This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/1426a1-b553-4da5-a6d9-ac0102793c5a/1/dt0D59chnX68HyMPcGMtyRNvNBM.mft File: dt0D59chnX68HyMPcGMtyRNvNBM.mft (raw, json) Hash identifier: tfo2tUtTC3fhhTeRwtvEk0kiprfFo4SvKB1LJE/r7HU= Subject key identifier: 8C:38:C9:3F:FC:CD:00:85:01:3E:96:8F:66:4F:98:62:01:59:AA:F6 Authority key identifier: 76:DD:03:E7:D7:21:9D:7E:BC:1F:23:0F:70:63:2D:C9:13:6F:34:13 Certificate issuer: /CN=76dd03e7d7219d7ebc1f230f70632dc9136f3413 Certificate serial: 019AF5AF373040F3AC331C6379F30F14B05F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dt0D59chnX68HyMPcGMtyRNvNBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/1426a1-b553-4da5-a6d9-ac0102793c5a/1/dt0D59chnX68HyMPcGMtyRNvNBM.mft Manifest number: 066F Signing time: Sat 06 Dec 2025 22:01:32 +0000 Manifest this update: Sat 06 Dec 2025 22:01:32 +0000 Manifest next update: Sun 07 Dec 2025 22:01:32 +0000 Files and hashes: 1: dt0D59chnX68HyMPcGMtyRNvNBM.crl (hash: +TtHjrPkT9Cu9XeiT44iQOpXHxFVhWg8d8Pi6yyA9Vw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/1426a1-b553-4da5-a6d9-ac0102793c5a/1/dt0D59chnX68HyMPcGMtyRNvNBM.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/1426a1-b553-4da5-a6d9-ac0102793c5a/1/dt0D59chnX68HyMPcGMtyRNvNBM.mft rsync://rpki.ripe.net/repository/DEFAULT/dt0D59chnX68HyMPcGMtyRNvNBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:af:37:30:40:f3:ac:33:1c:63:79:f3:0f:14:b0:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76dd03e7d7219d7ebc1f230f70632dc9136f3413 Validity Not Before: Dec 6 22:01:32 2025 GMT Not After : Dec 7 22:01:32 2025 GMT Subject: CN=8c38c93ffccd0085013e968f664f98620159aaf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ed:a7:78:fc:e3:12:49:71:d9:a0:63:98:bc: 0e:64:09:54:d6:c0:31:bd:fb:cf:f0:b0:4f:a5:89: f7:07:cc:08:7f:a3:1a:2e:ff:72:af:94:b7:5f:de: b9:1a:f6:c3:db:52:46:ec:ba:ae:e5:ae:5f:4e:6a: fb:dc:25:a9:70:44:5f:2f:9d:0a:77:4c:bc:e0:68: 1c:de:b4:d2:2e:3b:56:12:34:a5:5c:b6:27:19:6d: ce:41:61:1f:92:fb:fe:09:a2:24:34:12:be:5f:cc: 1e:b8:a2:5b:94:4d:73:49:bc:8c:16:aa:31:5a:58: c7:df:3c:97:d2:c2:13:40:80:ca:71:13:34:d1:ff: b9:f7:8b:19:de:4f:10:7d:a8:a2:02:c1:b2:d3:b7: cb:b5:47:b0:b4:59:c9:eb:ae:8e:fb:8a:c5:3d:ae: 1a:f1:d0:aa:b3:2e:9f:83:dd:ef:e4:a5:93:fd:76: 46:6e:37:94:55:51:ae:a7:1f:29:27:1d:1b:27:b9: 1d:af:ac:b2:be:60:c8:10:09:58:3d:22:5a:57:35: 33:b5:16:8f:fa:97:82:e1:80:43:ac:e8:a9:b2:ca: 8e:21:7b:4f:cf:4a:5d:84:d9:7b:9b:11:ea:b8:0d: 82:c0:62:2a:19:cc:49:12:ce:91:65:e0:ff:ba:04: 8d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:38:C9:3F:FC:CD:00:85:01:3E:96:8F:66:4F:98:62:01:59:AA:F6 X509v3 Authority Key Identifier: keyid:76:DD:03:E7:D7:21:9D:7E:BC:1F:23:0F:70:63:2D:C9:13:6F:34:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dt0D59chnX68HyMPcGMtyRNvNBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1426a1-b553-4da5-a6d9-ac0102793c5a/1/dt0D59chnX68HyMPcGMtyRNvNBM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/1426a1-b553-4da5-a6d9-ac0102793c5a/1/dt0D59chnX68HyMPcGMtyRNvNBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:cf:37:1b:e3:99:03:11:4f:51:97:ae:f2:2f:2d:4a:3e:5c: 30:8d:d5:98:f4:9d:14:2b:76:fd:eb:f4:5d:9b:92:08:70:0b: 60:cc:cb:3a:be:83:63:44:ce:5e:e7:eb:28:42:d7:ca:c2:68: 8f:81:86:d9:c4:b6:9a:96:a9:6e:86:51:05:d0:31:e7:77:5f: 74:e4:14:c7:bf:91:f0:18:c5:45:ee:57:69:48:8c:24:c8:71: 36:c6:1e:ba:12:18:ff:55:39:e2:f6:70:74:0c:b5:e7:d8:ce: 66:34:10:1c:41:21:2a:94:b2:28:e3:6c:c7:46:46:99:24:17: 87:79:76:ad:e6:af:0a:e9:4c:f1:48:66:72:f1:12:84:04:25: e6:ce:84:d5:a3:58:34:94:0e:dd:b3:48:8b:ad:da:61:2e:43: 4c:1c:d1:fc:eb:3d:2c:2a:dc:4a:3a:b1:ff:6b:1e:83:9b:f9: e6:bd:97:fa:46:2f:8f:7c:c1:4c:d7:ef:20:65:11:8d:90:b2: d8:1e:4e:83:2f:8f:48:fa:be:53:c9:26:ce:02:0e:2a:47:96: c3:9c:2c:79:73:1d:f2:f1:7b:6b:55:c8:12:d7:ca:e1:da:79: 1e:a8:6d:46:06:19:56:ac:f2:28:0e:82:35:d9:3f:c7:9b:aa: 5a:4b:9a:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rzcwQPOsMxxjefMPFLBfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2ZGQwM2U3ZDcyMTlkN2ViYzFmMjMwZjcwNjMyZGM5MTM2 ZjM0MTMwHhcNMjUxMjA2MjIwMTMyWhcNMjUxMjA3MjIwMTMyWjAzMTEwLwYDVQQD Eyg4YzM4YzkzZmZjY2QwMDg1MDEzZTk2OGY2NjRmOTg2MjAxNTlhYWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwe2nePzjEklx2aBjmLwOZAlU1sAx vfvP8LBPpYn3B8wIf6MaLv9yr5S3X965GvbD21JG7Lqu5a5fTmr73CWpcERfL50K d0y84Ggc3rTSLjtWEjSlXLYnGW3OQWEfkvv+CaIkNBK+X8weuKJblE1zSbyMFqox WljH3zyX0sITQIDKcRM00f+594sZ3k8QfaiiAsGy07fLtUewtFnJ666O+4rFPa4a 8dCqsy6fg93v5KWT/XZGbjeUVVGupx8pJx0bJ7kdr6yyvmDIEAlYPSJaVzUztRaP +peC4YBDrOipssqOIXtPz0pdhNl7mxHquA2CwGIqGcxJEs6RZeD/ugSNSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIw4yT/8zQCFAT6Wj2ZPmGIBWar2MB8GA1UdIwQY MBaAFHbdA+fXIZ1+vB8jD3BjLckTbzQTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHQwRDU5Y2huWDY4SHlNUGNHTXR5Uk52TkJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8xNDI2YTEtYjU1My00ZGE1LWE2ZDkt YWMwMTAyNzkzYzVhLzEvZHQwRDU5Y2huWDY4SHlNUGNHTXR5Uk52TkJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC8xNDI2YTEtYjU1My00ZGE1LWE2ZDktYWMwMTAyNzkzYzVh LzEvZHQwRDU5Y2huWDY4SHlNUGNHTXR5Uk52TkJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQs83G+OZ AxFPUZeu8i8tSj5cMI3VmPSdFCt2/ev0XZuSCHALYMzLOr6DY0TOXufrKELXysJo j4GG2cS2mpapboZRBdAx53dfdOQUx7+R8BjFRe5XaUiMJMhxNsYeuhIY/1U54vZw dAy159jOZjQQHEEhKpSyKONsx0ZGmSQXh3l2reavCulM8UhmcvEShAQl5s6E1aNY NJQO3bNIi63aYS5DTBzR/Os9LCrcSjqx/2seg5v55r2X+kYvj3zBTNfvIGURjZCy 2B5Ogy+PSPq+U8kmzgIOKkeWw5wseXMd8vF7a1XIEtfK4dp5HqhtRgYZVqzyKA6C Ndk/x5uqWkuaNA== -----END CERTIFICATE-----Generated at Sun Dec 7 03:55:52 2025 by rpki-client