This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft File: D3Tlry-nIVykabJ8EHnx_9X8rvg.mft (raw, json) Hash identifier: +UXmCfIjSEfUc9GwnzTXKdvWmEKPJ5Ht2TCFRrOf3Ms= Subject key identifier: 42:F5:77:F6:A6:26:A1:10:96:9B:50:8D:CD:4F:B5:26:24:35:4D:83 Authority key identifier: 0F:74:E5:AF:2F:A7:21:5C:A4:69:B2:7C:10:79:F1:FF:D5:FC:AE:F8 Certificate issuer: /CN=0f74e5af2fa7215ca469b27c1079f1ffd5fcaef8 Certificate serial: 019AF3891040F3D81FD9AF9D94166E653095 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft Manifest number: 05F1 Signing time: Sat 06 Dec 2025 12:00:37 +0000 Manifest this update: Sat 06 Dec 2025 12:00:37 +0000 Manifest next update: Sun 07 Dec 2025 12:00:37 +0000 Files and hashes: 1: D3Tlry-nIVykabJ8EHnx_9X8rvg.crl (hash: 7MOkz35L6ffg3cbYeN0kf0k5y/vsbV37Rnpkzhgj+nc=) 2: VDPfxaZNYgN6f0mgtDD2wmc6NUg.roa (hash: 0dxJ0L7unUdYddqR9bLGYECF59D15vEhelIex1V/ecQ=) 3: sllzpkHFh9mOLjlCML4tbQK0pwU.roa (hash: E6feljoCdpMR0hz/J2bpGEFeQDlLz1z/a780M0tQTGM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.crl rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:10:40:f3:d8:1f:d9:af:9d:94:16:6e:65:30:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f74e5af2fa7215ca469b27c1079f1ffd5fcaef8 Validity Not Before: Dec 6 12:00:37 2025 GMT Not After : Dec 7 12:00:37 2025 GMT Subject: CN=42f577f6a626a110969b508dcd4fb52624354d83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:73:d6:f4:d4:33:f6:2d:d3:cf:0c:d9:82:4b: 9e:50:d0:4d:28:e9:16:8e:e1:33:2a:f6:5b:27:55: ed:cd:cc:e9:9b:ef:99:03:fb:67:37:a3:f9:93:4c: 7c:a8:55:1c:12:8f:b6:36:49:5b:f5:d6:3a:72:51: 1a:52:cd:5f:e6:db:2e:fa:dd:86:dc:d4:c3:0e:35: 55:23:ce:ec:48:be:48:08:c2:11:73:45:68:b6:8f: b1:ec:7f:af:f9:36:94:36:11:ad:dc:d2:6e:3b:e3: 9c:90:42:13:59:c9:0a:50:3c:15:f1:af:98:92:e7: 76:73:12:7b:0b:c0:09:ff:29:70:60:e4:e3:eb:36: 21:62:49:4b:74:f7:6f:f1:2c:f8:3f:54:a6:e7:23: 97:93:c3:a3:f5:29:b7:a0:94:d2:8e:b3:e6:24:37: d0:95:ef:29:c2:73:67:3a:91:17:c9:a6:ce:52:6e: 74:da:76:f1:ce:7e:1c:1a:77:89:b4:86:ec:c8:71: f0:73:14:93:23:03:61:51:8e:99:99:24:f0:e0:70: 65:ba:31:0e:de:22:66:a6:95:fd:8e:1e:cd:b3:a1: 2a:06:76:b6:96:1d:a7:db:19:e4:08:94:b9:86:11: df:c8:2c:a7:db:1e:95:8f:46:05:00:c5:35:e1:57: 29:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:F5:77:F6:A6:26:A1:10:96:9B:50:8D:CD:4F:B5:26:24:35:4D:83 X509v3 Authority Key Identifier: keyid:0F:74:E5:AF:2F:A7:21:5C:A4:69:B2:7C:10:79:F1:FF:D5:FC:AE:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:43:cb:36:20:b5:c4:5a:fe:f1:c7:ec:9e:12:1b:4d:b2:10: 