This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/cd33f9-4f04-4983-a43a-3a8231edb46c/1/DSC_pCDAzV9fGNuOe9o1X-joW30.mft File: DSC_pCDAzV9fGNuOe9o1X-joW30.mft (raw, json) Hash identifier: Xtw/cnRDIOz+yacQfdL5e4Q7BX22f/+71/L1W7CRotY= Subject key identifier: 6F:3D:7A:F9:12:67:CC:43:88:7D:D3:54:F8:85:86:B8:F2:AE:BF:9E Authority key identifier: 0D:20:BF:A4:20:C0:CD:5F:5F:18:DB:8E:7B:DA:35:5F:E8:E8:5B:7D Certificate issuer: /CN=0d20bfa420c0cd5f5f18db8e7bda355fe8e85b7d Certificate serial: 019AF276B224112FAE8BD67256682F322B0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSC_pCDAzV9fGNuOe9o1X-joW30.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/cd33f9-4f04-4983-a43a-3a8231edb46c/1/DSC_pCDAzV9fGNuOe9o1X-joW30.mft Manifest number: 025B Signing time: Sat 06 Dec 2025 07:00:56 +0000 Manifest this update: Sat 06 Dec 2025 07:00:56 +0000 Manifest next update: Sun 07 Dec 2025 07:00:56 +0000 Files and hashes: 1: DSC_pCDAzV9fGNuOe9o1X-joW30.crl (hash: P7xUaTpnX0JNdpqES4FgX8eiKqiPXiHPhaX60a1jsN8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/cd33f9-4f04-4983-a43a-3a8231edb46c/1/DSC_pCDAzV9fGNuOe9o1X-joW30.crl rsync://rpki.ripe.net/repository/DEFAULT/47/cd33f9-4f04-4983-a43a-3a8231edb46c/1/DSC_pCDAzV9fGNuOe9o1X-joW30.mft rsync://rpki.ripe.net/repository/DEFAULT/DSC_pCDAzV9fGNuOe9o1X-joW30.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:b2:24:11:2f:ae:8b:d6:72:56:68:2f:32:2b:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d20bfa420c0cd5f5f18db8e7bda355fe8e85b7d Validity Not Before: Dec 6 07:00:56 2025 GMT Not After : Dec 7 07:00:56 2025 GMT Subject: CN=6f3d7af91267cc43887dd354f88586b8f2aebf9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:bb:44:df:85:8d:67:ef:2d:23:43:37:85:bc: fa:88:b0:de:52:65:06:24:ef:5a:eb:94:9d:56:1c: 19:a8:39:33:bc:2d:64:7f:c1:6f:5c:73:d4:d8:de: d4:a9:44:05:35:68:69:c3:52:26:6f:88:51:5f:ce: 5d:ca:cc:57:dd:01:2f:bb:a5:4a:bd:c0:b4:6b:96: ae:40:23:1b:56:59:b4:66:74:1e:d5:97:0d:95:38: 7d:4e:95:23:78:10:93:4e:c5:f9:1e:be:fa:cb:ce: db:4f:db:92:ce:42:86:4b:99:52:36:84:57:6e:3c: 82:0a:30:37:b9:05:dd:1e:60:93:c1:ed:d5:02:8e: 43:61:87:3b:93:28:37:18:56:92:d8:bd:41:4b:19: 7d:73:4d:78:13:92:d3:04:8b:1b:54:f5:eb:0f:1c: 00:36:e8:65:c0:ed:8a:aa:18:a2:2b:37:1f:8a:fe: 44:6d:78:28:d9:eb:b4:05:5d:cb:52:f7:e4:03:39: b3:c0:53:5c:76:12:cc:3f:b4:dc:b0:dc:f0:02:7c: 0f:1a:fa:58:b1:1a:83:ec:3c:49:ad:ed:14:ee:67: f7:d5:86:2c:e8:b3:23:ed:7a:21:1b:36:b2:b4:1c: f8:68:53:e6:1e:0c:c2:3e:6b:04:da:89:6b:25:10: 21:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:3D:7A:F9:12:67:CC:43:88:7D:D3:54:F8:85:86:B8:F2:AE:BF:9E X509v3 Authority Key Identifier: keyid:0D:20:BF:A4:20:C0:CD:5F:5F:18:DB:8E:7B:DA:35:5F:E8:E8:5B:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSC_pCDAzV9fGNuOe9o1X-joW30.