This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/831ecb-ab1f-4427-8d60-f746652444da/1/DvD-irs27bvvRGptVK24YsSrO6E.mft File: DvD-irs27bvvRGptVK24YsSrO6E.mft (raw, json) Hash identifier: IeTAC5Eg/JdXKNUM4UR/Ysml99UgDqXx135fbr/COss= Subject key identifier: 8F:DA:8D:4B:67:9D:2F:BA:36:96:8A:D4:98:D7:A5:47:50:63:AE:98 Authority key identifier: 0E:F0:FE:8A:BB:36:ED:BB:EF:44:6A:6D:54:AD:B8:62:C4:AB:3B:A1 Certificate issuer: /CN=0ef0fe8abb36edbbef446a6d54adb862c4ab3ba1 Certificate serial: 019AF31BE9DC692D8A96F38FDC82C9FD65A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvD-irs27bvvRGptVK24YsSrO6E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/831ecb-ab1f-4427-8d60-f746652444da/1/DvD-irs27bvvRGptVK24YsSrO6E.mft Manifest number: 0E97 Signing time: Sat 06 Dec 2025 10:01:24 +0000 Manifest this update: Sat 06 Dec 2025 10:01:24 +0000 Manifest next update: Sun 07 Dec 2025 10:01:24 +0000 Files and hashes: 1: DvD-irs27bvvRGptVK24YsSrO6E.crl (hash: 19Kcz4TIZS5SabVSMPMXlB4x0/f3rcmXNcoJaOJt84s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/831ecb-ab1f-4427-8d60-f746652444da/1/DvD-irs27bvvRGptVK24YsSrO6E.crl rsync://rpki.ripe.net/repository/DEFAULT/94/831ecb-ab1f-4427-8d60-f746652444da/1/DvD-irs27bvvRGptVK24YsSrO6E.mft rsync://rpki.ripe.net/repository/DEFAULT/DvD-irs27bvvRGptVK24YsSrO6E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:e9:dc:69:2d:8a:96:f3:8f:dc:82:c9:fd:65:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ef0fe8abb36edbbef446a6d54adb862c4ab3ba1 Validity Not Before: Dec 6 10:01:24 2025 GMT Not After : Dec 7 10:01:24 2025 GMT Subject: CN=8fda8d4b679d2fba36968ad498d7a5475063ae98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:07:65:82:6a:1c:23:af:71:87:50:e1:ff:d6: 72:8b:12:7d:85:db:b3:49:00:48:51:84:f3:41:5b: cb:c5:d9:38:55:2c:dc:42:f3:70:c7:f0:33:ae:ed: 9c:08:d6:60:b2:9e:8c:03:8c:56:6e:ed:d7:20:59: 14:91:9b:c8:bd:ff:f1:44:e8:aa:1a:0d:6a:f8:13: 62:cb:20:d5:c0:85:96:96:b8:fc:3d:5b:dd:af:15: c4:7b:35:c4:90:8c:5a:80:49:8b:29:5a:64:3d:9c: 1d:24:b5:d1:fe:7b:e1:bb:b1:2b:aa:61:2d:9e:24: dd:71:ea:b4:25:dd:06:00:fc:72:df:21:e6:1f:38: 2f:48:61:62:80:e4:4c:f9:7d:c2:1d:2b:a1:28:a3: 39:06:4e:96:3f:29:40:64:87:40:fe:2e:c7:90:5d: ee:5d:b4:e8:c3:ae:be:bb:31:4d:4a:ce:b1:3c:c8: 8c:f1:14:d0:50:eb:a2:fb:77:8a:44:89:2b:b0:38: 3e:c6:b9:d6:95:57:6a:cf:d7:e4:9d:b4:0f:47:e3: 1b:3c:19:fd:db:1b:a9:5a:83:36:cf:20:c9:29:89: c0:52:1a:4e:f6:ed:47:d9:e4:6a:73:6e:72:17:86: 92:82:f8:c7:2f:55:38:58:08:0a:56:eb:e0:23:0a: 0f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:DA:8D:4B:67:9D:2F:BA:36:96:8A:D4:98:D7:A5:47:50:63:AE:98 X509v3 Authority Key Identifier: keyid:0E:F0:FE:8A:BB:36:ED:BB:EF:44:6A:6D:54:AD:B8:62:C4:AB:3B:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvD-irs27bvvRGptVK24YsSrO6E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/831ecb-ab1f-4427-8d60-f746652444da/1/DvD-irs27bvvRGptVK24YsSrO6E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/831ecb-ab1f-4427-8d60-f746652444da/1/DvD-irs27bvvRGptVK24YsSrO6E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:77:81:fc:05:0a:9b:83:64:16:87:0a:ae:78:f3:a2:4e:b2: e9:4d:7c:b5:4e:97:77:eb:39:b2:e3:c8:bd:51:21:38:65:9a: 31:6b:ec:30:5a:72:eb:df:61:15:aa:c0:45:d5:b3:ea:0a:75: a5:63:c1:a1:c2:0d:cc:c5:8d:26:0a:22:21:71:7e:f1:63:94: 0c:d6:a0:f6:d6:ba:69:48:99:57:09:af:3a:97:2a:76:59:98: 54:d9:dc:95:5b:24:aa:15:68:62:af:cb:05:5e:b2:bc:41:20: e3:37:9d:3a:30:60:6f:c7:d7:cf:c8:f1:71:b9:25:8e:07:f4: 8e:3d:d8:1a:4d:55:90:1c:2a:fd:bd:18:41:b5:a9:30:15:4d: b2:e9:33:d3:ff:b4:34:f6:7e:3f:2d:71:56:e9:cc:bd:4e:7f: a5:39:52:e5:73:98:d1:8c:a1:fc:39:58:06:b1:87:e9:c1:84: 09:e6:ec:61:2b:57:84:d6:e9:83:47:40:e9:03:4a:82:5e:f5: 8c:b8:c7:39:7b:95:80:f4:76:91:c5:6a:ee:1b:5d:81:e7:c3: a0:10:86:f3:de:36:58:7f:59:d1:8d:e7:85:ad:cc:d8:a2:25: 5a:3c:28:2e:50:8c:a0:84:02:88:70:6a:42:ea:f9:d0:19:d4: af:58:7c:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG+ncaS2KlvOP3ILJ/WWkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlZjBmZThhYmIzNmVkYmJlZjQ0NmE2ZDU0YWRiODYyYzRh YjNiYTEwHhcNMjUxMjA2MTAwMTI0WhcNMjUxMjA3MTAwMTI0WjAzMTEwLwYDVQQD Eyg4ZmRhOGQ0YjY3OWQyZmJhMzY5NjhhZDQ5OGQ3YTU0NzUwNjNhZTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5wdlgmocI69xh1Dh/9ZyixJ9hduz SQBIUYTzQVvLxdk4VSzcQvNwx/Azru2cCNZgsp6MA4xWbu3XIFkUkZvIvf/xROiq Gg1q+BNiyyDVwIWWlrj8PVvdrxXEezXEkIxagEmLKVpkPZwdJLXR/nvhu7ErqmEt niTdceq0Jd0GAPxy3yHmHzgvSGFigORM+X3CHSuhKKM5Bk6WPylAZIdA/i7HkF3u XbTow66+uzFNSs6xPMiM8RTQUOui+3eKRIkrsDg+xrnWlVdqz9fknbQPR+MbPBn9 2xupWoM2zyDJKYnAUhpO9u1H2eRqc25yF4aSgvjHL1U4WAgKVuvgIwoPFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI/ajUtnnS+6NpaK1JjXpUdQY66YMB8GA1UdIwQY MBaAFA7w/oq7Nu2770RqbVStuGLEqzuhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHZELWlyczI3YnZ2UkdwdFZLMjRZc1NyTzZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC84MzFlY2ItYWIxZi00NDI3LThkNjAt Zjc0NjY1MjQ0NGRhLzEvRHZELWlyczI3YnZ2UkdwdFZLMjRZc1NyTzZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC84MzFlY2ItYWIxZi00NDI3LThkNjAtZjc0NjY1MjQ0NGRh LzEvRHZELWlyczI3YnZ2UkdwdFZLMjRZc1NyTzZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACHeB/AUK m4NkFocKrnjzok6y6U18tU6Xd+s5suPIvVEhOGWaMWvsMFpy699hFarARdWz6gp1 pWPBocINzMWNJgoiIXF+8WOUDNag9ta6aUiZVwmvOpcqdlmYVNnclVskqhVoYq/L BV6yvEEg4zedOjBgb8fXz8jxcbkljgf0jj3YGk1VkBwq/b0YQbWpMBVNsukz0/+0 NPZ+Py1xVunMvU5/pTlS5XOY0Yyh/DlYBrGH6cGECebsYStXhNbpg0dA6QNKgl71 jLjHOXuVgPR2kcVq7htdgefDoBCG8942WH9Z0Y3nha3M2KIlWjwoLlCMoIQCiHBq Qur50BnUr1h8FA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:12:32 2025 by rpki-client