This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft File: dQRxYHUyqMev1g1PMXqtxJDrogY.mft (raw, json) Hash identifier: ucaRUdaC8SI5r9lbcXLrZ0kWJXVFvlXE11KEtLbRrV8= Subject key identifier: 80:41:C2:18:41:C1:ED:BD:D2:65:84:0C:4A:06:2B:88:79:20:65:E9 Authority key identifier: 75:04:71:60:75:32:A8:C7:AF:D6:0D:4F:31:7A:AD:C4:90:EB:A2:06 Certificate issuer: /CN=750471607532a8c7afd60d4f317aadc490eba206 Certificate serial: 019AF31C18E45A425FB2C703C8003C357BEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQRxYHUyqMev1g1PMXqtxJDrogY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 10:01:36 +0000 Manifest this update: Sat 06 Dec 2025 10:01:36 +0000 Manifest next update: Sun 07 Dec 2025 10:01:36 +0000 Files and hashes: 1: dQRxYHUyqMev1g1PMXqtxJDrogY.crl (hash: lNFMbOFo7W5kKxIhzDmr8N22ssINy11OgKJ6Ccopu+0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.crl rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft rsync://rpki.ripe.net/repository/DEFAULT/dQRxYHUyqMev1g1PMXqtxJDrogY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:18:e4:5a:42:5f:b2:c7:03:c8:00:3c:35:7b:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=750471607532a8c7afd60d4f317aadc490eba206 Validity Not Before: Dec 6 10:01:36 2025 GMT Not After : Dec 7 10:01:36 2025 GMT Subject: CN=8041c21841c1edbdd265840c4a062b88792065e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ff:20:9b:cb:c2:16:9d:77:8b:3e:23:2c:28: 87:40:b9:26:43:68:b7:07:86:ce:74:39:ed:30:a4: 73:9f:7e:c8:55:3b:0a:d5:6b:b8:20:c7:7c:1d:6a: b6:1e:eb:9a:65:84:cf:71:a2:64:0d:36:91:57:6a: ac:8d:a5:50:c2:e4:1d:04:2e:1f:48:96:b0:ed:1c: 5c:11:bf:b2:c0:09:a4:ce:98:59:e6:6d:a2:7a:ea: 11:dc:23:27:e0:30:52:47:36:42:bf:2d:dc:42:c3: 34:22:b7:89:ee:d5:6b:ce:e2:ae:31:01:91:c8:c0: 16:2f:79:85:a7:6b:cd:ca:4b:75:b1:de:62:e3:cc: a9:37:79:3c:84:aa:d9:87:7d:1a:1d:68:08:7c:18: ba:8f:1e:b0:59:23:da:db:d9:bd:29:ee:2a:e9:cd: c4:40:77:56:af:e3:d3:52:f5:06:30:f5:c4:db:98: 45:44:f8:63:0d:b3:f1:73:0f:18:9a:ea:3c:12:c8: ea:27:e0:80:e9:03:d2:5b:b0:39:b5:f4:9e:5c:54: 7b:d4:e1:df:11:0f:6c:36:82:bc:cf:43:b5:8a:5b: 5c:55:d4:48:1e:5e:9c:57:00:1c:3a:e5:e1:84:a5: 63:47:5f:f0:1c:2f:92:51:9d:7b:ed:00:74:07:51: d5:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:41:C2:18:41:C1:ED:BD:D2:65:84:0C:4A:06:2B:88:79:20:65:E9 X509v3 Authority Key Identifier: keyid:75:04:71:60:75:32:A8:C7:AF:D6:0D:4F:31:7A:AD:C4:90:EB:A2:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQRxYHUyqMev1g1PMXqtxJDrogY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:fd:d5:87:b8:4d:87:95:0f:1a:7b:63:59:ed:8e:c3:5a:a4: 