This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.mft File: dWQXildKJgm7bv8cxSG0U9dch9w.mft (raw, json) Hash identifier: sxas5d/f117X1I67DwPivBCd5ui8+6gkSIL+RBgwSuo= Subject key identifier: 91:A4:1D:A8:EA:20:38:ED:08:77:B3:D0:A9:64:CD:A8:38:6C:EB:CC Authority key identifier: 75:64:17:8A:57:4A:26:09:BB:6E:FF:1C:C5:21:B4:53:D7:5C:87:DC Certificate issuer: /CN=7564178a574a2609bb6eff1cc521b453d75c87dc Certificate serial: 019AF31C431BD53321F9C0F5D6A80B43AFCA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWQXildKJgm7bv8cxSG0U9dch9w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.mft Manifest number: 0EC2 Signing time: Sat 06 Dec 2025 10:01:46 +0000 Manifest this update: Sat 06 Dec 2025 10:01:46 +0000 Manifest next update: Sun 07 Dec 2025 10:01:46 +0000 Files and hashes: 1: dWQXildKJgm7bv8cxSG0U9dch9w.crl (hash: QiyRXV7dqJTu8QJmD46kjzAqPkdhkQ6DPrJsBYFmvNI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.mft rsync://rpki.ripe.net/repository/DEFAULT/dWQXildKJgm7bv8cxSG0U9dch9w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:43:1b:d5:33:21:f9:c0:f5:d6:a8:0b:43:af:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7564178a574a2609bb6eff1cc521b453d75c87dc Validity Not Before: Dec 6 10:01:46 2025 GMT Not After : Dec 7 10:01:46 2025 GMT Subject: CN=91a41da8ea2038ed0877b3d0a964cda8386cebcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4e:01:f2:ca:fd:5d:e9:64:b3:d5:ee:4b:19: 98:60:2f:7e:84:4f:c5:6c:b6:47:8e:55:60:60:77: 43:aa:84:77:ff:ad:8e:73:e5:2c:32:4e:df:a0:ab: d4:ce:a5:13:f0:0c:f1:14:95:82:01:8d:82:52:0f: 32:fd:7b:77:89:84:c4:79:47:07:7c:0d:28:38:18: c4:dc:ca:f1:31:63:ab:59:fd:cb:1e:8d:e6:6b:4a: 3a:94:8e:c7:d4:ba:f2:90:ad:65:f4:91:84:76:6a: 08:23:62:3f:4f:8c:44:c1:a3:d3:8b:5f:58:33:b5: 42:9c:f5:ba:5c:b7:38:40:5d:c2:66:d1:7a:59:04: f3:07:dd:76:cd:d8:4c:d2:f2:c3:29:d5:db:df:22: b6:a4:01:99:07:a5:7b:d6:39:a2:8f:b3:49:d8:2c: 30:8b:f8:c9:51:a3:c5:25:c5:ca:1f:fe:9e:90:f3: 07:93:60:98:f8:5d:a0:b4:2e:db:df:68:81:35:dc: 58:1d:66:1c:dd:e8:2c:81:a2:c3:8e:e7:6b:c8:f2: dc:4f:1a:e1:9a:ed:72:5a:e1:dc:6f:e6:42:ec:39: 4a:b6:91:8e:85:9e:ca:0e:80:d6:5d:ca:c7:46:4b: df:a4:83:03:e8:98:f1:ed:6a:fa:f4:46:50:60:e4: 6b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:A4:1D:A8:EA:20:38:ED:08:77:B3:D0:A9:64:CD:A8:38:6C:EB:CC X509v3 Authority Key Identifier: keyid:75:64:17:8A:57:4A:26:09:BB:6E:FF:1C:C5:21:B4:53:D7:5C:87:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWQXildKJgm7bv8cxSG0U9dch9w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:1b:62:37:32:bc:12:84:f4:0b:a7:54:be:1b:9d:ee:ff:96: