This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft File: DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft (raw, json) Hash identifier: ID0s52LnSnFKHAkHRzRFQJXnY7Pma6+ZtRJH8CV2buY= Subject key identifier: C9:10:9E:0A:EE:0F:55:FA:61:DD:FB:4E:41:CD:9D:C0:E5:70:04:99 Authority key identifier: 0C:05:35:54:C8:18:67:4C:D5:46:B7:99:DD:44:78:5A:56:4C:56:CB Certificate issuer: /CN=0c053554c818674cd546b799dd44785a564c56cb Certificate serial: 019B34C668A98E747D773E50652B90C6BEF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAU1VMgYZ0zVRreZ3UR4WlZMVss.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft Manifest number: 0D0F Signing time: Fri 19 Dec 2025 04:02:56 +0000 Manifest this update: Fri 19 Dec 2025 04:02:56 +0000 Manifest next update: Sat 20 Dec 2025 04:02:56 +0000 Files and hashes: 1: DAU1VMgYZ0zVRreZ3UR4WlZMVss.crl (hash: eO1qoLUwcTbACZnAgwt7ZdKKagl9tFoLSqx+fZ6yPi0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft rsync://rpki.ripe.net/repository/DEFAULT/DAU1VMgYZ0zVRreZ3UR4WlZMVss.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c6:68:a9:8e:74:7d:77:3e:50:65:2b:90:c6:be:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c053554c818674cd546b799dd44785a564c56cb Validity Not Before: Dec 19 04:02:56 2025 GMT Not After : Dec 20 04:02:56 2025 GMT Subject: CN=c9109e0aee0f55fa61ddfb4e41cd9dc0e5700499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:57:62:36:b3:36:2e:a5:e1:b1:04:32:80:fa: 78:21:4c:6b:8b:70:76:af:e6:b3:a3:4b:01:97:86: 39:14:31:e3:74:8f:32:bc:bc:80:51:65:36:14:20: de:c5:e1:80:fa:52:29:e7:93:be:66:79:d7:46:56: 6f:ea:8c:d9:e6:4b:53:81:ce:42:fa:d3:8e:71:c5: 5f:9a:31:08:7f:81:08:20:5d:fe:d5:93:53:5d:9e: d0:39:43:2c:66:15:8a:8f:55:7a:63:fd:a4:6e:8a: 65:d1:97:70:84:bf:fe:4b:3b:25:f5:f6:bc:d1:76: 15:a0:04:a4:b6:27:27:b4:7e:63:5c:0b:00:9c:63: 31:a6:4a:cd:27:6f:92:10:b5:3d:87:40:0b:cd:85: d6:5b:d7:43:45:0e:64:1c:13:b5:13:45:c6:01:4e: 3b:7e:3d:e7:42:cc:08:5d:82:ce:b1:e3:38:7e:ea: ab:1a:07:3b:b6:f7:84:7d:28:b4:63:53:e6:0b:9b: 30:f3:d8:7d:c2:3e:7e:d5:9e:4d:90:af:7d:09:6b: 93:0b:ca:4d:b1:e6:92:35:72:1a:0e:2c:75:60:93: cf:34:d6:ed:34:42:15:b7:36:40:9d:f2:9e:46:d8: d8:95:6a:cf:7b:ef:4b:a2:30:a0:1c:99:b7:07:ad: 68:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:10:9E:0A:EE:0F:55:FA:61:DD:FB:4E:41:CD:9D:C0:E5:70:04:99 X509v3 Authority Key Identifier: keyid:0C:05:35:54:C8:18:67:4C:D5:46:B7:99:DD:44:78:5A:56:4C:56:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAU1VMgYZ0zVRreZ3UR4WlZMVss.