This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/0b9773-f9d8-4d87-8772-7008bc97c7b1/1/dpx0RfVnkSzoKKX3h-yUSgjb_eM.mft File: dpx0RfVnkSzoKKX3h-yUSgjb_eM.mft (raw, json) Hash identifier: F0f7jiWaequhHC4sFwqP9GemGwzGlZeXsoe5x/0M6lk= Subject key identifier: 5E:E9:2C:3B:B3:0E:05:66:D2:24:30:76:26:2F:6D:12:7C:57:C5:9F Authority key identifier: 76:9C:74:45:F5:67:91:2C:E8:28:A5:F7:87:EC:94:4A:08:DB:FD:E3 Certificate issuer: /CN=769c7445f567912ce828a5f787ec944a08dbfde3 Certificate serial: 019AF12CE471337342F0B7DF4CC8D3710BAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dpx0RfVnkSzoKKX3h-yUSgjb_eM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/0b9773-f9d8-4d87-8772-7008bc97c7b1/1/dpx0RfVnkSzoKKX3h-yUSgjb_eM.mft Manifest number: 1341 Signing time: Sat 06 Dec 2025 01:00:42 +0000 Manifest this update: Sat 06 Dec 2025 01:00:42 +0000 Manifest next update: Sun 07 Dec 2025 01:00:42 +0000 Files and hashes: 1: dpx0RfVnkSzoKKX3h-yUSgjb_eM.crl (hash: 812+PI/kLMQExoxF28gNx9Bdd93PTnuXDA9a7YTK1u4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/0b9773-f9d8-4d87-8772-7008bc97c7b1/1/dpx0RfVnkSzoKKX3h-yUSgjb_eM.crl rsync://rpki.ripe.net/repository/DEFAULT/54/0b9773-f9d8-4d87-8772-7008bc97c7b1/1/dpx0RfVnkSzoKKX3h-yUSgjb_eM.mft rsync://rpki.ripe.net/repository/DEFAULT/dpx0RfVnkSzoKKX3h-yUSgjb_eM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:e4:71:33:73:42:f0:b7:df:4c:c8:d3:71:0b:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=769c7445f567912ce828a5f787ec944a08dbfde3 Validity Not Before: Dec 6 01:00:42 2025 GMT Not After : Dec 7 01:00:42 2025 GMT Subject: CN=5ee92c3bb30e0566d2243076262f6d127c57c59f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:24:74:ef:e7:e5:24:93:5c:ca:e9:7b:fb:bd: cc:ec:37:15:85:42:68:b3:65:83:3e:24:16:5f:b9: 76:f1:5a:a7:a8:51:12:c5:e1:25:1f:bd:33:45:46: ce:01:8e:8e:46:6f:66:0e:88:70:f1:74:22:e2:4d: c2:c9:9f:07:bf:40:29:56:e3:cd:fc:fd:62:10:01: 10:d3:1f:5e:7c:ad:3f:d5:1c:ff:a5:44:6a:91:ab: 56:57:94:48:85:2a:f5:78:ba:99:75:83:20:27:18: e2:07:98:6f:a7:e2:e1:c9:e5:28:d6:28:c8:da:4e: 92:ce:9f:6a:31:0c:f8:81:3f:bd:f4:9e:d2:38:21: 3d:6f:96:15:01:f7:bb:f2:7b:05:74:e5:97:df:e4: 1d:11:b4:ae:3b:4e:99:40:7c:2f:89:4d:0d:80:97: 8d:de:76:d8:ed:cb:2d:2e:d7:61:0a:a4:97:4a:d2: 8f:a0:59:37:3e:82:03:7d:a2:cf:bb:fb:b7:c7:0b: 05:eb:82:de:cd:26:34:d7:d7:13:3d:87:a2:69:3d: 74:bf:ea:27:23:86:c8:38:7c:49:41:3d:95:4d:71: 89:65:04:06:ec:73:4f:3f:48:b9:a4:65:07:ee:48: 8f:a4:10:cb:cf:66:2e:12:84:45:6e:a0:8f:c2:18: 2f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:E9:2C:3B:B3:0E:05:66:D2:24:30:76:26:2F:6D:12:7C:57:C5:9F X509v3 Authority Key Identifier: