This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.mft File: danDqBE5lKqnp7EhGTd3kbIB8Gw.mft (raw, json) Hash identifier: IAcAMKrNjFNP8a+5+lRojLcvMMhWlsRcYxsOU6IHS2Q= Subject key identifier: 52:AA:30:B7:4A:53:BE:B3:AA:51:90:1A:EE:A3:BB:78:7D:94:D4:C4 Authority key identifier: 75:A9:C3:A8:11:39:94:AA:A7:A7:B1:21:19:37:77:91:B2:01:F0:6C Certificate issuer: /CN=75a9c3a8113994aaa7a7b12119377791b201f06c Certificate serial: 019AF12CD7AE19969A68069B9E9520D940C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/danDqBE5lKqnp7EhGTd3kbIB8Gw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.mft Manifest number: 0432 Signing time: Sat 06 Dec 2025 01:00:38 +0000 Manifest this update: Sat 06 Dec 2025 01:00:38 +0000 Manifest next update: Sun 07 Dec 2025 01:00:38 +0000 Files and hashes: 1: danDqBE5lKqnp7EhGTd3kbIB8Gw.crl (hash: /esnO7CIpfDVGTw4V+d6FI1mqjMhoR9kWaNKuq8RUVs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.mft rsync://rpki.ripe.net/repository/DEFAULT/danDqBE5lKqnp7EhGTd3kbIB8Gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:d7:ae:19:96:9a:68:06:9b:9e:95:20:d9:40:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75a9c3a8113994aaa7a7b12119377791b201f06c Validity Not Before: Dec 6 01:00:38 2025 GMT Not After : Dec 7 01:00:38 2025 GMT Subject: CN=52aa30b74a53beb3aa51901aeea3bb787d94d4c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:df:db:ab:a3:43:46:2d:f1:3a:32:3a:47:43: c1:fa:c8:6a:42:77:ac:e4:3c:30:cf:aa:ee:f7:0d: 25:4f:2a:10:38:2d:c7:43:f4:bf:e9:93:9e:be:6b: ca:f4:92:87:1f:e4:eb:2e:f8:34:f6:b1:45:70:d3: f8:0d:ac:7f:80:ad:9c:cc:0d:a9:e9:82:99:e9:df: 22:3f:5d:76:99:73:64:82:13:b1:4f:24:ef:bd:d4: 12:c1:94:09:80:21:54:dc:97:72:3e:8d:92:dd:f5: b2:ba:90:8d:44:ec:53:33:11:03:16:b2:ad:56:1f: 74:cb:66:82:88:02:0e:ce:46:46:2d:a5:cb:da:db: 88:4b:78:dc:83:15:3c:38:9a:25:ea:ea:a5:2d:41: 7e:d4:d9:41:38:ec:51:c6:27:20:e6:72:85:3b:60: 7c:a4:04:be:5d:b3:a5:a3:16:22:5f:16:12:57:29: 1d:1c:2e:83:e3:1c:f4:cd:01:1c:90:62:39:91:3e: 08:ae:2d:f3:a9:0f:00:f3:50:3e:37:a1:62:c2:d2: 68:10:ff:0b:ab:db:c4:6b:00:e4:4a:d7:25:11:22: f3:55:5e:b0:70:35:4e:7c:a0:29:c1:69:d2:ea:d6: ad:3b:e8:4a:94:a1:4c:cd:71:60:00:27:d5:1a:5e: a4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:AA:30:B7:4A:53:BE:B3:AA:51:90:1A:EE:A3:BB:78:7D:94:D4:C4 X509v3 Authority Key Identifier: keyid:75:A9:C3:A8:11:39:94:AA:A7:A7:B1:21:19:37:77:91:B2:01:F0:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/danDqBE5lKqnp7EhGTd3kbIB8Gw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:fc:f7:d8:82:84:82:fd:35:2d:ba:3a:c4:58:85:ef:b8:6f: 