This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft File: D33TJ3nBqbKX4oywNf1nmrsZFtE.mft (raw, json) Hash identifier: wL5V3Uy7s1HepWApwHoZlh04+9h53HqRROx2i3JSKf8= Subject key identifier: 6A:61:68:E8:82:0B:06:71:D5:70:0D:26:FC:A0:22:FE:7F:CE:B4:A7 Authority key identifier: 0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1 Certificate issuer: /CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1 Certificate serial: 019B3155ECDD43CFAE2754018310D82D0C89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft Manifest number: 04E9 Signing time: Thu 18 Dec 2025 12:01:13 +0000 Manifest this update: Thu 18 Dec 2025 12:01:13 +0000 Manifest next update: Fri 19 Dec 2025 12:01:13 +0000 Files and hashes: 1: D33TJ3nBqbKX4oywNf1nmrsZFtE.crl (hash: FdmGg+T/fGI0yzj4E/L8qNizT4+306yBkjQTSCMICQA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:55:ec:dd:43:cf:ae:27:54:01:83:10:d8:2d:0c:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1 Validity Not Before: Dec 18 12:01:13 2025 GMT Not After : Dec 19 12:01:13 2025 GMT Subject: CN=6a6168e8820b0671d5700d26fca022fe7fceb4a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c7:d3:40:11:3e:bc:38:82:17:7e:be:16:35: 8f:2d:96:8b:25:b2:84:12:c6:00:06:98:d4:47:8e: 81:51:c2:0a:37:5d:e2:ec:ad:72:4b:8a:2d:cc:1d: 12:cc:a7:80:35:1c:24:f7:2d:89:6f:29:ea:6d:78: a1:53:c4:75:ad:29:4a:d3:30:fc:0a:da:ab:31:4e: d7:39:0b:ac:a8:e6:f2:59:0d:6c:94:ea:fb:6d:d8: 44:3d:33:23:85:81:7c:c2:1a:30:80:2b:e4:6e:a0: c1:44:21:14:b4:ee:84:c9:07:74:d6:4e:cb:3e:9e: ba:69:93:48:4f:65:fd:4c:c9:ca:a7:73:cb:ac:8d: 6f:e5:2c:f8:e6:fd:9d:41:fb:d1:aa:b0:61:99:bc: 08:8b:6c:0c:e0:39:47:4b:19:32:d5:72:5c:46:06: 7e:67:6e:b2:05:22:f7:af:cd:dc:26:39:1b:0b:28: 68:6f:b6:5c:1a:58:f0:fe:e2:ad:cc:6f:90:ad:3b: e3:42:9d:c5:83:14:f9:c1:0e:f1:29:ec:fe:8b:24: ee:55:94:b8:9d:1e:49:92:b9:f9:47:52:34:e2:f2: 06:81:07:ca:6e:43:39:2a:81:9e:f3:b9:40:0a:a8: 11:97:d2:21:ff:9d:99:26:f0:ca:ab:aa:ad:9e:8a: 80:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:61:68:E8:82:0B:06:71:D5:70:0D:26:FC:A0:22:FE:7F:CE:B4:A7 X509v3 Authority Key Identifier: keyid:0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:da:d3:be:49:b8:b1:62:1f:d1:c5:62:30:06:31:ad:03:82: 8a:d7:da:11:c8:8d:c7:50:7f:18:2c:87:17:2f:7f:cc:70:b1: 2b:b7:41:3c:86:15:1d:a9:6c:13:a5:ea:1b:b5:ec:85:41:cf: 