This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.mft File: dj16VTWlJJ6Xp1BkZpOZqTxGzI4.mft (raw, json) Hash identifier: oPCA4jXABJ5J3uMfjxkWE5x+R0Qa5K1G+fw92164syE= Subject key identifier: 38:0B:A7:2F:86:3B:93:6F:D1:C0:FD:2F:56:26:69:B3:0A:23:F9:F1 Authority key identifier: 76:3D:7A:55:35:A5:24:9E:97:A7:50:64:66:93:99:A9:3C:46:CC:8E Certificate issuer: /CN=763d7a5535a5249e97a75064669399a93c46cc8e Certificate serial: 019AF19B348A74ADCB51054828B84BEF7CEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.mft Manifest number: 0B9C Signing time: Sat 06 Dec 2025 03:01:11 +0000 Manifest this update: Sat 06 Dec 2025 03:01:11 +0000 Manifest next update: Sun 07 Dec 2025 03:01:11 +0000 Files and hashes: 1: dj16VTWlJJ6Xp1BkZpOZqTxGzI4.crl (hash: y3PJrEZzx8eSVHt6TUzkbJ3WJ6bkED8qvqVKukKR/Fo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.mft rsync://rpki.ripe.net/repository/DEFAULT/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:34:8a:74:ad:cb:51:05:48:28:b8:4b:ef:7c:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=763d7a5535a5249e97a75064669399a93c46cc8e Validity Not Before: Dec 6 03:01:11 2025 GMT Not After : Dec 7 03:01:11 2025 GMT Subject: CN=380ba72f863b936fd1c0fd2f562669b30a23f9f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0c:a3:63:d2:29:13:15:78:d9:55:25:52:04: ed:ee:d1:5d:90:5d:b3:94:79:52:0e:f2:05:3e:9e: 10:a1:18:7f:90:ba:0e:3c:77:c4:f8:1b:17:2b:6d: 13:1a:2d:1e:0f:4c:53:47:a1:25:a8:0d:f5:3b:73: b8:bc:7f:83:ee:75:d5:20:42:c1:95:e7:b4:98:88: 2c:87:9c:ae:a9:2b:3f:35:6b:45:5e:2b:b2:5b:d4: a5:96:8a:e0:59:2f:53:da:a3:89:94:7a:c3:22:fc: b2:72:14:b2:33:06:e4:e2:a8:e6:78:db:19:d9:ff: 03:b7:15:0a:9d:5e:b2:43:10:65:66:ea:d8:ab:aa: fc:2e:a6:25:b5:c4:1a:43:b5:a1:86:d6:f4:f4:23: 63:3d:11:eb:f3:d5:99:d1:9a:88:92:22:00:88:3a: 0d:0d:53:a4:3e:fb:62:ce:19:52:11:ac:58:65:38: 45:c0:5e:50:17:89:0a:64:7b:e0:35:3c:da:c7:36: 5d:a5:88:75:be:fa:57:0b:33:42:9f:35:6b:42:b6: 73:a0:df:76:b6:67:0e:16:77:57:60:a7:5a:4a:17: f0:30:ff:22:35:cf:d5:6a:38:fa:10:55:21:e6:9c: d5:6b:e4:a6:8b:98:fb:3a:37:82:8c:14:fc:30:b7: 48:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:0B:A7:2F:86:3B:93:6F:D1:C0:FD:2F:56:26:69:B3:0A:23:F9:F1 X509v3 Authority Key Identifier: keyid:76:3D:7A:55:35:A5:24:9E:97:A7:50:64:66:93:99:A9:3C:46:CC:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:1f:be:d5:e3:2a:47:32:0c:ae:51:03:91:b9:a9:e4:0d:bd: 