This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft File: dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft (raw, json) Hash identifier: 3gDWGZLqoViHKPp7mIY/Se3F++evLcFtmz2uW38W8YY= Subject key identifier: 98:53:B1:28:73:5B:D4:FA:55:D1:3C:6E:02:7A:80:0A:46:E0:71:8D Authority key identifier: 74:24:88:F0:D9:B4:B1:71:A2:E2:F0:FA:55:9B:43:F9:A5:B3:2E:26 Certificate issuer: /CN=742488f0d9b4b171a2e2f0fa559b43f9a5b32e26 Certificate serial: 019AF19AC22668B6AF231776B4D2D3DC1FC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft Manifest number: 06CF Signing time: Sat 06 Dec 2025 03:00:42 +0000 Manifest this update: Sat 06 Dec 2025 03:00:42 +0000 Manifest next update: Sun 07 Dec 2025 03:00:42 +0000 Files and hashes: 1: dCSI8Nm0sXGi4vD6VZtD-aWzLiY.crl (hash: 5fYj9/QuqL0lgczzGp3UMjiXpgeGfmDp55+5YNAPTr0=) 2: wTSz4RaVBPCmK0HhyQREVFlvLYM.roa (hash: wdXTmnLgaVa+d8xmW5YsOirXRbVi1BqCeeIaYwQr+Us=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.crl rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft rsync://rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:c2:26:68:b6:af:23:17:76:b4:d2:d3:dc:1f:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=742488f0d9b4b171a2e2f0fa559b43f9a5b32e26 Validity Not Before: Dec 6 03:00:42 2025 GMT Not After : Dec 7 03:00:42 2025 GMT Subject: CN=9853b128735bd4fa55d13c6e027a800a46e0718d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:cf:88:44:ca:d8:3c:53:94:39:ca:a7:95:69: 03:1a:8b:a2:4d:c6:c4:1b:32:18:1f:72:64:a6:f7: 59:87:5d:27:8c:3c:d3:2b:61:a5:7f:e5:e0:5f:f7: 99:8d:0b:a1:f0:a8:3a:0c:4d:a5:1c:6b:84:3c:92: 15:f6:3b:4d:be:eb:e9:2e:3d:5a:d7:8b:d5:d1:c5: 68:9c:b2:ec:b8:5a:a3:01:77:0b:d5:88:9e:0a:50: cf:ce:41:00:f8:8d:c6:59:c9:40:bc:bc:57:4a:fa: a9:27:5c:c5:d0:d3:d6:e1:be:98:59:71:e6:7f:79: d3:94:07:4d:3c:51:eb:8a:34:b6:b5:c2:d4:a4:cb: a1:f2:8e:03:dd:62:5b:04:37:99:c9:b1:20:b5:00: 56:c8:07:6e:1b:f2:aa:06:68:00:e2:4c:38:88:cf: 4a:60:d1:ba:a0:69:15:e0:61:e6:63:b1:50:19:b8: c6:bc:3a:89:9e:b4:20:b1:5a:90:c6:b8:2d:27:05: 11:4f:1d:0f:ba:e0:f4:6b:15:d6:5f:b4:31:38:19: fb:2c:ef:80:6e:de:b8:fe:3e:51:54:94:1f:08:75: 0e:99:db:d5:67:d4:36:3f:70:29:6d:07:38:9a:42: 45:25:f0:d1:d1:cb:bc:23:ed:30:45:7b:cb:18:a5: 90:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:53:B1:28:73:5B:D4:FA:55:D1:3C:6E:02:7A:80:0A:46:E0:71:8D X509v3 Authority Key Identifier: keyid:74:24:88:F0:D9:B4:B1:71:A2:E2:F0:FA:55:9B:43:F9:A5:B3:2E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:50:ee:4b:ad:94:f1:c4:10:49:ed:46:a1:a5:2e:d3:0e:ed: 