This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.mft File: dEMndQQU00na3gIjNJfPR2Vc0-Q.mft (raw, json) Hash identifier: oUkCfj1XCJ7RPdNXdmevFusHGx7b+mwGph0z00lXNg0= Subject key identifier: 49:7C:A9:78:7D:1A:1A:E5:7B:11:F2:25:78:5E:30:65:91:A5:67:D5 Authority key identifier: 74:43:27:75:04:14:D3:49:DA:DE:02:23:34:97:CF:47:65:5C:D3:E4 Certificate issuer: /CN=744327750414d349dade02233497cf47655cd3e4 Certificate serial: 019AF19B0E5DED6452924FBF6167471F3FEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEMndQQU00na3gIjNJfPR2Vc0-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.mft Manifest number: 1133 Signing time: Sat 06 Dec 2025 03:01:02 +0000 Manifest this update: Sat 06 Dec 2025 03:01:02 +0000 Manifest next update: Sun 07 Dec 2025 03:01:02 +0000 Files and hashes: 1: dEMndQQU00na3gIjNJfPR2Vc0-Q.crl (hash: fCIhfVKzHwdYQS5/oBqikBLI7xSwF0BN+K/39a5OGWc=) 2: pw-kmcsXStqEGowMkHLAk5Mf6U4.roa (hash: rRJ79fHcm5M4bm1f6K+EVmHKjAp+H/ZjHlqCTGktjWw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/dEMndQQU00na3gIjNJfPR2Vc0-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:0e:5d:ed:64:52:92:4f:bf:61:67:47:1f:3f:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=744327750414d349dade02233497cf47655cd3e4 Validity Not Before: Dec 6 03:01:02 2025 GMT Not After : Dec 7 03:01:02 2025 GMT Subject: CN=497ca9787d1a1ae57b11f225785e306591a567d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:50:1a:8f:99:88:dc:d4:5e:57:54:58:e4:21: 7b:2a:4f:a5:2a:09:cb:ab:a2:7d:d7:9a:17:b8:9b: ce:9a:9d:0f:0e:df:da:b0:3c:0b:ff:0f:44:27:67: 9a:90:55:4e:79:f7:ac:83:dd:22:f3:53:21:2c:c6: 38:d7:a2:8d:c3:42:35:f0:8b:70:5b:f1:54:d6:12: 69:4d:28:bd:34:24:5c:7c:ca:59:15:29:7d:82:c7: 71:cf:d5:5a:b6:51:9b:da:e1:46:93:88:76:50:68: d2:8a:1b:53:d9:38:a6:8a:1a:72:72:9f:9b:7c:72: f4:0b:90:b8:c6:ba:62:8b:06:ba:18:f9:d2:ed:77: fb:11:9e:98:29:9d:c5:85:6b:f6:c2:49:3d:17:01: 95:79:03:42:c5:66:48:94:5d:c1:45:16:d8:ef:b5: 1d:2e:6e:26:6e:61:ba:97:e6:18:a6:58:10:26:a6: 99:50:ac:53:2d:86:58:a6:1c:cd:91:7b:03:7d:00: 99:6b:d6:5d:83:8b:ad:a5:f8:ea:bb:91:96:d0:32: c9:91:e5:7b:76:00:67:66:09:7c:86:bf:12:35:1c: 30:46:18:c9:73:79:86:05:90:da:1e:8f:91:61:b2: 51:7e:a7:1a:08:d3:1a:01:6a:6b:14:a8:64:83:15: 55:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:7C:A9:78:7D:1A:1A:E5:7B:11:F2:25:78:5E:30:65:91:A5:67:D5 X509v3 Authority Key Identifier: keyid:74:43:27:75:04:14:D3:49:DA:DE:02:23:34:97:CF:47:65:5C:D3:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEMndQQU00na3gIjNJfPR2Vc0-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:e3:2c:1b:8e:4f:fc:ec:78:d4:66:73:b8:3a:3c:42:01:f9: