This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft File: Dp4K_r9UpNIYr7rtVDB3G793d6k.mft (raw, json) Hash identifier: 9KVolGJIM55cduSRmcQcS2MiGdq9yk+km+wGMSgYdA0= Subject key identifier: F7:02:A4:A0:3C:23:CD:B9:02:CF:92:60:13:8A:E8:42:BC:04:93:FE Authority key identifier: 0E:9E:0A:FE:BF:54:A4:D2:18:AF:BA:ED:54:30:77:1B:BF:77:77:A9 Certificate issuer: /CN=0e9e0afebf54a4d218afbaed5430771bbf7777a9 Certificate serial: 019AF19B19C00DCAC045F9B62AA39C6DAC3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 03:01:04 +0000 Manifest this update: Sat 06 Dec 2025 03:01:04 +0000 Manifest next update: Sun 07 Dec 2025 03:01:04 +0000 Files and hashes: 1: Dp4K_r9UpNIYr7rtVDB3G793d6k.crl (hash: gQFi3E76iBW8zl7HOGNqsr6k0+wfAF9yE3np7an6N+o=) 2: RX3j6hG8jPHQlqgQDFsxWI9wjiU.roa (hash: iX9OHbXh9X/4e6G7wovNf6r/WuAf8SkEeNMsZiGLv+M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.crl rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:19:c0:0d:ca:c0:45:f9:b6:2a:a3:9c:6d:ac:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e9e0afebf54a4d218afbaed5430771bbf7777a9 Validity Not Before: Dec 6 03:01:04 2025 GMT Not After : Dec 7 03:01:04 2025 GMT Subject: CN=f702a4a03c23cdb902cf9260138ae842bc0493fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c0:4e:f4:29:49:d8:92:6a:ac:38:d8:24:f9: a8:8f:0a:99:2f:1e:29:53:24:0b:d2:74:da:d6:c9: cd:52:32:d9:5a:35:77:88:d8:77:00:64:c8:dc:d7: 25:cb:9c:48:f5:09:9d:9a:4e:ad:2a:b8:89:eb:4b: 7a:8f:76:89:5b:51:06:35:78:2e:90:72:55:25:bc: 33:1c:90:79:af:4b:b3:c5:61:13:1d:71:e8:b9:3f: d4:94:62:31:ef:fe:37:15:f1:3e:8d:50:7d:6f:a5: 2a:de:13:b1:d0:b2:87:00:62:7c:90:c6:74:e1:eb: c5:62:f4:89:cd:3f:7d:2e:9b:d6:6b:67:56:a0:69: 65:9d:21:ff:45:50:71:76:ee:6e:ba:7b:6f:15:0a: 90:36:3d:6b:47:7c:73:4d:ed:05:f4:c3:0b:66:88: 05:d9:77:2e:8c:07:32:72:18:2a:ae:cc:87:16:9b: 8b:62:73:cb:6d:0e:7c:aa:be:da:75:ab:7a:83:97: c1:c5:4d:2c:ed:69:9e:8b:f7:a1:34:cc:ae:eb:80: 20:61:30:ae:dd:9f:17:a6:e2:8e:a2:26:79:3c:9a: dd:a0:28:9c:e9:2a:00:d3:50:f4:9c:45:c3:a9:b2: 3a:b7:c2:cb:3c:0e:f6:7a:81:e4:37:87:2f:10:d7: dd:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:02:A4:A0:3C:23:CD:B9:02:CF:92:60:13:8A:E8:42:BC:04:93:FE X509v3 Authority Key Identifier: keyid:0E:9E:0A:FE:BF:54:A4:D2:18:AF:BA:ED:54:30:77:1B:BF:77:77:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:82:0e:f1:97:31:e7:59:ce:80:84:70:18:7b:9f:d0:42:0c: 