2e:3a:72:38:f0:6a:ec:b4:78:98:0f:ad:da:c8:ec:8f:db:74: 84:fc:51:80:05:72:0f:03:ca:05:17:34:a8:44:46:10:29:6b: 5c:9a:ba:41:39:8a:93:33:dc:28:bb:73:fd:70:9e:3c:92:c7: 9d:c0:f7:60:bc:b5:3d:a3:e2:bd:b8:ee:6a:e3:9c:72:ff:78: 9f:8d:ba:f0:6f:01:81:92:7d:79:94:4d:b0:d8:c9:44:16:86: 83:c5:7d:f5:cc:08:4a:69:79:8f:7c:b0:df:f5:a9:ff:66:c8: ea:96:52:cb:1c:59:e5:c5:43:c3:a3:36:26:1d:aa:2f:14:8d: b2:40:70:f7:52:0b:bc:0f:2f:40:26:57:2f:4f:a7:32:49:02: 05:f0:80:41:8e:ed:73:96:da:97:f3:d6:1e:53:bd:b9:6f:d5: 5f:c6:d6:5a:dc:94:82:89:d7:6d:37:f6:20:c2:85:04:80:46: 2e:f7:1b:97:e5:d9:f3:37:16:7d:80:9c:b8:ec:41:92:7f:de: 7a:90:ff:03:0d:77:cb:35:b2:30:6e:cc:9d:63:71:3e:12:0c: e1:cb:58:fa:4a:e3:bf:02:77:4e:5d:d7:7b:4e:0c:d7:75:a8: ab:1f:7c:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmsImaLavIxd2tNLT3B/EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0MjQ4OGYwZDliNGIxNzFhMmUyZjBmYTU1OWI0M2Y5YTVi MzJlMjYwHhcNMjUxMjA2MDMwMDQyWhcNMjUxMjA3MDMwMDQyWjAzMTEwLwYDVQQD Eyg5ODUzYjEyODczNWJkNGZhNTVkMTNjNmUwMjdhODAwYTQ2ZTA3MThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9s+IRMrYPFOUOcqnlWkDGouiTcbE GzIYH3JkpvdZh10njDzTK2Glf+XgX/eZjQuh8Kg6DE2lHGuEPJIV9jtNvuvpLj1a 14vV0cVonLLsuFqjAXcL1YieClDPzkEA+I3GWclAvLxXSvqpJ1zF0NPW4b6YWXHm f3nTlAdNPFHrijS2tcLUpMuh8o4D3WJbBDeZybEgtQBWyAduG/KqBmgA4kw4iM9K YNG6oGkV4GHmY7FQGbjGvDqJnrQgsVqQxrgtJwURTx0PuuD0axXWX7QxOBn7LO+A bt64/j5RVJQfCHUOmdvVZ9Q2P3ApbQc4mkJFJfDR0cu8I+0wRXvLGKWQBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJhTsShzW9T6VdE8bgJ6gApG4HGNMB8GA1UdIwQY MBaAFHQkiPDZtLFxouLw+lWbQ/mlsy4mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZENTSThObTBzWEdpNHZENlZadEQtYVd6TGlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iYzRjMjMtZjdjZS00MmYxLTg4MTkt ZjJiYmZiYTcxYTI4LzEvZENTSThObTBzWEdpNHZENlZadEQtYVd6TGlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9iYzRjMjMtZjdjZS00MmYxLTg4MTktZjJiYmZiYTcxYTI4 LzEvZENTSThObTBzWEdpNHZENlZadEQtYVd6TGlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB1DuS62U 8cQQSe1GoaUu0w7tLjpyOPBq7LR4mA+t2sjsj9t0hPxRgAVyDwPKBRc0qERGEClr XJq6QTmKkzPcKLtz/XCePJLHncD3YLy1PaPivbjuauOccv94n4268G8BgZJ9eZRN sNjJRBaGg8V99cwISml5j3yw3/Wp/2bI6pZSyxxZ5cVDw6M2Jh2qLxSNskBw91IL vA8vQCZXL0+nMkkCBfCAQY7tc5bal/PWHlO9uW/VX8bWWtyUgonXbTf2IMKFBIBG Lvcbl+XZ8zcWfYCcuOxBkn/eepD/Aw13yzWyMG7MnWNxPhIM4ctY+krjvwJ3Tl3X e04M13Woqx981w== -----END CERTIFICATE-----Generated at Sat Dec 6 09:56:25 2025 by rpki-client