This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft File: DudNGMQEmi2bgSwqWFXP63Wvpmc.mft (raw, json) Hash identifier: nwOL9OEKa5Qy2ldpJ+7qiLURRVh2VixiDxYoIzzNHQs= Subject key identifier: 1C:DE:5F:7E:EF:0A:A9:27:E7:E7:76:99:43:DC:79:90:18:D0:BE:9A Authority key identifier: 0E:E7:4D:18:C4:04:9A:2D:9B:81:2C:2A:58:55:CF:EB:75:AF:A6:67 Certificate issuer: /CN=0ee74d18c4049a2d9b812c2a5855cfeb75afa667 Certificate serial: 019AF19B532C7576987706692060EF4A26DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 03:01:19 +0000 Manifest this update: Sat 06 Dec 2025 03:01:19 +0000 Manifest next update: Sun 07 Dec 2025 03:01:19 +0000 Files and hashes: 1: DudNGMQEmi2bgSwqWFXP63Wvpmc.crl (hash: QlzNbmjg/HtNRCCG63k3s+MS6yPMCR6WSZDDDAfPf2M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:53:2c:75:76:98:77:06:69:20:60:ef:4a:26:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ee74d18c4049a2d9b812c2a5855cfeb75afa667 Validity Not Before: Dec 6 03:01:19 2025 GMT Not After : Dec 7 03:01:19 2025 GMT Subject: CN=1cde5f7eef0aa927e7e7769943dc799018d0be9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:1f:0f:8c:dd:a6:91:c6:9d:14:3f:13:c8:ca: 5c:d8:77:b0:3c:3e:5c:39:fb:ab:8d:01:5c:73:ac: b7:91:00:49:86:5e:8d:2a:fb:e1:36:09:da:81:ea: 07:bb:8d:dc:4a:81:e7:d7:31:aa:e4:64:99:4e:c7: b2:fa:85:46:c0:3a:55:64:9c:3b:81:2a:39:e3:a8: b0:1d:00:25:51:b6:69:40:8c:64:a7:8f:8d:f0:76: a0:c6:45:15:5b:dd:e4:14:f0:a3:9b:fb:41:a6:04: 27:ee:f3:5e:e9:46:64:76:69:1b:43:09:3c:63:9c: 38:60:d2:35:7d:57:12:28:8b:f7:ce:72:fb:fb:c7: f1:be:04:93:0f:38:86:36:ba:e1:88:4a:ee:5b:f3: 8c:50:98:b4:87:0b:d0:12:6f:33:28:9b:7b:9e:6b: bc:bf:11:2e:45:ba:d0:bc:23:0a:ef:9e:46:77:a8: 55:4e:fa:e7:52:33:9b:f4:02:cc:69:66:e5:b4:63: fa:90:45:44:7c:1a:8d:f9:2c:1c:4c:53:0d:37:b0: 54:e1:e5:07:ba:07:51:34:a8:38:6b:5b:47:99:eb: 63:66:a0:31:c5:81:24:9f:34:61:e0:e5:45:99:3c: c0:87:94:2c:a7:53:e5:56:b8:a1:62:11:63:77:24: d8:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:DE:5F:7E:EF:0A:A9:27:E7:E7:76:99:43:DC:79:90:18:D0:BE:9A X509v3 Authority Key Identifier: keyid:0E:E7:4D:18:C4:04:9A:2D:9B:81:2C:2A:58:55:CF:EB:75:AF:A6:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:4d:33:df:01:7f:c5:fa:d7:fc:1a:17:2f:3e:a0:66:8e:c5: be:b8:1c:0d:d0:42:b7:d8:ee:1c:40:fa:73:74:b0:b7:dd:b2: 4f:e4:07:a6:a3:46:03:dd:63:cd:dd:c2:8e:62:ea:13:c2:10: 