08:74:3c:3b:6a:3d:b9:17:1d:ee:ff:c9:d9:5c:d6:30:b4:f6: e5:9b:cc:78:1e:85:81:1e:dd:26:1d:c3:4a:a5:a1:e9:73:bb: 0d:f6:b7:4f:d0:55:c7:d1:be:29:58:21:be:6a:80:dc:96:3e: ea:ea:f9:31:0d:7b:88:29:82:47:9a:be:5a:8e:5e:36:cb:4c: e5:6d:ed:0e:69:18:37:e8:31:8d:a2:78:77:4e:53:7b:70:e6: 9e:a2:2f:db:cb:39:70:54:a4:22:df:d9:d1:d3:b2:ff:c3:32: a2:55:27:60:a2:15:d1:61:3f:06:18:93:e8:72:9b:b4:54:16: 77:a1:bb:06:65:53:b0:a5:cc:97:ba:3e:ca:dd:aa:10:16:ef: 9f:0e:b2:41:e9:74:0c:ab:cc:d6:a5:55:f4:e2:cd:06:4d:a4: 85:ab:3e:98:41:1b:11:48:1a:db:6c:fb:94:ff:f8:37:ed:c2: af:ff:ba:a0:38:d1:9d:7b:f9:9a:5d:0d:73:03:86:e1:89:94: 45:1c:c0:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxVezdQ8+uJ1QBgxDYLQyJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmN2RkMzI3NzljMWE5YjI5N2UyOGNiMDM1ZmQ2NzlhYmIx OTE2ZDEwHhcNMjUxMjE4MTIwMTEzWhcNMjUxMjE5MTIwMTEzWjAzMTEwLwYDVQQD Eyg2YTYxNjhlODgyMGIwNjcxZDU3MDBkMjZmY2EwMjJmZTdmY2ViNGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8fTQBE+vDiCF36+FjWPLZaLJbKE EsYABpjUR46BUcIKN13i7K1yS4otzB0SzKeANRwk9y2JbynqbXihU8R1rSlK0zD8 CtqrMU7XOQusqObyWQ1slOr7bdhEPTMjhYF8whowgCvkbqDBRCEUtO6EyQd01k7L Pp66aZNIT2X9TMnKp3PLrI1v5Sz45v2dQfvRqrBhmbwIi2wM4DlHSxky1XJcRgZ+ Z26yBSL3r83cJjkbCyhob7ZcGljw/uKtzG+QrTvjQp3FgxT5wQ7xKez+iyTuVZS4 nR5Jkrn5R1I04vIGgQfKbkM5KoGe87lACqgRl9Ih/52ZJvDKq6qtnoqALwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGphaOiCCwZx1XANJvygIv5/zrSnMB8GA1UdIwQY MBaAFA990yd5wamyl+KMsDX9Z5q7GRbRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDMzVEozbkJxYktYNG95d05mMW5tcnNaRnRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi83MjkyMTAtZDcyMC00ZjM4LWI2YmUt YWNmNjZmNzhiMmI3LzEvRDMzVEozbkJxYktYNG95d05mMW5tcnNaRnRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi83MjkyMTAtZDcyMC00ZjM4LWI2YmUtYWNmNjZmNzhiMmI3 LzEvRDMzVEozbkJxYktYNG95d05mMW5tcnNaRnRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB9rTvkm4 sWIf0cViMAYxrQOCitfaEciNx1B/GCyHFy9/zHCxK7dBPIYVHalsE6XqG7XshUHP CHQ8O2o9uRcd7v/J2VzWMLT25ZvMeB6FgR7dJh3DSqWh6XO7Dfa3T9BVx9G+KVgh vmqA3JY+6ur5MQ17iCmCR5q+Wo5eNstM5W3tDmkYN+gxjaJ4d05Te3DmnqIv28s5 cFSkIt/Z0dOy/8MyolUnYKIV0WE/BhiT6HKbtFQWd6G7BmVTsKXMl7o+yt2qEBbv nw6yQel0DKvM1qVV9OLNBk2khas+mEEbEUga22z7lP/4N+3Cr/+6oDjRnXv5ml0N cwOG4YmURRzAPg== -----END CERTIFICATE-----Generated at Thu Dec 18 20:38:27 2025 by rpki-client