This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.mft File: D7o0uxz-i22g8bKwUkBsPpFhvyM.mft (raw, json) Hash identifier: 14v/4JAzwJzN4U2q3gkqBdoiCNspJyT2WLNK4fDo7H8= Subject key identifier: ED:57:7D:73:C5:3A:A0:66:E2:C7:6E:48:69:49:D9:D4:18:30:E0:D5 Authority key identifier: 0F:BA:34:BB:1C:FE:8B:6D:A0:F1:B2:B0:52:40:6C:3E:91:61:BF:23 Certificate issuer: /CN=0fba34bb1cfe8b6da0f1b2b052406c3e9161bf23 Certificate serial: 019AF12CCBD6EA3EC6F9037962D9C27B7CA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D7o0uxz-i22g8bKwUkBsPpFhvyM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 01:00:36 +0000 Manifest this update: Sat 06 Dec 2025 01:00:36 +0000 Manifest next update: Sun 07 Dec 2025 01:00:36 +0000 Files and hashes: 1: D7o0uxz-i22g8bKwUkBsPpFhvyM.crl (hash: bU2C/AH3AD3h6U5WbG1zbtE7lNTWIY2uCz3y+mYgFS0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.crl rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.mft rsync://rpki.ripe.net/repository/DEFAULT/D7o0uxz-i22g8bKwUkBsPpFhvyM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:cb:d6:ea:3e:c6:f9:03:79:62:d9:c2:7b:7c:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fba34bb1cfe8b6da0f1b2b052406c3e9161bf23 Validity Not Before: Dec 6 01:00:36 2025 GMT Not After : Dec 7 01:00:36 2025 GMT Subject: CN=ed577d73c53aa066e2c76e486949d9d41830e0d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d0:ff:9c:0e:cb:70:18:f6:d2:53:7d:a6:0f: 5b:ab:05:0d:30:13:c2:0a:f4:6a:37:d2:f3:41:20: 2d:13:0f:db:f4:38:93:77:57:cc:01:24:46:fc:c3: 27:b7:32:76:bc:91:ad:19:98:e5:b5:d2:cb:da:73: 97:9b:c3:7a:86:65:57:d0:72:50:11:fc:c1:ac:b3: 11:3a:ca:55:d0:02:9d:cc:20:5b:a5:86:10:57:15: 43:c8:04:94:e7:82:3f:aa:3a:a2:79:75:c7:c9:a3: e8:c9:c0:4b:eb:24:b8:cf:b2:82:9f:86:43:71:c3: 7b:f4:e5:42:06:1e:3a:1d:9c:7a:f1:f2:ef:c0:7c: 68:5a:cd:49:92:24:92:1a:7f:17:bc:33:e1:2a:e5: 0c:a6:f7:5e:a6:31:35:7d:2e:d5:5e:c9:e7:95:e1: ee:5a:bf:f5:37:da:a5:ef:73:b1:f8:f7:26:06:a1: 2a:e7:32:90:69:d1:fd:5b:96:fa:b4:a6:ed:b2:37: f3:d9:64:09:65:5a:e9:15:ed:bf:47:24:2b:be:3c: e0:35:fa:77:40:4c:89:3b:87:62:f0:26:e0:d7:85: 5a:8b:07:77:c4:26:a3:a0:31:7f:ce:1e:df:e8:e1: 74:40:81:89:38:65:04:44:9f:ca:b1:a1:2b:4c:d0: de:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:57:7D:73:C5:3A:A0:66:E2:C7:6E:48:69:49:D9:D4:18:30:E0:D5 X509v3 Authority Key Identifier: keyid:0F:BA:34:BB:1C:FE:8B:6D:A0:F1:B2:B0:52:40:6C:3E:91:61:BF:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7o0uxz-i22g8bKwUkBsPpFhvyM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:00:f2:69:16:1e:41:86:72:07:7d:e3:85:92:9b:4c:28:ff: 