This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft File: DR4_1QQLufuRJuURnl_3wHTaW7w.mft (raw, json) Hash identifier: /Xdkr5mxl6oGHIxpVFSoULKZB2AxqT7CSzKt28T2+Tk= Subject key identifier: 8C:2C:50:D9:4B:DE:82:7D:F3:8F:3A:71:08:5C:31:07:BD:72:2B:27 Authority key identifier: 0D:1E:3F:D5:04:0B:B9:FB:91:26:E5:11:9E:5F:F7:C0:74:DA:5B:BC Certificate issuer: /CN=0d1e3fd5040bb9fb9126e5119e5ff7c074da5bbc Certificate serial: 019AF2096CCBDEA2AEF40A9C2CE4326728CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft Manifest number: 0C65 Signing time: Sat 06 Dec 2025 05:01:35 +0000 Manifest this update: Sat 06 Dec 2025 05:01:35 +0000 Manifest next update: Sun 07 Dec 2025 05:01:35 +0000 Files and hashes: 1: DR4_1QQLufuRJuURnl_3wHTaW7w.crl (hash: c5F4qfy1j7kwyMdJ5g43FKDt5SlGoM2T8qcYfneHLAI=) 2: tw53VyqONmO9P7i2y6gpvj2fu_U.roa (hash: J066HWT9IQx8ovZiJnDjPDFutWNRHoqwHzDICk2OhO0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:6c:cb:de:a2:ae:f4:0a:9c:2c:e4:32:67:28:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d1e3fd5040bb9fb9126e5119e5ff7c074da5bbc Validity Not Before: Dec 6 05:01:35 2025 GMT Not After : Dec 7 05:01:35 2025 GMT Subject: CN=8c2c50d94bde827df38f3a71085c3107bd722b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:42:8d:56:de:fe:61:00:47:63:a8:1f:b6:ea: 38:d0:f5:6a:92:51:66:16:03:31:48:d9:d2:bd:05: fc:41:08:4f:ff:70:c4:b5:00:a6:3c:15:81:fd:69: 6b:9d:0d:a3:bc:9a:52:84:3c:49:dc:e1:4a:7a:91: 2f:24:a1:46:21:66:48:dc:21:59:19:c7:5c:95:b0: e0:6c:9b:6f:de:0f:b4:d6:46:27:cf:24:30:19:e2: c2:c5:84:65:ab:dc:77:0e:67:31:af:3e:40:5b:ed: 80:5c:a8:da:35:53:1b:d8:41:68:b8:96:06:4f:06: 18:b9:6c:90:e2:51:83:50:6d:a5:07:48:9e:4f:fa: 76:4c:39:16:c5:54:46:fc:3a:7e:3c:0b:02:de:ef: 77:2a:c5:80:0e:7f:bb:bf:3f:30:d5:0b:8a:a5:61: fc:8e:d9:e5:20:42:9c:dc:ea:14:ed:b5:de:e5:73: 9e:92:7f:00:03:4d:90:71:c8:33:41:7c:40:5c:15: 4c:97:9b:11:da:0b:13:61:2b:cd:78:4f:c4:89:3a: 6d:6f:89:09:17:a8:72:fb:32:8c:ce:f2:87:26:15: a8:63:18:d3:3a:9c:7f:53:34:64:ca:cb:ec:8d:17: f3:79:72:f4:2e:94:87:92:ae:41:9f:42:50:83:5d: 96:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:2C:50:D9:4B:DE:82:7D:F3:8F:3A:71:08:5C:31:07:BD:72:2B:27 X509v3 Authority Key Identifier: keyid:0D:1E:3F:D5:04:0B:B9:FB:91:26:E5:11:9E:5F:F7:C0:74:DA:5B:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DR4_1QQLufuRJuURnl_3wHTaW7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9445a9-3f7f-4f4a-80b8-5b910157271b/1/DR4_1QQLufuRJuURnl_3wHTaW7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:6d:ad:cc:70:22:08:36:b2:20:26:54:b9:9f:16:58:38:eb: 