This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft File: dE3Tr9fM584AqerGfgvKmb63Kao.mft (raw, json) Hash identifier: FDzBDP3nKXRQAElAlckDqzh4mUqvsEq0JckuvEIKSEg= Subject key identifier: DA:9C:A6:CF:D4:71:50:0A:BD:F8:6B:6B:9E:69:F7:E2:26:1D:2D:FC Authority key identifier: 74:4D:D3:AF:D7:CC:E7:CE:00:A9:EA:C6:7E:0B:CA:99:BE:B7:29:AA Certificate issuer: /CN=744dd3afd7cce7ce00a9eac67e0bca99beb729aa Certificate serial: 019AF2ADCDD61C47DE66C3A1851A2F032658 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dE3Tr9fM584AqerGfgvKmb63Kao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 08:01:07 +0000 Manifest this update: Sat 06 Dec 2025 08:01:07 +0000 Manifest next update: Sun 07 Dec 2025 08:01:07 +0000 Files and hashes: 1: dE3Tr9fM584AqerGfgvKmb63Kao.crl (hash: PTeiJFeDFL/OzUywDi8c/tfuiE9tjRHvbRtFdROs3i0=) 2: fOC0mLVVaWFlMUvT0z_PddjsHw8.roa (hash: BmfmQSKAMKow/2vkZFChgOrrtOQvA5Kh+ohq4iFZyJg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.crl rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft rsync://rpki.ripe.net/repository/DEFAULT/dE3Tr9fM584AqerGfgvKmb63Kao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:cd:d6:1c:47:de:66:c3:a1:85:1a:2f:03:26:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=744dd3afd7cce7ce00a9eac67e0bca99beb729aa Validity Not Before: Dec 6 08:01:07 2025 GMT Not After : Dec 7 08:01:07 2025 GMT Subject: CN=da9ca6cfd471500abdf86b6b9e69f7e2261d2dfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c7:8e:52:f6:44:e9:fe:8d:8f:1b:89:f1:f0: e3:8a:96:7e:7f:92:6f:37:a3:fc:23:65:d1:e6:03: db:e9:62:07:bd:1a:af:94:33:b5:a2:c0:79:1c:0a: fb:bb:1a:f2:40:ba:fe:37:1d:2b:c5:58:2f:fd:ca: 9d:65:39:4e:96:c7:f2:12:ab:91:ee:de:fc:66:37: 3b:87:5e:5a:59:2a:5c:a1:f8:8e:c7:5d:b9:aa:eb: a8:d6:1c:86:f8:be:12:50:a4:9d:a2:0b:d0:52:e4: dc:13:39:7e:20:4e:2f:6f:cc:a3:5e:06:d2:ab:45: b4:4f:a3:d7:78:93:2f:2b:72:43:0a:be:34:48:23: 38:e6:11:bb:71:e4:fa:7c:c7:f0:f9:fa:e6:35:c9: 4e:47:92:be:0c:63:95:56:28:bf:d2:37:0d:7b:5a: 74:55:67:1f:13:35:9b:f4:b9:f2:9c:e5:73:ac:95: 2f:f3:a3:6c:ba:9a:92:de:0c:a1:e8:f9:76:31:29: 2a:fb:91:71:4d:63:dd:3e:f6:b9:87:da:70:cf:db: be:91:fd:46:b2:d7:d0:2d:52:b0:c5:06:5d:21:e6: e1:23:b4:a2:73:44:1d:9b:5d:14:11:69:97:77:0e: 3a:4d:cf:88:a9:91:cb:5f:ba:dd:50:b7:60:ef:6e: 99:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:9C:A6:CF:D4:71:50:0A:BD:F8:6B:6B:9E:69:F7:E2:26:1D:2D:FC X509v3 Authority Key Identifier: keyid:74:4D:D3:AF:D7:CC:E7:CE:00:A9:EA:C6:7E:0B:CA:99:BE:B7:29:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE3Tr9fM584AqerGfgvKmb63Kao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2ea594-a2ca-4ffa-89ee-8921b0559e90/1/dE3Tr9fM584AqerGfgvKmb63Kao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:fe:22:42:00:4c:15:1e:9f:84:54:f5:88:aa:dc:93:9d:0d: 68:91:f2:8f:45:49:22:9b:70:ca:05:06:e7:ef:c0:7d:5e:43: 98:5c:4f:0d:54:35:c3:e2:15:f3:14:9d:a4:3e:3a:78:bb:87: 49:8c:4d:ee:b4:54:fa:fc:3b:34:41:9c:a7:6f:95:3f:e3:9f: 82:93:e9:68:7f:40:c1:be:e2:40:64:09:6d:a5:3a:83:ec:90: 34:3e:b6:72:e5:83:6a:e6:db:38:59:71:e4:8f:11:ca:37:cc: ab:75:75:d9:ca:0e:bc:60:39:66:5d:44:aa:de:db:f0:d6:4c: 92:7a:10:bb:d3:bc:13:cb:d1:5e:6b:3a:94:81:5f:52:ed:2e: 0a:18:51:eb:09:bf:ee:69:c6:0d:13:61:df:57:77:cc:0a:b1: fb:c3:57:d6:93:b9:bd:11:10:45:58:ec:ac:fc:c7:20:d8:91: f3:5c:87:4d:57:9c:30:d2:46:8c:38:fe:5c:c8:ab:b7:79:e4: fe:b8:57:0b:c1:05:39:45:49:5b:b4:93:3f:86:99:6c:70:6b: 13:56:eb:bf:00:ba:3b:51:b6:0c:bc:47:dd:04:f9:2f:df:0c: 74:a4:b6:e6:f2:8b:6b:09:38:d6:24:fa:5a:be:bb:96:6f:b5: e4:51:5b:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrc3WHEfeZsOhhRovAyZYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NGRkM2FmZDdjY2U3Y2UwMGE5ZWFjNjdlMGJjYTk5YmVi NzI5YWEwHhcNMjUxMjA2MDgwMTA3WhcNMjUxMjA3MDgwMTA3WjAzMTEwLwYDVQQD EyhkYTljYTZjZmQ0NzE1MDBhYmRmODZiNmI5ZTY5ZjdlMjI2MWQyZGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsseOUvZE6f6NjxuJ8fDjipZ+f5Jv N6P8I2XR5gPb6WIHvRqvlDO1osB5HAr7uxryQLr+Nx0rxVgv/cqdZTlOlsfyEquR 7t78Zjc7h15aWSpcofiOx125quuo1hyG+L4SUKSdogvQUuTcEzl+IE4vb8yjXgbS q0W0T6PXeJMvK3JDCr40SCM45hG7ceT6fMfw+frmNclOR5K+DGOVVii/0jcNe1p0 VWcfEzWb9LnynOVzrJUv86NsupqS3gyh6Pl2MSkq+5FxTWPdPva5h9pwz9u+kf1G stfQLVKwxQZdIebhI7Sic0Qdm10UEWmXdw46Tc+IqZHLX7rdULdg726ZzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNqcps/UcVAKvfhra55p9+ImHS38MB8GA1UdIwQY MBaAFHRN06/XzOfOAKnqxn4Lypm+tymqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEUzVHI5Zk01ODRBcWVyR2ZndkttYjYzS2FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8yZWE1OTQtYTJjYS00ZmZhLTg5ZWUt ODkyMWIwNTU5ZTkwLzEvZEUzVHI5Zk01ODRBcWVyR2ZndkttYjYzS2FvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8yZWE1OTQtYTJjYS00ZmZhLTg5ZWUtODkyMWIwNTU5ZTkw LzEvZEUzVHI5Zk01ODRBcWVyR2ZndkttYjYzS2FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuP4iQgBM FR6fhFT1iKrck50NaJHyj0VJIptwygUG5+/AfV5DmFxPDVQ1w+IV8xSdpD46eLuH SYxN7rRU+vw7NEGcp2+VP+OfgpPpaH9Awb7iQGQJbaU6g+yQND62cuWDaubbOFlx 5I8RyjfMq3V12coOvGA5Zl1Eqt7b8NZMknoQu9O8E8vRXms6lIFfUu0uChhR6wm/ 7mnGDRNh31d3zAqx+8NX1pO5vREQRVjsrPzHINiR81yHTVecMNJGjDj+XMirt3nk /rhXC8EFOUVJW7STP4aZbHBrE1brvwC6O1G2DLxH3QT5L98MdKS25vKLawk41iT6 Wr67lm+15FFbWA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:21:15 2025 by rpki-client