This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/rDRA8w4wW8AFi4WbaKg0CgM7a0I.mft File: rDRA8w4wW8AFi4WbaKg0CgM7a0I.mft (raw, json) Hash identifier: yonMA+plCu5cfkXCNc+GJt1NeHZBr8FZQRg+iQdjSQg= Subject key identifier: C3:3B:C8:B8:BB:E7:62:91:41:9E:7C:8F:73:06:05:E2:1C:60:C5:11 Authority key identifier: AC:34:40:F3:0E:30:5B:C0:05:8B:85:9B:68:A8:34:0A:03:3B:6B:42 Certificate issuer: /CN=ac3440f30e305bc0058b859b68a8340a033b6b42 Certificate serial: 019AF12EA02E411B5008CFBF8065B5FA0FEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rDRA8w4wW8AFi4WbaKg0CgM7a0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/rDRA8w4wW8AFi4WbaKg0CgM7a0I.mft Manifest number: 0750 Signing time: Sat 06 Dec 2025 01:02:35 +0000 Manifest this update: Sat 06 Dec 2025 01:02:35 +0000 Manifest next update: Sun 07 Dec 2025 01:02:35 +0000 Files and hashes: 1: rDRA8w4wW8AFi4WbaKg0CgM7a0I.crl (hash: /bEilRfDqycN5pNd6c4ftf1ahWN7OCXTnxS5CrAW3g0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/rDRA8w4wW8AFi4WbaKg0CgM7a0I.crl rsync://rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/rDRA8w4wW8AFi4WbaKg0CgM7a0I.mft rsync://rpki.ripe.net/repository/DEFAULT/rDRA8w4wW8AFi4WbaKg0CgM7a0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:a0:2e:41:1b:50:08:cf:bf:80:65:b5:fa:0f:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac3440f30e305bc0058b859b68a8340a033b6b42 Validity Not Before: Dec 6 01:02:35 2025 GMT Not After : Dec 7 01:02:35 2025 GMT Subject: CN=c33bc8b8bbe76291419e7c8f730605e21c60c511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f3:09:ba:44:51:cc:f2:32:b4:9b:cd:6c:fb: b8:37:e3:c1:68:c9:31:dd:91:d3:ad:0e:17:12:0a: da:33:d7:99:68:e9:4a:a9:e6:40:79:ca:d3:4b:c7: 29:31:2c:dc:a8:92:5f:1b:61:f5:d9:ba:89:4c:8e: f6:3b:31:a8:20:48:e6:da:9e:44:c5:77:a3:10:52: ef:c7:99:ec:cc:d8:40:35:58:59:02:35:76:91:86: 3b:66:c2:e8:50:98:40:26:a5:3f:12:b5:52:15:20: ac:a0:77:d6:7d:82:0f:12:47:25:80:43:da:c4:cd: b8:d5:eb:95:e2:9e:88:4d:82:25:04:4a:e1:3a:40: bf:f7:ab:29:fa:56:38:09:d7:d8:70:8e:39:b8:a6: 44:67:fa:f6:c7:6b:7b:76:80:d3:04:17:8d:f1:1d: 53:14:d0:4b:db:c0:79:02:14:73:cb:9c:91:9a:3d: 79:8f:5d:e7:ce:29:61:b8:b6:bc:be:e4:44:35:1f: 65:13:88:db:df:6b:72:c9:a7:d7:7a:61:50:d9:db: 0f:ea:5d:b8:e9:63:22:25:6e:06:f7:f1:12:81:75: 4c:3d:ab:0c:d8:fd:75:0f:7f:15:43:01:c7:aa:99: ad:f0:bd:d4:73:14:b1:ee:46:c6:94:54:95:0f:d9: a2:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:3B:C8:B8:BB:E7:62:91:41:9E:7C:8F:73:06:05:E2:1C:60:C5:11 X509v3 Authority Key Identifier: keyid:AC:34:40:F3:0E:30:5B:C0:05:8B:85:9B:68:A8:34:0A:03:3B:6B:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rDRA8w4wW8AFi4WbaKg0CgM7a0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/rDRA8w4wW8AFi4WbaKg0CgM7a0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/rDRA8w4wW8AFi4WbaKg0CgM7a0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:a2:45:9d:52:cf:d8:61:a5:73:25:4d:f7:82:e9:d3:30:f2: da:42:37:c9:57:7d:23:64:7c:5c:ce:c7:8c:72:e8:60:8f:2f: 0b:47:93:36:31:b5:9c:04:1f:68:67:61:3d:7b:34:18:2d:5c: 25:7a:ea:ed:71:33:03:cf:c5:7e:0e:07:be:4a:41:1c:ef:70: e7:2c:24:aa:3d:92:8d:37:54:e7:cf:fb:a8:ff:c1:71:27:96: 46:2c:6c:2b:94:67:68:06:4a:59:e9:ca:07:64:43:fc:40:2f: 32:aa:25:cf:96:07:4d:92:7e:2c:9d:98:5e:7a:18:e6:57:55: 72:2a:c2:a3:ca:fb:c6:76:01:32:7c:68:5c:83:b1:14:fc:fd: 3c:86:22:38:c4:c7:a1:92:42:c4:ed:0b:03:9a:8b:5d:da:0b: f4:b4:37:e9:63:f3:0f:3b:65:14:f6:b0:48:a8:4e:89:4f:10: 48:c3:61:dc:3a:36:03:cd:e8:ac:8a:99:0b:48:1e:27:94:e0: 72:bb:60:fb:3a:8b:a4:e0:c2:1c:93:4f:da:0c:b1:c9:c5:70: a5:6e:78:2b:94:da:ef:4d:f7:05:a5:1d:5b:19:4d:e0:5a:d8: 97:e2:09:62:38:ea:1c:80:bb:d2:69:36:33:66:bc:bb:11:33: 51:08:22:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLqAuQRtQCM+/gGW1+g/rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjMzQ0MGYzMGUzMDViYzAwNThiODU5YjY4YTgzNDBhMDMz YjZiNDIwHhcNMjUxMjA2MDEwMjM1WhcNMjUxMjA3MDEwMjM1WjAzMTEwLwYDVQQD EyhjMzNiYzhiOGJiZTc2MjkxNDE5ZTdjOGY3MzA2MDVlMjFjNjBjNTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPMJukRRzPIytJvNbPu4N+PBaMkx 3ZHTrQ4XEgraM9eZaOlKqeZAecrTS8cpMSzcqJJfG2H12bqJTI72OzGoIEjm2p5E xXejEFLvx5nszNhANVhZAjV2kYY7ZsLoUJhAJqU/ErVSFSCsoHfWfYIPEkclgEPa xM241euV4p6ITYIlBErhOkC/96sp+lY4CdfYcI45uKZEZ/r2x2t7doDTBBeN8R1T FNBL28B5AhRzy5yRmj15j13nzilhuLa8vuRENR9lE4jb32tyyafXemFQ2dsP6l24 6WMiJW4G9/ESgXVMPasM2P11D38VQwHHqpmt8L3UcxSx7kbGlFSVD9miCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMM7yLi752KRQZ58j3MGBeIcYMURMB8GA1UdIwQY MBaAFKw0QPMOMFvABYuFm2ioNAoDO2tCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckRSQTh3NHdXOEFGaTRXYmFLZzBDZ003YTBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9hNjc3N2QtYjc3OC00NDJjLWI4MmYt NDM4ZDQwNGVkYzJhLzEvckRSQTh3NHdXOEFGaTRXYmFLZzBDZ003YTBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9hNjc3N2QtYjc3OC00NDJjLWI4MmYtNDM4ZDQwNGVkYzJh LzEvckRSQTh3NHdXOEFGaTRXYmFLZzBDZ003YTBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAaJFnVLP 2GGlcyVN94Lp0zDy2kI3yVd9I2R8XM7HjHLoYI8vC0eTNjG1nAQfaGdhPXs0GC1c JXrq7XEzA8/Ffg4HvkpBHO9w5ywkqj2SjTdU58/7qP/BcSeWRixsK5RnaAZKWenK B2RD/EAvMqolz5YHTZJ+LJ2YXnoY5ldVcirCo8r7xnYBMnxoXIOxFPz9PIYiOMTH oZJCxO0LA5qLXdoL9LQ36WPzDztlFPawSKhOiU8QSMNh3Do2A83orIqZC0geJ5Tg crtg+zqLpODCHJNP2gyxycVwpW54K5Ta7033BaUdWxlN4FrYl+IJYjjqHIC70mk2 M2a8uxEzUQgimQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:06:59 2025 by rpki-client