This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft File: Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft (raw, json) Hash identifier: pYKCV5oSD64zrWlgsIPnN9kr5Xun8SKJJK8/lHo6p4I= Subject key identifier: 1E:6D:86:DA:A8:EE:3F:46:08:AF:3B:A9:4B:61:D2:9D:A2:DD:97:35 Authority key identifier: 0E:BF:0B:DC:D9:01:62:2B:16:FF:D4:14:4B:58:88:70:73:22:C5:34 Certificate issuer: /CN=0ebf0bdcd901622b16ffd4144b5888707322c534 Certificate serial: 019AF3F747EAE55B37BA97CE4DF22D3E9902 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft Manifest number: 1755 Signing time: Sat 06 Dec 2025 14:01:00 +0000 Manifest this update: Sat 06 Dec 2025 14:01:00 +0000 Manifest next update: Sun 07 Dec 2025 14:01:00 +0000 Files and hashes: 1: Dr8L3NkBYisW_9QUS1iIcHMixTQ.crl (hash: 5bZdoZ954JS2K3/xMg6SxscOxRVOW8yy7rBY1TnaYUk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.crl rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:47:ea:e5:5b:37:ba:97:ce:4d:f2:2d:3e:99:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ebf0bdcd901622b16ffd4144b5888707322c534 Validity Not Before: Dec 6 14:01:00 2025 GMT Not After : Dec 7 14:01:00 2025 GMT Subject: CN=1e6d86daa8ee3f4608af3ba94b61d29da2dd9735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:0d:35:bd:db:87:07:cb:26:e4:ee:38:7c:2e: 4c:a4:db:e5:d3:58:0b:3e:a7:74:a6:3d:75:ea:a3: 8d:a5:6c:93:fe:12:1e:b7:bf:a6:42:5c:37:53:e3: 54:be:13:57:99:c7:e4:17:df:a2:5c:13:a3:6a:24: 75:89:75:ea:b9:e5:fb:46:30:53:b4:2b:3a:ff:d5: 76:b0:75:3d:61:36:63:b0:c9:5b:1b:a3:32:c5:80: 70:f2:f1:79:5c:1f:85:08:26:91:6e:fa:1d:f5:91: a2:36:3b:ae:8c:5f:f1:8d:85:59:14:80:31:4d:0f: 8c:10:00:be:ed:fd:11:25:6f:fb:ea:52:d0:b4:d5: d9:0a:6b:f3:37:ed:cd:c5:69:07:fd:f0:0b:b6:ab: 50:58:79:0c:01:db:e1:d3:24:b5:00:a5:06:ae:41: 64:bf:73:ec:0c:43:1d:e1:c8:74:2c:4e:e5:a8:b5: 27:5d:14:f7:21:4f:e4:4d:b9:2a:1d:08:32:a4:8c: 2b:5e:b2:b9:b9:c1:3b:33:f4:a9:c3:43:7d:5a:d5: d9:a7:64:ea:ea:26:d7:e1:4f:cf:ac:fe:39:dd:88: c1:fc:cc:fe:22:93:f8:48:c1:ac:14:89:66:37:45: 11:3b:3f:6b:17:ea:03:67:3e:42:30:e4:43:f5:99: bf:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:6D:86:DA:A8:EE:3F:46:08:AF:3B:A9:4B:61:D2:9D:A2:DD:97:35 X509v3 Authority Key Identifier: keyid:0E:BF:0B:DC:D9:01:62:2B:16:FF:D4:14:4B:58:88:70:73:22:C5:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dr8L3NkBYisW_9QUS1iIcHMixTQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/a9b91b-684e-4d78-aae9-c447b4193210/1/Dr8L3NkBYisW_9QUS1iIcHMixTQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:79:eb:43:67:f4:67:3a:2f:c1:04:1c:2f:47:29:cc:db:6d: