This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft File: dRSDZVs1orhHGF9onI_RYB3McYc.mft (raw, json) Hash identifier: USsY7TlfYtnyLZ5mpzVRz5AgNzxGknLkY+Lhl6NXLU4= Subject key identifier: 34:49:EB:C9:57:9A:E9:EF:AF:B6:04:4A:18:D1:D3:63:D1:24:B7:1F Authority key identifier: 75:14:83:65:5B:35:A2:B8:47:18:5F:68:9C:8F:D1:60:1D:CC:71:87 Certificate issuer: /CN=751483655b35a2b847185f689c8fd1601dcc7187 Certificate serial: 019AF42E644C152C7745921B206E775A1E71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 15:01:12 +0000 Manifest this update: Sat 06 Dec 2025 15:01:12 +0000 Manifest next update: Sun 07 Dec 2025 15:01:12 +0000 Files and hashes: 1: dRSDZVs1orhHGF9onI_RYB3McYc.crl (hash: //q4b/qIIoez2c4TzQocHtoDfL/RjcOI+mOR6ciYM5M=) 2: qzRYbIxueG7BxO2kIyNYDm59o0o.roa (hash: ZxnZOMA5hmEug+cRf8g9nRIfM3tLtcITJFQSj4Zq/Vg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:64:4c:15:2c:77:45:92:1b:20:6e:77:5a:1e:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=751483655b35a2b847185f689c8fd1601dcc7187 Validity Not Before: Dec 6 15:01:12 2025 GMT Not After : Dec 7 15:01:12 2025 GMT Subject: CN=3449ebc9579ae9efafb6044a18d1d363d124b71f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:72:41:78:c9:ed:4f:29:82:65:85:eb:c4:d8: 62:89:59:f7:90:67:af:18:f4:9d:4d:51:eb:c7:fa: cc:e4:f6:04:67:05:53:d5:e1:77:85:30:42:55:d2: 6b:1b:af:24:cb:4d:ab:b9:e6:59:b0:70:d0:04:c3: e4:c4:ca:ca:f4:58:e1:cb:b3:82:e7:a5:77:84:1f: de:55:58:8a:1b:b8:8f:cc:1e:c6:87:98:fa:12:c1: be:0f:7d:17:7a:29:cc:8c:bc:73:d9:df:75:ec:e9: ca:73:c9:6c:48:ff:96:69:5c:d8:02:f0:e7:71:91: f2:72:3e:fe:46:22:26:c5:98:02:66:0c:bc:12:3c: 20:1d:da:a2:80:86:e1:c1:fe:b5:fa:a9:26:fa:52: 1e:73:f0:8f:0b:27:70:7e:fc:48:a3:af:9b:42:81: 25:1c:5a:13:0e:d2:1a:db:aa:b6:d8:5a:71:0a:e3: b2:d5:80:52:dc:63:b9:32:8e:29:65:59:eb:d8:b5: 58:f1:77:d7:d8:63:20:6b:03:de:5a:30:75:cd:76: d9:8b:c9:e8:73:c2:b8:e5:0d:b0:f7:59:64:d0:18: c3:54:df:18:42:5d:4a:a0:e6:50:c2:89:06:cf:6a: 32:2d:19:16:f1:57:9f:83:d2:74:04:be:8b:34:95: 56:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:49:EB:C9:57:9A:E9:EF:AF:B6:04:4A:18:D1:D3:63:D1:24:B7:1F X509v3 Authority Key Identifier: keyid:75:14:83:65:5B:35:A2:B8:47:18:5F:68:9C:8F:D1:60:1D:CC:71:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:cc:cc:b1:02:26:11:72:6d:ca:25:81:e5:fa:fd:87:b6:d5: 51:be:e1:a1:95:ee:f8:be:69:15:d8:6d:fd:c0:07:57:24:60: