This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/d11030Q8uAUXzkFQ3OImYpQPHXw.mft File: d11030Q8uAUXzkFQ3OImYpQPHXw.mft (raw, json) Hash identifier: w+sRxZvC2mfe5BVwCXQiVmpywGL3fCocMw25tzHVHo4= Subject key identifier: D0:97:A2:54:44:1C:8C:B9:3B:4D:0A:30:32:8C:47:C4:59:19:53:A9 Authority key identifier: 77:5D:74:DF:44:3C:B8:05:17:CE:41:50:DC:E2:26:62:94:0F:1D:7C Certificate issuer: /CN=775d74df443cb80517ce4150dce22662940f1d7c Certificate serial: 019AF19B829C021C2ECA3E065D56359BC231 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d11030Q8uAUXzkFQ3OImYpQPHXw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/d11030Q8uAUXzkFQ3OImYpQPHXw.mft Manifest number: 0B9C Signing time: Sat 06 Dec 2025 03:01:31 +0000 Manifest this update: Sat 06 Dec 2025 03:01:31 +0000 Manifest next update: Sun 07 Dec 2025 03:01:31 +0000 Files and hashes: 1: d11030Q8uAUXzkFQ3OImYpQPHXw.crl (hash: xz6m+0gX5U/t+EUu5g1P/EnlyTXL21Cj4ZRDvnUZsPU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/d11030Q8uAUXzkFQ3OImYpQPHXw.crl rsync://rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/d11030Q8uAUXzkFQ3OImYpQPHXw.mft rsync://rpki.ripe.net/repository/DEFAULT/d11030Q8uAUXzkFQ3OImYpQPHXw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:82:9c:02:1c:2e:ca:3e:06:5d:56:35:9b:c2:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=775d74df443cb80517ce4150dce22662940f1d7c Validity Not Before: Dec 6 03:01:31 2025 GMT Not After : Dec 7 03:01:31 2025 GMT Subject: CN=d097a254441c8cb93b4d0a30328c47c4591953a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a4:e4:98:40:73:70:4a:3e:69:76:ab:95:88: de:e1:6e:ea:ea:7d:13:ac:51:d3:85:91:91:1a:db: 7b:44:68:01:35:39:7f:47:71:59:53:7e:d1:80:be: 47:07:38:26:d9:da:ba:b3:a8:d5:e5:e4:ac:60:bd: bc:7c:a5:3d:cf:7b:a6:41:e0:d7:24:a1:fa:56:4f: 62:c9:4f:15:a2:2e:be:be:e7:ab:31:35:88:8e:da: 61:bb:af:57:80:62:62:cb:bb:14:6f:d2:e5:83:3a: 6f:21:4b:39:42:c3:7c:ac:a2:be:c5:c3:ea:9b:a4: 6a:b1:e2:27:e6:a8:5a:1c:77:09:76:93:1c:fa:f3: 0f:33:23:cb:bb:38:fb:cd:ea:36:16:1c:5d:7b:34: 44:52:a2:71:32:67:8d:f1:5c:86:71:ae:08:fc:b0: 17:1b:4c:75:6b:58:de:39:3f:18:49:11:4a:8b:45: 37:f3:01:41:31:a6:1a:c1:9b:dc:ce:1d:b8:21:9d: 56:c9:b5:af:5d:e3:cb:da:bc:33:da:77:3d:37:af: 8d:e3:14:c8:8b:81:68:ca:ad:a3:26:47:27:af:4d: a0:b1:63:0c:d1:e3:14:e3:c5:6f:67:28:26:fa:01: f8:6f:eb:ce:bf:0d:86:d4:d3:25:da:87:c4:54:0d: 56:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:97:A2:54:44:1C:8C:B9:3B:4D:0A:30:32:8C:47:C4:59:19:53:A9 X509v3 Authority Key Identifier: