This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft File: Dp842O8xOufFpwiU9m6HGjMYA_8.mft (raw, json) Hash identifier: 8mKJWra/0896wLN45g8EVGm8mJbkCJUpR34813+Eiz0= Subject key identifier: 7F:ED:F4:CF:A0:18:3F:0E:5D:8D:F3:AA:7F:A7:88:D4:91:45:02:11 Authority key identifier: 0E:9F:38:D8:EF:31:3A:E7:C5:A7:08:94:F6:6E:87:1A:33:18:03:FF Certificate issuer: /CN=0e9f38d8ef313ae7c5a70894f66e871a331803ff Certificate serial: 019AF31C9F95E9F7A60B3B2D04AF9EE9624E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 10:02:10 +0000 Manifest this update: Sat 06 Dec 2025 10:02:10 +0000 Manifest next update: Sun 07 Dec 2025 10:02:10 +0000 Files and hashes: 1: Dp842O8xOufFpwiU9m6HGjMYA_8.crl (hash: 6a9Tzvcx2WkPmNuwgkujtVa2l0y5RgkvIVnvKwXPv3M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.crl rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:9f:95:e9:f7:a6:0b:3b:2d:04:af:9e:e9:62:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e9f38d8ef313ae7c5a70894f66e871a331803ff Validity Not Before: Dec 6 10:02:10 2025 GMT Not After : Dec 7 10:02:10 2025 GMT Subject: CN=7fedf4cfa0183f0e5d8df3aa7fa788d491450211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4e:51:7a:9c:5c:c0:3a:1f:18:4a:db:13:92: db:69:93:d6:86:41:4a:2e:15:a6:f7:43:4a:eb:c1: c0:dc:e5:1a:c3:f7:18:69:e7:99:82:76:5f:18:f8: c5:5d:49:64:59:8d:6a:4f:f6:20:68:cc:f9:84:d6: 0a:61:6c:37:0a:93:37:87:4b:a6:f7:e8:70:88:e5: 7b:a4:db:8f:40:8e:a7:28:09:26:aa:c1:81:56:7b: ac:15:7f:59:e9:e4:d6:6e:d0:a8:16:6d:1a:fc:ea: 86:7f:15:92:c5:24:6e:30:59:b2:9d:87:eb:00:6a: 57:24:e0:90:e9:a5:81:19:ee:94:55:54:74:82:1e: 8a:e8:ba:a8:1c:43:ff:85:33:9a:cc:b4:5a:f9:9c: 94:fa:50:bb:10:e4:63:e3:9c:af:62:81:3f:45:b0: b3:c3:96:e7:63:05:be:60:b9:14:37:d8:6c:84:09: 1e:38:d2:43:9c:bd:33:64:94:a3:92:7f:1b:9a:4d: 5b:cf:30:97:d8:f5:b3:1d:e5:4e:8a:60:40:66:1a: 33:30:d0:72:72:b4:c0:23:6f:93:91:30:90:bd:71: 2e:d9:c4:a0:65:a9:32:9d:6f:1d:7c:a1:45:69:0e: 2c:b5:41:dd:26:e7:e7:3a:50:60:d2:68:ab:f8:f9: 7a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:ED:F4:CF:A0:18:3F:0E:5D:8D:F3:AA:7F:A7:88:D4:91:45:02:11 X509v3 Authority Key Identifier: keyid:0E:9F:38:D8:EF:31:3A:E7:C5:A7:08:94:F6:6E:87:1A:33:18:03:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:15:ee:f8:2f:a1:65:32:d9:a6:e2:ea:97:24:d2:4e:50:55: 7c:fe:cf:4e:e4:9f:be:0d:a8:16:5d:18:22:73:15:68:0b:1c: 