqpJAhzhCCTd5sGcg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft rsync://rpki.ripe.net/repository/DEFAULT/Dkbx623dT_7-GDgAMCvmNs_pZTc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:61:22:cd:00:54:2e:54:26:c6:0a:f5:ad:5b:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e46f1eb6ddd4ffefe183800302be636cfe96537 Validity Not Before: Dec 18 19:02:14 2025 GMT Not After : Dec 19 19:02:14 2025 GMT Subject: CN=6c0ba0481f7e9e5a06704f3abc1512288649b8d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2c:6a:6a:75:61:f6:40:d2:9f:80:50:21:3e: e3:5b:e5:80:da:13:c2:a2:94:d6:27:eb:fa:5e:79: 54:d6:5a:2a:9f:d9:80:44:9a:d4:98:06:c6:97:4e: 15:8b:1d:50:72:9c:66:82:7e:24:c5:f2:68:d2:0e: b0:6c:a3:9a:a1:fe:05:7b:b8:3c:a9:6c:57:04:cb: 86:5e:de:98:f3:17:b1:7a:2b:c7:43:e3:27:3c:61: dd:de:91:63:54:42:31:c4:a9:00:06:e7:8c:70:a3: 27:94:df:e2:9e:6f:0d:c3:27:a1:d0:97:da:12:37: fd:44:a9:5e:89:6e:51:ab:f6:59:da:76:9c:d0:a5: 60:08:14:50:e6:5f:dd:a1:c8:e9:30:6e:63:e3:75: 81:90:97:f1:af:b4:7b:fa:14:f4:31:72:62:9f:05: a9:a3:65:67:91:75:c2:47:28:f0:2c:50:64:67:63: a1:42:dc:b1:b2:b1:e9:79:65:f3:ec:57:06:b2:50: 16:22:89:12:02:6b:bd:f8:1d:6e:af:f7:a1:32:cf: 35:13:35:60:7a:6f:ea:12:05:12:ef:2d:db:36:c0: cc:4b:49:5b:59:2a:88:03:7b:70:26:fd:16:ab:e2: 95:bb:74:75:27:23:05:25:ce:5b:94:91:0d:45:3c: 62:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:0B:A0:48:1F:7E:9E:5A:06:70:4F:3A:BC:15:12:28:86:49:B8:D4 X509v3 Authority Key Identifier: keyid:0E:46:F1:EB:6D:DD:4F:FE:FE:18:38:00:30:2B:E6:36:CF:E9:65:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dkbx623dT_7-GDgAMCvmNs_pZTc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:ee:4d:9c:5b:64:f4:ab:81:86:36:e6:db:2f:07:a6:d2:13: 42:13:af:15:5a:51:6a:81:c6:0d:33:2a:18:69:12:6e:d7:8f: f8:fb:31:5e:43:66:bb:56:da:1c:fd:7f:bd:47:e3:ed:d0:d7: 76:1f:25:ff:2b:56:87:b1:ce:cf:c1:df:5f:da:35:f5:11:c9: 7f:65:98:8f:18:0b:d8:e0:b1:8c:d6:62:bd:72:ac:e7:d0:b7: 31:90:32:2c:79:ee:e9:df:cb:76:e0:d1:cf:4d:44:c5:8e:9a: 35:51:df:ef:ad:c2:ec:b9:c7:c8:ea:c2:b8:d0:fa:38:07:bc: fa:74:21:e3:01:a9:a7:73:48:c0:9f:b7:f6:e8:4e:6b:a6:d2: b6:58:fe:d5:d9:d7:b8:ad:19:cf:2d:b8:58:b7:e8:70:aa:8b: 25:1d:72:52:1f:15:c8:f4:01:79:2a:c2:33:01:41:3d:06:ad: 2c:0f:d8:44:19:15:a9:61:7d:f0:c3:0a:1d:78:5a:ef:46:05: 31:e9:15:11:c5:56:ea:55:0e:a5:82:ed:4f:42:33:b8:db:33: 49:17:58:19:74:d5:15:46:cf:1b:24:83:24:ca:81:9e:73:fc: d2:73:16:74:ae:14:01:a9:d0:b7:8c:e2:e3:6a:1f:c4:e8:51: 50:a7:72:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy12EizQBULlQmxgr1rVvQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNDZmMWViNmRkZDRmZmVmZTE4MzgwMDMwMmJlNjM2Y2Zl OTY1MzcwHhcNMjUxMjE4MTkwMjE0WhcNMjUxMjE5MTkwMjE0WjAzMTEwLwYDVQQD Eyg2YzBiYTA0ODFmN2U5ZTVhMDY3MDRmM2FiYzE1MTIyODg2NDliOGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSxqanVh9kDSn4BQIT7jW+WA2hPC opTWJ+v6XnlU1loqn9mARJrUmAbGl04Vix1Qcpxmgn4kxfJo0g6wbKOaof4Fe7g8 qWxXBMuGXt6Y8xexeivHQ+MnPGHd3pFjVEIxxKkABueMcKMnlN/inm8Nwyeh0Jfa Ejf9RKleiW5Rq/ZZ2nac0KVgCBRQ5l/docjpMG5j43WBkJfxr7R7+hT0MXJinwWp o2VnkXXCRyjwLFBkZ2OhQtyxsrHpeWXz7FcGslAWIokSAmu9+B1ur/ehMs81EzVg em/qEgUS7y3bNsDMS0lbWSqIA3twJv0Wq+KVu3R1JyMFJc5blJENRTxiFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGwLoEgffp5aBnBPOrwVEiiGSbjUMB8GA1UdIwQY MBaAFA5G8ett3U/+/hg4ADAr5jbP6WU3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGtieDYyM2RUXzctR0RnQU1Ddm1Oc19wWlRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi81NThhZmUtNDlmZS00MzhlLWJkMzct ZjRmY2VkMzViMzUyLzEvRGtieDYyM2RUXzctR0RnQU1Ddm1Oc19wWlRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi81NThhZmUtNDlmZS00MzhlLWJkMzctZjRmY2VkMzViMzUy LzEvRGtieDYyM2RUXzctR0RnQU1Ddm1Oc19wWlRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOO5NnFtk 9KuBhjbm2y8HptITQhOvFVpRaoHGDTMqGGkSbteP+PsxXkNmu1baHP1/vUfj7dDX dh8l/ytWh7HOz8HfX9o19RHJf2WYjxgL2OCxjNZivXKs59C3MZAyLHnu6d/LduDR z01ExY6aNVHf763C7LnHyOrCuND6OAe8+nQh4wGpp3NIwJ+39uhOa6bStlj+1dnX uK0Zzy24WLfocKqLJR1yUh8VyPQBeSrCMwFBPQatLA/YRBkVqWF98MMKHXha70YF MekVEcVW6lUOpYLtT0IzuNszSRdYGXTVFUbPGySDJMqBnnP80nMWdK4UAanQt4zi 42ofxOhRUKdyFQ== -----END CERTIFICATE-----Generated at Thu Dec 18 22:38:28 2025 by rpki-client