This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft File: dE3LcujLR4z8SyWusfA7QGJmN1w.mft (raw, json) Hash identifier: FKjhWA6cspZW7D+hA4cSMIgSo0Tvg4pPicbSqIdAKIg= Subject key identifier: 87:A1:2E:0A:8E:92:98:37:FF:6F:F6:DD:2D:8A:27:C0:3E:B9:0E:F9 Authority key identifier: 74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C Certificate issuer: /CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c Certificate serial: 019AF42E881F3D5C982A3FA0D6F4484FFF9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft Manifest number: 0BB0 Signing time: Sat 06 Dec 2025 15:01:21 +0000 Manifest this update: Sat 06 Dec 2025 15:01:21 +0000 Manifest next update: Sun 07 Dec 2025 15:01:21 +0000 Files and hashes: 1: 8cafwJu77pkBukQtIkYtwta4vzE.roa (hash: 5ZeO0GQQRhcOKBhez5TUCQIoMyl73wJ5RRHIFaIhJkM=) 2: dE3LcujLR4z8SyWusfA7QGJmN1w.crl (hash: AYl6rOYv/uyNlCe0AAKLqEIo4LO6tE85UtpumCcqXQE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:88:1f:3d:5c:98:2a:3f:a0:d6:f4:48:4f:ff:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c Validity Not Before: Dec 6 15:01:21 2025 GMT Not After : Dec 7 15:01:21 2025 GMT Subject: CN=87a12e0a8e929837ff6ff6dd2d8a27c03eb90ef9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:17:20:9d:d3:c7:9a:c7:f8:39:37:ab:8b:80: 04:3a:ab:10:71:45:ef:48:8d:69:d3:6a:0d:ff:ff: 8c:25:7c:8d:20:ef:65:4b:e1:42:d6:81:4a:f3:a7: 68:dc:4d:de:39:22:fd:22:59:50:9b:68:37:ea:d2: 6f:ab:d4:a6:77:5b:7d:9d:43:3b:54:14:e6:73:94: e4:ca:38:dd:6a:0e:87:d0:3b:b4:22:e2:ec:a5:be: ad:89:e8:a4:f4:b4:37:53:c7:69:39:ad:bb:5e:80: a1:b8:14:e9:65:04:2e:3d:a4:86:8c:b3:81:e9:b8: 7b:28:07:20:ed:56:30:2b:26:b4:8c:6c:de:45:04: 6d:40:0d:a3:59:d2:54:e5:fe:2e:c9:4e:30:bd:30: 48:ee:e1:42:1e:43:60:11:7e:ac:a2:19:b2:6d:df: 59:e6:fd:40:9e:c8:56:aa:7c:83:19:10:df:7b:3e: 2c:14:8b:fa:18:9c:e7:98:47:4c:3c:38:5b:e1:fe: 0a:d1:61:52:90:2f:21:bc:72:3f:a4:88:69:35:46: 98:b0:24:46:a6:e3:49:d9:56:28:b0:1a:32:11:26: c9:70:65:ec:94:82:21:55:19:32:b3:b3:50:c3:95: c1:5b:aa:03:6a:a6:37:c7:84:1b:fc:13:16:6b:3b: 58:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:A1:2E:0A:8E:92:98:37:FF:6F:F6:DD:2D:8A:27:C0:3E:B9:0E:F9 X509v3 Authority Key Identifier: keyid:74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:e2:78:de:4b:7e:44:f9:81:5a:96:7f:61:4a:1a:76:e4:39: 82:d4:73:60:54:ef:54:92:2d:91:ee:45:b5:80:bf:2d:d0:dc: be:98:f6:da:d7:7f:db:ba:88:07:62:be:e8:b6:78:4e:18:25: d6:2c:16:f6:c6:f6:f8:91:82:75:79:db:21:00:fd:65:9f:a0: 94:38:cf:af:96:33:b1:b9:5d:01:7f:61:76:d2:fa:94:60:72: f8:d8:3a:0d:cc:c0:a6:fa:78:ab:ea:3c:02:cb:a5:2d:72:69: 95:5c:14:c7:85:6a:33:4a:50:7e:f8:db:ce:b8:60:78:51:c2: d8:44:71:6f:ac:81:c5:3e:54:d1:42:6e:64:ab:b6:93:a2:60: a3:34:cb:fc:af:c7:e3:80:cc:39:dc:f0:e0:21:df:7d:03:23: 4d:3c:f2:f1:be:15:c5:44:8b:ad:c1:86:ec:16:77:1b:36:48: dd:b9:b5:dd:22:9c:de:88:27:f3:c1:a6:8c:12:3b:18:71:4b: f0:a2:93:d8:5b:da:bf:13:d7:4d:15:b5:c4:4a:0e:11:d6:36: 03:2f:9c:7e:4f:93:35:d8:e9:97:e0:68:98:75:3a:d0:4e:7c: fb:c2:ae:c1:ee:be:fc:cf:54:f0:bc:90:aa:b9:75:2b:a2:f8: 12:a1:b3:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LogfPVyYKj+g1vRIT/+cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NGRjYjcyZThjYjQ3OGNmYzRiMjVhZWIxZjAzYjQwNjI2 NjM3NWMwHhcNMjUxMjA2MTUwMTIxWhcNMjUxMjA3MTUwMTIxWjAzMTEwLwYDVQQD Eyg4N2ExMmUwYThlOTI5ODM3ZmY2ZmY2ZGQyZDhhMjdjMDNlYjkwZWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRcgndPHmsf4OTeri4AEOqsQcUXv SI1p02oN//+MJXyNIO9lS+FC1oFK86do3E3eOSL9IllQm2g36tJvq9Smd1t9nUM7 VBTmc5Tkyjjdag6H0Du0IuLspb6tieik9LQ3U8dpOa27XoChuBTpZQQuPaSGjLOB 6bh7KAcg7VYwKya0jGzeRQRtQA2jWdJU5f4uyU4wvTBI7uFCHkNgEX6sohmybd9Z 5v1AnshWqnyDGRDfez4sFIv6GJznmEdMPDhb4f4K0WFSkC8hvHI/pIhpNUaYsCRG puNJ2VYosBoyESbJcGXslIIhVRkys7NQw5XBW6oDaqY3x4Qb/BMWaztYnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIehLgqOkpg3/2/23S2KJ8A+uQ75MB8GA1UdIwQY MBaAFHRNy3Loy0eM/EslrrHwO0BiZjdcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEUzTGN1akxSNHo4U3lXdXNmQTdRR0ptTjF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81ZTFiZTktZTRlYS00Yzg0LWE4Yjct ZDBkNDc2ZjQxZmQ2LzEvZEUzTGN1akxSNHo4U3lXdXNmQTdRR0ptTjF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi81ZTFiZTktZTRlYS00Yzg0LWE4YjctZDBkNDc2ZjQxZmQ2 LzEvZEUzTGN1akxSNHo4U3lXdXNmQTdRR0ptTjF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoOJ43kt+ RPmBWpZ/YUoaduQ5gtRzYFTvVJItke5FtYC/LdDcvpj22td/27qIB2K+6LZ4Thgl 1iwW9sb2+JGCdXnbIQD9ZZ+glDjPr5YzsbldAX9hdtL6lGBy+Ng6DczApvp4q+o8 AsulLXJplVwUx4VqM0pQfvjbzrhgeFHC2ERxb6yBxT5U0UJuZKu2k6JgozTL/K/H 44DMOdzw4CHffQMjTTzy8b4VxUSLrcGG7BZ3GzZI3bm13SKc3ogn88GmjBI7GHFL 8KKT2FvavxPXTRW1xEoOEdY2Ay+cfk+TNdjpl+BomHU60E58+8Kuwe6+/M9U8LyQ qrl1K6L4EqGzug== -----END CERTIFICATE-----Generated at Sat Dec 6 23:32:18 2025 by rpki-client