This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft File: dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft (raw, json) Hash identifier: r+7ALXfmobnhZ7GTNG5qfe5oYP5XOWVBHuiPIdd1zHU= Subject key identifier: 3D:96:52:92:87:C6:19:71:A6:F2:82:FA:BF:D0:07:76:80:02:FE:BD Authority key identifier: 74:B0:83:65:02:95:18:9F:00:9A:A7:4C:12:CB:C6:1E:E2:3F:A7:53 Certificate issuer: /CN=74b083650295189f009aa74c12cbc61ee23fa753 Certificate serial: 019AF12D0B30F68365B96E013231279DCB73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 01:00:52 +0000 Manifest this update: Sat 06 Dec 2025 01:00:52 +0000 Manifest next update: Sun 07 Dec 2025 01:00:52 +0000 Files and hashes: 1: dLCDZQKVGJ8AmqdMEsvGHuI_p1M.crl (hash: 09JY05D8Ez7lKJ/hW03om3zF1fLs5j/QLksuhowz4HA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.crl rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft rsync://rpki.ripe.net/repository/DEFAULT/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:0b:30:f6:83:65:b9:6e:01:32:31:27:9d:cb:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74b083650295189f009aa74c12cbc61ee23fa753 Validity Not Before: Dec 6 01:00:52 2025 GMT Not After : Dec 7 01:00:52 2025 GMT Subject: CN=3d96529287c61971a6f282fabfd007768002febd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:42:12:0b:36:5c:3e:ef:54:12:f8:e2:eb:ba: 04:ad:37:77:8c:95:49:d6:9f:0a:12:ab:9b:25:ce: 4b:22:0e:83:d7:23:37:aa:9f:8b:a5:c7:00:62:12: ac:72:27:0d:22:4d:72:a1:ba:87:6d:8b:65:1d:09: ee:46:04:7f:ee:13:20:76:4f:64:eb:f9:c1:97:31: f0:f0:32:22:ae:9e:3f:63:4f:22:bb:58:3a:a9:59: d0:cc:bb:e9:23:96:76:7d:80:5c:73:e5:7e:48:18: d7:10:99:b5:0e:68:05:97:28:d7:7a:56:a6:df:3b: 6a:7a:10:a1:aa:46:e3:fd:08:fb:49:70:cc:41:5b: a3:40:10:18:a3:10:da:f7:03:21:a9:6b:91:3b:37: 35:4e:46:41:1b:fb:00:d9:3c:1d:a9:ef:56:f3:b4: 6d:fa:bc:0d:58:dc:b6:73:8e:db:0d:7c:d5:b9:04: bf:32:c6:2a:11:28:42:62:e8:cf:4c:9a:36:69:05: d5:78:f4:49:84:89:6e:64:86:6b:b4:7a:72:fc:99: eb:3b:54:01:80:a6:a2:45:fa:9a:60:1b:31:40:e6: 30:80:ab:1e:b5:17:c9:44:cb:15:da:1a:df:22:b8: 73:a1:a8:6d:9b:80:3d:aa:d2:06:03:7d:3e:e2:4b: c4:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:96:52:92:87:C6:19:71:A6:F2:82:FA:BF:D0:07:76:80:02:FE:BD X509v3 Authority Key Identifier: keyid:74:B0:83:65:02:95:18:9F:00:9A:A7:4C:12:CB:C6:1E:E2:3F:A7:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:f7:ae:33:89:6d:61:83:23:fb:3c:15:c3:b0:f7:2c:28:dc: 