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/cd33f9-4f04-4983-a43a-3a8231edb46c/1/DSC_pCDAzV9fGNuOe9o1X-joW30.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/cd33f9-4f04-4983-a43a-3a8231edb46c/1/DSC_pCDAzV9fGNuOe9o1X-joW30.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:a7:44:fd:70:7c:a3:1f:8e:76:ae:a7:55:c9:14:90:b6:a0: 3c:89:51:d9:5e:8f:4c:f7:d7:39:43:ba:5e:e6:0e:30:bb:95: d8:0f:93:ce:d0:10:d6:0e:80:b8:39:43:97:2e:e5:f1:bb:51: da:52:e3:e3:bf:f8:ff:0c:5f:28:08:2e:78:19:2d:ca:fb:21: dc:50:d0:5c:07:16:9b:8d:04:11:6b:03:cf:5a:46:fb:20:e6: 15:b6:54:05:a7:72:02:03:66:32:8d:6f:7e:d8:43:46:72:e8: ce:94:ab:99:f7:b1:47:eb:07:3c:23:25:a4:76:53:fa:64:34: 5b:45:c6:19:b8:8c:f1:67:67:93:85:44:06:ea:19:6e:bd:77: 3d:13:ff:ca:ab:aa:fe:df:bd:db:1f:f5:75:bb:55:00:9b:cd: 58:1f:19:49:2e:df:dd:28:b9:2e:92:40:85:26:60:0a:0a:3f: 3d:14:63:8c:16:46:9c:d4:5d:71:88:29:ce:29:c8:d4:ff:32: 0f:94:a4:31:65:5c:c3:64:79:e8:5a:97:84:d0:e9:59:37:74: 24:e4:a2:17:05:88:84:91:5a:a0:3e:8a:31:61:3a:73:a8:3e: f7:ca:25:a7:67:9e:65:ac:5c:22:a0:19:1a:92:a9:07:49:ac: ff:eb:93:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydrIkES+ui9ZyVmgvMisLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMjBiZmE0MjBjMGNkNWY1ZjE4ZGI4ZTdiZGEzNTVmZThl ODViN2QwHhcNMjUxMjA2MDcwMDU2WhcNMjUxMjA3MDcwMDU2WjAzMTEwLwYDVQQD Eyg2ZjNkN2FmOTEyNjdjYzQzODg3ZGQzNTRmODg1ODZiOGYyYWViZjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbtE34WNZ+8tI0M3hbz6iLDeUmUG JO9a65SdVhwZqDkzvC1kf8FvXHPU2N7UqUQFNWhpw1Imb4hRX85dysxX3QEvu6VK vcC0a5auQCMbVlm0ZnQe1ZcNlTh9TpUjeBCTTsX5Hr76y87bT9uSzkKGS5lSNoRX bjyCCjA3uQXdHmCTwe3VAo5DYYc7kyg3GFaS2L1BSxl9c014E5LTBIsbVPXrDxwA NuhlwO2KqhiiKzcfiv5EbXgo2eu0BV3LUvfkAzmzwFNcdhLMP7TcsNzwAnwPGvpY sRqD7DxJre0U7mf31YYs6LMj7XohGzaytBz4aFPmHgzCPmsE2olrJRAhawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG89evkSZ8xDiH3TVPiFhrjyrr+eMB8GA1UdIwQY MBaAFA0gv6QgwM1fXxjbjnvaNV/o6Ft9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFNDX3BDREF6VjlmR051T2U5bzFYLWpvVzMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9jZDMzZjktNGYwNC00OTgzLWE0M2Et M2E4MjMxZWRiNDZjLzEvRFNDX3BDREF6VjlmR051T2U5bzFYLWpvVzMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9jZDMzZjktNGYwNC00OTgzLWE0M2EtM2E4MjMxZWRiNDZj LzEvRFNDX3BDREF6VjlmR051T2U5bzFYLWpvVzMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEadE/XB8 ox+Odq6nVckUkLagPIlR2V6PTPfXOUO6XuYOMLuV2A+TztAQ1g6AuDlDly7l8btR 2lLj47/4/wxfKAgueBktyvsh3FDQXAcWm40EEWsDz1pG+yDmFbZUBadyAgNmMo1v fthDRnLozpSrmfexR+sHPCMlpHZT+mQ0W0XGGbiM8Wdnk4VEBuoZbr13PRP/yquq /t+92x/1dbtVAJvNWB8ZSS7f3Si5LpJAhSZgCgo/PRRjjBZGnNRdcYgpzinI1P8y D5SkMWVcw2R56FqXhNDpWTd0JOSiFwWIhJFaoD6KMWE6c6g+98olp2eeZaxcIqAZ GpKpB0ms/+uTLA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:04:48 2025 by rpki-client