ee:61:14:e1:c0:99:db:d1:f4:eb:70:c0:ac:e5:ac:98:3c:7d: b1:5b:37:fc:ea:56:91:fa:2c:68:31:f3:2d:9e:12:72:eb:0a: 4d:50:5f:2b:10:f6:a2:c2:9b:97:f0:c9:4c:d3:7a:11:16:44: 4c:3c:5f:e2:61:1a:62:c8:aa:b2:a3:4e:f5:d3:04:47:58:d0: 96:5d:3e:4c:dc:f8:5b:20:19:c7:6b:d8:43:8a:e5:a6:24:c7: 0d:a8:8e:65:d3:66:74:55:7d:c2:7d:9f:e8:16:9e:a9:7c:7d: c5:f9:2c:7e:5c:47:80:f9:cd:d5:e4:b3:e9:48:d0:02:96:04: 7e:e0:77:11:a5:d1:3f:39:47:4d:d5:85:2f:42:d6:56:f5:ca: 5d:2d:d0:7a:8a:d0:66:a1:fb:61:c7:4c:25:e0:e7:a6:1b:c9: d0:1d:43:d3:66:3f:82:5e:1b:0c:25:d1:e0:e9:38:03:63:46: c2:17:10:61:91:2c:bd:43:a6:91:a6:0e:2e:c4:37:74:5d:b2: 45:dc:d7:09:84:30:c5:19:d1:3e:3a:ef:93:f3:f1:55:fd:47: 0b:e2:32:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LmRMFSx3RZIbIG53Wh5xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MTQ4MzY1NWIzNWEyYjg0NzE4NWY2ODljOGZkMTYwMWRj YzcxODcwHhcNMjUxMjA2MTUwMTEyWhcNMjUxMjA3MTUwMTEyWjAzMTEwLwYDVQQD EygzNDQ5ZWJjOTU3OWFlOWVmYWZiNjA0NGExOGQxZDM2M2QxMjRiNzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHJBeMntTymCZYXrxNhiiVn3kGev GPSdTVHrx/rM5PYEZwVT1eF3hTBCVdJrG68ky02rueZZsHDQBMPkxMrK9Fjhy7OC 56V3hB/eVViKG7iPzB7Gh5j6EsG+D30XeinMjLxz2d917OnKc8lsSP+WaVzYAvDn cZHycj7+RiImxZgCZgy8EjwgHdqigIbhwf61+qkm+lIec/CPCydwfvxIo6+bQoEl HFoTDtIa26q22FpxCuOy1YBS3GO5Mo4pZVnr2LVY8XfX2GMgawPeWjB1zXbZi8no c8K45Q2w91lk0BjDVN8YQl1KoOZQwokGz2oyLRkW8Vefg9J0BL6LNJVWiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDRJ68lXmunvr7YEShjR02PRJLcfMB8GA1UdIwQY MBaAFHUUg2VbNaK4RxhfaJyP0WAdzHGHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFJTRFpWczFvcmhIR0Y5b25JX1JZQjNNY1ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8xMjc5ZmMtMWIyNy00MDdjLTgxZjQt YTdmYjM2Y2MyZmUzLzEvZFJTRFpWczFvcmhIR0Y5b25JX1JZQjNNY1ljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi8xMjc5ZmMtMWIyNy00MDdjLTgxZjQtYTdmYjM2Y2MyZmUz LzEvZFJTRFpWczFvcmhIR0Y5b25JX1JZQjNNY1ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQczMsQIm EXJtyiWB5fr9h7bVUb7hoZXu+L5pFdht/cAHVyRg7mEU4cCZ29H063DArOWsmDx9 sVs3/OpWkfosaDHzLZ4ScusKTVBfKxD2osKbl/DJTNN6ERZETDxf4mEaYsiqsqNO 9dMER1jQll0+TNz4WyAZx2vYQ4rlpiTHDaiOZdNmdFV9wn2f6BaeqXx9xfksflxH gPnN1eSz6UjQApYEfuB3EaXRPzlHTdWFL0LWVvXKXS3QeorQZqH7YcdMJeDnphvJ 0B1D02Y/gl4bDCXR4Ok4A2NGwhcQYZEsvUOmkaYOLsQ3dF2yRdzXCYQwxRnRPjrv k/PxVf1HC+Iy2g== -----END CERTIFICATE-----Generated at Sat Dec 6 16:53:25 2025 by rpki-client