This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2891f6-7861-4037-8008-52cf0195838b/1/dBkW6TW7TmhYsdIjYVrONp7SaB4.mft File: dBkW6TW7TmhYsdIjYVrONp7SaB4.mft (raw, json) Hash identifier: YfZ5FcDnCJNSLxzWVQ1Kp5+8gepyCKMj4u2uQOT/8WY= Subject key identifier: 19:5F:04:45:51:57:42:0B:E7:FF:2C:63:54:AE:D6:FD:D0:1C:35:22 Authority key identifier: 74:19:16:E9:35:BB:4E:68:58:B1:D2:23:61:5A:CE:36:9E:D2:68:1E Certificate issuer: /CN=741916e935bb4e6858b1d223615ace369ed2681e Certificate serial: 019AF3F7C5CECC86A1EA89805430B6E2B25B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBkW6TW7TmhYsdIjYVrONp7SaB4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2891f6-7861-4037-8008-52cf0195838b/1/dBkW6TW7TmhYsdIjYVrONp7SaB4.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 14:01:32 +0000 Manifest this update: Sat 06 Dec 2025 14:01:32 +0000 Manifest next update: Sun 07 Dec 2025 14:01:32 +0000 Files and hashes: 1: dBkW6TW7TmhYsdIjYVrONp7SaB4.crl (hash: j/3sihclktoSkxtb3oeP16RBILKK9PX+HLjeqa93dTs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/2891f6-7861-4037-8008-52cf0195838b/1/dBkW6TW7TmhYsdIjYVrONp7SaB4.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/2891f6-7861-4037-8008-52cf0195838b/1/dBkW6TW7TmhYsdIjYVrONp7SaB4.mft rsync://rpki.ripe.net/repository/DEFAULT/dBkW6TW7TmhYsdIjYVrONp7SaB4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:c5:ce:cc:86:a1:ea:89:80:54:30:b6:e2:b2:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=741916e935bb4e6858b1d223615ace369ed2681e Validity Not Before: Dec 6 14:01:32 2025 GMT Not After : Dec 7 14:01:32 2025 GMT Subject: CN=195f04455157420be7ff2c6354aed6fdd01c3522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:63:db:77:9c:0c:be:11:78:bf:9b:19:78:b9: 23:43:7c:5b:f7:91:52:75:dd:57:ba:36:08:26:0c: 4d:58:59:2c:98:c0:38:1f:21:d7:f2:f2:df:d8:64: fd:ac:4e:f9:7f:17:10:fc:7e:08:49:49:2c:17:2b: ef:a1:66:e7:bf:97:18:01:2e:91:e9:eb:ef:fe:ad: ac:c1:93:a6:73:a4:86:b9:75:72:20:a2:07:d4:66: 8a:97:c8:44:e2:58:38:9d:e3:01:bf:ee:c9:51:a9: 6b:6d:78:70:15:f5:48:88:ac:f2:a3:48:2b:19:2e: d5:cc:a1:1e:f2:5b:26:5b:c8:a9:38:b5:87:33:87: dc:b3:4b:61:8b:f5:a5:9d:03:88:79:8d:7e:ce:6c: 1d:1d:06:9f:39:86:93:16:e0:c9:34:f5:57:02:3a: cc:73:a8:71:f0:24:7e:86:2b:9b:ad:88:f9:a3:dd: 9d:a5:12:00:5c:66:0e:09:71:87:ed:85:2c:12:68: 36:11:7f:87:59:50:b8:55:81:97:9e:40:35:ac:33: b7:9c:4f:6f:fb:d9:33:62:00:e7:b3:1b:6e:04:52: 6f:97:14:c2:19:5e:86:ed:8b:21:45:a3:e6:f6:0e: 5f:5c:94:8c:69:9d:ba:4d:36:11:5a:19:b6:88:32: 69:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:5F:04:45:51:57:42:0B:E7:FF:2C:63:54:AE:D6:FD:D0:1C:35:22 X509v3 Authority Key Identifier: keyid:74:19:16:E9:35:BB:4E:68:58:B1:D2:23:61:5A:CE:36:9E:D2:68:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBkW6TW7TmhYsdIjYVrONp7SaB4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2891f6-7861-4037-8008-52cf0195838b/1/dBkW6TW7TmhYsdIjYVrONp7SaB4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2891f6-7861-4037-8008-52cf0195838b/1/dBkW6TW7TmhYsdIjYVrONp7SaB4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:e9:1a:48:41:37:33:9f:59:28:b2:ef:53:42:1e:6e:0d:16: 3e:f4:04:d1:16:25:e9:87:81:22:61:a4:c8:3d:70:cd:5f:b0: 37:72:11:e3:43:4c:80:4a:66:17:6d:d5:3e:9e:33:bd:5b:19: 4d:2b:08:ad:0b:4f:4b:36:cb:4c:45:2a:40:2d:53:7d:43:e4: 4d:98:b2:69:40:fb:81:2a:57:fb:36:f3:82:e2:b5:05:61:c9: f6:c1:5d:f9:87:ae:bc:14:58:64:4b:db:69:49:d7:4c:81:64: d9:63:73:3d:23:b4:75:a1:0a:57:be:50:a3:97:e8:62:04:4d: 6f:f9:9b:da:cc:04:63:6d:41:e9:be:02:46:cf:90:07:68:3b: 9f:14:6a:60:4a:1c:30:b7:c3:e7:b2:ef:33:35:71:ea:cf:10: a2:84:76:40:de:36:02:46:67:2f:d4:cf:c1:92:d7:73:c9:fe: 36:7a:50:83:36:7f:da:3a:4c:8e:9e:fd:0e:69:dc:96:a1:1e: fe:ae:71:53:95:14:0f:71:08:e4:87:3e:51:74:c0:47:1d:6b: 5d:39:79:47:c7:27:82:db:02:7e:fd:af:3e:5d:1c:16:f3:f4: 45:a7:53:f8:c4:e3:8a:f7:f0:db:0a:22:59:05:ae:6b:bd:ea: 82:e6:74:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz98XOzIah6omAVDC24rJbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0MTkxNmU5MzViYjRlNjg1OGIxZDIyMzYxNWFjZTM2OWVk MjY4MWUwHhcNMjUxMjA2MTQwMTMyWhcNMjUxMjA3MTQwMTMyWjAzMTEwLwYDVQQD EygxOTVmMDQ0NTUxNTc0MjBiZTdmZjJjNjM1NGFlZDZmZGQwMWMzNTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2Pbd5wMvhF4v5sZeLkjQ3xb95FS dd1XujYIJgxNWFksmMA4HyHX8vLf2GT9rE75fxcQ/H4ISUksFyvvoWbnv5cYAS6R 6evv/q2swZOmc6SGuXVyIKIH1GaKl8hE4lg4neMBv+7JUalrbXhwFfVIiKzyo0gr GS7VzKEe8lsmW8ipOLWHM4fcs0thi/WlnQOIeY1+zmwdHQafOYaTFuDJNPVXAjrM c6hx8CR+hiubrYj5o92dpRIAXGYOCXGH7YUsEmg2EX+HWVC4VYGXnkA1rDO3nE9v +9kzYgDnsxtuBFJvlxTCGV6G7YshRaPm9g5fXJSMaZ26TTYRWhm2iDJpVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBlfBEVRV0IL5/8sY1Su1v3QHDUiMB8GA1UdIwQY MBaAFHQZFuk1u05oWLHSI2Fazjae0mgeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEJrVzZUVzdUbWhZc2RJallWck9OcDdTYUI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8yODkxZjYtNzg2MS00MDM3LTgwMDgt NTJjZjAxOTU4MzhiLzEvZEJrVzZUVzdUbWhZc2RJallWck9OcDdTYUI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8yODkxZjYtNzg2MS00MDM3LTgwMDgtNTJjZjAxOTU4Mzhi LzEvZEJrVzZUVzdUbWhZc2RJallWck9OcDdTYUI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUukaSEE3 M59ZKLLvU0Iebg0WPvQE0RYl6YeBImGkyD1wzV+wN3IR40NMgEpmF23VPp4zvVsZ TSsIrQtPSzbLTEUqQC1TfUPkTZiyaUD7gSpX+zbzguK1BWHJ9sFd+YeuvBRYZEvb aUnXTIFk2WNzPSO0daEKV75Qo5foYgRNb/mb2swEY21B6b4CRs+QB2g7nxRqYEoc MLfD57LvMzVx6s8QooR2QN42AkZnL9TPwZLXc8n+NnpQgzZ/2jpMjp79DmnclqEe /q5xU5UUD3EI5Ic+UXTARx1rXTl5R8cngtsCfv2vPl0cFvP0RadT+MTjivfw2woi WQWua73qguZ0Lw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:31:33 2025 by rpki-client