This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft File: dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft (raw, json) Hash identifier: UdVRkbMB5/m77BnT5FGoju9xlzSqSPWfNZAwWP1puLo= Subject key identifier: 85:89:E4:FE:BC:FD:FD:A8:8A:9F:89:94:B4:44:72:E9:EB:FA:D5:F8 Authority key identifier: 74:72:EB:8F:80:15:EB:1B:C2:9E:A3:16:2F:83:E6:AC:ED:BB:42:7E Certificate issuer: /CN=7472eb8f8015eb1bc29ea3162f83e6acedbb427e Certificate serial: 019AF1647F97633EF1EFE87C90BD30C7919E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHLrj4AV6xvCnqMWL4PmrO27Qn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft Manifest number: 1055 Signing time: Sat 06 Dec 2025 02:01:26 +0000 Manifest this update: Sat 06 Dec 2025 02:01:26 +0000 Manifest next update: Sun 07 Dec 2025 02:01:26 +0000 Files and hashes: 1: dHLrj4AV6xvCnqMWL4PmrO27Qn4.crl (hash: B9h0TJkql9xavO2mKioSfnXCBQfimea7dZr3khlFnfY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.crl rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft rsync://rpki.ripe.net/repository/DEFAULT/dHLrj4AV6xvCnqMWL4PmrO27Qn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:7f:97:63:3e:f1:ef:e8:7c:90:bd:30:c7:91:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7472eb8f8015eb1bc29ea3162f83e6acedbb427e Validity Not Before: Dec 6 02:01:26 2025 GMT Not After : Dec 7 02:01:26 2025 GMT Subject: CN=8589e4febcfdfda88a9f8994b44472e9ebfad5f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3f:55:69:29:cb:46:6f:ec:ff:2b:f3:aa:70: 64:d9:d6:55:85:1d:66:ba:d2:4d:ba:a9:a8:84:92: 67:f0:aa:1c:56:3c:0b:23:eb:7e:d9:92:74:87:90: 5a:1c:07:54:b6:50:d6:bc:97:cf:cf:de:f5:be:36: b7:fc:0f:61:93:df:fb:06:30:7c:84:73:11:55:c4: e8:58:4e:ce:34:fe:1b:c9:25:dd:44:cd:e1:81:7c: bc:a5:cc:e5:ea:13:1e:1b:57:0c:36:1c:85:35:88: 93:a5:fe:7a:53:86:ce:8c:56:f7:59:66:b2:d1:86: 8e:58:cb:9d:62:5e:ac:6c:55:6d:8f:04:48:43:5b: 78:58:a1:4f:f9:b3:da:32:b7:18:f5:a6:23:a3:3d: 4d:ae:4c:ec:7c:4c:b4:de:1a:b9:c8:09:67:c4:89: 3c:51:56:e5:1f:2f:b2:f8:c6:e7:1e:fc:04:27:9a: 3f:76:61:53:b5:ed:c5:d7:02:79:f2:41:ba:36:13: 50:98:a9:76:80:f2:2f:50:4d:74:21:f1:58:31:af: 84:6a:82:28:0a:27:a9:b6:86:31:f0:eb:20:17:36: e0:12:a8:de:5a:9e:9c:cc:14:7e:08:5b:a4:ab:76: ea:6f:e5:15:5b:4f:27:62:4f:2a:55:4a:bb:07:37: 1d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:89:E4:FE:BC:FD:FD:A8:8A:9F:89:94:B4:44:72:E9:EB:FA:D5:F8 X509v3 Authority Key Identifier: keyid:74:72:EB:8F:80:15:EB:1B:C2:9E:A3:16:2F:83:E6:AC:ED:BB:42:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHLrj4AV6xvCnqMWL4PmrO27Qn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/655e28-3391-40a7-88ca-1bffda382ebe/1/dHLrj4AV6xvCnqMWL4PmrO27Qn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:b8:6b:9e:9a:1b:fe:86:da:e7:df:04:be:c7:d6:59:9e:57: