This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.mft File: dIZPUCPsYmPvnxb5AYf18oBh0RU.mft (raw, json) Hash identifier: 4k6eaDtojBErrDSBkVBxGfD75ctRcks9sFCWFISKtPo= Subject key identifier: 81:F3:9E:4D:DB:4E:F2:B7:BD:35:8B:2D:18:E1:52:83:E9:EC:9C:BB Authority key identifier: 74:86:4F:50:23:EC:62:63:EF:9F:16:F9:01:87:F5:F2:80:61:D1:15 Certificate issuer: /CN=74864f5023ec6263ef9f16f90187f5f28061d115 Certificate serial: 019AF4654E6A4D060428D1EB8FF959C68898 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIZPUCPsYmPvnxb5AYf18oBh0RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.mft Manifest number: 0D50 Signing time: Sat 06 Dec 2025 16:01:11 +0000 Manifest this update: Sat 06 Dec 2025 16:01:11 +0000 Manifest next update: Sun 07 Dec 2025 16:01:11 +0000 Files and hashes: 1: dIZPUCPsYmPvnxb5AYf18oBh0RU.crl (hash: 0h/B6WD5MIrPWV/18mORUVBQU3Uwj5h28ub/ymKJTJQ=) 2: vj_VJ7c4UiwkU_5yyGsly7O6qIk.roa (hash: RoD9r1uYXNwcvEQVZCci6nqFAbGm9X9wv8JUg9I5naM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.crl rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.mft rsync://rpki.ripe.net/repository/DEFAULT/dIZPUCPsYmPvnxb5AYf18oBh0RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:4e:6a:4d:06:04:28:d1:eb:8f:f9:59:c6:88:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74864f5023ec6263ef9f16f90187f5f28061d115 Validity Not Before: Dec 6 16:01:11 2025 GMT Not After : Dec 7 16:01:11 2025 GMT Subject: CN=81f39e4ddb4ef2b7bd358b2d18e15283e9ec9cbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7f:3d:b3:aa:28:64:de:0f:02:04:86:1a:d0: 5d:23:6d:b0:0a:b9:24:1e:eb:b7:2f:b1:00:60:b1: ec:49:a2:be:a4:82:d8:13:b8:1d:2e:50:d8:92:43: aa:78:49:b5:24:a0:57:4a:ed:05:a6:69:6a:fe:e1: 18:76:5b:72:af:02:10:65:98:fa:bc:6d:5a:b3:95: 8f:56:2d:e0:34:26:74:ab:ca:be:5a:69:33:9f:49: e1:7e:3c:11:cd:bb:f4:53:20:31:8a:32:9f:4e:4f: e9:8e:a8:de:c5:5d:c8:41:1d:8c:93:dd:52:3f:15: 52:f7:e0:ae:44:87:96:43:89:aa:46:0d:35:b9:42: 8d:76:24:55:6f:f1:5e:e8:93:e5:ef:60:54:cb:25: a2:bc:98:7a:27:8d:0a:7e:53:29:cb:4c:18:be:db: 2d:a2:08:14:30:61:3a:00:86:52:1a:50:30:93:be: 45:2f:3c:42:7e:88:f9:67:45:1b:ef:27:d5:79:7b: 34:ee:74:61:9a:42:83:76:8a:29:27:76:a8:1f:15: ed:f0:82:6c:ab:cc:cc:d7:14:64:c1:c8:6c:f6:0d: 0b:3b:4d:af:9a:a8:6c:57:75:4c:37:24:d7:b7:e4: e9:d4:28:f1:50:a8:4c:6d:2a:b9:7c:99:82:49:bd: db:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:F3:9E:4D:DB:4E:F2:B7:BD:35:8B:2D:18:E1:52:83:E9:EC:9C:BB X509v3 Authority Key Identifier: keyid:74:86:4F:50:23:EC:62:63:EF:9F:16:F9:01:87:F5:F2:80:61:D1:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIZPUCPsYmPvnxb5AYf18oBh0RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:1f:5a:9c:09:4f:c0:36:10:10:33:dc:ec:69:ca:41:3c:77: e5:be:e6:78:15:16:d1:c9:af:d0:82:b3:f3:a2:02:bd:2a:a0: 8b:20:7a:de:c3:bf:1b:3f:df:e0:c7:7c:e5:2b:55:ed:6a:33: 9a:95:b7:6b:47:f4:dd:7c:81:78:aa:52:b5:02:0d:e1:a9:40: bd:72:ff:c4:00:74:2b:4a:23:d5:7c:e6:14:86:4a:ad:c6:bb: 00:9a:33:93:db:0e:69:db:92:cf:65:a2:33:1b:36:6c:2f:e0: 9a:7a:cd:ae:4d:f3:e9:b6:7d:91:2d:91:23:4b:22:b8:85:70: 9d:ab:9b:12:3a:93:5c:1e:a6:6f:01:7c:41:df:13:61:37:f3: 40:9a:54:9a:59:c2:96:0f:87:93:6c:cc:ac:7f:91:2a:da:05: e1:bb:59:34:85:2c:90:75:04:33:b4:2a:98:eb:f6:84:c1:c9: 98:27:29:8c:00:83:5c:19:da:32:3b:d8:74:d2:be:5b:35:6a: 51:3b:5c:94:13:09:e7:33:88:ae:80:a3:53:e2:8c:7b:09:52: 89:42:d2:9b:23:3d:bf:1f:20:17:4e:ed:03:0c:80:cb:d3:88: bb:81:70:84:97:3f:85:6f:ca:be:14:9c:de:3b:10:cd:0b:96: 2d:ca:0f:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZU5qTQYEKNHrj/lZxoiYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ODY0ZjUwMjNlYzYyNjNlZjlmMTZmOTAxODdmNWYyODA2 MWQxMTUwHhcNMjUxMjA2MTYwMTExWhcNMjUxMjA3MTYwMTExWjAzMTEwLwYDVQQD Eyg4MWYzOWU0ZGRiNGVmMmI3YmQzNThiMmQxOGUxNTI4M2U5ZWM5Y2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqn89s6ooZN4PAgSGGtBdI22wCrkk Huu3L7EAYLHsSaK+pILYE7gdLlDYkkOqeEm1JKBXSu0Fpmlq/uEYdltyrwIQZZj6 vG1as5WPVi3gNCZ0q8q+Wmkzn0nhfjwRzbv0UyAxijKfTk/pjqjexV3IQR2Mk91S PxVS9+CuRIeWQ4mqRg01uUKNdiRVb/Fe6JPl72BUyyWivJh6J40KflMpy0wYvtst oggUMGE6AIZSGlAwk75FLzxCfoj5Z0Ub7yfVeXs07nRhmkKDdoopJ3aoHxXt8IJs q8zM1xRkwchs9g0LO02vmqhsV3VMNyTXt+Tp1CjxUKhMbSq5fJmCSb3b2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIHznk3bTvK3vTWLLRjhUoPp7Jy7MB8GA1UdIwQY MBaAFHSGT1Aj7GJj758W+QGH9fKAYdEVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZElaUFVDUHNZbVB2bnhiNUFZZjE4b0JoMFJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8wY2E0ZGYtMmUwNi00NDA2LTk2ODgt NzhmMDI4MDVjNzA5LzEvZElaUFVDUHNZbVB2bnhiNUFZZjE4b0JoMFJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS8wY2E0ZGYtMmUwNi00NDA2LTk2ODgtNzhmMDI4MDVjNzA5 LzEvZElaUFVDUHNZbVB2bnhiNUFZZjE4b0JoMFJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcR9anAlP wDYQEDPc7GnKQTx35b7meBUW0cmv0IKz86ICvSqgiyB63sO/Gz/f4Md85StV7Woz mpW3a0f03XyBeKpStQIN4alAvXL/xAB0K0oj1XzmFIZKrca7AJozk9sOaduSz2Wi Mxs2bC/gmnrNrk3z6bZ9kS2RI0siuIVwnaubEjqTXB6mbwF8Qd8TYTfzQJpUmlnC lg+Hk2zMrH+RKtoF4btZNIUskHUEM7QqmOv2hMHJmCcpjACDXBnaMjvYdNK+WzVq UTtclBMJ5zOIroCjU+KMewlSiULSmyM9vx8gF07tAwyAy9OIu4FwhJc/hW/KvhSc 3jsQzQuWLcoPQQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:45:53 2025 by rpki-client