This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft File: Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft (raw, json) Hash identifier: ViVJggEbTJPJOKANAXvsEYH+Cdwqnp5z8MdoUoWNfVM= Subject key identifier: 8A:82:10:87:4E:FE:B2:04:54:6A:C7:0A:0D:F7:6E:70:2F:82:E1:96 Authority key identifier: 0D:CD:A5:D0:60:BA:93:66:BB:43:25:82:8B:57:03:3B:EF:18:E3:C0 Certificate issuer: /CN=0dcda5d060ba9366bb4325828b57033bef18e3c0 Certificate serial: 019AF2ADB842F237C4E16D3C045C887B8833 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 08:01:02 +0000 Manifest this update: Sat 06 Dec 2025 08:01:02 +0000 Manifest next update: Sun 07 Dec 2025 08:01:02 +0000 Files and hashes: 1: Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl (hash: 80JKxbiZUtitTYZhkxx75LmWCarmjRzEkmF6NGSsiK0=) 2: TjtgoaArWXIQWELqrqb3xw0fhW8.roa (hash: U//dwICV6ljEsBioxVlDi+LuHGPP1lPYVY8ZQAvZ64M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:b8:42:f2:37:c4:e1:6d:3c:04:5c:88:7b:88:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dcda5d060ba9366bb4325828b57033bef18e3c0 Validity Not Before: Dec 6 08:01:02 2025 GMT Not After : Dec 7 08:01:02 2025 GMT Subject: CN=8a8210874efeb204546ac70a0df76e702f82e196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:e2:6c:68:ed:73:33:fb:f7:b1:72:10:c3:2b: 22:69:56:52:ee:c8:b6:4c:a4:c3:91:05:93:13:12: d3:d5:2e:84:f5:1e:e9:63:07:e9:23:fd:5d:5c:27: 8b:bd:d0:3d:72:ba:2b:70:b7:83:d0:9c:96:e6:fb: a1:39:e5:87:46:b2:81:64:52:d7:76:a9:0c:cd:f5: 60:2b:b9:4a:f6:30:ba:14:04:5f:ef:48:a5:54:95: 6e:43:1b:bc:94:2b:bc:1a:ac:9a:63:de:18:09:6d: ff:ba:b6:54:d0:0a:07:df:d6:0b:fe:92:6a:bd:f2: c4:65:5c:98:c8:35:4c:23:93:40:07:cd:ae:0e:22: 13:0e:0b:85:d7:03:57:ae:1e:5a:74:4a:39:2f:1a: c1:a4:b5:6d:0d:e0:99:9e:93:ea:63:e5:75:cf:b9: 98:9a:00:fd:86:03:c4:dd:b7:8e:94:74:d5:05:5f: 49:c6:d0:33:47:76:29:e4:7b:9a:04:16:a2:67:66: 7b:da:36:6f:3c:1d:f5:48:89:5e:4f:2d:4a:7e:d9: ec:ee:75:a6:72:8f:bd:27:d2:36:ca:1a:60:d3:6e: e1:ee:0b:9e:fe:95:e5:78:32:8e:4e:95:65:be:bb: 99:c4:b1:a8:50:ce:ee:d7:8e:af:04:61:0b:fc:60: fd:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:82:10:87:4E:FE:B2:04:54:6A:C7:0A:0D:F7:6E:70:2F:82:E1:96 X509v3 Authority Key Identifier: keyid:0D:CD:A5:D0:60:BA:93:66:BB:43:25:82:8B:57:03:3B:EF:18:E3:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:76:05:41:ad:17:d7:b9:4f:c7:0e:cd:d6:c2:b5:dd:3d:88: 