This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft File: dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft (raw, json) Hash identifier: YoQCph+ekXSLGuvvdk6A1aO2jdUhg2UimHUabi3lUdI= Subject key identifier: 8F:10:7D:A6:08:4C:9A:AD:92:11:F3:55:0F:B6:21:A1:98:79:45:38 Authority key identifier: 74:22:F9:85:CB:34:A0:3C:7C:55:81:64:2C:6D:6E:B4:32:C8:3E:94 Certificate issuer: /CN=7422f985cb34a03c7c5581642c6d6eb432c83e94 Certificate serial: 019AF19B158E7336A6A13A9256BDCDDC6CF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCL5hcs0oDx8VYFkLG1utDLIPpQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft Manifest number: 0F38 Signing time: Sat 06 Dec 2025 03:01:03 +0000 Manifest this update: Sat 06 Dec 2025 03:01:03 +0000 Manifest next update: Sun 07 Dec 2025 03:01:03 +0000 Files and hashes: 1: dCL5hcs0oDx8VYFkLG1utDLIPpQ.crl (hash: UpjgVqUVpcsfo+cgyxPJxt79Xj25rUnZspblt0YMmOA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.crl rsync://rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft rsync://rpki.ripe.net/repository/DEFAULT/dCL5hcs0oDx8VYFkLG1utDLIPpQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:15:8e:73:36:a6:a1:3a:92:56:bd:cd:dc:6c:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7422f985cb34a03c7c5581642c6d6eb432c83e94 Validity Not Before: Dec 6 03:01:03 2025 GMT Not After : Dec 7 03:01:03 2025 GMT Subject: CN=8f107da6084c9aad9211f3550fb621a198794538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:40:eb:28:fb:a6:2b:dc:a0:8c:a9:aa:45:7e: 71:ef:a5:e4:31:e8:d2:37:3d:93:eb:87:8b:89:b0: fa:bf:7f:f5:3b:8e:62:69:b8:c1:26:5c:39:18:fe: 00:a5:8f:c1:c6:18:4e:cf:6a:d4:39:7c:c9:9f:49: ab:6d:bc:d0:bf:ce:10:a4:22:f6:31:ee:8c:07:65: 57:3b:48:39:06:27:e1:98:b9:b0:7f:cc:7a:26:b9: 51:36:ed:f3:dc:c8:91:c5:6a:58:f0:62:e7:1c:31: 6b:59:31:a6:cc:03:4c:1b:bb:da:88:e3:dc:23:b0: 6a:74:fd:cd:8e:58:9f:c4:4b:cb:2d:db:88:eb:6a: da:ab:c6:c2:36:f6:11:6f:af:2d:35:a0:7f:49:fb: 1e:61:74:6f:21:4a:0d:b4:0a:41:b5:b2:af:18:91: f6:16:14:36:2d:1c:09:09:d5:b0:51:ba:0a:33:c8: d9:97:12:ce:74:fc:76:d3:06:19:ee:81:6a:50:13: 36:73:01:8b:51:c1:7f:7c:54:98:a7:5d:55:7f:1a: 0f:aa:15:77:62:40:60:8c:66:eb:17:17:f3:50:a9: 69:92:2a:b8:4e:a3:7c:b3:d0:11:37:87:48:df:35: 48:d2:d0:ba:df:98:9f:3a:f6:db:29:87:be:99:81: a6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:10:7D:A6:08:4C:9A:AD:92:11:F3:55:0F:B6:21:A1:98:79:45:38 X509v3 Authority Key Identifier: keyid:74:22:F9:85:CB:34:A0:3C:7C:55:81:64:2C:6D:6E:B4:32:C8:3E:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCL5hcs0oDx8VYFkLG1utDLIPpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:5e:40:8a:84:5f:4a:5e:e4:3e:c3:ed:e8:46:0d:fa:9e:7b: 96:01:28:53:d3:9d:2f:ec:86:dc:f8:e6:83:96:d3:5b:0e:64: 35:78:81:32:48:a1:90:ff:88:65:0d:c6:b6:42:05:f2:ff:cb: ff:3c:e0:d5:60:90:d6:e3:8e:ab:fb:ac:d9:b0:b5:d4:ba:13: 20:59:c4:b4:82:e2:d5:fd:61:23:5e:09:98:84:bb:63:66:60: f3:74:44:69:15:98:8c:4f:75:12:d0:13:da:9e:a2:cd:63:4c: 09:71:cb:7c:02:18:f6:fc:39:30:f1:9b:24:a1:cd:41:0b:7f: fe:03:1d:15:3d:b4:2f:d4:94:54:e8:db:73:3b:40:fe:6a:81: c7:11:95:1d:6d:5b:7b:86:4a:e9:66:b4:8c:9e:ca:e7:27:bb: b2:4e:57:68:b1:af:73:a8:07:37:f7:97:12:ed:81:51:4b:12: 9c:30:9f:ea:0d:a6:d7:77:e7:db:ca:29:78:9c:65:53:6f:79: f8:be:18:ce:36:40:77:c4:57:ad:62:8b:d4:9e:42:88:af:e0: 73:a1:99:67:9b:dc:e4:19:c0:35:ec:0a:8e:f4:f7:3d:69:20: 36:e0:43:af:d9:14:75:93:4d:6d:a6:fa:91:0c:ae:6b:b2:10: 29:14:ac:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmxWOczamoTqSVr3N3GzzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0MjJmOTg1Y2IzNGEwM2M3YzU1ODE2NDJjNmQ2ZWI0MzJj ODNlOTQwHhcNMjUxMjA2MDMwMTAzWhcNMjUxMjA3MDMwMTAzWjAzMTEwLwYDVQQD Eyg4ZjEwN2RhNjA4NGM5YWFkOTIxMWYzNTUwZmI2MjFhMTk4Nzk0NTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3EDrKPumK9ygjKmqRX5x76XkMejS Nz2T64eLibD6v3/1O45iabjBJlw5GP4ApY/BxhhOz2rUOXzJn0mrbbzQv84QpCL2 Me6MB2VXO0g5BifhmLmwf8x6JrlRNu3z3MiRxWpY8GLnHDFrWTGmzANMG7vaiOPc I7BqdP3NjlifxEvLLduI62raq8bCNvYRb68tNaB/SfseYXRvIUoNtApBtbKvGJH2 FhQ2LRwJCdWwUboKM8jZlxLOdPx20wYZ7oFqUBM2cwGLUcF/fFSYp11VfxoPqhV3 YkBgjGbrFxfzUKlpkiq4TqN8s9ARN4dI3zVI0tC635ifOvbbKYe+mYGmLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI8QfaYITJqtkhHzVQ+2IaGYeUU4MB8GA1UdIwQY MBaAFHQi+YXLNKA8fFWBZCxtbrQyyD6UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZENMNWhjczBvRHg4VllGa0xHMXV0RExJUHBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9jNDllYzItMzdkYS00MWE5LTk2ZmIt NTE0MWZhMzkwODBhLzEvZENMNWhjczBvRHg4VllGa0xHMXV0RExJUHBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9jNDllYzItMzdkYS00MWE5LTk2ZmItNTE0MWZhMzkwODBh LzEvZENMNWhjczBvRHg4VllGa0xHMXV0RExJUHBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcV5AioRf Sl7kPsPt6EYN+p57lgEoU9OdL+yG3Pjmg5bTWw5kNXiBMkihkP+IZQ3GtkIF8v/L /zzg1WCQ1uOOq/us2bC11LoTIFnEtILi1f1hI14JmIS7Y2Zg83REaRWYjE91EtAT 2p6izWNMCXHLfAIY9vw5MPGbJKHNQQt//gMdFT20L9SUVOjbcztA/mqBxxGVHW1b e4ZK6Wa0jJ7K5ye7sk5XaLGvc6gHN/eXEu2BUUsSnDCf6g2m13fn28opeJxlU295 +L4YzjZAd8RXrWKL1J5CiK/gc6GZZ5vc5BnANewKjvT3PWkgNuBDr9kUdZNNbab6 kQyua7IQKRSsew== -----END CERTIFICATE-----Generated at Sat Dec 6 13:20:52 2025 by rpki-client