c5:cc:de:02:c4:cf:fa:75:fd:6b:81:f7:61:2d:f2:22:3e:ae: 16:30:00:f3:fc:20:b4:cc:c0:db:73:42:a9:58:93:73:4a:51: b4:f7:2c:a6:98:52:da:e7:78:03:c7:14:8a:2e:64:f0:a5:e8: af:4c:d4:21:cf:5b:e1:79:a9:97:81:7c:09:8d:ff:33:66:e7: f4:9e:ac:b9:12:80:a2:3d:f1:a1:53:cc:9e:03:a7:79:6d:60: b7:fe:38:a7:77:9e:c8:05:28:21:d2:33:89:88:d4:d3:db:96: 47:8f:1f:00:a5:0a:14:83:11:0e:56:b8:9d:03:5d:dd:a4:07: 49:ae:be:0c:6d:85:15:fb:fd:ed:d9:51:1e:5f:04:f0:78:ea: 17:d4:cc:ef:d7:4c:a0:52:7a:7d:08:8d:e5:67:96:34:84:56: 26:0a:0e:20:35:96:49:5a:16:61:f3:62:c1:71:f2:de:87:53: e8:2c:8e:73:ec:8b:79:3d:34:33:30:b3:64:86:91:af:2f:80: 58:90:cd:75:3b:8d:25:d8:12:c7:80:10:8d:af:7e:da:f5:97: de:c5:4b:5a:af:73:72:22:5b:30:1d:41:2c:6c:13:86:35:16: 3f:7e:ce:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmw5d7WRSkk+/YWdHHz/qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NDMyNzc1MDQxNGQzNDlkYWRlMDIyMzM0OTdjZjQ3NjU1 Y2QzZTQwHhcNMjUxMjA2MDMwMTAyWhcNMjUxMjA3MDMwMTAyWjAzMTEwLwYDVQQD Eyg0OTdjYTk3ODdkMWExYWU1N2IxMWYyMjU3ODVlMzA2NTkxYTU2N2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVAaj5mI3NReV1RY5CF7Kk+lKgnL q6J915oXuJvOmp0PDt/asDwL/w9EJ2eakFVOefesg90i81MhLMY416KNw0I18Itw W/FU1hJpTSi9NCRcfMpZFSl9gsdxz9VatlGb2uFGk4h2UGjSihtT2Timihpycp+b fHL0C5C4xrpiiwa6GPnS7Xf7EZ6YKZ3FhWv2wkk9FwGVeQNCxWZIlF3BRRbY77Ud Lm4mbmG6l+YYplgQJqaZUKxTLYZYphzNkXsDfQCZa9Zdg4utpfjqu5GW0DLJkeV7 dgBnZgl8hr8SNRwwRhjJc3mGBZDaHo+RYbJRfqcaCNMaAWprFKhkgxVV0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEl8qXh9GhrlexHyJXheMGWRpWfVMB8GA1UdIwQY MBaAFHRDJ3UEFNNJ2t4CIzSXz0dlXNPkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEVNbmRRUVUwMG5hM2dJak5KZlBSMlZjMC1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi82MTA4NzItYjViNS00NDJmLWI2MzAt ZTVkMWFmNTlkZWE2LzEvZEVNbmRRUVUwMG5hM2dJak5KZlBSMlZjMC1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi82MTA4NzItYjViNS00NDJmLWI2MzAtZTVkMWFmNTlkZWE2 LzEvZEVNbmRRUVUwMG5hM2dJak5KZlBSMlZjMC1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAseMsG45P /Ox41GZzuDo8QgH5xczeAsTP+nX9a4H3YS3yIj6uFjAA8/wgtMzA23NCqViTc0pR tPcspphS2ud4A8cUii5k8KXor0zUIc9b4Xmpl4F8CY3/M2bn9J6suRKAoj3xoVPM ngOneW1gt/44p3eeyAUoIdIziYjU09uWR48fAKUKFIMRDla4nQNd3aQHSa6+DG2F Ffv97dlRHl8E8HjqF9TM79dMoFJ6fQiN5WeWNIRWJgoOIDWWSVoWYfNiwXHy3odT 6CyOc+yLeT00MzCzZIaRry+AWJDNdTuNJdgSx4AQja9+2vWX3sVLWq9zciJbMB1B LGwThjUWP37OTQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:21:50 2025 by rpki-client