This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft File: dErqU-9g-KipNF5YKYKppZvBN2c.mft (raw, json) Hash identifier: /IQObWU0ZKrlF4DGovzx9WHYvquuVriSzOj6QhBu+Y0= Subject key identifier: 4E:29:97:E4:2C:AF:9C:39:86:94:BA:B7:D5:DD:D9:69:FD:BB:96:E6 Authority key identifier: 74:4A:EA:53:EF:60:F8:A8:A9:34:5E:58:29:82:A9:A5:9B:C1:37:67 Certificate issuer: /CN=744aea53ef60f8a8a9345e582982a9a59bc13767 Certificate serial: 019AF12CCA61176A2F89CDAC49EEA8F90056 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 01:00:35 +0000 Manifest this update: Sat 06 Dec 2025 01:00:35 +0000 Manifest next update: Sun 07 Dec 2025 01:00:35 +0000 Files and hashes: 1: OcTgY_TxJBbWYUXl-r4CTTXUle0.roa (hash: 1c7PjEo1UgZPDis6XvL/mHlYibhzZZ7MfR0yuK8HcsA=) 2: dErqU-9g-KipNF5YKYKppZvBN2c.crl (hash: /zBYoGJhqhWjgJc72PmftfrFWiITiacFTVKLWJWrFFw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:ca:61:17:6a:2f:89:cd:ac:49:ee:a8:f9:00:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=744aea53ef60f8a8a9345e582982a9a59bc13767 Validity Not Before: Dec 6 01:00:35 2025 GMT Not After : Dec 7 01:00:35 2025 GMT Subject: CN=4e2997e42caf9c398694bab7d5ddd969fdbb96e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8b:01:e5:0a:02:74:f9:ba:20:c4:a9:04:f5: 6b:77:c5:50:4d:2e:91:7b:fd:a6:9a:5f:1f:f1:d8: e4:2e:f6:49:8c:0f:ad:2f:09:36:eb:af:05:52:1d: 61:71:ac:84:ae:12:75:a6:8d:d1:ac:ed:7a:8c:f5: 08:fd:31:01:f5:da:7d:a8:6f:7e:b8:57:b5:f5:da: ad:a5:7e:1f:46:f2:85:fd:c7:54:23:e7:9d:98:fc: 0c:72:7f:b5:30:3c:af:be:cb:c0:4c:e6:0b:90:92: 5e:89:84:b9:58:94:cf:91:96:f6:7f:43:f0:29:b7: a4:fc:fc:bd:24:bb:d4:72:66:81:ed:42:a5:25:e7: 69:86:bd:71:6b:df:24:90:45:29:71:88:fd:df:e8: 58:f3:18:31:e6:2b:30:fe:9f:85:cc:31:07:cf:e4: 14:24:f3:d6:7a:95:fd:99:9e:3f:e0:21:53:33:71: 01:5c:6e:1c:c1:94:7f:a3:9f:54:c1:62:3f:de:28: 6c:54:01:6b:98:81:bb:66:b4:1f:7d:09:37:35:e3: c4:97:be:aa:1b:d9:f4:f3:02:98:59:77:bd:de:3f: d8:dc:c4:4f:14:6f:75:fe:9a:48:0a:e5:4b:16:e9: 23:c4:4b:cc:72:b9:14:fb:0b:5c:80:9e:a2:76:0f: 66:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:29:97:E4:2C:AF:9C:39:86:94:BA:B7:D5:DD:D9:69:FD:BB:96:E6 X509v3 Authority Key Identifier: keyid:74:4A:EA:53:EF:60:F8:A8:A9:34:5E:58:29:82:A9:A5:9B:C1:37:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:7e:d8:a7:f0:0c:4a:dd:af:a9:6b:fe:3e:9f:f9:93:71:62: 48:bb:6b:7b:88:3d:a1:ca:27:62:c1:b2:b4:10:ad:d2:96:7d: 