This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/9d881b-0376-4aa8-8835-fc26b6637a90/1/dAfptxiBm4G8Wv1JF6o-s5zN3ZI.mft File: dAfptxiBm4G8Wv1JF6o-s5zN3ZI.mft (raw, json) Hash identifier: COpSHhoK4aHZTID/vK7JHo5855JjOW4Sn+uh7s+k2So= Subject key identifier: 37:DA:08:17:29:8C:0D:2F:DF:D6:F6:56:D6:25:E6:91:EE:E3:5D:8B Authority key identifier: 74:07:E9:B7:18:81:9B:81:BC:5A:FD:49:17:AA:3E:B3:9C:CD:DD:92 Certificate issuer: /CN=7407e9b718819b81bc5afd4917aa3eb39ccddd92 Certificate serial: 019AF208C7B8A1B6FAD18D5403B3AA1A5421 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dAfptxiBm4G8Wv1JF6o-s5zN3ZI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/9d881b-0376-4aa8-8835-fc26b6637a90/1/dAfptxiBm4G8Wv1JF6o-s5zN3ZI.mft Manifest number: 46 Signing time: Sat 06 Dec 2025 05:00:52 +0000 Manifest this update: Sat 06 Dec 2025 05:00:52 +0000 Manifest next update: Sun 07 Dec 2025 05:00:52 +0000 Files and hashes: 1: dAfptxiBm4G8Wv1JF6o-s5zN3ZI.crl (hash: 5jD0g5L+AneJPPzTJJzUzDqQvZ6E1uU43UpOSGgG0Lk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/9d881b-0376-4aa8-8835-fc26b6637a90/1/dAfptxiBm4G8Wv1JF6o-s5zN3ZI.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/9d881b-0376-4aa8-8835-fc26b6637a90/1/dAfptxiBm4G8Wv1JF6o-s5zN3ZI.mft rsync://rpki.ripe.net/repository/DEFAULT/dAfptxiBm4G8Wv1JF6o-s5zN3ZI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:c7:b8:a1:b6:fa:d1:8d:54:03:b3:aa:1a:54:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7407e9b718819b81bc5afd4917aa3eb39ccddd92 Validity Not Before: Dec 6 05:00:52 2025 GMT Not After : Dec 7 05:00:52 2025 GMT Subject: CN=37da0817298c0d2fdfd6f656d625e691eee35d8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:d1:7c:dc:db:ff:da:c6:6b:98:25:bb:be:1a: db:e7:bd:11:99:ec:35:35:84:87:69:b8:52:39:0c: f5:91:7a:5d:50:00:63:34:cc:78:e0:66:2a:e2:55: ae:35:11:9c:2d:40:ed:b5:30:9e:a6:2c:02:df:2a: f4:c2:14:cd:8d:98:75:34:6d:95:86:7c:8c:17:31: b9:59:40:98:cc:4a:cd:70:0e:7e:6d:c5:2a:4e:e4: 81:d6:ba:9e:be:61:1b:2d:18:4f:79:45:ac:21:66: 35:78:c3:f0:29:a7:bb:00:4b:03:88:08:8a:50:4e: 49:00:bf:ed:79:74:34:7a:3c:23:78:13:c5:60:3a: 84:8c:85:a9:fb:fd:3f:81:01:0f:46:6e:c5:31:40: 0e:a1:59:bd:10:ac:93:34:1b:e9:e7:82:1d:43:20: 03:75:88:57:ad:dd:5b:56:04:7b:f7:19:56:dd:53: 46:c5:89:ba:49:f4:d4:b7:6a:5f:9a:84:98:da:72: 0d:37:c7:c7:42:ff:98:74:77:e0:08:fc:90:94:ef: aa:cb:31:ff:f2:b7:a8:15:fe:48:5e:e2:4f:1b:d6: 2a:4b:e7:4f:6b:02:c8:81:47:ce:1f:d3:d8:06:58: 53:a8:63:52:f0:93:2c:55:f9:98:f3:e0:e2:78:23: 8c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:DA:08:17:29:8C:0D:2F:DF:D6:F6:56:D6:25:E6:91:EE:E3:5D:8B X509v3 Authority Key Identifier: keyid:74:07:E9:B7:18:81:9B:81:BC:5A:FD:49:17:AA:3E:B3:9C:CD:DD:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dAfptxiBm4G8Wv1JF6o-s5zN3ZI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/9d881b-0376-4aa8-8835-fc26b6637a90/1/dAfptxiBm4G8Wv1JF6o-s5zN3ZI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/9d881b-0376-4aa8-8835-fc26b6637a90/1/dAfptxiBm4G8Wv1JF6o-s5zN3ZI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:cf:5b:5e:89:22:bf:59:3e:49:dd:af:5f:65:c4:41:06:3c: 0b:a3:92:d9:03:71:88:6d:b0:62:7b:83:ce:ea:3c:61:03:f8: 2a:76:b2:91:30:22:9f:d0:52:47:9d:9f:c5:21:1b:ad:e6:75: f6:95:95:6b:21:7a:aa:6d:c5:5d:a4:f6:6d:70:c5:ce:36:d6: 41:11:3b:79:b6:c7:3e:8e:d8:f0:24:87:7c:60:a0:2b:ab:db: 13:12:44:b5:2c:50:42:c0:38:09:a5:3d:80:5b:b0:d3:62:05: 66:a8:81:9b:c4:26:ef:b9:2a:fc:ea:07:78:97:74:7f:f8:ab: 76:c3:ff:fd:a5:69:86:b2:b2:71:46:9f:42:51:5e:32:3c:9e: 3c:12:76:e9:1a:4b:63:c1:06:ee:ae:a6:9a:49:f5:db:13:d8: 4d:0d:ec:c4:59:8b:83:8f:9f:a3:62:2a:c2:83:75:c4:ef:60: 96:bd:1b:b5:e6:59:1a:98:ff:97:4c:7f:b7:14:3c:22:58:21: 31:67:69:c6:26:24:71:8b:fb:da:69:17:af:6a:60:44:22:49: 73:e6:8d:95:98:09:ff:14:08:03:87:28:e1:1d:19:63:ea:f5: 80:af:a0:8c:ed:e1:17:e3:d3:89:cb:7f:1d:91:3a:58:88:71: 33:46:a5:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCMe4obb60Y1UA7OqGlQhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0MDdlOWI3MTg4MTliODFiYzVhZmQ0OTE3YWEzZWIzOWNj ZGRkOTIwHhcNMjUxMjA2MDUwMDUyWhcNMjUxMjA3MDUwMDUyWjAzMTEwLwYDVQQD EygzN2RhMDgxNzI5OGMwZDJmZGZkNmY2NTZkNjI1ZTY5MWVlZTM1ZDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7tF83Nv/2sZrmCW7vhrb570Rmew1 NYSHabhSOQz1kXpdUABjNMx44GYq4lWuNRGcLUDttTCepiwC3yr0whTNjZh1NG2V hnyMFzG5WUCYzErNcA5+bcUqTuSB1rqevmEbLRhPeUWsIWY1eMPwKae7AEsDiAiK UE5JAL/teXQ0ejwjeBPFYDqEjIWp+/0/gQEPRm7FMUAOoVm9EKyTNBvp54IdQyAD dYhXrd1bVgR79xlW3VNGxYm6SfTUt2pfmoSY2nINN8fHQv+YdHfgCPyQlO+qyzH/ 8reoFf5IXuJPG9YqS+dPawLIgUfOH9PYBlhTqGNS8JMsVfmY8+DieCOMaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDfaCBcpjA0v39b2VtYl5pHu412LMB8GA1UdIwQY MBaAFHQH6bcYgZuBvFr9SReqPrOczd2SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEFmcHR4aUJtNEc4V3YxSkY2by1zNXpOM1pJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi85ZDg4MWItMDM3Ni00YWE4LTg4MzUt ZmMyNmI2NjM3YTkwLzEvZEFmcHR4aUJtNEc4V3YxSkY2by1zNXpOM1pJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi85ZDg4MWItMDM3Ni00YWE4LTg4MzUtZmMyNmI2NjM3YTkw LzEvZEFmcHR4aUJtNEc4V3YxSkY2by1zNXpOM1pJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJM9bXoki v1k+Sd2vX2XEQQY8C6OS2QNxiG2wYnuDzuo8YQP4KnaykTAin9BSR52fxSEbreZ1 9pWVayF6qm3FXaT2bXDFzjbWQRE7ebbHPo7Y8CSHfGCgK6vbExJEtSxQQsA4CaU9 gFuw02IFZqiBm8Qm77kq/OoHeJd0f/irdsP//aVphrKycUafQlFeMjyePBJ26RpL Y8EG7q6mmkn12xPYTQ3sxFmLg4+fo2IqwoN1xO9glr0bteZZGpj/l0x/txQ8Ilgh MWdpxiYkcYv72mkXr2pgRCJJc+aNlZgJ/xQIA4co4R0ZY+r1gK+gjO3hF+PTict/ HZE6WIhxM0alUA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:50:30 2025 by rpki-client