96:65:66:c0:b9:84:82:ec:5f:72:27:01:02:6e:c7:f6:37:ab: e8:f7:e8:5e:56:7f:36:79:30:7d:b9:e2:86:2f:92:64:73:5b: 63:3f:e2:dd:b9:97:3a:db:ee:2b:3b:44:87:1a:63:9c:54:25: d1:4c:f3:dd:8b:92:bc:02:0d:1e:ad:e3:18:aa:6c:fd:8c:f8: 2c:85:92:11:96:e2:44:ed:6b:05:1a:f1:c3:54:7c:f1:da:9b: a1:68:eb:a6:6a:24:58:99:74:8f:92:bc:b7:3a:53:76:e4:f7: 77:3f:91:a1:dd:de:13:29:c6:f5:89:a8:18:47:69:6f:17:6e: a4:49:57:6a:b1:2b:88:3d:01:60:e8:2f:85:e8:e2:63:c7:55: 1c:7e:54:c4:58:5c:c4:1b:0a:cb:ca:bb:45:86:8f:95:4a:f1: 99:a4:7f:a5:d3:95:12:82:9e:17:0a:b8:2f:cc:70:f5:bd:cd: 06:1a:ca:9f:f1:79:bf:47:1b:b1:a4:db:b3:8d:01:e9:a6:54: 0d:e0:e5:dd:ee:b4:57:ea:83:e6:0f:28:cc:96:0f:fa:90:a7: d8:2b:fd:38:7e:98:e1:fd:7a:00:3a:c8:61:dd:71:8a:da:e9: c8:56:4c:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHBjkWkJfsscDyAA8NXvrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MDQ3MTYwNzUzMmE4YzdhZmQ2MGQ0ZjMxN2FhZGM0OTBl YmEyMDYwHhcNMjUxMjA2MTAwMTM2WhcNMjUxMjA3MTAwMTM2WjAzMTEwLwYDVQQD Eyg4MDQxYzIxODQxYzFlZGJkZDI2NTg0MGM0YTA2MmI4ODc5MjA2NWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/8gm8vCFp13iz4jLCiHQLkmQ2i3 B4bOdDntMKRzn37IVTsK1Wu4IMd8HWq2HuuaZYTPcaJkDTaRV2qsjaVQwuQdBC4f SJaw7RxcEb+ywAmkzphZ5m2ieuoR3CMn4DBSRzZCvy3cQsM0IreJ7tVrzuKuMQGR yMAWL3mFp2vNykt1sd5i48ypN3k8hKrZh30aHWgIfBi6jx6wWSPa29m9Ke4q6c3E QHdWr+PTUvUGMPXE25hFRPhjDbPxcw8Ymuo8EsjqJ+CA6QPSW7A5tfSeXFR71OHf EQ9sNoK8z0O1iltcVdRIHl6cVwAcOuXhhKVjR1/wHC+SUZ177QB0B1HVnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIBBwhhBwe290mWEDEoGK4h5IGXpMB8GA1UdIwQY MBaAFHUEcWB1MqjHr9YNTzF6rcSQ66IGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFFSeFlIVXlxTWV2MWcxUE1YcXR4SkRyb2dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9kZmE2YTEtMWU0Yy00OWZmLWE0ODAt Mjc0MjMyZDY5NTA1LzEvZFFSeFlIVXlxTWV2MWcxUE1YcXR4SkRyb2dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9kZmE2YTEtMWU0Yy00OWZmLWE0ODAtMjc0MjMyZDY5NTA1 LzEvZFFSeFlIVXlxTWV2MWcxUE1YcXR4SkRyb2dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU/3Vh7hN h5UPGntjWe2Ow1qklmVmwLmEguxfcicBAm7H9jer6PfoXlZ/Nnkwfbnihi+SZHNb Yz/i3bmXOtvuKztEhxpjnFQl0Uzz3YuSvAINHq3jGKps/Yz4LIWSEZbiRO1rBRrx w1R88dqboWjrpmokWJl0j5K8tzpTduT3dz+Rod3eEynG9YmoGEdpbxdupElXarEr iD0BYOgvhejiY8dVHH5UxFhcxBsKy8q7RYaPlUrxmaR/pdOVEoKeFwq4L8xw9b3N BhrKn/F5v0cbsaTbs40B6aZUDeDl3e60V+qD5g8ozJYP+pCn2Cv9OH6Y4f16ADrI Yd1xitrpyFZMEg== -----END CERTIFICATE-----Generated at Sat Dec 6 17:52:07 2025 by rpki-client