This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/043b18-9be6-47b3-b778-bf836c5b9907/1/dTjEeQ1t2TuTDlzdIPUD4gKR97Q.mft File: dTjEeQ1t2TuTDlzdIPUD4gKR97Q.mft (raw, json) Hash identifier: H9mJHCLKzYCRqwQuVOoEofyCO+GTXGAr4iFia07wjb4= Subject key identifier: 20:67:8D:74:DF:A7:D1:BE:3D:FF:33:AA:D7:08:ED:7B:D2:CC:75:91 Authority key identifier: 75:38:C4:79:0D:6D:D9:3B:93:0E:5C:DD:20:F5:03:E2:02:91:F7:B4 Certificate issuer: /CN=7538c4790d6dd93b930e5cdd20f503e20291f7b4 Certificate serial: 019AF6C0FAA77449899621D4AE7CC73F5618 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTjEeQ1t2TuTDlzdIPUD4gKR97Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/043b18-9be6-47b3-b778-bf836c5b9907/1/dTjEeQ1t2TuTDlzdIPUD4gKR97Q.mft Manifest number: 010E Signing time: Sun 07 Dec 2025 03:00:33 +0000 Manifest this update: Sun 07 Dec 2025 03:00:33 +0000 Manifest next update: Mon 08 Dec 2025 03:00:33 +0000 Files and hashes: 1: dTjEeQ1t2TuTDlzdIPUD4gKR97Q.crl (hash: QeLgvPX/SQB11Kuk0/zEQjpR7xaQHX6jTI7VUg883fs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/043b18-9be6-47b3-b778-bf836c5b9907/1/dTjEeQ1t2TuTDlzdIPUD4gKR97Q.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/043b18-9be6-47b3-b778-bf836c5b9907/1/dTjEeQ1t2TuTDlzdIPUD4gKR97Q.mft rsync://rpki.ripe.net/repository/DEFAULT/dTjEeQ1t2TuTDlzdIPUD4gKR97Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:c0:fa:a7:74:49:89:96:21:d4:ae:7c:c7:3f:56:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7538c4790d6dd93b930e5cdd20f503e20291f7b4 Validity Not Before: Dec 7 03:00:33 2025 GMT Not After : Dec 8 03:00:33 2025 GMT Subject: CN=20678d74dfa7d1be3dff33aad708ed7bd2cc7591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:05:44:3e:fc:ed:47:38:f4:5d:84:12:11:2a: be:b6:c7:7f:c7:21:6e:c8:0b:05:ed:ae:29:fc:74: af:4c:62:fc:5b:39:1b:53:25:d5:c5:4b:fd:32:0b: 0b:97:46:66:6b:77:91:4e:e9:31:8a:23:ac:b6:f4: 46:bc:1d:33:90:7e:4b:c2:fd:21:be:c2:51:9b:be: 6b:2b:8f:d3:dc:44:fd:9c:af:66:5b:63:a0:23:b8: 27:b7:45:3a:95:a8:61:74:81:03:49:84:7b:20:a4: e2:cd:e1:3d:85:48:c3:0e:94:df:43:05:fc:3f:e0: 6f:0a:4b:25:ed:42:3a:7d:a4:93:4d:67:f3:27:a1: 30:ed:71:b5:6e:39:54:92:f5:a7:63:a1:69:59:4e: 6e:25:2e:1f:00:95:1d:6e:c1:cf:7a:cd:c7:87:be: 46:a7:f0:c7:88:27:9c:2c:04:71:88:fd:a5:a3:a1: ae:f8:d7:6e:72:f2:97:50:1a:f1:af:65:6c:40:49: f3:8a:b5:b8:89:e7:f7:9a:89:c0:2b:b7:9b:e7:3d: c0:bc:8c:99:ed:c9:3d:ec:42:bb:1a:ee:97:bd:aa: af:8a:aa:de:c3:94:32:a4:d6:0b:9c:d3:c2:ab:b4: 32:e7:25:df:9c:9f:7c:9a:c8:05:07:87:f6:30:f5: f0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:67:8D:74:DF:A7:D1:BE:3D:FF:33:AA:D7:08:ED:7B:D2:CC:75:91 X509v3 Authority Key Identifier: keyid:75:38:C4:79:0D:6D:D9:3B:93:0E:5C:DD:20:F5:03:E2:02:91:F7:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTjEeQ1t2TuTDlzdIPUD4gKR97Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/043b18-9be6-47b3-b778-bf836c5b9907/1/dTjEeQ1t2TuTDlzdIPUD4gKR97Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/043b18-9be6-47b3-b778-bf836c5b9907/1/dTjEeQ1t2TuTDlzdIPUD4gKR97Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:63:5e:b1:1d:03:35:61:cd:0a:39:ed:76:d2:7f:44:95:bc: 40:20:4b:59:ce:39:64:a7:62:e2:b2:91:af:45:c3:67:ce:f4: 01:b7:53:0e:eb:a7:d1:20:37:a5:25:0f:5e:50:eb:d4:6a:52: 34:4e:4a:b0:fe:fe:19:3c:a2:80:57:85:60:0b:83:2e:ae:2b: 74:79:04:7b:64:35:f5:81:61:33:d2:dd:29:29:df:73:30:71: a4:f7:73:9f:17:2c:51:a1:5c:f8:c7:e1:d1:28:09:c9:3f:ce: f0:c4:b9:b5:63:97:b7:c7:23:e7:ab:af:fb:27:40:a7:c6:bb: 57:f9:81:0a:46:55:d2:fb:58:0b:0b:24:a1:4e:04:79:5d:39: b3:10:c0:c4:da:96:9d:96:2b:45:97:03:c8:a0:1a:71:be:58: 04:4b:60:32:d3:25:9e:a4:5e:8d:29:98:7a:a8:a9:3f:bd:65: 00:68:4f:6e:7a:b4:ec:93:d1:2b:da:83:69:9a:f0:bb:68:ee: 46:0f:85:b6:4a:b8:12:ea:85:83:c2:a8:b2:8f:d3:7c:0d:c4: e0:a3:b0:5e:ac:83:eb:99:f5:53:e0:09:eb:e7:32:85:72:43: 10:12:14:9f:a4:40:22:e5:f9:c1:88:f6:b1:56:b3:18:6b:15: ce:61:2d:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2wPqndEmJliHUrnzHP1YYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MzhjNDc5MGQ2ZGQ5M2I5MzBlNWNkZDIwZjUwM2UyMDI5 MWY3YjQwHhcNMjUxMjA3MDMwMDMzWhcNMjUxMjA4MDMwMDMzWjAzMTEwLwYDVQQD EygyMDY3OGQ3NGRmYTdkMWJlM2RmZjMzYWFkNzA4ZWQ3YmQyY2M3NTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQVEPvztRzj0XYQSESq+tsd/xyFu yAsF7a4p/HSvTGL8WzkbUyXVxUv9MgsLl0Zma3eRTukxiiOstvRGvB0zkH5Lwv0h vsJRm75rK4/T3ET9nK9mW2OgI7gnt0U6lahhdIEDSYR7IKTizeE9hUjDDpTfQwX8 P+BvCksl7UI6faSTTWfzJ6Ew7XG1bjlUkvWnY6FpWU5uJS4fAJUdbsHPes3Hh75G p/DHiCecLARxiP2lo6Gu+NducvKXUBrxr2VsQEnzirW4ief3monAK7eb5z3AvIyZ 7ck97EK7Gu6Xvaqviqrew5QypNYLnNPCq7Qy5yXfnJ98msgFB4f2MPXwaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCBnjXTfp9G+Pf8zqtcI7XvSzHWRMB8GA1UdIwQY MBaAFHU4xHkNbdk7kw5c3SD1A+ICkfe0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFRqRWVRMXQyVHVURGx6ZElQVUQ0Z0tSOTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8wNDNiMTgtOWJlNi00N2IzLWI3Nzgt YmY4MzZjNWI5OTA3LzEvZFRqRWVRMXQyVHVURGx6ZElQVUQ0Z0tSOTdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS8wNDNiMTgtOWJlNi00N2IzLWI3NzgtYmY4MzZjNWI5OTA3 LzEvZFRqRWVRMXQyVHVURGx6ZElQVUQ0Z0tSOTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj2NesR0D NWHNCjntdtJ/RJW8QCBLWc45ZKdi4rKRr0XDZ870AbdTDuun0SA3pSUPXlDr1GpS NE5KsP7+GTyigFeFYAuDLq4rdHkEe2Q19YFhM9LdKSnfczBxpPdznxcsUaFc+Mfh 0SgJyT/O8MS5tWOXt8cj56uv+ydAp8a7V/mBCkZV0vtYCwskoU4EeV05sxDAxNqW nZYrRZcDyKAacb5YBEtgMtMlnqRejSmYeqipP71lAGhPbnq07JPRK9qDaZrwu2ju Rg+Ftkq4EuqFg8Koso/TfA3E4KOwXqyD65n1U+AJ6+cyhXJDEBIUn6RAIuX5wYj2 sVazGGsVzmEtkw== -----END CERTIFICATE-----Generated at Sun Dec 7 07:25:04 2025 by rpki-client