8a:c4:96:d5:0f:cc:fa:48:f5:8e:cc:0a:ee:70:0c:2c:82:af: c0:c3:ef:9d:f4:92:dc:42:4c:0e:07:82:fa:5b:86:50:2d:ff: bf:6a:ae:4c:75:aa:be:ce:d2:af:59:95:ca:8a:7f:8a:d5:32: 5e:2e:76:d1:d3:78:2c:c8:7a:ec:80:28:b6:cf:dc:cc:70:79: 0a:06:b2:2e:aa:03:ae:b9:1b:7a:11:ca:dd:37:ff:ea:de:29: a8:da:a4:79:58:42:1f:e6:3f:f1:cc:24:4c:ff:f3:43:b8:98: 40:7d:fd:ba:21:49:6f:ab:c4:60:79:b9:58:96:ef:63:d8:d1: 57:43:27:69:a1:84:98:90:97:bc:bd:2d:a8:06:75:00:d4:35: 76:36:95:ad:14:6f:ef:a4:64:48:34:67:43:72:89:07:70:d1: 49:f8:11:18:96:4b:34:2f:73:39:b9:65:b0:92:69:0b:ab:10: 28:9b:74:5e:1e:0f:c6:c4:17:c5:ca:15:7e:19:6b:50:54:ef: 94:97:37:13:ed:78:8c:af:4e:8d:2a:b5:b6:5c:7c:62:57:bc: 67:b9:c1:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLMphF2ovic2sSe6o+QBWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NGFlYTUzZWY2MGY4YThhOTM0NWU1ODI5ODJhOWE1OWJj MTM3NjcwHhcNMjUxMjA2MDEwMDM1WhcNMjUxMjA3MDEwMDM1WjAzMTEwLwYDVQQD Eyg0ZTI5OTdlNDJjYWY5YzM5ODY5NGJhYjdkNWRkZDk2OWZkYmI5NmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoosB5QoCdPm6IMSpBPVrd8VQTS6R e/2mml8f8djkLvZJjA+tLwk2668FUh1hcayErhJ1po3RrO16jPUI/TEB9dp9qG9+ uFe19dqtpX4fRvKF/cdUI+edmPwMcn+1MDyvvsvATOYLkJJeiYS5WJTPkZb2f0Pw Kbek/Py9JLvUcmaB7UKlJedphr1xa98kkEUpcYj93+hY8xgx5isw/p+FzDEHz+QU JPPWepX9mZ4/4CFTM3EBXG4cwZR/o59UwWI/3ihsVAFrmIG7ZrQffQk3NePEl76q G9n08wKYWXe93j/Y3MRPFG91/ppICuVLFukjxEvMcrkU+wtcgJ6idg9mBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE4pl+Qsr5w5hpS6t9Xd2Wn9u5bmMB8GA1UdIwQY MBaAFHRK6lPvYPioqTReWCmCqaWbwTdnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEVycVUtOWctS2lwTkY1WUtZS3BwWnZCTjJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy82ZDM4Y2MtYzBmNi00MDE4LWI5Mjkt OWI2NGMyNTE1NmI5LzEvZEVycVUtOWctS2lwTkY1WUtZS3BwWnZCTjJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy82ZDM4Y2MtYzBmNi00MDE4LWI5MjktOWI2NGMyNTE1NmI5 LzEvZEVycVUtOWctS2lwTkY1WUtZS3BwWnZCTjJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATX7Yp/AM St2vqWv+Pp/5k3FiSLtre4g9oconYsGytBCt0pZ9isSW1Q/M+kj1jswK7nAMLIKv wMPvnfSS3EJMDgeC+luGUC3/v2quTHWqvs7Sr1mVyop/itUyXi520dN4LMh67IAo ts/czHB5CgayLqoDrrkbehHK3Tf/6t4pqNqkeVhCH+Y/8cwkTP/zQ7iYQH39uiFJ b6vEYHm5WJbvY9jRV0MnaaGEmJCXvL0tqAZ1ANQ1djaVrRRv76RkSDRnQ3KJB3DR SfgRGJZLNC9zObllsJJpC6sQKJt0Xh4PxsQXxcoVfhlrUFTvlJc3E+14jK9OjSq1 tlx8Yle8Z7nBGg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:31 2025 by rpki-client