This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft File: msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft (raw, json) Hash identifier: 51Kh6xVoO7YPL8X4GmAcnCi28KK+Oxs+B9K/+U6ZNZ4= Subject key identifier: 84:BA:4A:19:21:5D:0A:35:E8:05:D7:C8:8D:35:B0:E2:21:28:DE:AF Authority key identifier: 9A:C0:D1:1A:37:DA:35:DB:E2:F7:F6:B9:61:9E:55:72:63:4E:1F:62 Certificate issuer: /CN=9ac0d11a37da35dbe2f7f6b9619e5572634e1f62 Certificate serial: 019AF1D2249B5C1165B3EF05AD775987B39E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/msDRGjfaNdvi9_a5YZ5VcmNOH2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft Manifest number: 13D6 Signing time: Sat 06 Dec 2025 04:01:12 +0000 Manifest this update: Sat 06 Dec 2025 04:01:12 +0000 Manifest next update: Sun 07 Dec 2025 04:01:12 +0000 Files and hashes: 1: msDRGjfaNdvi9_a5YZ5VcmNOH2I.crl (hash: t9pZNQAsWqZTVimU8pkCVhdbK/hk3iSe4vR7s6eJKyc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.crl rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft rsync://rpki.ripe.net/repository/DEFAULT/msDRGjfaNdvi9_a5YZ5VcmNOH2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:24:9b:5c:11:65:b3:ef:05:ad:77:59:87:b3:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ac0d11a37da35dbe2f7f6b9619e5572634e1f62 Validity Not Before: Dec 6 04:01:12 2025 GMT Not After : Dec 7 04:01:12 2025 GMT Subject: CN=84ba4a19215d0a35e805d7c88d35b0e22128deaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c1:e9:15:fd:ae:e5:db:7b:82:01:f8:ed:8e: de:df:09:54:f5:fa:f9:44:65:16:e3:03:12:7d:ae: d1:0b:a2:20:f2:9d:44:ab:74:fe:d0:21:ff:d2:33: fd:ba:3e:a0:de:a2:a0:4f:a3:13:5b:26:3f:76:fb: d9:32:24:76:3f:da:07:a6:35:73:65:ad:ce:2c:79: e5:eb:c2:26:88:88:14:a8:eb:22:2e:e7:bd:af:4f: 47:87:e7:98:a2:cd:95:cd:67:05:17:f9:ea:05:d2: 71:ce:43:b8:ee:46:2f:a2:e1:69:46:58:93:ca:db: c6:87:c6:0f:a3:02:70:a6:17:6b:6c:c0:89:63:3c: fe:96:18:5f:bd:70:f5:96:08:b4:55:a5:4c:9f:af: 1e:bd:5d:30:66:57:88:07:01:3d:ab:53:31:84:e0: e1:06:8f:fc:a1:1c:54:80:61:82:7b:ff:f6:73:d8: bd:95:0f:7f:56:b5:f8:7b:7d:29:96:b2:5f:ce:f2: 94:a0:1b:f6:21:4e:f5:87:4b:ab:9c:ee:6a:af:3f: ea:d9:d4:53:dc:97:43:1b:87:76:38:2a:71:9c:2c: 8c:82:b0:c2:35:c0:ba:e0:67:2f:23:a3:34:a0:62: 19:6c:ba:00:51:48:14:5a:6e:c8:9e:5e:c7:1b:36: a8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:BA:4A:19:21:5D:0A:35:E8:05:D7:C8:8D:35:B0:E2:21:28:DE:AF X509v3 Authority Key Identifier: keyid:9A:C0:D1:1A:37:DA:35:DB:E2:F7:F6:B9:61:9E:55:72:63:4E:1F:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/msDRGjfaNdvi9_a5YZ5VcmNOH2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f87140-bc2c-4f3f-83fd-a3d455d34809/1/msDRGjfaNdvi9_a5YZ5VcmNOH2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:d5:39:d0:3d:94:5b:b9:dc:e6:5f:dc:f7:79:d1:8e:43:f0: d7:ab:fd:ef:dd:31:48:48:14:f9:57:a0:b0:7e:20:ca:10:9b: e6:d4:c3:6c:c1:bd:47:e3:c3:00:b5:84:26:76:fb:3d:9e:3d: 7d:84:fc:f4:de:f7:90:b6:39:29:04:c9:3e:b1:99:33:3f:0a: 47:77:0c:ab:fc:41:1f:4f:b8:64:44:ad:c2:9a:54:2a:62:7d: f1:44:6b:2a:0e:d7:f0:57:94:19:8e:c4:c3:26:59:28:73:68: 43:e7:75:c4:89:31:c2:8c:6a:11:7f:93:6c:81:c2:94:17:39: 61:bf:3e:80:8b:f6:46:03:e1:4a:02:ec:60:9e:2d:23:19:21: 9a:d0:f1:44:7b:ad:f8:60:aa:ab:34:ee:83:40:40:6b:a6:41: c2:25:a9:4e:65:c9:43:78:f6:f0:da:70:9d:a5:7f:8f:99:27: ab:f0:88:ac:78:6b:13:b9:12:ce:06:65:28:86:57:25:8b:d7: 44:d0:27:be:4b:ef:32:dc:ce:7a:a5:93:96:26:62:64:9b:d8: 31:81:cc:0f:8d:b5:30:84:f6:14:64:b2:fa:d4:75:92:58:f5: 6a:c4:2a:87:63:f8:6f:aa:e9:c0:8a:77:45:4d:99:e2:f7:17: b1:02:9d:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0iSbXBFls+8FrXdZh7OeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhYzBkMTFhMzdkYTM1ZGJlMmY3ZjZiOTYxOWU1NTcyNjM0 ZTFmNjIwHhcNMjUxMjA2MDQwMTEyWhcNMjUxMjA3MDQwMTEyWjAzMTEwLwYDVQQD Eyg4NGJhNGExOTIxNWQwYTM1ZTgwNWQ3Yzg4ZDM1YjBlMjIxMjhkZWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38HpFf2u5dt7ggH47Y7e3wlU9fr5 RGUW4wMSfa7RC6Ig8p1Eq3T+0CH/0jP9uj6g3qKgT6MTWyY/dvvZMiR2P9oHpjVz Za3OLHnl68ImiIgUqOsiLue9r09Hh+eYos2VzWcFF/nqBdJxzkO47kYvouFpRliT ytvGh8YPowJwphdrbMCJYzz+lhhfvXD1lgi0VaVMn68evV0wZleIBwE9q1MxhODh Bo/8oRxUgGGCe//2c9i9lQ9/VrX4e30plrJfzvKUoBv2IU71h0urnO5qrz/q2dRT 3JdDG4d2OCpxnCyMgrDCNcC64GcvI6M0oGIZbLoAUUgUWm7Inl7HGzaoHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIS6ShkhXQo16AXXyI01sOIhKN6vMB8GA1UdIwQY MBaAFJrA0Ro32jXb4vf2uWGeVXJjTh9iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXNEUkdqZmFOZHZpOV9hNVlaNVZjbU5PSDJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9mODcxNDAtYmMyYy00ZjNmLTgzZmQt YTNkNDU1ZDM0ODA5LzEvbXNEUkdqZmFOZHZpOV9hNVlaNVZjbU5PSDJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9mODcxNDAtYmMyYy00ZjNmLTgzZmQtYTNkNDU1ZDM0ODA5 LzEvbXNEUkdqZmFOZHZpOV9hNVlaNVZjbU5PSDJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPtU50D2U W7nc5l/c93nRjkPw16v9790xSEgU+VegsH4gyhCb5tTDbMG9R+PDALWEJnb7PZ49 fYT89N73kLY5KQTJPrGZMz8KR3cMq/xBH0+4ZEStwppUKmJ98URrKg7X8FeUGY7E wyZZKHNoQ+d1xIkxwoxqEX+TbIHClBc5Yb8+gIv2RgPhSgLsYJ4tIxkhmtDxRHut +GCqqzTug0BAa6ZBwiWpTmXJQ3j28NpwnaV/j5knq/CIrHhrE7kSzgZlKIZXJYvX RNAnvkvvMtzOeqWTliZiZJvYMYHMD421MIT2FGSy+tR1klj1asQqh2P4b6rpwIp3 RU2Z4vcXsQKdjQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:25:01 2025 by rpki-client