d8:0a:63:a0:ae:6b:bc:fb:54:a4:80:5a:69:09:72:26:3f:3f: 17:50:52:a2:df:fb:28:f5:6e:51:57:53:58:4f:21:64:e3:7b: 93:70:e0:08:31:31:3b:75:02:e5:7c:db:31:fb:5d:ba:61:6d: 99:3b:23:ed:5a:87:5b:86:e4:e5:c5:5b:58:1f:a0:bc:46:57: 4b:68:72:76:e8:eb:d5:ca:8f:c0:23:c2:ca:54:09:9d:27:58: d4:a4:72:d4:0d:65:a3:ae:c9:d3:92:20:87:a4:6a:49:d0:5a: 20:be:65:b6:ad:06:c0:5f:c7:06:46:b0:e6:5b:fb:f9:7d:62: 96:ee:bb:d4:3f:80:57:84:a6:81:56:5c:99:56:b7:83:2f:ab: 4c:29:10:85:c2:bf:36:66:71:fd:07:b2:c7:68:0b:2e:e8:aa: c4:16:be:b5:88:b0:d1:60:29:1c:05:15:1b:d8:38:a5:b3:86: d3:84:3f:bd:ee:5d:e0:2d:0e:05:92:04:a0:4d:2a:f1:21:0a: 2c:1a:8d:54:37:ea:4c:35:a6:5c:cb:5d:a4:40:32:32:1b:5c: 73:a5:c5:82:6f:14:b4:f9:b0:5b:a7:aa:95:db:99:be:af:11: c2:57:d6:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHEMb1TMh+cD11qgLQ6/KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1NjQxNzhhNTc0YTI2MDliYjZlZmYxY2M1MjFiNDUzZDc1 Yzg3ZGMwHhcNMjUxMjA2MTAwMTQ2WhcNMjUxMjA3MTAwMTQ2WjAzMTEwLwYDVQQD Eyg5MWE0MWRhOGVhMjAzOGVkMDg3N2IzZDBhOTY0Y2RhODM4NmNlYmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtE4B8sr9Xelks9XuSxmYYC9+hE/F bLZHjlVgYHdDqoR3/62Oc+UsMk7foKvUzqUT8AzxFJWCAY2CUg8y/Xt3iYTEeUcH fA0oOBjE3MrxMWOrWf3LHo3ma0o6lI7H1LrykK1l9JGEdmoII2I/T4xEwaPTi19Y M7VCnPW6XLc4QF3CZtF6WQTzB912zdhM0vLDKdXb3yK2pAGZB6V71jmij7NJ2Cww i/jJUaPFJcXKH/6ekPMHk2CY+F2gtC7b32iBNdxYHWYc3egsgaLDjudryPLcTxrh mu1yWuHcb+ZC7DlKtpGOhZ7KDoDWXcrHRkvfpIMD6Jjx7Wr69EZQYORr6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJGkHajqIDjtCHez0Klkzag4bOvMMB8GA1UdIwQY MBaAFHVkF4pXSiYJu27/HMUhtFPXXIfcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFdRWGlsZEtKZ203YnY4Y3hTRzBVOWRjaDl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8wY2M4NzUtNjEwZi00YWRkLWE3MTkt M2NhYWY5MDVjZmM2LzEvZFdRWGlsZEtKZ203YnY4Y3hTRzBVOWRjaDl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC8wY2M4NzUtNjEwZi00YWRkLWE3MTktM2NhYWY5MDVjZmM2 LzEvZFdRWGlsZEtKZ203YnY4Y3hTRzBVOWRjaDl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnhtiNzK8 EoT0C6dUvhud7v+W2ApjoK5rvPtUpIBaaQlyJj8/F1BSot/7KPVuUVdTWE8hZON7 k3DgCDExO3UC5XzbMftdumFtmTsj7VqHW4bk5cVbWB+gvEZXS2hydujr1cqPwCPC ylQJnSdY1KRy1A1lo67J05Igh6RqSdBaIL5ltq0GwF/HBkaw5lv7+X1ilu671D+A V4SmgVZcmVa3gy+rTCkQhcK/NmZx/Qeyx2gLLuiqxBa+tYiw0WApHAUVG9g4pbOG 04Q/ve5d4C0OBZIEoE0q8SEKLBqNVDfqTDWmXMtdpEAyMhtcc6XFgm8UtPmwW6eq lduZvq8RwlfWKQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:35:46 2025 by rpki-client