This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.mft File: dpcDbZO0rGcPD_xakM6ral-LwpU.mft (raw, json) Hash identifier: ebf0hhrnnCe04CPkOFG4hIKWiQRxVCOaHq9kFLPd0tg= Subject key identifier: 37:0E:AE:71:6D:EE:4C:EA:A9:9A:B7:D1:4D:4F:9C:FB:07:AF:85:4D Authority key identifier: 76:97:03:6D:93:B4:AC:67:0F:0F:FC:5A:90:CE:AB:6A:5F:8B:C2:95 Certificate issuer: /CN=7697036d93b4ac670f0ffc5a90ceab6a5f8bc295 Certificate serial: 019B32D7F2152E72F024931A3572C81CC993 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dpcDbZO0rGcPD_xakM6ral-LwpU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.mft Manifest number: 0FA1 Signing time: Thu 18 Dec 2025 19:02:51 +0000 Manifest this update: Thu 18 Dec 2025 19:02:51 +0000 Manifest next update: Fri 19 Dec 2025 19:02:51 +0000 Files and hashes: 1: dpcDbZO0rGcPD_xakM6ral-LwpU.crl (hash: xImqq7+kxoHgpXydp9DsnWbAfPfkgIjr60gpuKWgpR0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.mft rsync://rpki.ripe.net/repository/DEFAULT/dpcDbZO0rGcPD_xakM6ral-LwpU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:02:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:f2:15:2e:72:f0:24:93:1a:35:72:c8:1c:c9:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7697036d93b4ac670f0ffc5a90ceab6a5f8bc295 Validity Not Before: Dec 18 19:02:51 2025 GMT Not After : Dec 19 19:02:51 2025 GMT Subject: CN=370eae716dee4ceaa99ab7d14d4f9cfb07af854d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:be:88:3a:7a:d2:67:ec:d1:3c:a0:d3:6c:ca: 5b:b6:d7:b6:2c:14:7b:4f:f9:d2:bf:b4:92:ac:63: 17:07:3d:0a:23:66:c5:c3:a7:08:5b:61:ea:4d:d2: a1:a5:45:f8:12:38:57:0d:a8:0a:2e:59:0b:c0:90: 48:6a:20:2c:52:66:0f:6c:94:69:78:6a:65:f7:18: 8a:45:1e:9b:ec:2d:55:24:e8:00:5f:27:34:87:a2: d4:9c:99:50:5c:04:62:8b:2b:89:4d:d2:e3:4a:07: a7:0c:13:9e:44:a9:ec:cf:42:a7:5f:07:88:84:b7: f3:1a:8f:d4:fe:f5:b8:2b:52:05:28:fa:99:eb:52: 62:6c:4a:c9:8d:6b:df:6d:75:37:a5:c6:90:d7:07: 38:d3:0b:e6:18:57:6e:f0:58:a1:2b:aa:1f:05:c3: b6:21:6a:9d:b5:36:6b:62:6d:c7:f9:85:e6:b3:6a: 83:d3:29:de:d8:e9:02:fd:57:4b:6a:d9:20:a0:82: 74:ea:38:f0:e1:cf:11:e3:bb:57:45:d3:32:48:c4: ea:3c:13:1f:e2:e9:ed:85:9a:37:f2:5b:e5:da:7d: 67:0c:c1:4e:37:92:d3:03:4f:8a:6b:75:1d:9b:e7: 0b:97:c5:77:e5:e4:1d:19:3d:7a:a7:c8:83:b7:df: 04:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:0E:AE:71:6D:EE:4C:EA:A9:9A:B7:D1:4D:4F:9C:FB:07:AF:85:4D X509v3 Authority Key Identifier: keyid:76:97:03:6D:93:B4:AC:67:0F:0F:FC:5A:90:CE:AB:6A:5F:8B:C2:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpcDbZO0rGcPD_xakM6ral-LwpU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:33:81:31:a7:ce:21:7a:98:5b:58:57:9c:a6:d1:74:2e:20: