This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft File: dKjYRykGwgOKrshMez5Wwglr6GA.mft (raw, json) Hash identifier: 7Wsegojy7K98J4sWo4pMzP4N/bOx7QNyGmf8jVKRzBM= Subject key identifier: 8A:A0:C8:5A:92:8A:C3:43:C7:99:E3:49:A7:7C:CF:88:DC:3B:E0:01 Authority key identifier: 74:A8:D8:47:29:06:C2:03:8A:AE:C8:4C:7B:3E:56:C2:09:6B:E8:60 Certificate issuer: /CN=74a8d8472906c2038aaec84c7b3e56c2096be860 Certificate serial: 019B59E3F2D022748678C1C0E1F8A64F8EF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKjYRykGwgOKrshMez5Wwglr6GA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft Manifest number: 14AE Signing time: Fri 26 Dec 2025 09:01:09 +0000 Manifest this update: Fri 26 Dec 2025 09:01:09 +0000 Manifest next update: Sat 27 Dec 2025 09:01:09 +0000 Files and hashes: 1: 8JHdroSmFbW7TogZWDAIS298pfo.roa (hash: goVtVxuEC9QAmF+Kz0vzUzxl+/V8u83qUjrsL0jlHNw=) 2: dKjYRykGwgOKrshMez5Wwglr6GA.crl (hash: mS80HpEiAgR6Mh3ukTX+0s2E71hm+ljnyMZfRqI7hXs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft rsync://rpki.ripe.net/repository/DEFAULT/dKjYRykGwgOKrshMez5Wwglr6GA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:f2:d0:22:74:86:78:c1:c0:e1:f8:a6:4f:8e:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74a8d8472906c2038aaec84c7b3e56c2096be860 Validity Not Before: Dec 26 09:01:09 2025 GMT Not After : Dec 27 09:01:09 2025 GMT Subject: CN=8aa0c85a928ac343c799e349a77ccf88dc3be001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ed:6b:b1:09:5a:c6:25:d3:45:83:36:27:e5: 31:2d:8d:d5:6c:61:fc:c6:e2:38:47:a0:23:25:13: 30:e7:35:ff:ca:d7:ea:ff:6b:c9:03:d5:fc:db:88: 2d:68:cb:63:6c:95:f6:2a:a3:d2:31:14:ee:49:44: 00:8b:69:7e:34:5c:35:d9:19:25:8d:8a:5a:ab:e3: ef:2a:e2:10:5b:26:43:27:2e:5f:26:94:5e:9f:c4: 3f:f5:61:6c:ec:a6:a7:a9:e9:11:f5:46:29:7a:fe: 43:05:6f:78:55:4a:22:5a:27:50:a0:1f:d4:d5:c3: 1a:46:c3:c9:2a:7a:a9:84:ed:98:ec:26:35:e9:a9: 1b:be:92:77:63:0a:6d:f6:cf:cd:ee:11:2f:28:8f: f7:6b:93:cd:e2:87:67:6a:eb:61:cd:ea:cb:76:b9: 52:09:66:ef:22:37:95:67:58:77:4b:a2:e3:bb:09: 9d:14:ef:f8:83:79:67:30:8b:ee:bd:dd:97:19:df: 3b:b2:a6:94:81:fd:2f:5d:97:ad:6e:53:e3:c5:93: bf:d1:1e:f4:af:e2:a5:76:5e:07:63:ad:fc:6b:56: ba:cb:82:71:15:49:67:76:ef:12:cc:ff:ea:d1:e1: 0e:28:b8:07:bd:85:72:7b:e4:c3:6a:4f:17:93:41: a4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:A0:C8:5A:92:8A:C3:43:C7:99:E3:49:A7:7C:CF:88:DC:3B:E0:01 X509v3 Authority Key Identifier: keyid:74:A8:D8:47:29:06:C2:03:8A:AE:C8:4C:7B:3E:56:C2:09:6B:E8:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKjYRykGwgOKrshMez5Wwglr6GA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:8d:71:d2:f7:31:ff:52:0c:ed:45:9f:ee:77:33:0c:d1:53: 