7f:ac:eb:2a:1d:5e:d9:93:46:7a:8f:bc:17:48:bf:06:81:e7: ba:ec:45:96:cd:04:40:19:c7:4c:5d:e0:04:01:49:c6:d9:33: 4f:22:bb:19:23:80:05:44:ac:08:8a:d3:ed:85:d3:0f:54:f5: 80:96:d7:13:2c:83:a5:c6:b3:d0:14:5b:88:9a:bc:c9:f3:b4: a0:cf:28:a7:c2:16:a8:12:31:b3:31:8c:d9:b8:ef:80:48:55: 25:42:0c:bd:33:45:5e:ff:7c:87:1b:29:e9:d5:6e:92:16:f6: 15:18:b3:2d:f1:81:b2:a3:1e:fa:c3:66:01:db:bd:83:f2:45: 06:2f:00:ae:90:32:de:e2:34:73:f2:a3:7f:22:a6:19:ca:72: 9b:89:05:80:b7:6b:49:12:6c:68:63:0c:ae:a5:86:1c:15:60: fe:5d:7a:84:44:17:a6:5e:18:46:c5:6c:c1:12:07:ad:bc:d3: 18:94:56:af:ec:ac:37:fc:cd:8e:f6:61:af:90:63:c5:8c:58: ec:db:e8:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm1MsdXaYdwZpIGDvSibfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlZTc0ZDE4YzQwNDlhMmQ5YjgxMmMyYTU4NTVjZmViNzVh ZmE2NjcwHhcNMjUxMjA2MDMwMTE5WhcNMjUxMjA3MDMwMTE5WjAzMTEwLwYDVQQD EygxY2RlNWY3ZWVmMGFhOTI3ZTdlNzc2OTk0M2RjNzk5MDE4ZDBiZTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7B8PjN2mkcadFD8TyMpc2HewPD5c OfurjQFcc6y3kQBJhl6NKvvhNgnageoHu43cSoHn1zGq5GSZTsey+oVGwDpVZJw7 gSo546iwHQAlUbZpQIxkp4+N8HagxkUVW93kFPCjm/tBpgQn7vNe6UZkdmkbQwk8 Y5w4YNI1fVcSKIv3znL7+8fxvgSTDziGNrrhiEruW/OMUJi0hwvQEm8zKJt7nmu8 vxEuRbrQvCMK755Gd6hVTvrnUjOb9ALMaWbltGP6kEVEfBqN+SwcTFMNN7BU4eUH ugdRNKg4a1tHmetjZqAxxYEknzRh4OVFmTzAh5Qsp1PlVrihYhFjdyTYOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBzeX37vCqkn5+d2mUPceZAY0L6aMB8GA1UdIwQY MBaAFA7nTRjEBJotm4EsKlhVz+t1r6ZnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHVkTkdNUUVtaTJiZ1N3cVdGWFA2M1d2cG1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8yYzhkYmMtNDBhZS00OWM2LThkZDMt YzI1ZGViY2IxMTk3LzEvRHVkTkdNUUVtaTJiZ1N3cVdGWFA2M1d2cG1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8yYzhkYmMtNDBhZS00OWM2LThkZDMtYzI1ZGViY2IxMTk3 LzEvRHVkTkdNUUVtaTJiZ1N3cVdGWFA2M1d2cG1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjk0z3wF/ xfrX/BoXLz6gZo7FvrgcDdBCt9juHED6c3Swt92yT+QHpqNGA91jzd3CjmLqE8IQ f6zrKh1e2ZNGeo+8F0i/BoHnuuxFls0EQBnHTF3gBAFJxtkzTyK7GSOABUSsCIrT 7YXTD1T1gJbXEyyDpcaz0BRbiJq8yfO0oM8op8IWqBIxszGM2bjvgEhVJUIMvTNF Xv98hxsp6dVukhb2FRizLfGBsqMe+sNmAdu9g/JFBi8ArpAy3uI0c/KjfyKmGcpy m4kFgLdrSRJsaGMMrqWGHBVg/l16hEQXpl4YRsVswRIHrbzTGJRWr+ysN/zNjvZh r5BjxYxY7Nvohg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:39:34 2025 by rpki-client