ac:b8:a3:a2:5b:6d:85:83:09:60:a2:37:af:91:5b:6c:b7:e9: bd:7c:c0:41:33:0b:20:91:57:db:cb:92:6e:64:f8:e0:2d:f2: 14:15:1f:e6:18:10:b9:d1:d7:34:33:d7:c8:5a:a6:7a:0f:f5: 4a:db:ab:eb:bf:07:27:02:83:cc:5f:11:4e:9f:fa:67:48:b1: 8b:82:8f:1c:6a:d2:97:19:05:a9:e0:cd:4e:3a:ec:27:7b:34: 1d:94:fe:40:70:e8:30:e2:70:1a:d0:10:5c:97:52:cf:25:28: f2:2c:9c:c7:55:c6:8f:6b:17:63:14:8c:2f:d8:a1:16:03:bf: f9:d8:c2:5a:02:83:f2:38:2e:bf:ed:05:7f:fd:db:f8:cc:cc: 73:d3:ac:64:91:dc:0e:d3:79:a2:7d:bb:ba:2d:25:5b:e1:ce: 1d:c2:8b:23:74:8b:a6:a8:8d:b1:82:69:86:e8:98:1d:af:ee: d4:66:b5:b4:25:7e:2c:2a:4c:b0:bb:d3:7f:46:92:b8:40:9a: 48:c2:35:29:99:7a:1f:86:1c:c6:5f:19:12:91:db:44:dd:1f: e8:a7:ba:ed:59:4d:7a:99:2a:79:fb:d3:18:38:48:72:a1:55: c7:a3:a2:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZH+XYz7x7+h8kL0wx5GeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NzJlYjhmODAxNWViMWJjMjllYTMxNjJmODNlNmFjZWRi YjQyN2UwHhcNMjUxMjA2MDIwMTI2WhcNMjUxMjA3MDIwMTI2WjAzMTEwLwYDVQQD Eyg4NTg5ZTRmZWJjZmRmZGE4OGE5Zjg5OTRiNDQ0NzJlOWViZmFkNWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtT9VaSnLRm/s/yvzqnBk2dZVhR1m utJNuqmohJJn8KocVjwLI+t+2ZJ0h5BaHAdUtlDWvJfPz971vja3/A9hk9/7BjB8 hHMRVcToWE7ONP4bySXdRM3hgXy8pczl6hMeG1cMNhyFNYiTpf56U4bOjFb3WWay 0YaOWMudYl6sbFVtjwRIQ1t4WKFP+bPaMrcY9aYjoz1NrkzsfEy03hq5yAlnxIk8 UVblHy+y+MbnHvwEJ5o/dmFTte3F1wJ58kG6NhNQmKl2gPIvUE10IfFYMa+EaoIo CieptoYx8OsgFzbgEqjeWp6czBR+CFukq3bqb+UVW08nYk8qVUq7BzcdPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIWJ5P68/f2oip+JlLREcunr+tX4MB8GA1UdIwQY MBaAFHRy64+AFesbwp6jFi+D5qztu0J+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEhMcmo0QVY2eHZDbnFNV0w0UG1yTzI3UW40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC82NTVlMjgtMzM5MS00MGE3LTg4Y2Et MWJmZmRhMzgyZWJlLzEvZEhMcmo0QVY2eHZDbnFNV0w0UG1yTzI3UW40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC82NTVlMjgtMzM5MS00MGE3LTg4Y2EtMWJmZmRhMzgyZWJl LzEvZEhMcmo0QVY2eHZDbnFNV0w0UG1yTzI3UW40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAArhrnpob /oba598EvsfWWZ5XrLijoltthYMJYKI3r5FbbLfpvXzAQTMLIJFX28uSbmT44C3y FBUf5hgQudHXNDPXyFqmeg/1Stur678HJwKDzF8RTp/6Z0ixi4KPHGrSlxkFqeDN TjrsJ3s0HZT+QHDoMOJwGtAQXJdSzyUo8iycx1XGj2sXYxSML9ihFgO/+djCWgKD 8jguv+0Ff/3b+MzMc9OsZJHcDtN5on27ui0lW+HOHcKLI3SLpqiNsYJphuiYHa/u 1Ga1tCV+LCpMsLvTf0aSuECaSMI1KZl6H4Ycxl8ZEpHbRN0f6Ke67VlNepkqefvT GDhIcqFVx6OisQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:30:57 2025 by rpki-client