37:b8:eb:ad:91:b9:95:2b:8a:3b:49:07:a6:48:7f:dc:cf:fd: 0d:fe:83:63:4c:26:3e:07:51:d5:5a:77:13:94:cc:60:19:82: bd:b6:3b:ec:d8:be:5f:46:67:96:78:c2:89:3e:82:96:10:7f: 22:d3:a8:09:de:f9:3c:63:5f:ac:d7:41:6f:64:18:c6:d3:65: f3:8c:58:76:42:ca:66:da:97:17:cb:ed:76:67:5e:9d:c3:7a: e8:db:83:2b:d6:46:ba:3c:b5:7d:da:08:b5:53:e4:94:13:6f: 11:f6:23:a1:17:21:f7:7e:c1:d0:b4:a9:c6:90:ad:71:a0:b1: 63:ea:4a:24:60:cb:38:9c:77:af:7a:27:8b:76:99:66:5c:8c: 30:aa:fc:76:ef:8d:62:74:67:70:14:6b:16:54:25:31:f0:0d: 2e:56:06:5d:ef:6a:b5:b8:9d:49:88:6e:71:22:92:ac:ff:a8: 58:3b:f0:5a:17:e9:2e:77:ed:53:07:27:d7:9b:de:02:8f:33: fa:0c:a6:25:4c:46:16:49:63:38:ea:2b:70:4e:ad:5a:5b:7f: 04:0d:47:27:e8:10:f4:d6:a7:8d:de:9b:47:11:17:b6:11:a6: 91:f8:45:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmxnADcrARfm2KqOcbaw9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlOWUwYWZlYmY1NGE0ZDIxOGFmYmFlZDU0MzA3NzFiYmY3 Nzc3YTkwHhcNMjUxMjA2MDMwMTA0WhcNMjUxMjA3MDMwMTA0WjAzMTEwLwYDVQQD EyhmNzAyYTRhMDNjMjNjZGI5MDJjZjkyNjAxMzhhZTg0MmJjMDQ5M2ZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcBO9ClJ2JJqrDjYJPmojwqZLx4p UyQL0nTa1snNUjLZWjV3iNh3AGTI3Ncly5xI9Qmdmk6tKriJ60t6j3aJW1EGNXgu kHJVJbwzHJB5r0uzxWETHXHouT/UlGIx7/43FfE+jVB9b6Uq3hOx0LKHAGJ8kMZ0 4evFYvSJzT99LpvWa2dWoGllnSH/RVBxdu5uuntvFQqQNj1rR3xzTe0F9MMLZogF 2XcujAcychgqrsyHFpuLYnPLbQ58qr7adat6g5fBxU0s7Wmei/ehNMyu64AgYTCu 3Z8XpuKOoiZ5PJrdoCic6SoA01D0nEXDqbI6t8LLPA72eoHkN4cvENfdpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPcCpKA8I825As+SYBOK6EK8BJP+MB8GA1UdIwQY MBaAFA6eCv6/VKTSGK+67VQwdxu/d3epMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHA0S19yOVVwTklZcjdydFZEQjNHNzkzZDZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kMjIxNDAtZDk2MS00Mzc3LWI4YzYt M2VmNTk0ZTZjNjk2LzEvRHA0S19yOVVwTklZcjdydFZEQjNHNzkzZDZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9kMjIxNDAtZDk2MS00Mzc3LWI4YzYtM2VmNTk0ZTZjNjk2 LzEvRHA0S19yOVVwTklZcjdydFZEQjNHNzkzZDZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHIIO8Zcx 51nOgIRwGHuf0EIMN7jrrZG5lSuKO0kHpkh/3M/9Df6DY0wmPgdR1Vp3E5TMYBmC vbY77Ni+X0ZnlnjCiT6ClhB/ItOoCd75PGNfrNdBb2QYxtNl84xYdkLKZtqXF8vt dmdencN66NuDK9ZGujy1fdoItVPklBNvEfYjoRch937B0LSpxpCtcaCxY+pKJGDL OJx3r3oni3aZZlyMMKr8du+NYnRncBRrFlQlMfANLlYGXe9qtbidSYhucSKSrP+o WDvwWhfpLnftUwcn15veAo8z+gymJUxGFkljOOorcE6tWlt/BA1HJ+gQ9Nanjd6b RxEXthGmkfhFYA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:49:50 2025 by rpki-client