This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft File: CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft (raw, json) Hash identifier: HfFGTFsP87HsFuONOsGPRJ12AMjQCgs1jh68MRXrZ6E= Subject key identifier: EF:34:2D:EC:48:C1:20:75:F3:14:18:E1:F1:85:FD:CC:C3:2D:CB:3F Authority key identifier: 09:D9:43:F9:D5:C7:5B:1F:50:56:4F:2D:1D:D0:51:17:88:EB:0A:FC Certificate issuer: /CN=09d943f9d5c75b1f50564f2d1dd0511788eb0afc Certificate serial: 019AF20941A660AC003B2BDBC82FF5D9BE92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdlD-dXHWx9QVk8tHdBRF4jrCvw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft Manifest number: 0139 Signing time: Sat 06 Dec 2025 05:01:24 +0000 Manifest this update: Sat 06 Dec 2025 05:01:24 +0000 Manifest next update: Sun 07 Dec 2025 05:01:24 +0000 Files and hashes: 1: CdlD-dXHWx9QVk8tHdBRF4jrCvw.crl (hash: EpQ6Z4lNyXSTdU4V1fNCQn/RBqyIS+KfRMSE8/6HZ18=) 2: mIMZrEW18-_5KGhaxhfyAse2jaU.roa (hash: 6Qvzu2ngRsyEUpj0qpA3Dkp0CWaU4iSnWXbsJngfWw4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft rsync://rpki.ripe.net/repository/DEFAULT/CdlD-dXHWx9QVk8tHdBRF4jrCvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:41:a6:60:ac:00:3b:2b:db:c8:2f:f5:d9:be:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09d943f9d5c75b1f50564f2d1dd0511788eb0afc Validity Not Before: Dec 6 05:01:24 2025 GMT Not After : Dec 7 05:01:24 2025 GMT Subject: CN=ef342dec48c12075f31418e1f185fdccc32dcb3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:9b:a9:cf:e0:16:86:16:b7:80:50:b0:c1:71: df:a6:46:d8:05:99:25:0d:7b:98:09:c1:85:e3:5d: ad:34:75:01:a3:16:22:ab:e8:52:43:0a:f7:59:61: a0:5e:9a:6f:4b:12:43:7c:9d:06:2d:bd:5c:68:31: 76:be:7e:fc:81:b3:a9:29:11:02:a3:13:11:eb:c2: f3:d0:ff:16:0a:09:7f:7f:dd:c2:ed:96:10:b3:1f: d4:6c:ec:9e:7d:4e:19:d3:d9:aa:73:35:9d:46:64: cd:e7:91:ce:e5:6b:e9:33:4e:02:2f:93:df:83:44: c3:87:51:b8:92:3a:03:af:b8:c7:9a:f4:a2:c6:87: a7:ec:8a:82:f2:84:ee:ba:78:de:64:b3:35:a3:cc: aa:1f:dd:55:f7:96:df:a2:11:37:7b:f5:d8:9e:83: f7:f7:b3:13:e3:b9:1a:50:39:0d:1c:b7:97:f1:57: 36:bd:92:86:d7:04:e6:6d:97:90:b7:08:06:b7:d8: b4:f6:eb:b4:ae:ac:1e:c7:83:2f:e4:ee:84:48:fd: 32:6a:f9:c8:c8:a1:21:6e:03:b2:8f:85:a3:5f:8e: d4:de:5b:a3:1e:de:60:41:b2:18:ab:ca:5a:9a:d7: d8:b7:a5:b4:b4:fa:0f:81:24:a4:92:24:64:c0:4f: db:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:34:2D:EC:48:C1:20:75:F3:14:18:E1:F1:85:FD:CC:C3:2D:CB:3F X509v3 Authority Key Identifier: keyid:09:D9:43:F9:D5:C7:5B:1F:50:56:4F:2D:1D:D0:51:17:88:EB:0A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdlD-dXHWx9QVk8tHdBRF4jrCvw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:e4:a4:30:48:ea:49:23:96:39:23:a8:2a:9b:63:f6:30:65: 16:48:7b:9e:74:f9:c6:f3:9a:d2:af:b6:c9:4a:67:e8:a0:02: 8f:d1:83:6e:10:94:ab:4e:9f:98:b7:44:03:2c:e8:15:15:5c: 0a:14:93:33:90:d7:58:9b:c7:4e:76:c5:d6:5e:c7:a0:e7:f3: df:97:ce:0d:cb:b2:ef:e9:81:d9:4a:89:3a:e3:2d:6c:80:fd: 4d:9e:04:03:e3:7f:ae:ea:c7:8e:22:a8:a4:9c:0f:91:c4:01: 4e:1d:d7:ea:8b:f4:75:aa:da:f5:70:1a:b0:f0:6e:59:3e:50: 3c:41:57:e8:e2:9f:3a:5f:a1:6f:f3:d7:42:c9:36:b4:48:ee: e6:50:7e:9b:a8:e6:85:6b:8d:e1:1c:fb:60:f2:4e:4b:86:d7: 20:0b:3a:27:e9:95:b3:89:7d:ea:a4:00:65:2d:94:13:02:96: 67:de:9c:af:b7:8f:a0:3f:a1:f0:ff:01:31:10:e9:da:2f:cb: df:3a:4b:f3:2b:ac:85:ed:50:12:99:bd:51:b1:15:a8:1e:3d: 0f:e9:fc:d8:a7:c2:00:db:70:0b:98:f0:b6:88:23:9b:7e:87: c5:9e:a2:aa:59:c3:01:fa:5b:06:a9:42:89:3c:ea:60:8f:17: 43:6c:21:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCUGmYKwAOyvbyC/12b6SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZDk0M2Y5ZDVjNzViMWY1MDU2NGYyZDFkZDA1MTE3ODhl YjBhZmMwHhcNMjUxMjA2MDUwMTI0WhcNMjUxMjA3MDUwMTI0WjAzMTEwLwYDVQQD EyhlZjM0MmRlYzQ4YzEyMDc1ZjMxNDE4ZTFmMTg1ZmRjY2MzMmRjYjNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJupz+AWhha3gFCwwXHfpkbYBZkl DXuYCcGF412tNHUBoxYiq+hSQwr3WWGgXppvSxJDfJ0GLb1caDF2vn78gbOpKREC oxMR68Lz0P8WCgl/f93C7ZYQsx/UbOyefU4Z09mqczWdRmTN55HO5WvpM04CL5Pf g0TDh1G4kjoDr7jHmvSixoen7IqC8oTuunjeZLM1o8yqH91V95bfohE3e/XYnoP3 97MT47kaUDkNHLeX8Vc2vZKG1wTmbZeQtwgGt9i09uu0rqwex4Mv5O6ESP0yavnI yKEhbgOyj4WjX47U3lujHt5gQbIYq8pamtfYt6W0tPoPgSSkkiRkwE/b8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO80LexIwSB18xQY4fGF/czDLcs/MB8GA1UdIwQY MBaAFAnZQ/nVx1sfUFZPLR3QUReI6wr8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2RsRC1kWEhXeDlRVms4dEhkQlJGNGpyQ3Z3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi82MmMwMDItYjk0Yy00MjNiLWI0ZWIt ZTc5MmNjMmZkMDdlLzEvQ2RsRC1kWEhXeDlRVms4dEhkQlJGNGpyQ3Z3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi82MmMwMDItYjk0Yy00MjNiLWI0ZWItZTc5MmNjMmZkMDdl LzEvQ2RsRC1kWEhXeDlRVms4dEhkQlJGNGpyQ3Z3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFOSkMEjq SSOWOSOoKptj9jBlFkh7nnT5xvOa0q+2yUpn6KACj9GDbhCUq06fmLdEAyzoFRVc ChSTM5DXWJvHTnbF1l7HoOfz35fODcuy7+mB2UqJOuMtbID9TZ4EA+N/rurHjiKo pJwPkcQBTh3X6ov0dara9XAasPBuWT5QPEFX6OKfOl+hb/PXQsk2tEju5lB+m6jm hWuN4Rz7YPJOS4bXIAs6J+mVs4l96qQAZS2UEwKWZ96cr7ePoD+h8P8BMRDp2i/L 3zpL8yushe1QEpm9UbEVqB49D+n82KfCANtwC5jwtogjm36HxZ6iqlnDAfpbBqlC iTzqYI8XQ2wh0Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:20:37 2025 by rpki-client