This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft File: Dp842O8xOufFpwiU9m6HGjMYA_8.mft (raw, json) Hash identifier: h0mWCG47PRXAxfRwe7RHgqfMExCKitQJa5gwqvG7rJ8= Subject key identifier: CE:A7:5E:3C:F6:EE:A6:62:BF:4A:0A:E5:0E:D4:04:7B:AF:57:EF:B1 Authority key identifier: 0E:9F:38:D8:EF:31:3A:E7:C5:A7:08:94:F6:6E:87:1A:33:18:03:FF Certificate issuer: /CN=0e9f38d8ef313ae7c5a70894f66e871a331803ff Certificate serial: 019B424B11A35508365F1B0AAB56DFBD6D1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft Manifest number: 1788 Signing time: Sun 21 Dec 2025 19:02:54 +0000 Manifest this update: Sun 21 Dec 2025 19:02:54 +0000 Manifest next update: Mon 22 Dec 2025 19:02:54 +0000 Files and hashes: 1: Dp842O8xOufFpwiU9m6HGjMYA_8.crl (hash: pZAxfeg+xheDIjgUXyjNbjvzFStnCgfDTYKZzB1hla8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.crl rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4b:11:a3:55:08:36:5f:1b:0a:ab:56:df:bd:6d:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e9f38d8ef313ae7c5a70894f66e871a331803ff Validity Not Before: Dec 21 19:02:54 2025 GMT Not After : Dec 22 19:02:54 2025 GMT Subject: CN=cea75e3cf6eea662bf4a0ae50ed4047baf57efb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:51:af:74:05:f9:0d:7b:21:37:64:be:62:1c: 8c:42:30:23:fd:76:ec:28:5a:ab:5e:3c:50:1f:41: 0e:c3:94:9f:2b:52:16:52:28:73:21:90:cf:cf:97: e6:e8:d6:98:8d:ff:15:20:ef:89:38:8b:71:b8:8e: 24:0e:03:8f:43:e9:3b:7c:94:75:2f:c0:87:f7:fe: 8a:5a:f8:d5:5f:66:84:88:58:eb:72:ca:5b:e2:94: 8c:02:3f:55:db:a0:6e:e6:e0:bf:20:fe:c1:4b:8b: b3:d3:99:7c:bd:06:60:10:ad:95:c4:df:29:b8:ca: e9:e2:56:42:7b:3c:58:7a:38:57:77:26:20:47:21: 16:4f:15:e6:ca:a8:26:6d:d9:b4:2f:92:c8:90:ec: ba:11:6f:0a:8a:68:07:af:cd:e3:78:c6:76:57:da: 07:37:94:19:8a:e4:00:92:0f:ba:0d:ee:ae:58:c3: 9b:97:1a:14:72:08:7d:c1:a1:b1:3b:83:58:7b:53: 0a:1c:3f:73:89:cb:ff:6d:e5:59:0a:fd:4e:87:6d: b1:21:7d:eb:78:d2:7c:6a:b0:bb:f5:14:96:15:5d: 37:50:d0:e0:c8:64:82:d0:cd:5d:fe:85:79:b0:fa: 06:75:97:f0:0e:3e:fc:f4:09:4e:6d:84:be:47:a2: 7a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:A7:5E:3C:F6:EE:A6:62:BF:4A:0A:E5:0E:D4:04:7B:AF:57:EF:B1 X509v3 Authority Key Identifier: keyid:0E:9F:38:D8:EF:31:3A:E7:C5:A7:08:94:F6:6E:87:1A:33:18:03:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:d5:6b:76:7f:a5:1c:7e:74:7c:8e:da:9c:20:0d:f1:9c:5b: e7:ad:bb:23:17:17:9d:86:71:af:ec:7e:3e:de:0a:79:57:b9: b1:cb:9f:27:e3:13:96:93:fc:71:a6:6f:f5:70:51:17:fd:42: 1b:e9:32:5d:87:fb:38:75:8f:76:1d:21:f8:56:77:23:67:8b: ce:d6:d0:76:58:c6:f6:4f:4b:e2:82:d8:a1:cd:f2:24:a0:4d: d0:35:68:58:8f:81:fe:64:99:69:24:a5:f0:0a:8a:59:e1:ee: 66:40:f8:ee:a9:2c:c8:db:28:dc:2c:dc:5c:2c:b2:d3:a1:a2: 19:22:08:94:be:e6:af:54:3a:54:b7:ee:69:72:7e:f5:c9:43: 65:23:5f:ef:f2:ec:ff:79:f8:67:ef:e9:07:99:d8:88:1b:1f: 61:1b:19:45:ce:d9:67:39:67:7f:c0:8c:17:c1:46:63:e5:27: 1f:5c:59:e3:54:5b:0f:c6:d0:e9:bf:5a:10:39:78:33:1b:98: 5a:f7:ef:c2:c0:52:1e:d0:fe:7d:5d:c7:cb:9a:9c:0d:68:03: a8:d0:25:f0:9d:53:7f:51:6c:48:bb:96:04:96:ab:a1:3a:42: bb:83:47:de:36:19:78:b9:24:db:28:b4:17:f5:83:00:19:18: 7d:dd:95:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSxGjVQg2XxsKq1bfvW0dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlOWYzOGQ4ZWYzMTNhZTdjNWE3MDg5NGY2NmU4NzFhMzMx ODAzZmYwHhcNMjUxMjIxMTkwMjU0WhcNMjUxMjIyMTkwMjU0WjAzMTEwLwYDVQQD EyhjZWE3NWUzY2Y2ZWVhNjYyYmY0YTBhZTUwZWQ0MDQ3YmFmNTdlZmIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVGvdAX5DXshN2S+YhyMQjAj/Xbs KFqrXjxQH0EOw5SfK1IWUihzIZDPz5fm6NaYjf8VIO+JOItxuI4kDgOPQ+k7fJR1 L8CH9/6KWvjVX2aEiFjrcspb4pSMAj9V26Bu5uC/IP7BS4uz05l8vQZgEK2VxN8p uMrp4lZCezxYejhXdyYgRyEWTxXmyqgmbdm0L5LIkOy6EW8KimgHr83jeMZ2V9oH N5QZiuQAkg+6De6uWMOblxoUcgh9waGxO4NYe1MKHD9zicv/beVZCv1Oh22xIX3r eNJ8arC79RSWFV03UNDgyGSC0M1d/oV5sPoGdZfwDj789AlObYS+R6J6/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM6nXjz27qZiv0oK5Q7UBHuvV++xMB8GA1UdIwQY MBaAFA6fONjvMTrnxacIlPZuhxozGAP/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHA4NDJPOHhPdWZGcHdpVTltNkhHak1ZQV84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8yZjQ3OTYtNDUxMi00NjRkLWI5ZGUt ODgwZjgyMzhmZTBiLzEvRHA4NDJPOHhPdWZGcHdpVTltNkhHak1ZQV84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8yZjQ3OTYtNDUxMi00NjRkLWI5ZGUtODgwZjgyMzhmZTBi LzEvRHA4NDJPOHhPdWZGcHdpVTltNkhHak1ZQV84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAptVrdn+l HH50fI7anCAN8Zxb5627IxcXnYZxr+x+Pt4KeVe5scufJ+MTlpP8caZv9XBRF/1C G+kyXYf7OHWPdh0h+FZ3I2eLztbQdljG9k9L4oLYoc3yJKBN0DVoWI+B/mSZaSSl 8AqKWeHuZkD47qksyNso3CzcXCyy06GiGSIIlL7mr1Q6VLfuaXJ+9clDZSNf7/Ls /3n4Z+/pB5nYiBsfYRsZRc7ZZzlnf8CMF8FGY+UnH1xZ41RbD8bQ6b9aEDl4MxuY WvfvwsBSHtD+fV3Hy5qcDWgDqNAl8J1Tf1FsSLuWBJaroTpCu4NH3jYZeLkk2yi0 F/WDABkYfd2VxA== -----END CERTIFICATE-----Generated at Sun Dec 21 23:43:02 2025 by rpki-client