This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.mft File: dGNy_s6bo5ZuFegFXAWHxQPAOas.mft (raw, json) Hash identifier: xeSZb1OeER92NjfmmpbVxczqI2lElS6QaSd4sEJXhws= Subject key identifier: 79:2A:99:40:09:9C:9D:7F:2A:57:3E:6C:F5:F2:43:BD:ED:DE:69:FA Authority key identifier: 74:63:72:FE:CE:9B:A3:96:6E:15:E8:05:5C:05:87:C5:03:C0:39:AB Certificate issuer: /CN=746372fece9ba3966e15e8055c0587c503c039ab Certificate serial: 019AF12E7D8CE7EE361E7E464B58F50FDE3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNy_s6bo5ZuFegFXAWHxQPAOas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.mft Manifest number: 1208 Signing time: Sat 06 Dec 2025 01:02:26 +0000 Manifest this update: Sat 06 Dec 2025 01:02:26 +0000 Manifest next update: Sun 07 Dec 2025 01:02:26 +0000 Files and hashes: 1: dGNy_s6bo5ZuFegFXAWHxQPAOas.crl (hash: 2dBgQg+JhUZGQYE2hx/n8119jk06CFfxW819zYqnLr0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.crl rsync://rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.mft rsync://rpki.ripe.net/repository/DEFAULT/dGNy_s6bo5ZuFegFXAWHxQPAOas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:7d:8c:e7:ee:36:1e:7e:46:4b:58:f5:0f:de:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746372fece9ba3966e15e8055c0587c503c039ab Validity Not Before: Dec 6 01:02:26 2025 GMT Not After : Dec 7 01:02:26 2025 GMT Subject: CN=792a9940099c9d7f2a573e6cf5f243bdedde69fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:6b:10:d5:e7:39:ac:1f:ae:e1:80:fb:90:00: 91:88:56:3c:8e:47:0a:d7:a3:ec:d2:e2:70:05:4d: 4c:c3:44:e1:b4:35:2e:32:e0:51:90:ed:02:13:1d: ca:25:9f:8c:8f:06:e0:8c:fa:bb:76:9c:b9:dc:90: 95:89:4b:e2:82:3c:3a:8c:a7:51:1d:50:dc:63:f3: bb:99:fb:c1:f7:5b:a4:5e:cd:ef:ed:c1:1f:bc:94: 41:76:bd:bc:6b:db:3d:64:8e:b8:44:c2:86:bb:d6: bc:4c:0d:75:1a:96:82:b6:23:15:64:db:ec:2f:bd: c8:bb:ca:59:88:4c:c7:08:1e:82:33:8a:d2:0c:e7: ee:16:ae:0e:7d:1a:de:cb:af:8c:4c:98:be:58:a5: bf:0e:a7:b6:43:dd:0c:b7:d9:90:ca:5f:ef:fe:01: 44:7a:ca:6c:c3:0f:99:a0:38:e7:46:ac:fe:f4:47: 79:ec:ce:d9:f4:38:6c:90:e4:03:9a:04:f2:0f:5e: 9b:ba:a2:43:6c:b0:c0:bb:a6:ac:66:88:cd:57:ea: 77:a8:c8:4b:cd:7b:68:cd:3b:ab:3b:52:a1:44:f6: cc:23:c3:8e:68:63:07:f1:3c:6c:72:f2:71:2a:4f: 0b:3d:a3:07:63:01:33:45:66:c0:71:0b:de:d2:5d: 96:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:2A:99:40:09:9C:9D:7F:2A:57:3E:6C:F5:F2:43:BD:ED:DE:69:FA X509v3 Authority Key Identifier: keyid:74:63:72:FE:CE:9B:A3:96:6E:15:E8:05:5C:05:87:C5:03:C0:39:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNy_s6bo5ZuFegFXAWHxQPAOas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3cbb1b-6927-45c9-b1d4-1d7d55b22cc9/1/dGNy_s6bo5ZuFegFXAWHxQPAOas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:36:18:e6:00:d4:da:14:a4:33:39:68:78:82:9a:1f:c8:25: bd:77:1b:f6:54:3e:f9:75:67:cc:90:08:86:da:a9:e4:b5:25: 1d:8a:69:ce:06:b8:a0:d3:9c:54:d6:84:f9:7d:d8:af:11:b4: 77:01:b3:e0:f6:cc:f0:46:2c:58:f1:2a:0d:15:87:ba:af:81: dc:36:11:4e:8c:25:7c:57:62:18:59:ce:e6:78:26:cf:2f:e5: 38:eb:db:e2:f7:c7:bd:6a:3d:38:16:d8:b5:d4:b1:1b:2b:62: ba:85:bb:99:87:18:62:50:4e:0c:75:c1:1a:95:a8:b9:64:98: 70:c0:86:f8:d4:64:97:bf:86:d3:7a:75:72:07:73:a2:e8:75: 1a:01:1e:11:04:9c:aa:b0:7b:5f:f3:27:a9:43:b5:47:c0:18: 1a:41:f2:a3:13:0b:a6:98:bf:26:53:ba:1a:ff:f0:4e:02:76: da:a5:5f:3d:8f:47:bf:a1:44:a7:45:da:a6:3c:7a:4e:bd:5e: cd:b6:0e:e7:dd:45:16:70:ca:12:bd:ab:87:b7:09:1b:fd:e0: 4c:e0:57:c3:52:ce:79:77:b5:d6:cd:c3:6a:ce:ce:bf:8d:e1: 44:2d:4b:1a:03:ed:ce:f6:bb:be:51:2d:53:2d:e7:fc:11:d4: 71:32:e5:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLn2M5+42Hn5GS1j1D947MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NjM3MmZlY2U5YmEzOTY2ZTE1ZTgwNTVjMDU4N2M1MDNj MDM5YWIwHhcNMjUxMjA2MDEwMjI2WhcNMjUxMjA3MDEwMjI2WjAzMTEwLwYDVQQD Eyg3OTJhOTk0MDA5OWM5ZDdmMmE1NzNlNmNmNWYyNDNiZGVkZGU2OWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA72sQ1ec5rB+u4YD7kACRiFY8jkcK 16Ps0uJwBU1Mw0ThtDUuMuBRkO0CEx3KJZ+MjwbgjPq7dpy53JCViUvigjw6jKdR HVDcY/O7mfvB91ukXs3v7cEfvJRBdr28a9s9ZI64RMKGu9a8TA11GpaCtiMVZNvs L73Iu8pZiEzHCB6CM4rSDOfuFq4OfRrey6+MTJi+WKW/Dqe2Q90Mt9mQyl/v/gFE espsww+ZoDjnRqz+9Ed57M7Z9DhskOQDmgTyD16buqJDbLDAu6asZojNV+p3qMhL zXtozTurO1KhRPbMI8OOaGMH8TxscvJxKk8LPaMHYwEzRWbAcQve0l2WgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHkqmUAJnJ1/Klc+bPXyQ73t3mn6MB8GA1UdIwQY MBaAFHRjcv7Om6OWbhXoBVwFh8UDwDmrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEdOeV9zNmJvNVp1RmVnRlhBV0h4UVBBT2FzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8zY2JiMWItNjkyNy00NWM5LWIxZDQt MWQ3ZDU1YjIyY2M5LzEvZEdOeV9zNmJvNVp1RmVnRlhBV0h4UVBBT2FzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC8zY2JiMWItNjkyNy00NWM5LWIxZDQtMWQ3ZDU1YjIyY2M5 LzEvZEdOeV9zNmJvNVp1RmVnRlhBV0h4UVBBT2FzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcDYY5gDU 2hSkMzloeIKaH8glvXcb9lQ++XVnzJAIhtqp5LUlHYppzga4oNOcVNaE+X3YrxG0 dwGz4PbM8EYsWPEqDRWHuq+B3DYRTowlfFdiGFnO5ngmzy/lOOvb4vfHvWo9OBbY tdSxGytiuoW7mYcYYlBODHXBGpWouWSYcMCG+NRkl7+G03p1cgdzouh1GgEeEQSc qrB7X/MnqUO1R8AYGkHyoxMLppi/JlO6Gv/wTgJ22qVfPY9Hv6FEp0Xapjx6Tr1e zbYO591FFnDKEr2rh7cJG/3gTOBXw1LOeXe11s3Das7Ov43hRC1LGgPtzva7vlEt Uy3n/BHUcTLlpg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:09:18 2025 by rpki-client