48:4a:16:09:69:5c:cd:ff:50:9f:4d:95:cb:5d:7d:98:ef:12: 14:ad:19:e4:11:ba:ab:70:e9:ab:7f:69:f5:0a:98:bf:fe:3d: c9:13:b6:b4:0e:34:be:cf:6b:10:bb:f1:b3:35:2d:96:50:99: 53:3a:8a:58:17:e4:c1:98:e1:de:74:dd:ee:9b:ae:00:14:4c: b0:87:08:c1:81:12:90:b9:5a:a8:78:87:2f:c8:c8:67:c5:ed: 1f:8f:3a:fb:16:b1:3c:53:54:1d:30:17:26:b6:4e:24:f1:93: b8:9a:ed:66:7e:9d:3b:7b:4c:41:b6:80:53:d7:48:4e:f0:3d: be:aa:6c:c0:29:64:37:0c:09:69:75:ed:14:15:7e:05:00:e8: 8e:56:30:41:e6:68:c6:59:cc:f0:b8:d0:88:a6:af:e2:85:b3: d0:ca:53:9c:be:10:db:c1:db:d4:de:cc:5f:86:80:9e:36:17: cf:dc:6f:83:b6:0f:80:b7:16:84:94:c9:15:3c:6a:f3:d1:0e: ae:eb:e9:bf:7d:e7:83:7e:7f:9c:3b:50:da:16:c6:18:04:49: 09:79:b2:91:aa:d3:0a:cf:9f:23:e8:d2:30:5b:f5:56:18:fb: 40:52:a5:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLNeuGZaaaAabnpUg2UDEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1YTljM2E4MTEzOTk0YWFhN2E3YjEyMTE5Mzc3NzkxYjIw MWYwNmMwHhcNMjUxMjA2MDEwMDM4WhcNMjUxMjA3MDEwMDM4WjAzMTEwLwYDVQQD Eyg1MmFhMzBiNzRhNTNiZWIzYWE1MTkwMWFlZWEzYmI3ODdkOTRkNGM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA79/bq6NDRi3xOjI6R0PB+shqQnes 5Dwwz6ru9w0lTyoQOC3HQ/S/6ZOevmvK9JKHH+TrLvg09rFFcNP4Dax/gK2czA2p 6YKZ6d8iP112mXNkghOxTyTvvdQSwZQJgCFU3JdyPo2S3fWyupCNROxTMxEDFrKt Vh90y2aCiAIOzkZGLaXL2tuIS3jcgxU8OJol6uqlLUF+1NlBOOxRxicg5nKFO2B8 pAS+XbOloxYiXxYSVykdHC6D4xz0zQEckGI5kT4Iri3zqQ8A81A+N6FiwtJoEP8L q9vEawDkStclESLzVV6wcDVOfKApwWnS6tatO+hKlKFMzXFgACfVGl6ktwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFKqMLdKU76zqlGQGu6ju3h9lNTEMB8GA1UdIwQY MBaAFHWpw6gROZSqp6exIRk3d5GyAfBsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGFuRHFCRTVsS3FucDdFaEdUZDNrYklCOEd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC84MjAzZDktN2UzZi00MGFiLWE2ZTAt MDg1YmM3N2JjYzFjLzEvZGFuRHFCRTVsS3FucDdFaEdUZDNrYklCOEd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC84MjAzZDktN2UzZi00MGFiLWE2ZTAtMDg1YmM3N2JjYzFj LzEvZGFuRHFCRTVsS3FucDdFaEdUZDNrYklCOEd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUfz32IKE gv01Lbo6xFiF77hvSEoWCWlczf9Qn02Vy119mO8SFK0Z5BG6q3Dpq39p9QqYv/49 yRO2tA40vs9rELvxszUtllCZUzqKWBfkwZjh3nTd7puuABRMsIcIwYESkLlaqHiH L8jIZ8XtH486+xaxPFNUHTAXJrZOJPGTuJrtZn6dO3tMQbaAU9dITvA9vqpswClk NwwJaXXtFBV+BQDojlYwQeZoxlnM8LjQiKav4oWz0MpTnL4Q28Hb1N7MX4aAnjYX z9xvg7YPgLcWhJTJFTxq89EOruvpv33ng35/nDtQ2hbGGARJCXmykarTCs+fI+jS MFv1Vhj7QFKl1w== -----END CERTIFICATE-----Generated at Sat Dec 6 11:12:08 2025 by rpki-client