This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.mft File: dC44IKB42kewo3Ti06ZtYmPB4j8.mft (raw, json) Hash identifier: e2RLJ3Cl/Tyqcs/MhhuN+VkZhgC/k/g7CVZtVmCj/iY= Subject key identifier: 77:E0:E7:F0:78:DE:ED:F7:8A:26:6B:70:CE:69:EA:43:21:E6:2F:A3 Authority key identifier: 74:2E:38:20:A0:78:DA:47:B0:A3:74:E2:D3:A6:6D:62:63:C1:E2:3F Certificate issuer: /CN=742e3820a078da47b0a374e2d3a66d6263c1e23f Certificate serial: 019AF12D2E633C56875BB27B2907679AFA40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dC44IKB42kewo3Ti06ZtYmPB4j8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.mft Manifest number: 1031 Signing time: Sat 06 Dec 2025 01:01:01 +0000 Manifest this update: Sat 06 Dec 2025 01:01:01 +0000 Manifest next update: Sun 07 Dec 2025 01:01:01 +0000 Files and hashes: 1: dC44IKB42kewo3Ti06ZtYmPB4j8.crl (hash: r/biIl16PusjNTX1v93ttXVcZw1V//4RvAQijcLoqu4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.crl rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.mft rsync://rpki.ripe.net/repository/DEFAULT/dC44IKB42kewo3Ti06ZtYmPB4j8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:2e:63:3c:56:87:5b:b2:7b:29:07:67:9a:fa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=742e3820a078da47b0a374e2d3a66d6263c1e23f Validity Not Before: Dec 6 01:01:01 2025 GMT Not After : Dec 7 01:01:01 2025 GMT Subject: CN=77e0e7f078deedf78a266b70ce69ea4321e62fa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e0:3e:64:47:16:d9:a3:dd:6d:22:e7:43:3b: 35:74:df:20:81:c3:c9:ee:ec:83:62:52:74:5c:2c: 0e:ce:db:6d:c0:28:db:12:5b:9d:d0:b4:5a:02:c2: ac:c7:d4:c0:6f:a7:72:98:70:00:61:65:6e:89:b7: 59:d2:9f:47:9c:07:1c:46:1a:07:a0:ed:43:e8:65: d6:0a:0d:2d:ab:1e:f1:fc:74:a1:54:f1:10:99:3a: 63:78:9c:a8:4a:d5:76:dc:34:e9:e6:c7:eb:17:e6: 75:e1:f5:80:8e:53:99:6e:8a:a7:fa:f4:fa:18:9b: 5c:43:2b:4d:4d:39:a9:f1:4a:47:e7:54:3b:ba:ea: 06:f4:6d:54:48:3a:71:b5:e4:25:d7:c2:4e:b9:f6: e7:88:b6:42:b0:9c:3c:82:80:71:6c:4d:44:e4:9a: d1:03:56:cc:14:84:81:ec:5b:78:d0:df:14:95:b6: 73:4a:75:71:64:09:ca:58:ac:3a:5d:09:f3:76:2e: 05:15:d1:9c:01:6a:a1:4d:2e:6b:ca:13:13:bd:54: 6e:13:21:3d:aa:84:76:ec:1b:b5:9c:cc:aa:84:45: d4:eb:03:cd:e6:d4:c7:be:3b:95:bc:37:c1:cf:03: 08:b6:79:75:58:35:7d:13:43:3e:af:c9:7e:ce:19: e8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:E0:E7:F0:78:DE:ED:F7:8A:26:6B:70:CE:69:EA:43:21:E6:2F:A3 X509v3 Authority Key Identifier: keyid:74:2E:38:20:A0:78:DA:47:B0:A3:74:E2:D3:A6:6D:62:63:C1:E2:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dC44IKB42kewo3Ti06ZtYmPB4j8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:47:d1:e9:6d:5e:b7:ab:1b:2d:9f:54:ba:e6:19:29:b1:c1: 