0c:1a:75:27:66:83:3f:c1:68:7d:85:34:40:a2:bb:2c:62:f0: ed:57:f7:e3:3a:89:84:a8:f9:b3:77:53:34:e3:60:3b:0d:7e: 45:b1:1c:29:df:c2:14:3e:5c:c7:59:af:47:19:8c:85:52:c6: e0:fc:e0:6f:98:77:c2:5a:ac:26:20:6d:47:5c:2a:05:b4:60: 96:c1:77:f8:1a:8a:17:bb:29:8a:08:9f:0d:89:58:db:50:47: 71:db:c2:f5:b2:39:45:1e:0e:53:37:54:68:29:79:2a:22:08: 93:b0:74:6f:01:e4:03:72:e6:0d:49:49:40:93:7b:1a:c5:9d: 09:74:5b:34:1f:ca:36:26:ed:e3:2d:5f:65:57:e3:45:61:82: d2:12:b7:73:39:ed:2d:52:4f:ad:b7:75:68:f3:69:2c:4a:e5: 3e:86:f6:ce:07:80:17:51:68:d3:3a:91:8f:f9:3f:40:a6:69: c5:53:c6:03:b6:fe:1f:1e:32:0f:c7:1a:1d:ef:0d:6f:94:e8: a3:6a:9f:5a:f3:58:a0:d8:bb:d8:c9:c1:43:bb:ac:35:80:aa: 9b:c9:92:7d:63:24:11:5d:74:9b:10:d6:78:d1:97:c4:7e:a4: e5:10:21:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLMvW6j7G+QN5YtnCe3yoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmYmEzNGJiMWNmZThiNmRhMGYxYjJiMDUyNDA2YzNlOTE2 MWJmMjMwHhcNMjUxMjA2MDEwMDM2WhcNMjUxMjA3MDEwMDM2WjAzMTEwLwYDVQQD EyhlZDU3N2Q3M2M1M2FhMDY2ZTJjNzZlNDg2OTQ5ZDlkNDE4MzBlMGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtD/nA7LcBj20lN9pg9bqwUNMBPC CvRqN9LzQSAtEw/b9DiTd1fMASRG/MMntzJ2vJGtGZjltdLL2nOXm8N6hmVX0HJQ EfzBrLMROspV0AKdzCBbpYYQVxVDyASU54I/qjqieXXHyaPoycBL6yS4z7KCn4ZD ccN79OVCBh46HZx68fLvwHxoWs1JkiSSGn8XvDPhKuUMpvdepjE1fS7VXsnnleHu Wr/1N9ql73Ox+PcmBqEq5zKQadH9W5b6tKbtsjfz2WQJZVrpFe2/RyQrvjzgNfp3 QEyJO4di8Cbg14Vaiwd3xCajoDF/zh7f6OF0QIGJOGUERJ/KsaErTNDe1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO1XfXPFOqBm4sduSGlJ2dQYMODVMB8GA1UdIwQY MBaAFA+6NLsc/ottoPGysFJAbD6RYb8jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDdvMHV4ei1pMjJnOGJLd1VrQnNQcEZodnlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80NDBjYjEtYjZmNS00OGNmLTg4ODYt ZTE0NGFiMTljNWQxLzEvRDdvMHV4ei1pMjJnOGJLd1VrQnNQcEZodnlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC80NDBjYjEtYjZmNS00OGNmLTg4ODYtZTE0NGFiMTljNWQx LzEvRDdvMHV4ei1pMjJnOGJLd1VrQnNQcEZodnlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnwDyaRYe QYZyB33jhZKbTCj/DBp1J2aDP8FofYU0QKK7LGLw7Vf34zqJhKj5s3dTNONgOw1+ RbEcKd/CFD5cx1mvRxmMhVLG4Pzgb5h3wlqsJiBtR1wqBbRglsF3+BqKF7spigif DYlY21BHcdvC9bI5RR4OUzdUaCl5KiIIk7B0bwHkA3LmDUlJQJN7GsWdCXRbNB/K Nibt4y1fZVfjRWGC0hK3czntLVJPrbd1aPNpLErlPob2zgeAF1Fo0zqRj/k/QKZp xVPGA7b+Hx4yD8caHe8Nb5Too2qfWvNYoNi72MnBQ7usNYCqm8mSfWMkEV10mxDW eNGXxH6k5RAhoA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:10:28 2025 by rpki-client