1c:6f:d9:36:2a:b6:8c:cd:a7:08:c1:8f:f2:29:a3:7b:4e:da: f0:00:82:7c:5a:68:7f:13:9b:9a:de:0e:45:e5:5a:3b:9b:46: 1e:be:61:9b:64:c0:07:0f:c4:9e:64:94:eb:2c:be:aa:c6:59: 6d:4b:85:83:44:89:81:d8:32:8e:22:c8:eb:ef:07:ff:85:92: 53:c4:43:a2:66:cd:48:3d:40:55:89:54:1d:08:54:8d:6a:5f: c4:a1:88:fb:09:a1:b3:5a:23:69:cd:78:4e:9c:bf:7b:2a:4e: 1e:92:ce:77:03:7c:69:0d:ea:c6:e1:c4:5a:68:78:f2:02:3b: 3b:c2:06:f9:b9:45:5b:8a:83:a0:11:1e:b0:0b:75:42:f5:59: 69:56:7f:ec:f4:ca:23:bf:32:2c:e7:30:da:9f:0f:1d:55:ae: 35:9e:3f:90:0c:79:26:1d:b9:3a:c1:ab:17:0d:48:88:13:c8: 49:6d:70:97:fa:98:5d:e1:ec:40:14:d3:15:b7:1d:b6:50:57: 7f:3e:e7:b5:bf:6f:e7:b7:f6:e8:eb:54:5e:40:e5:0f:b3:99: 6a:db:32:22:b2:75:b1:09:a8:8e:3e:6f:ba:7e:58:c2:dd:17: 7e:7c:05:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ4/LQInSGeMHA4fimT470MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0YThkODQ3MjkwNmMyMDM4YWFlYzg0YzdiM2U1NmMyMDk2 YmU4NjAwHhcNMjUxMjI2MDkwMTA5WhcNMjUxMjI3MDkwMTA5WjAzMTEwLwYDVQQD Eyg4YWEwYzg1YTkyOGFjMzQzYzc5OWUzNDlhNzdjY2Y4OGRjM2JlMDAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqe1rsQlaxiXTRYM2J+UxLY3VbGH8 xuI4R6AjJRMw5zX/ytfq/2vJA9X824gtaMtjbJX2KqPSMRTuSUQAi2l+NFw12Rkl jYpaq+PvKuIQWyZDJy5fJpRen8Q/9WFs7KanqekR9UYpev5DBW94VUoiWidQoB/U 1cMaRsPJKnqphO2Y7CY16akbvpJ3Ywpt9s/N7hEvKI/3a5PN4odnauthzerLdrlS CWbvIjeVZ1h3S6LjuwmdFO/4g3lnMIvuvd2XGd87sqaUgf0vXZetblPjxZO/0R70 r+Kldl4HY638a1a6y4JxFUlndu8SzP/q0eEOKLgHvYVye+TDak8Xk0GkEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIqgyFqSisNDx5njSad8z4jcO+ABMB8GA1UdIwQY MBaAFHSo2EcpBsIDiq7ITHs+VsIJa+hgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEtqWVJ5a0d3Z09LcnNoTWV6NVd3Z2xyNkdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9kNGQ1MTktZTc3NC00MTVhLTkzYWIt Mzk1NmU1NmMxODM1LzEvZEtqWVJ5a0d3Z09LcnNoTWV6NVd3Z2xyNkdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9kNGQ1MTktZTc3NC00MTVhLTkzYWItMzk1NmU1NmMxODM1 LzEvZEtqWVJ5a0d3Z09LcnNoTWV6NVd3Z2xyNkdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdY1x0vcx /1IM7UWf7nczDNFTHG/ZNiq2jM2nCMGP8imje07a8ACCfFpofxObmt4OReVaO5tG Hr5hm2TABw/EnmSU6yy+qsZZbUuFg0SJgdgyjiLI6+8H/4WSU8RDombNSD1AVYlU HQhUjWpfxKGI+wmhs1ojac14Tpy/eypOHpLOdwN8aQ3qxuHEWmh48gI7O8IG+blF W4qDoBEesAt1QvVZaVZ/7PTKI78yLOcw2p8PHVWuNZ4/kAx5Jh25OsGrFw1IiBPI SW1wl/qYXeHsQBTTFbcdtlBXfz7ntb9v57f26OtUXkDlD7OZatsyIrJ1sQmojj5v un5Ywt0XfnwFMw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:22 2025 by rpki-client