e4:35:1a:2f:d2:bc:de:30:4d:a3:4f:3d:47:13:e3:f9:96:87: 26:a3:16:2f:66:e1:57:5f:05:0c:e8:a7:e4:6a:77:61:23:1a: 00:bb:ad:60:0f:52:a6:fc:3e:8d:ca:63:c2:1d:24:77:0f:89: b8:5f:86:83:f1:b4:41:c8:9f:cf:4c:c5:77:b5:f0:a6:b8:99: 98:44:62:fa:b6:a4:63:30:1e:fd:fb:1c:fc:75:01:42:ec:36: 0e:43:74:2d:6f:63:e9:f2:c9:5a:75:dd:d2:76:be:f9:7a:02: be:f3:b7:b1:7e:2c:37:46:73:55:3e:70:42:f8:c9:2e:6b:73: 27:c4:b6:7e:a1:61:ae:95:64:7c:54:87:8f:29:ee:cf:31:88: 88:e4:45:b2:df:cd:d7:88:53:a9:2f:6e:d4:45:2a:1a:e0:eb: ae:0b:96:e1:c9:06:e3:31:8e:17:45:26:e1:4a:3c:77:ea:da: 0e:8b:82:91:1e:c2:33:be:fa:c9:91:92:48:53:fe:b0:7b:6f: d3:9e:f9:5e:79:e9:a3:91:28:40:a9:82:95:7c:a4:02:85:6f: 6a:79:3a:d1:76:ca:9c:ad:6f:83:c0:b9:34:06:38:f5:f8:da: a6:fc:cb:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1/IVLnLwJJMaNXLIHMmTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2OTcwMzZkOTNiNGFjNjcwZjBmZmM1YTkwY2VhYjZhNWY4 YmMyOTUwHhcNMjUxMjE4MTkwMjUxWhcNMjUxMjE5MTkwMjUxWjAzMTEwLwYDVQQD EygzNzBlYWU3MTZkZWU0Y2VhYTk5YWI3ZDE0ZDRmOWNmYjA3YWY4NTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5L6IOnrSZ+zRPKDTbMpbtte2LBR7 T/nSv7SSrGMXBz0KI2bFw6cIW2HqTdKhpUX4EjhXDagKLlkLwJBIaiAsUmYPbJRp eGpl9xiKRR6b7C1VJOgAXyc0h6LUnJlQXARiiyuJTdLjSgenDBOeRKnsz0KnXweI hLfzGo/U/vW4K1IFKPqZ61JibErJjWvfbXU3pcaQ1wc40wvmGFdu8FihK6ofBcO2 IWqdtTZrYm3H+YXms2qD0yne2OkC/VdLatkgoIJ06jjw4c8R47tXRdMySMTqPBMf 4unthZo38lvl2n1nDMFON5LTA0+Ka3Udm+cLl8V35eQdGT16p8iDt98EMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDcOrnFt7kzqqZq30U1PnPsHr4VNMB8GA1UdIwQY MBaAFHaXA22TtKxnDw/8WpDOq2pfi8KVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHBjRGJaTzByR2NQRF94YWtNNnJhbC1Md3BVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8yZTgwNWMtYmNlZC00ZjU0LWIzMjAt ZjlkZTU5YzM3MjkxLzEvZHBjRGJaTzByR2NQRF94YWtNNnJhbC1Md3BVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8yZTgwNWMtYmNlZC00ZjU0LWIzMjAtZjlkZTU5YzM3Mjkx LzEvZHBjRGJaTzByR2NQRF94YWtNNnJhbC1Md3BVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAazOBMafO IXqYW1hXnKbRdC4g5DUaL9K83jBNo089RxPj+ZaHJqMWL2bhV18FDOin5Gp3YSMa ALutYA9Spvw+jcpjwh0kdw+JuF+Gg/G0Qcifz0zFd7XwpriZmERi+rakYzAe/fsc /HUBQuw2DkN0LW9j6fLJWnXd0na++XoCvvO3sX4sN0ZzVT5wQvjJLmtzJ8S2fqFh rpVkfFSHjynuzzGIiORFst/N14hTqS9u1EUqGuDrrguW4ckG4zGOF0Um4Uo8d+ra DouCkR7CM776yZGSSFP+sHtv0575Xnnpo5EoQKmClXykAoVvank60XbKnK1vg8C5 NAY49fjapvzLGg== -----END CERTIFICATE-----Generated at Fri Dec 19 01:08:12 2025 by rpki-client