This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft File: D2vaHb-nfHTacoBe7lQY0_DMU50.mft (raw, json) Hash identifier: L3/dhRE+ki72HHsOmNQ7rR0Wsp/4tNvL2Chp76SDi3g= Subject key identifier: E5:58:98:D4:B6:47:99:D0:75:ED:8B:FE:48:7E:45:0B:8F:0F:03:53 Authority key identifier: 0F:6B:DA:1D:BF:A7:7C:74:DA:72:80:5E:EE:54:18:D3:F0:CC:53:9D Certificate issuer: /CN=0f6bda1dbfa77c74da72805eee5418d3f0cc539d Certificate serial: 019AF2772C8D96280F99AF48536F05E6D393 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft Manifest number: 1485 Signing time: Sat 06 Dec 2025 07:01:27 +0000 Manifest this update: Sat 06 Dec 2025 07:01:27 +0000 Manifest next update: Sun 07 Dec 2025 07:01:27 +0000 Files and hashes: 1: D2vaHb-nfHTacoBe7lQY0_DMU50.crl (hash: g076SueXbIu7icj+Vh0dB4RW6dCdSo57XXYC7qytVtk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:2c:8d:96:28:0f:99:af:48:53:6f:05:e6:d3:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f6bda1dbfa77c74da72805eee5418d3f0cc539d Validity Not Before: Dec 6 07:01:27 2025 GMT Not After : Dec 7 07:01:27 2025 GMT Subject: CN=e55898d4b64799d075ed8bfe487e450b8f0f0353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:91:3e:3c:dd:a9:5a:e3:0c:f2:ad:c0:79:bf: 3d:4e:93:0e:13:24:a4:5f:14:0c:ef:b4:13:03:03: 0f:1d:25:d0:ed:ba:2b:7a:61:9b:97:18:67:e7:9a: ca:1b:f1:58:54:bc:79:cf:15:fb:2c:25:a4:01:df: dd:a3:69:ef:1e:0f:33:92:9f:f5:18:37:3d:1e:b6: 55:02:ab:ce:d7:e3:86:78:0e:8a:f6:b7:ec:f8:66: 06:8a:20:da:88:9b:9f:f8:1a:2c:0b:c5:0c:4f:69: 56:39:a2:94:47:ea:ba:65:a8:f2:fc:87:ce:5c:a8: da:36:30:14:73:da:cb:d5:d1:e4:91:d9:2b:0b:02: 50:d5:a1:07:7c:b0:ce:a1:9d:e3:cd:9f:a0:b8:6f: e1:40:d9:1b:2e:03:b1:09:82:bc:36:f6:58:e5:09: 06:8f:a9:49:61:87:3f:0e:a4:9a:25:a6:84:a4:8f: 90:4d:20:d5:69:e8:61:59:d2:cd:69:ae:27:09:90: cd:46:6b:29:e4:09:3c:91:35:44:8f:95:99:10:e0: d4:5e:5f:c0:4e:0b:49:2a:48:fc:25:16:49:a1:fa: db:7a:76:cf:66:28:8d:35:4b:02:66:49:d7:4a:ed: f5:b4:5b:fb:b7:d6:b2:ea:bf:16:e3:44:50:0f:f9: e6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:58:98:D4:B6:47:99:D0:75:ED:8B:FE:48:7E:45:0B:8F:0F:03:53 X509v3 Authority Key Identifier: keyid:0F:6B:DA:1D:BF:A7:7C:74:DA:72:80:5E:EE:54:18:D3:F0:CC:53:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:2f:3c:b4:68:12:57:d6:36:51:de:c1:46:c4:3f:06:fd:c0: c9:e0:a7:32:f3:34:9a:09:73:2e:22:7a:b8:51:c7:1a:9f:31: bd:67:14:bb:d8:b6:a9:44:98:c9:fb:cb:7d:9d:df:00:d5:37: 4b:a6:01:f6:b6:68:53:b9:e8:bb:bf:19:2c:54:5c:bc:bb:7f: 93:d2:a7:dc:b3:ed:2f:e8:23:a5:23:58:b0:ee:47:01:b0:2c: 44:ca:d1:ee:30:e9:bf:61:84:1d:97:ee:dc:9b:8b:86:7a:cb: ec:53:ee:cf:28:12:cd:01:c6:d4:fa:4f:97:f2:e8:f7:15:a8: ff:d0:8d:05:b7:91:c5:3f:5b:9f:b9:5c:50:7a:19:16:55:a7: 3c:5d:4f:a7:8f:f8:93:1e:00:04:0c:a0:ea:86:16:6a:37:cf: 99:89:5b:96:e3:d9:5a:d6:a5:32:2d:ab:84:1a:73:a2:d8:ba: ba:99:94:cf:54:fb:c2:48:71:4c:f3:1e:98:29:d1:4b:87:72: de:b7:4a:06:ce:d8:e5:c2:ca:78:c3:50:88:2e:31:9b:d3:ac: 59:06:7c:c4:fa:aa:36:8e:32:d1:b1:45:7c:8b:8a:8a:19:36: d0:9e:93:88:7c:d0:8d:43:06:6d:87:7f:06:5f:d0:89:16:44: a0:60:04:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydyyNligPma9IU28F5tOTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNmJkYTFkYmZhNzdjNzRkYTcyODA1ZWVlNTQxOGQzZjBj YzUzOWQwHhcNMjUxMjA2MDcwMTI3WhcNMjUxMjA3MDcwMTI3WjAzMTEwLwYDVQQD EyhlNTU4OThkNGI2NDc5OWQwNzVlZDhiZmU0ODdlNDUwYjhmMGYwMzUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJE+PN2pWuMM8q3Aeb89TpMOEySk XxQM77QTAwMPHSXQ7boremGblxhn55rKG/FYVLx5zxX7LCWkAd/do2nvHg8zkp/1 GDc9HrZVAqvO1+OGeA6K9rfs+GYGiiDaiJuf+BosC8UMT2lWOaKUR+q6Zajy/IfO XKjaNjAUc9rL1dHkkdkrCwJQ1aEHfLDOoZ3jzZ+guG/hQNkbLgOxCYK8NvZY5QkG j6lJYYc/DqSaJaaEpI+QTSDVaehhWdLNaa4nCZDNRmsp5Ak8kTVEj5WZEODUXl/A TgtJKkj8JRZJofrbenbPZiiNNUsCZknXSu31tFv7t9ay6r8W40RQD/nmNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOVYmNS2R5nQde2L/kh+RQuPDwNTMB8GA1UdIwQY MBaAFA9r2h2/p3x02nKAXu5UGNPwzFOdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDJ2YUhiLW5mSFRhY29CZTdsUVkwX0RNVTUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9mZmFjMjQtN2FjNS00NWE2LWE5NDYt ZTA4MTJkZjEyMjFmLzEvRDJ2YUhiLW5mSFRhY29CZTdsUVkwX0RNVTUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9mZmFjMjQtN2FjNS00NWE2LWE5NDYtZTA4MTJkZjEyMjFm LzEvRDJ2YUhiLW5mSFRhY29CZTdsUVkwX0RNVTUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMy88tGgS V9Y2Ud7BRsQ/Bv3AyeCnMvM0mglzLiJ6uFHHGp8xvWcUu9i2qUSYyfvLfZ3fANU3 S6YB9rZoU7nou78ZLFRcvLt/k9Kn3LPtL+gjpSNYsO5HAbAsRMrR7jDpv2GEHZfu 3JuLhnrL7FPuzygSzQHG1PpPl/Lo9xWo/9CNBbeRxT9bn7lcUHoZFlWnPF1Pp4/4 kx4ABAyg6oYWajfPmYlbluPZWtalMi2rhBpzoti6upmUz1T7wkhxTPMemCnRS4dy 3rdKBs7Y5cLKeMNQiC4xm9OsWQZ8xPqqNo4y0bFFfIuKihk20J6TiHzQjUMGbYd/ Bl/QiRZEoGAEFw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:14:49 2025 by rpki-client