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:ce:a6:d8:81:17:ab:4f:ab:7a:9f:b5:1a:50:d8:ff:d5:d8: 78:6d:ba:e2:18:8b:b6:67:db:1a:b8:c4:f0:de:25:db:cd:46: d8:4f:f1:dd:3a:df:dc:7a:07:84:a6:59:82:1f:0c:59:32:86: 0b:38:8c:55:b3:92:fb:1c:32:0b:53:c9:bd:ce:f6:c2:df:2a: 3d:d1:1d:7f:88:57:1e:f4:ab:3c:47:76:b2:4d:db:dd:13:a7: 5b:01:9b:12:6a:23:19:6d:9c:ce:70:9b:0b:4e:3e:95:84:61: 70:7a:48:83:5a:da:47:33:ce:e9:0f:ba:f3:bf:4c:f6:b6:9f: ab:4f:24:da:6e:1c:b8:c1:e8:00:de:96:39:4d:56:66:ad:f4: a3:3e:2f:0b:af:ba:f3:fe:79:18:c1:c3:9b:e6:e9:63:be:73: 79:d1:3e:67:97:4f:76:49:bb:e1:54:18:07:77:fc:de:a7:e0: e9:d0:23:8e:8c:68:43:21:c3:5d:8d:9e:fa:2e:c8:f3:c2:69: 48:cc:fc:c2:d5:5f:2f:42:37:aa:22:ce:fa:52:4f:92:73:37: 60:ff:63:41:9a:67:64:1a:f4:26:9e:eb:43:cc:7f:96:9e:4e: d1:f6:b9:4b:7f:e3:51:ec:48:4f:f0:36:36:e5:75:3c:10:21: f5:83:8c:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xmipjnR9dz5QZSuQxr70MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMDUzNTU0YzgxODY3NGNkNTQ2Yjc5OWRkNDQ3ODVhNTY0 YzU2Y2IwHhcNMjUxMjE5MDQwMjU2WhcNMjUxMjIwMDQwMjU2WjAzMTEwLwYDVQQD EyhjOTEwOWUwYWVlMGY1NWZhNjFkZGZiNGU0MWNkOWRjMGU1NzAwNDk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FdiNrM2LqXhsQQygPp4IUxri3B2 r+azo0sBl4Y5FDHjdI8yvLyAUWU2FCDexeGA+lIp55O+ZnnXRlZv6ozZ5ktTgc5C +tOOccVfmjEIf4EIIF3+1ZNTXZ7QOUMsZhWKj1V6Y/2kbopl0ZdwhL/+Szsl9fa8 0XYVoASkticntH5jXAsAnGMxpkrNJ2+SELU9h0ALzYXWW9dDRQ5kHBO1E0XGAU47 fj3nQswIXYLOseM4fuqrGgc7tveEfSi0Y1PmC5sw89h9wj5+1Z5NkK99CWuTC8pN seaSNXIaDix1YJPPNNbtNEIVtzZAnfKeRtjYlWrPe+9LojCgHJm3B61oNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMkQngruD1X6Yd37TkHNncDlcASZMB8GA1UdIwQY MBaAFAwFNVTIGGdM1Ua3md1EeFpWTFbLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREFVMVZNZ1laMHpWUnJlWjNVUjRXbFpNVnNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy80NjBmOGEtNmMzOS00NjIyLWI0MGEt YmY5Yzc5MTQ5NDYyLzEvREFVMVZNZ1laMHpWUnJlWjNVUjRXbFpNVnNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy80NjBmOGEtNmMzOS00NjIyLWI0MGEtYmY5Yzc5MTQ5NDYy LzEvREFVMVZNZ1laMHpWUnJlWjNVUjRXbFpNVnNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk86m2IEX q0+rep+1GlDY/9XYeG264hiLtmfbGrjE8N4l281G2E/x3Trf3HoHhKZZgh8MWTKG CziMVbOS+xwyC1PJvc72wt8qPdEdf4hXHvSrPEd2sk3b3ROnWwGbEmojGW2cznCb C04+lYRhcHpIg1raRzPO6Q+6879M9rafq08k2m4cuMHoAN6WOU1WZq30oz4vC6+6 8/55GMHDm+bpY75zedE+Z5dPdkm74VQYB3f83qfg6dAjjoxoQyHDXY2e+i7I88Jp SMz8wtVfL0I3qiLO+lJPknM3YP9jQZpnZBr0Jp7rQ8x/lp5O0fa5S3/jUexIT/A2 NuV1PBAh9YOMFg== -----END CERTIFICATE-----Generated at Fri Dec 19 07:34:36 2025 by rpki-client