08:4f:16:52:c5:d9:33:7c:82:80:56:69:17:72:94:92:21:ee: 39:4a:a8:01:ed:95:fc:2e:2d:9c:67:be:f1:0b:13:ab:2e:ae: cf:e3:3c:94:0e:c5:e1:e8:a7:03:c2:76:1c:c9:2c:23:3a:23: 60:68:fa:15:f3:c2:05:d8:00:4c:99:96:7c:cf:03:65:79:94: 90:2a:6d:b7:88:03:c1:ed:3b:76:54:4f:6f:76:04:b2:4f:3a: ae:e3:0a:11:7a:79:6a:5b:27:d1:3c:50:6e:c5:ff:30:dd:3e: a8:c2:d3:46:14:ce:92:12:2f:d2:e0:31:ee:24:f0:d3:b5:20: 85:7b:36:10:4c:00:1d:67:6d:72:5d:2c:8d:ba:7c:0e:d8:cc: 29:07:f1:4d:92:d7:6d:7d:fa:e5:aa:b6:e9:d2:54:93:68:46: cd:7f:fd:4b:88:c4:85:8d:1c:a0:62:1f:48:6a:d8:3c:9e:fc: c8:3f:aa:b3:cb:d7:fa:e2:96:56:67:ec:4e:ed:bd:a4:bd:37: 5c:fd:81:0c:84:97:67:ae:d1:60:bb:47:da:bb:3a:9c:aa:98: c2:ee:9f:6c:4b:03:cc:ca:c4:5c:41:f6:60:53:8f:d9:ed:73: de:9f:80:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrbhC8jfE4W08BFyIe4gzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkY2RhNWQwNjBiYTkzNjZiYjQzMjU4MjhiNTcwMzNiZWYx OGUzYzAwHhcNMjUxMjA2MDgwMTAyWhcNMjUxMjA3MDgwMTAyWjAzMTEwLwYDVQQD Eyg4YTgyMTA4NzRlZmViMjA0NTQ2YWM3MGEwZGY3NmU3MDJmODJlMTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6uJsaO1zM/v3sXIQwysiaVZS7si2 TKTDkQWTExLT1S6E9R7pYwfpI/1dXCeLvdA9crorcLeD0JyW5vuhOeWHRrKBZFLX dqkMzfVgK7lK9jC6FARf70ilVJVuQxu8lCu8GqyaY94YCW3/urZU0AoH39YL/pJq vfLEZVyYyDVMI5NAB82uDiITDguF1wNXrh5adEo5LxrBpLVtDeCZnpPqY+V1z7mY mgD9hgPE3beOlHTVBV9JxtAzR3Yp5HuaBBaiZ2Z72jZvPB31SIleTy1Kftns7nWm co+9J9I2yhpg027h7gue/pXleDKOTpVlvruZxLGoUM7u146vBGEL/GD9jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIqCEIdO/rIEVGrHCg33bnAvguGWMB8GA1UdIwQY MBaAFA3NpdBgupNmu0MlgotXAzvvGOPAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGMybDBHQzZrMmE3UXlXQ2kxY0RPLThZNDhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9lMTYwMDEtNjUyNS00MDRiLTliNDkt YTU3YjFiMzkyMjA1LzEvRGMybDBHQzZrMmE3UXlXQ2kxY0RPLThZNDhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9lMTYwMDEtNjUyNS00MDRiLTliNDktYTU3YjFiMzkyMjA1 LzEvRGMybDBHQzZrMmE3UXlXQ2kxY0RPLThZNDhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI3YFQa0X 17lPxw7N1sK13T2ICE8WUsXZM3yCgFZpF3KUkiHuOUqoAe2V/C4tnGe+8QsTqy6u z+M8lA7F4einA8J2HMksIzojYGj6FfPCBdgATJmWfM8DZXmUkCptt4gDwe07dlRP b3YEsk86ruMKEXp5alsn0TxQbsX/MN0+qMLTRhTOkhIv0uAx7iTw07UghXs2EEwA HWdtcl0sjbp8DtjMKQfxTZLXbX365aq26dJUk2hGzX/9S4jEhY0coGIfSGrYPJ78 yD+qs8vX+uKWVmfsTu29pL03XP2BDISXZ67RYLtH2rs6nKqYwu6fbEsDzMrEXEH2 YFOP2e1z3p+AiQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:19:19 2025 by rpki-client