ea:be:b5:de:7e:40:b7:21:ca:43:4f:20:94:97:5d:cd:12:1c: 2d:bb:49:2c:0d:12:11:36:99:52:2d:7d:eb:02:d8:2a:14:9c: 22:c8:23:dd:0e:c4:52:82:ed:40:bc:3c:90:c1:ec:6a:d9:10: 18:10:d3:c7:12:df:3d:44:30:7b:75:6e:69:c3:3a:02:b2:03: fa:8c:cb:6c:6c:8a:dc:f9:17:a4:40:03:a7:11:e8:cf:90:64: 29:cd:3e:7f:d7:78:4e:90:d2:70:8f:c8:ee:7f:69:b9:0d:29: c3:ca:7f:e0:5b:49:0f:74:32:ef:ad:36:bc:97:67:a4:8a:8b: ac:a9:cf:34:26:3f:e4:11:69:8a:1b:66:c0:b0:b6:41:cd:b1: 80:45:56:73:ea:c4:43:38:17:d1:7b:e5:60:49:20:3f:92:83: 33:fc:b8:eb:81:d3:d4:a6:ab:23:ea:b4:bb:d6:d7:af:1a:05: c3:62:62:fa:64:c1:8d:22:55:0b:99:d4:86:ea:7d:c4:a0:68: c5:e0:60:d1:d8:9f:2c:12:c6:f7:de:72:a7:2c:93:58:21:44: c2:29:06:90:3c:27:d5:38:d7:ef:af:b9:c8:62:58:c6:67:72: eb:57:5c:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz90fq5Vs3upfOTfItPpkCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlYmYwYmRjZDkwMTYyMmIxNmZmZDQxNDRiNTg4ODcwNzMy MmM1MzQwHhcNMjUxMjA2MTQwMTAwWhcNMjUxMjA3MTQwMTAwWjAzMTEwLwYDVQQD EygxZTZkODZkYWE4ZWUzZjQ2MDhhZjNiYTk0YjYxZDI5ZGEyZGQ5NzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8g01vduHB8sm5O44fC5MpNvl01gL Pqd0pj116qONpWyT/hIet7+mQlw3U+NUvhNXmcfkF9+iXBOjaiR1iXXqueX7RjBT tCs6/9V2sHU9YTZjsMlbG6MyxYBw8vF5XB+FCCaRbvod9ZGiNjuujF/xjYVZFIAx TQ+MEAC+7f0RJW/76lLQtNXZCmvzN+3NxWkH/fALtqtQWHkMAdvh0yS1AKUGrkFk v3PsDEMd4ch0LE7lqLUnXRT3IU/kTbkqHQgypIwrXrK5ucE7M/Spw0N9WtXZp2Tq 6ibX4U/PrP453YjB/Mz+IpP4SMGsFIlmN0UROz9rF+oDZz5CMORD9Zm/8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB5thtqo7j9GCK87qUth0p2i3Zc1MB8GA1UdIwQY MBaAFA6/C9zZAWIrFv/UFEtYiHBzIsU0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHI4TDNOa0JZaXNXXzlRVVMxaUljSE1peFRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hOWI5MWItNjg0ZS00ZDc4LWFhZTkt YzQ0N2I0MTkzMjEwLzEvRHI4TDNOa0JZaXNXXzlRVVMxaUljSE1peFRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9hOWI5MWItNjg0ZS00ZDc4LWFhZTktYzQ0N2I0MTkzMjEw LzEvRHI4TDNOa0JZaXNXXzlRVVMxaUljSE1peFRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApXnrQ2f0 ZzovwQQcL0cpzNtt6r613n5AtyHKQ08glJddzRIcLbtJLA0SETaZUi196wLYKhSc Isgj3Q7EUoLtQLw8kMHsatkQGBDTxxLfPUQwe3VuacM6ArID+ozLbGyK3PkXpEAD pxHoz5BkKc0+f9d4TpDScI/I7n9puQ0pw8p/4FtJD3Qy7602vJdnpIqLrKnPNCY/ 5BFpihtmwLC2Qc2xgEVWc+rEQzgX0XvlYEkgP5KDM/y464HT1KarI+q0u9bXrxoF w2Ji+mTBjSJVC5nUhup9xKBoxeBg0difLBLG995ypyyTWCFEwikGkDwn1TjX76+5 yGJYxmdy61dcjw== -----END CERTIFICATE-----Generated at Sat Dec 6 16:49:10 2025 by rpki-client