2a:67:5d:2d:83:c8:30:c3:54:08:a9:bd:6b:47:b2:e8:5b:65: 2f:9f:25:41:95:8f:88:c5:01:8e:07:24:2d:ec:e2:89:d0:da: 26:7b:a6:fa:6b:f5:1c:c7:77:72:85:af:22:c4:c8:18:ed:16: c9:74:87:36:73:59:38:0f:e3:c2:ce:fb:99:e6:71:22:6c:bf: a8:7b:6c:65:af:7f:97:31:b8:f5:b1:7d:d0:0b:6a:46:0a:cd: ff:be:7c:86:cd:3d:aa:4a:18:56:b7:d5:f5:59:00:4c:3b:d3: 26:7c:cb:9e:8b:f5:7c:7a:55:49:d0:ed:cd:38:9d:36:b2:bf: 8a:45:d3:4f:4b:32:ff:4f:14:05:85:57:2b:93:df:a3:fb:63: e2:5e:eb:7b:28:25:e7:e2:44:f8:79:fa:eb:ef:82:8e:55:4f: 0d:29:90:e7:7d:30:5f:a0:1d:15:a0:aa:4d:d8:db:a1:e6:5a: fd:0a:f1:66:6d:da:89:d6:d2:a2:51:bc:0c:86:0c:f5:b1:74: b7:c3:8f:10:3f:f4:29:c2:66:6f:92:32:6c:ee:84:de:c3:7f: 71:0d:40:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHJ+V6femCzstBK+e6WJOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlOWYzOGQ4ZWYzMTNhZTdjNWE3MDg5NGY2NmU4NzFhMzMx ODAzZmYwHhcNMjUxMjA2MTAwMjEwWhcNMjUxMjA3MTAwMjEwWjAzMTEwLwYDVQQD Eyg3ZmVkZjRjZmEwMTgzZjBlNWQ4ZGYzYWE3ZmE3ODhkNDkxNDUwMjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuk5RepxcwDofGErbE5LbaZPWhkFK LhWm90NK68HA3OUaw/cYaeeZgnZfGPjFXUlkWY1qT/YgaMz5hNYKYWw3CpM3h0um 9+hwiOV7pNuPQI6nKAkmqsGBVnusFX9Z6eTWbtCoFm0a/OqGfxWSxSRuMFmynYfr AGpXJOCQ6aWBGe6UVVR0gh6K6LqoHEP/hTOazLRa+ZyU+lC7EORj45yvYoE/RbCz w5bnYwW+YLkUN9hshAkeONJDnL0zZJSjkn8bmk1bzzCX2PWzHeVOimBAZhozMNBy crTAI2+TkTCQvXEu2cSgZakynW8dfKFFaQ4stUHdJufnOlBg0mir+Pl6lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH/t9M+gGD8OXY3zqn+niNSRRQIRMB8GA1UdIwQY MBaAFA6fONjvMTrnxacIlPZuhxozGAP/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHA4NDJPOHhPdWZGcHdpVTltNkhHak1ZQV84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8yZjQ3OTYtNDUxMi00NjRkLWI5ZGUt ODgwZjgyMzhmZTBiLzEvRHA4NDJPOHhPdWZGcHdpVTltNkhHak1ZQV84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8yZjQ3OTYtNDUxMi00NjRkLWI5ZGUtODgwZjgyMzhmZTBi LzEvRHA4NDJPOHhPdWZGcHdpVTltNkhHak1ZQV84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASRXu+C+h ZTLZpuLqlyTSTlBVfP7PTuSfvg2oFl0YInMVaAscKmddLYPIMMNUCKm9a0ey6Ftl L58lQZWPiMUBjgckLeziidDaJnum+mv1HMd3coWvIsTIGO0WyXSHNnNZOA/jws77 meZxImy/qHtsZa9/lzG49bF90AtqRgrN/758hs09qkoYVrfV9VkATDvTJnzLnov1 fHpVSdDtzTidNrK/ikXTT0sy/08UBYVXK5Pfo/tj4l7reygl5+JE+Hn66++CjlVP DSmQ530wX6AdFaCqTdjboeZa/QrxZm3aidbSolG8DIYM9bF0t8OPED/0KcJmb5Iy bO6E3sN/cQ1ASQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:27:53 2025 by rpki-client