keyid:76:9C:74:45:F5:67:91:2C:E8:28:A5:F7:87:EC:94:4A:08:DB:FD:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpx0RfVnkSzoKKX3h-yUSgjb_eM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/0b9773-f9d8-4d87-8772-7008bc97c7b1/1/dpx0RfVnkSzoKKX3h-yUSgjb_eM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/0b9773-f9d8-4d87-8772-7008bc97c7b1/1/dpx0RfVnkSzoKKX3h-yUSgjb_eM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:3f:2b:3e:e1:a2:59:58:8b:24:57:c9:47:cc:93:f5:61:c1: 92:4e:3c:45:1d:b9:1a:fc:30:6c:a4:e5:56:06:23:87:a8:e2: 97:fb:13:01:43:a0:af:84:1a:22:a4:e8:1a:e3:2c:28:7b:23: a2:57:db:4d:84:ca:65:7d:ae:10:a6:48:74:57:02:09:e8:03: 64:9b:6d:09:82:56:91:29:09:bd:93:05:8a:46:6b:5b:63:df: c8:de:c6:a1:da:92:b4:fc:52:9b:fb:f3:2a:fa:8f:30:5d:6f: a8:4f:7b:fc:7e:6f:07:34:39:e2:6f:a9:fb:a4:cc:c4:78:a9: 58:0d:a2:45:d8:40:4e:8a:9d:b0:bc:13:60:94:ce:d7:e7:dc: 4f:d9:a2:aa:ea:66:33:e6:45:3c:84:bb:0b:2d:70:fb:37:da: d5:1d:24:44:1b:a5:28:98:3b:b6:1d:c6:da:d1:3b:63:ae:7b: 31:b1:88:57:11:57:03:39:ee:00:ff:51:06:4f:70:af:04:5e: 08:29:4e:10:9c:68:63:8c:39:69:e2:19:d7:c4:7f:46:9a:63: ab:e3:4c:0c:07:e1:a3:18:ac:d2:0f:92:74:00:15:a5:fe:b5: 23:5e:fd:0a:86:56:a5:08:59:fa:fc:5a:50:94:5b:12:67:09: 7d:90:22:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLORxM3NC8LffTMjTcQusMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2OWM3NDQ1ZjU2NzkxMmNlODI4YTVmNzg3ZWM5NDRhMDhk YmZkZTMwHhcNMjUxMjA2MDEwMDQyWhcNMjUxMjA3MDEwMDQyWjAzMTEwLwYDVQQD Eyg1ZWU5MmMzYmIzMGUwNTY2ZDIyNDMwNzYyNjJmNmQxMjdjNTdjNTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiR07+flJJNcyul7+73M7DcVhUJo s2WDPiQWX7l28VqnqFESxeElH70zRUbOAY6ORm9mDohw8XQi4k3CyZ8Hv0ApVuPN /P1iEAEQ0x9efK0/1Rz/pURqkatWV5RIhSr1eLqZdYMgJxjiB5hvp+LhyeUo1ijI 2k6Szp9qMQz4gT+99J7SOCE9b5YVAfe78nsFdOWX3+QdEbSuO06ZQHwviU0NgJeN 3nbY7cstLtdhCqSXStKPoFk3PoIDfaLPu/u3xwsF64LezSY019cTPYeiaT10v+on I4bIOHxJQT2VTXGJZQQG7HNPP0i5pGUH7kiPpBDLz2YuEoRFbqCPwhgvZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF7pLDuzDgVm0iQwdiYvbRJ8V8WfMB8GA1UdIwQY MBaAFHacdEX1Z5Es6Cil94fslEoI2/3jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHB4MFJmVm5rU3pvS0tYM2gteVVTZ2piX2VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8wYjk3NzMtZjlkOC00ZDg3LTg3NzIt NzAwOGJjOTdjN2IxLzEvZHB4MFJmVm5rU3pvS0tYM2gteVVTZ2piX2VNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8wYjk3NzMtZjlkOC00ZDg3LTg3NzItNzAwOGJjOTdjN2Ix LzEvZHB4MFJmVm5rU3pvS0tYM2gteVVTZ2piX2VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXT8rPuGi WViLJFfJR8yT9WHBkk48RR25GvwwbKTlVgYjh6jil/sTAUOgr4QaIqToGuMsKHsj olfbTYTKZX2uEKZIdFcCCegDZJttCYJWkSkJvZMFikZrW2PfyN7GodqStPxSm/vz KvqPMF1vqE97/H5vBzQ54m+p+6TMxHipWA2iRdhAToqdsLwTYJTO1+fcT9miqupm M+ZFPIS7Cy1w+zfa1R0kRBulKJg7th3G2tE7Y657MbGIVxFXAznuAP9RBk9wrwRe CClOEJxoY4w5aeIZ18R/Rppjq+NMDAfhoxis0g+SdAAVpf61I179CoZWpQhZ+vxa UJRbEmcJfZAiPg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:09:44 2025 by rpki-client