1f:91:dd:77:35:91:1d:2c:3c:47:39:ec:3c:ed:be:3d:19:3d: a8:a9:60:ca:e2:c6:d8:cd:52:62:29:f7:4e:d9:70:b6:a9:91: d2:ba:ce:bc:49:9e:52:cd:cb:ca:26:99:5d:86:63:29:c3:74: e0:97:c1:6c:04:2e:52:5f:25:ac:e7:08:d5:95:c1:dc:f6:62: 67:9d:38:28:52:7f:8a:2e:6f:d1:f0:b9:6d:eb:6a:ae:13:70: ac:ec:77:df:48:a0:10:d6:1e:e8:af:e0:35:cd:8c:3c:7e:e3: 59:00:d5:36:64:f1:ff:ef:f5:c8:00:88:5c:f1:ce:21:4c:44: ed:9c:fd:b2:df:49:da:f6:1e:16:da:ad:ab:56:f3:d1:cf:e8: 48:b6:ec:a5:1a:af:b8:42:d0:53:ed:96:f3:12:e5:fe:43:fd: 06:06:97:34:eb:de:48:b0:a1:10:fb:82:24:13:67:3b:95:6c: c6:9b:50:15:cc:68:85:84:d9:3c:2f:39:94:9e:8f:b5:b7:ae: 88:1f:fe:5b:ed:c4:2b:6a:4a:40:3b:70:88:13:a7:dc:3a:57: 10:1d:85:bb:e7:5f:03:9a:13:6b:66:95:90:5e:1a:66:bf:89: 0c:47:38:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLQsw9oNluW4BMjEnnctzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0YjA4MzY1MDI5NTE4OWYwMDlhYTc0YzEyY2JjNjFlZTIz ZmE3NTMwHhcNMjUxMjA2MDEwMDUyWhcNMjUxMjA3MDEwMDUyWjAzMTEwLwYDVQQD EygzZDk2NTI5Mjg3YzYxOTcxYTZmMjgyZmFiZmQwMDc3NjgwMDJmZWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEISCzZcPu9UEvji67oErTd3jJVJ 1p8KEqubJc5LIg6D1yM3qp+LpccAYhKscicNIk1yobqHbYtlHQnuRgR/7hMgdk9k 6/nBlzHw8DIirp4/Y08iu1g6qVnQzLvpI5Z2fYBcc+V+SBjXEJm1DmgFlyjXelam 3ztqehChqkbj/Qj7SXDMQVujQBAYoxDa9wMhqWuROzc1TkZBG/sA2Twdqe9W87Rt +rwNWNy2c47bDXzVuQS/MsYqEShCYujPTJo2aQXVePRJhIluZIZrtHpy/JnrO1QB gKaiRfqaYBsxQOYwgKsetRfJRMsV2hrfIrhzoahtm4A9qtIGA30+4kvEAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD2WUpKHxhlxpvKC+r/QB3aAAv69MB8GA1UdIwQY MBaAFHSwg2UClRifAJqnTBLLxh7iP6dTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZExDRFpRS1ZHSjhBbXFkTUVzdkdIdUlfcDFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9kNTMxYTgtMDJhZS00YjBiLThmNDQt NTI4NzY5OGFmZjNjLzEvZExDRFpRS1ZHSjhBbXFkTUVzdkdIdUlfcDFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9kNTMxYTgtMDJhZS00YjBiLThmNDQtNTI4NzY5OGFmZjNj LzEvZExDRFpRS1ZHSjhBbXFkTUVzdkdIdUlfcDFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU/euM4lt YYMj+zwVw7D3LCjcH5HddzWRHSw8RznsPO2+PRk9qKlgyuLG2M1SYin3TtlwtqmR 0rrOvEmeUs3LyiaZXYZjKcN04JfBbAQuUl8lrOcI1ZXB3PZiZ504KFJ/ii5v0fC5 betqrhNwrOx330igENYe6K/gNc2MPH7jWQDVNmTx/+/1yACIXPHOIUxE7Zz9st9J 2vYeFtqtq1bz0c/oSLbspRqvuELQU+2W8xLl/kP9BgaXNOveSLChEPuCJBNnO5Vs xptQFcxohYTZPC85lJ6PtbeuiB/+W+3EK2pKQDtwiBOn3DpXEB2Fu+dfA5oTa2aV kF4aZr+JDEc4Tw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:52 2025 by rpki-client