69:8d:d1:55:8b:20:9c:e4:db:35:f2:8b:f5:d9:08:c9:7a:ca: d0:57:b3:57:3e:5a:94:02:9b:7a:ef:6a:d9:df:82:57:5f:f7: 44:74:3c:ad:2a:13:16:30:f7:4a:01:e1:67:ef:07:3e:39:e1: 4d:36:2b:a7:17:bf:02:dd:e5:1d:f5:9d:d5:c5:ee:2a:d6:b8: 72:e6:d1:23:34:18:e9:46:40:4a:b3:5f:63:db:a5:66:f4:1e: 12:08:fb:80:3a:b1:7c:ac:8b:99:b2:39:8f:4d:65:df:1b:89: 64:e0:a0:03:1c:55:6f:71:bb:68:52:81:74:18:58:7e:45:96: 43:c5:67:6e:94:a9:20:b8:66:32:72:df:93:87:82:4a:94:08: 75:ed:01:17:90:ac:4c:c7:a8:fd:30:25:fe:a1:5a:a9:a2:b1: ad:42:83:c0:f7:95:41:9f:22:4a:4c:b4:3e:49:45:ea:34:52: 5a:1c:79:41:a5:19:ef:38:bb:db:7b:54:31:1d:95:68:94:38: 6f:ed:cb:c8:24:6e:27:37:7a:a1:d4:93:7a:96:02:31:a2:64: a0:5b:10:ae:36:ba:57:cb:60:63:4a:c5:65:28:32:51:bf:19: 5c:ca:42:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLS5jPFaHW7J7KQdnmvpAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0MmUzODIwYTA3OGRhNDdiMGEzNzRlMmQzYTY2ZDYyNjNj MWUyM2YwHhcNMjUxMjA2MDEwMTAxWhcNMjUxMjA3MDEwMTAxWjAzMTEwLwYDVQQD Eyg3N2UwZTdmMDc4ZGVlZGY3OGEyNjZiNzBjZTY5ZWE0MzIxZTYyZmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuA+ZEcW2aPdbSLnQzs1dN8ggcPJ 7uyDYlJ0XCwOztttwCjbElud0LRaAsKsx9TAb6dymHAAYWVuibdZ0p9HnAccRhoH oO1D6GXWCg0tqx7x/HShVPEQmTpjeJyoStV23DTp5sfrF+Z14fWAjlOZboqn+vT6 GJtcQytNTTmp8UpH51Q7uuoG9G1USDpxteQl18JOufbniLZCsJw8goBxbE1E5JrR A1bMFISB7Ft40N8UlbZzSnVxZAnKWKw6XQnzdi4FFdGcAWqhTS5ryhMTvVRuEyE9 qoR27Bu1nMyqhEXU6wPN5tTHvjuVvDfBzwMItnl1WDV9E0M+r8l+zhnoQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHfg5/B43u33iiZrcM5p6kMh5i+jMB8GA1UdIwQY MBaAFHQuOCCgeNpHsKN04tOmbWJjweI/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEM0NElLQjQya2V3bzNUaTA2WnRZbVBCNGo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS84OWZjNTEtZDQ3NS00ZWVlLWE5NzAt OTMwNzAwY2E2MTdmLzEvZEM0NElLQjQya2V3bzNUaTA2WnRZbVBCNGo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS84OWZjNTEtZDQ3NS00ZWVlLWE5NzAtOTMwNzAwY2E2MTdm LzEvZEM0NElLQjQya2V3bzNUaTA2WnRZbVBCNGo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh0fR6W1e t6sbLZ9UuuYZKbHBaY3RVYsgnOTbNfKL9dkIyXrK0FezVz5alAKbeu9q2d+CV1/3 RHQ8rSoTFjD3SgHhZ+8HPjnhTTYrpxe/At3lHfWd1cXuKta4cubRIzQY6UZASrNf Y9ulZvQeEgj7gDqxfKyLmbI5j01l3xuJZOCgAxxVb3G7aFKBdBhYfkWWQ8VnbpSp ILhmMnLfk4eCSpQIde0BF5CsTMeo/TAl/qFaqaKxrUKDwPeVQZ8iSky0PklF6jRS Whx5QaUZ7zi723tUMR2VaJQ4b+3LyCRuJzd6odSTepYCMaJkoFsQrja6V8tgY0rF ZSgyUb8ZXMpCHA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:14:07 2025 by rpki-client