keyid:77:5D:74:DF:44:3C:B8:05:17:CE:41:50:DC:E2:26:62:94:0F:1D:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d11030Q8uAUXzkFQ3OImYpQPHXw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/d11030Q8uAUXzkFQ3OImYpQPHXw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/1c77b7-b82a-4dfd-b6b5-6f758619837f/1/d11030Q8uAUXzkFQ3OImYpQPHXw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:a6:3b:7f:e1:db:e0:4e:20:b9:ed:57:3a:3e:41:96:ee:0b: ef:dc:c8:21:5b:f0:8f:95:0e:65:cd:a8:b6:ee:63:db:1e:ec: 5e:ee:e0:44:cf:be:db:3c:0a:b8:89:1d:3e:76:c2:f5:9f:06: aa:14:e7:09:ab:6e:ce:11:ad:69:15:38:c6:97:f4:05:39:e6: fa:64:ec:a5:c2:04:87:57:18:23:2a:07:9e:3a:a9:ab:b6:7d: 29:e4:51:5f:1c:59:14:96:09:69:51:79:98:62:b2:fd:55:26: 53:90:c5:f9:6b:a2:52:e3:3d:60:8a:0b:a1:d9:78:6c:2c:8b: 75:ba:b8:4f:61:68:f7:00:32:92:70:ca:30:a9:53:f2:e8:08: 78:04:75:35:da:bc:66:49:a2:a0:2f:7c:7d:40:1c:a0:d5:91: 92:e0:66:22:e6:4b:19:f2:ae:c6:af:c4:f0:2d:cb:23:ee:34: 90:81:6f:3b:eb:7b:80:47:5e:e7:e0:18:0d:85:59:47:79:ef: ec:d2:d5:f4:f1:b6:a5:7f:d1:98:a4:76:53:a6:17:ad:07:99: 2b:94:38:f6:9f:e4:19:0f:8d:e4:47:ad:0d:ec:21:d7:ec:c3: 7f:94:9a:67:17:7d:b9:c2:0b:bf:14:87:1e:db:08:86:58:dc: d9:3e:88:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm4KcAhwuyj4GXVY1m8IxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3NWQ3NGRmNDQzY2I4MDUxN2NlNDE1MGRjZTIyNjYyOTQw ZjFkN2MwHhcNMjUxMjA2MDMwMTMxWhcNMjUxMjA3MDMwMTMxWjAzMTEwLwYDVQQD EyhkMDk3YTI1NDQ0MWM4Y2I5M2I0ZDBhMzAzMjhjNDdjNDU5MTk1M2E5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqTkmEBzcEo+aXarlYje4W7q6n0T rFHThZGRGtt7RGgBNTl/R3FZU37RgL5HBzgm2dq6s6jV5eSsYL28fKU9z3umQeDX JKH6Vk9iyU8Voi6+vuerMTWIjtphu69XgGJiy7sUb9LlgzpvIUs5QsN8rKK+xcPq m6RqseIn5qhaHHcJdpMc+vMPMyPLuzj7zeo2FhxdezREUqJxMmeN8VyGca4I/LAX G0x1a1jeOT8YSRFKi0U38wFBMaYawZvczh24IZ1WybWvXePL2rwz2nc9N6+N4xTI i4Foyq2jJkcnr02gsWMM0eMU48VvZygm+gH4b+vOvw2G1NMl2ofEVA1WPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNCXolREHIy5O00KMDKMR8RZGVOpMB8GA1UdIwQY MBaAFHdddN9EPLgFF85BUNziJmKUDx18MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDExMDMwUTh1QVVYemtGUTNPSW1ZcFFQSFh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8xYzc3YjctYjgyYS00ZGZkLWI2YjUt NmY3NTg2MTk4MzdmLzEvZDExMDMwUTh1QVVYemtGUTNPSW1ZcFFQSFh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC8xYzc3YjctYjgyYS00ZGZkLWI2YjUtNmY3NTg2MTk4Mzdm LzEvZDExMDMwUTh1QVVYemtGUTNPSW1ZcFFQSFh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeqY7f+Hb 4E4gue1XOj5Blu4L79zIIVvwj5UOZc2otu5j2x7sXu7gRM++2zwKuIkdPnbC9Z8G qhTnCatuzhGtaRU4xpf0BTnm+mTspcIEh1cYIyoHnjqpq7Z9KeRRXxxZFJYJaVF5 mGKy/VUmU5DF+WuiUuM9YIoLodl4bCyLdbq4T2Fo9wAyknDKMKlT8ugIeAR1Ndq8 ZkmioC98fUAcoNWRkuBmIuZLGfKuxq/E8C3LI+40kIFvO+t7gEde5+AYDYVZR3nv 7NLV9PG2pX/RmKR2U6YXrQeZK5Q49p/kGQ+N5EetDewh1+zDf5SaZxd9ucILvxSH HtsIhljc2T6IaA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:30 2025 by rpki-client