9f:0a:71:80:1c:8a:13:f1:19:4c:10:70:90:01:17:ec:51:56: 56:16:c1:7e:ec:08:85:e5:31:97:3b:60:f1:8e:28:f3:a2:ef: 30:2c:65:c3:67:b1:00:83:55:78:1b:3e:48:85:6f:38:b3:d5: 96:75:73:60:c0:34:ab:94:0d:c6:2e:e8:3c:20:54:55:97:cd: 0d:b1:4d:c2:c2:95:52:16:54:3c:72:a3:59:d4:52:82:b9:9b: a8:ce:f7:b9:3b:8b:22:f9:e9:85:3f:88:b9:49:a8:7c:0a:29: 51:ce:1f:94:22:d2:8b:c2:fd:24:9b:19:65:15:14:af:ea:9a: 95:ab:5e:d1:42:fe:3d:a7:74:47:ba:23:fe:03:6c:40:8e:e4: 84:b2:3b:4e:96:c2:e5:1f:85:45:44:7c:45:14:e5:c7:f9:b9: 84:c3:3d:f3:63:ba:99:66:e6:bc:6a:c6:a0:1b:35:7b:be:54: f4:dc:28:fb:40:8d:29:e2:4c:70:68:9d:aa:c6:ff:a1:ba:5e: f6:8f:6a:2b:51:37:7e:d3:70:7e:0b:f5:55:ff:0c:b2:6b:09: ed:3d:02:1b:a6:d8:7d:0c:89:d3:c5:99:ec:29:be:93:36:a6: 2c:dc:7e:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmzSKdK3LUQVIKLhL73zvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2M2Q3YTU1MzVhNTI0OWU5N2E3NTA2NDY2OTM5OWE5M2M0 NmNjOGUwHhcNMjUxMjA2MDMwMTExWhcNMjUxMjA3MDMwMTExWjAzMTEwLwYDVQQD EygzODBiYTcyZjg2M2I5MzZmZDFjMGZkMmY1NjI2NjliMzBhMjNmOWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAyjY9IpExV42VUlUgTt7tFdkF2z lHlSDvIFPp4QoRh/kLoOPHfE+BsXK20TGi0eD0xTR6ElqA31O3O4vH+D7nXVIELB lee0mIgsh5yuqSs/NWtFXiuyW9SllorgWS9T2qOJlHrDIvyychSyMwbk4qjmeNsZ 2f8DtxUKnV6yQxBlZurYq6r8LqYltcQaQ7Whhtb09CNjPRHr89WZ0ZqIkiIAiDoN DVOkPvtizhlSEaxYZThFwF5QF4kKZHvgNTzaxzZdpYh1vvpXCzNCnzVrQrZzoN92 tmcOFndXYKdaShfwMP8iNc/Vajj6EFUh5pzVa+Smi5j7OjeCjBT8MLdIhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDgLpy+GO5Nv0cD9L1YmabMKI/nxMB8GA1UdIwQY MBaAFHY9elU1pSSel6dQZGaTmak8RsyOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGoxNlZUV2xKSjZYcDFCa1pwT1pxVHhHekk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC84NTBiMGItYjMwNi00ZDdmLWIxOTgt ODgyMmJkMzg2ODQwLzEvZGoxNlZUV2xKSjZYcDFCa1pwT1pxVHhHekk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC84NTBiMGItYjMwNi00ZDdmLWIxOTgtODgyMmJkMzg2ODQw LzEvZGoxNlZUV2xKSjZYcDFCa1pwT1pxVHhHekk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhR++1eMq RzIMrlEDkbmp5A29nwpxgByKE/EZTBBwkAEX7FFWVhbBfuwIheUxlztg8Y4o86Lv MCxlw2exAINVeBs+SIVvOLPVlnVzYMA0q5QNxi7oPCBUVZfNDbFNwsKVUhZUPHKj WdRSgrmbqM73uTuLIvnphT+IuUmofAopUc4flCLSi8L9JJsZZRUUr+qalate0UL+ Pad0R7oj/gNsQI7khLI7TpbC5R+FRUR8RRTlx/m5hMM982O6mWbmvGrGoBs1e75U 9Nwo+0CNKeJMcGidqsb/obpe9o9qK1E3ftNwfgv1Vf8MsmsJ7T0CG6bYfQyJ08WZ 7Cm+kzamLNx+gQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:08:46 2025 by rpki-client