91:97:b4:3c:cd:a0:e3:42:49:99:42:05:fc:18:60:fd:23:f9: b3:61:90:64:7f:9e:ac:ea:20:57:07:c8:1b:47:83:64:f9:f4: ad:20:49:2e:5d:ef:03:39:f5:d2:1c:91:d8:9f:ac:7b:23:8a: 35:06:16:52:25:ba:aa:64:52:fe:b1:a0:fa:08:b5:14:7d:f4: e9:c7:7e:00:3d:68:94:df:82:6a:fe:31:8c:fe:af:60:90:65: 20:71:bb:77:78:d3:bd:90:81:34:b1:c0:c0:08:e9:c3:94:8d: 7c:ab:48:0b:95:9f:ee:89:3b:7d:a1:45:6e:01:9e:96:d4:ca: dd:2c:00:02:be:7a:0d:cc:82:76:10:80:d3:f5:7c:a3:c9:15: 5a:f2:8e:3a:79:68:c5:04:34:13:28:ee:c2:f4:b4:1a:81:2f: 5f:be:b6:14:51:9a:81:46:37:bc:1a:55:40:e3:c7:12:65:a5: a7:eb:0f:6d:52:ab:29:ed:0b:3f:b7:ff:eb:fe:55:34:3e:c5: ab:7c:2e:fc:9b:df:f5:3e:45:be:40:b3:57:4e:a2:63:2b:da: 4f:fa:18:97:00:26:c3:7e:b0:da:ac:63:7b:33:8d:cc:30:3a: 5e:e4:94:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCWzL3qKu9AqcLOQyZyjLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMWUzZmQ1MDQwYmI5ZmI5MTI2ZTUxMTllNWZmN2MwNzRk YTViYmMwHhcNMjUxMjA2MDUwMTM1WhcNMjUxMjA3MDUwMTM1WjAzMTEwLwYDVQQD Eyg4YzJjNTBkOTRiZGU4MjdkZjM4ZjNhNzEwODVjMzEwN2JkNzIyYjI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEKNVt7+YQBHY6gftuo40PVqklFm FgMxSNnSvQX8QQhP/3DEtQCmPBWB/WlrnQ2jvJpShDxJ3OFKepEvJKFGIWZI3CFZ GcdclbDgbJtv3g+01kYnzyQwGeLCxYRlq9x3Dmcxrz5AW+2AXKjaNVMb2EFouJYG TwYYuWyQ4lGDUG2lB0ieT/p2TDkWxVRG/Dp+PAsC3u93KsWADn+7vz8w1QuKpWH8 jtnlIEKc3OoU7bXe5XOekn8AA02QccgzQXxAXBVMl5sR2gsTYSvNeE/EiTptb4kJ F6hy+zKMzvKHJhWoYxjTOpx/UzRkysvsjRfzeXL0LpSHkq5Bn0JQg12WFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIwsUNlL3oJ98486cQhcMQe9cisnMB8GA1UdIwQY MBaAFA0eP9UEC7n7kSblEZ5f98B02lu8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFI0XzFRUUx1ZnVSSnVVUm5sXzN3SFRhVzd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NDQ1YTktM2Y3Zi00ZjRhLTgwYjgt NWI5MTAxNTcyNzFiLzEvRFI0XzFRUUx1ZnVSSnVVUm5sXzN3SFRhVzd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi85NDQ1YTktM2Y3Zi00ZjRhLTgwYjgtNWI5MTAxNTcyNzFi LzEvRFI0XzFRUUx1ZnVSSnVVUm5sXzN3SFRhVzd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABG2tzHAi CDayICZUuZ8WWDjrkZe0PM2g40JJmUIF/Bhg/SP5s2GQZH+erOogVwfIG0eDZPn0 rSBJLl3vAzn10hyR2J+seyOKNQYWUiW6qmRS/rGg+gi1FH306cd+AD1olN+Cav4x jP6vYJBlIHG7d3jTvZCBNLHAwAjpw5SNfKtIC5Wf7ok7faFFbgGeltTK3SwAAr56 DcyCdhCA0/V8o8kVWvKOOnloxQQ0EyjuwvS0GoEvX762FFGagUY3vBpVQOPHEmWl p+sPbVKrKe0LP7f/6/5VND7Fq3wu/Jvf9T5FvkCzV06iYyvaT/oYlwAmw36w2qxj ezONzDA6XuSUWA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:21:00 2025 by rpki-client