83:43:f6:42:fb:5e:4c:34:04:1d:68:a5:8f:08:bf:11:45:a7: 83:7a:e5:b2:b9:c7:c8:3c:28:26:54:0f:42:6a:e8:5e:78:ae: 0e:a3:b9:6e:48:35:ee:49:ce:48:0a:57:a2:6d:7f:dc:a4:f2: be:fd:f0:60:a6:4a:6d:ff:54:84:30:7f:95:de:d6:37:bc:88: c2:0a:d4:21:f8:3c:d9:6c:09:7f:a6:b1:8f:84:27:76:29:7a: 31:95:d6:bf:f9:97:29:eb:a5:a4:7c:b3:5f:ad:f7:3c:f5:23: cc:5c:df:c8:a0:f3:fb:56:04:21:56:9a:cb:99:2d:80:e3:70: fb:05:4d:65:69:62:49:f1:63:75:56:37:d9:ca:43:30:6b:2b: c2:41:f1:3f:0e:02:19:01:ab:3c:2a:16:f9:22:bf:3c:c1:40: a3:f0:24:21:1c:5b:2f:de:88:ef:35:f7:65:2a:6b:6c:3f:0b: 3d:04:4d:8b:11:df:db:8b:02:33:89:37:f7:8b:56:96:64:77: ac:5e:2d:45:4f:33:8a:22:5a:4a:db:76:fa:a0:79:00:09:28: f6:56:50:ed:b4:37:37:fb:98:d0:35:7f:3b:20:6a:37:00:55: 23:d2:eb:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziRBA89gf2a+dlBZuZTCVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNzRlNWFmMmZhNzIxNWNhNDY5YjI3YzEwNzlmMWZmZDVm Y2FlZjgwHhcNMjUxMjA2MTIwMDM3WhcNMjUxMjA3MTIwMDM3WjAzMTEwLwYDVQQD Eyg0MmY1NzdmNmE2MjZhMTEwOTY5YjUwOGRjZDRmYjUyNjI0MzU0ZDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3PW9NQz9i3TzwzZgkueUNBNKOkW juEzKvZbJ1Xtzczpm++ZA/tnN6P5k0x8qFUcEo+2Nklb9dY6clEaUs1f5tsu+t2G 3NTDDjVVI87sSL5ICMIRc0Voto+x7H+v+TaUNhGt3NJuO+OckEITWckKUDwV8a+Y kud2cxJ7C8AJ/ylwYOTj6zYhYklLdPdv8Sz4P1Sm5yOXk8Oj9Sm3oJTSjrPmJDfQ le8pwnNnOpEXyabOUm502nbxzn4cGneJtIbsyHHwcxSTIwNhUY6ZmSTw4HBlujEO 3iJmppX9jh7Ns6EqBna2lh2n2xnkCJS5hhHfyCyn2x6Vj0YFAMU14VcpRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEL1d/amJqEQlptQjc1PtSYkNU2DMB8GA1UdIwQY MBaAFA905a8vpyFcpGmyfBB58f/V/K74MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDNUbHJ5LW5JVnlrYWJKOEVIbnhfOVg4cnZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC80OWFjZTgtMjkxZC00ZDRmLTkyMmUt ZWFiY2JjMDgzZjliLzEvRDNUbHJ5LW5JVnlrYWJKOEVIbnhfOVg4cnZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC80OWFjZTgtMjkxZC00ZDRmLTkyMmUtZWFiY2JjMDgzZjli LzEvRDNUbHJ5LW5JVnlrYWJKOEVIbnhfOVg4cnZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG0PLNiC1 xFr+8cfsnhIbTbIQg0P2QvteTDQEHWiljwi/EUWng3rlsrnHyDwoJlQPQmroXniu DqO5bkg17knOSApXom1/3KTyvv3wYKZKbf9UhDB/ld7WN7yIwgrUIfg82WwJf6ax j4Qndil6MZXWv/mXKeulpHyzX633PPUjzFzfyKDz+1YEIVaay5ktgONw+wVNZWli SfFjdVY32cpDMGsrwkHxPw4CGQGrPCoW+SK/PMFAo/AkIRxbL96I7zX3ZSprbD8L PQRNixHf24sCM4k394tWlmR3rF4tRU8ziiJaStt2+qB5AAko9lZQ7bQ3N/uY0DV/ OyBqNwBVI9LrzQ== -----END CERTIFICATE-----Generated at Sat Dec 6 18:51:04 2025 by rpki-client