This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/698fe8-5f69-4d37-bd58-65eb1ba6e337/1/fJ1n8CerKw_yajV1FHOa_ogDesk.mft File: fJ1n8CerKw_yajV1FHOa_ogDesk.mft (raw, json) Hash identifier: x1AwVXaO/s9vq7R8T2m6nu7mGr/1WCirisbXAm91iBs= Subject key identifier: 24:ED:0A:64:34:EF:99:6C:49:2C:24:FC:43:7F:0D:A5:3E:93:AE:15 Authority key identifier: 7C:9D:67:F0:27:AB:2B:0F:F2:6A:35:75:14:73:9A:FE:88:03:7A:C9 Certificate issuer: /CN=7c9d67f027ab2b0ff26a357514739afe88037ac9 Certificate serial: 019AF20924E3524F6B3FE58F3D98DE08CF74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fJ1n8CerKw_yajV1FHOa_ogDesk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/698fe8-5f69-4d37-bd58-65eb1ba6e337/1/fJ1n8CerKw_yajV1FHOa_ogDesk.mft Manifest number: 1678 Signing time: Sat 06 Dec 2025 05:01:16 +0000 Manifest this update: Sat 06 Dec 2025 05:01:16 +0000 Manifest next update: Sun 07 Dec 2025 05:01:16 +0000 Files and hashes: 1: fJ1n8CerKw_yajV1FHOa_ogDesk.crl (hash: KdJ9eswuSN12mUZ6ripAxl5AJ+eQYXCdHsjjrk0tVN8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/698fe8-5f69-4d37-bd58-65eb1ba6e337/1/fJ1n8CerKw_yajV1FHOa_ogDesk.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/698fe8-5f69-4d37-bd58-65eb1ba6e337/1/fJ1n8CerKw_yajV1FHOa_ogDesk.mft rsync://rpki.ripe.net/repository/DEFAULT/fJ1n8CerKw_yajV1FHOa_ogDesk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:24:e3:52:4f:6b:3f:e5:8f:3d:98:de:08:cf:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c9d67f027ab2b0ff26a357514739afe88037ac9 Validity Not Before: Dec 6 05:01:16 2025 GMT Not After : Dec 7 05:01:16 2025 GMT Subject: CN=24ed0a6434ef996c492c24fc437f0da53e93ae15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:84:d2:10:fc:7d:4b:36:93:0f:0d:62:a0:92: 24:0d:8e:fc:60:bf:0c:61:06:1f:68:22:59:09:b7: 83:9e:df:23:e7:3c:84:bc:ff:3c:03:4d:15:6c:ef: d0:c9:09:bf:5d:dd:d5:3d:a5:24:f7:84:51:ca:a0: 15:0e:65:55:e4:38:a8:1e:10:a9:a2:e8:88:54:94: 01:aa:3d:2c:e4:c2:d0:32:c3:9b:a7:8c:e9:c2:21: 7c:ea:f4:2d:75:3c:51:fb:5e:34:a4:35:60:68:19: 35:39:05:65:27:d3:ac:a1:aa:72:c7:ef:52:83:13: db:9e:63:8e:33:e2:f3:00:6c:8f:25:e0:19:cf:5b: b9:2b:44:2c:ad:36:b1:c3:d3:03:54:79:65:46:24: 8a:21:aa:d3:40:f4:7a:af:fc:c6:16:43:5f:3f:56: 07:a7:c9:09:23:b9:4d:7b:16:5a:e2:82:92:74:d8: cf:81:ee:0d:e5:30:c5:73:d9:11:65:0d:81:9c:bf: 6a:95:6f:ab:5b:7d:34:71:24:06:60:15:69:2e:f2: e0:bb:23:a2:ba:68:35:b3:4c:54:50:1a:e2:b6:59: fc:8a:6e:d9:fa:a2:b4:5e:94:df:d5:02:ad:6f:44: df:4a:1f:6a:f4:55:bd:4d:dd:15:48:4a:bb:14:2a: 26:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:ED:0A:64:34:EF:99:6C:49:2C:24:FC:43:7F:0D:A5:3E:93:AE:15 X509v3 Authority Key Identifier: keyid:7C:9D:67:F0:27:AB:2B:0F:F2:6A:35:75:14:73:9A:FE:88:03:7A:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJ1n8CerKw_yajV1FHOa_ogDesk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/698fe8-5f69-4d37-bd58-65eb1ba6e337/1/fJ1n8CerKw_yajV1FHOa_ogDesk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/698fe8-5f69-4d37-bd58-65eb1ba6e337/1/fJ1n8CerKw_yajV1FHOa_ogDesk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:49:d2:30:02:b3:b7:6e:cd:67:d4:37:97:aa:4e:37:96:40: 2e:80:d3:89:da:59:af:fe:43:d4:cb:d9:c2:0b:51:cf:ce:8a: 72:21:d7:18:31:99:89:95:3a:46:c0:a5:04:24:d4:df:5e:33: 84:6d:5b:79:19:5a:7a:4a:1c:24:d0:44:b7:67:a9:24:e2:fe: eb:81:42:0e:6d:82:3c:1c:ed:94:1c:0d:f1:dc:7a:4f:60:7a: 36:5a:5c:b9:a3:79:94:18:10:ea:39:46:39:c4:3a:4c:d6:e8: 9b:e6:e2:45:81:4b:ba:08:49:e3:15:a3:d0:a0:c4:ed:08:45: cc:1d:fa:d2:ea:4f:a2:35:c6:ad:f8:d9:fa:18:81:1a:9a:36: 33:45:cf:c3:05:51:de:ad:a1:4b:8a:b5:24:ef:f8:4a:e0:fa: c8:d4:80:f6:22:1e:59:c3:68:3a:e6:73:8a:cd:a4:5b:67:75: c7:79:0f:17:fa:eb:3e:47:dc:cc:89:64:1b:cd:c9:a9:0c:dd: 9c:ff:2b:ed:47:60:17:cd:c6:90:50:c3:3c:78:cc:e7:bf:33: 37:2b:85:3b:3e:6c:7f:bc:14:34:f1:cd:67:ff:e6:4b:d4:9d: 1b:ff:46:2b:fc:3a:07:97:6e:f9:eb:97:a1:53:61:7b:05:10: 6c:e5:af:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCSTjUk9rP+WPPZjeCM90MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjOWQ2N2YwMjdhYjJiMGZmMjZhMzU3NTE0NzM5YWZlODgw MzdhYzkwHhcNMjUxMjA2MDUwMTE2WhcNMjUxMjA3MDUwMTE2WjAzMTEwLwYDVQQD EygyNGVkMGE2NDM0ZWY5OTZjNDkyYzI0ZmM0MzdmMGRhNTNlOTNhZTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYTSEPx9SzaTDw1ioJIkDY78YL8M YQYfaCJZCbeDnt8j5zyEvP88A00VbO/QyQm/Xd3VPaUk94RRyqAVDmVV5DioHhCp ouiIVJQBqj0s5MLQMsObp4zpwiF86vQtdTxR+140pDVgaBk1OQVlJ9Osoapyx+9S gxPbnmOOM+LzAGyPJeAZz1u5K0QsrTaxw9MDVHllRiSKIarTQPR6r/zGFkNfP1YH p8kJI7lNexZa4oKSdNjPge4N5TDFc9kRZQ2BnL9qlW+rW300cSQGYBVpLvLguyOi umg1s0xUUBritln8im7Z+qK0XpTf1QKtb0TfSh9q9FW9Td0VSEq7FComGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCTtCmQ075lsSSwk/EN/DaU+k64VMB8GA1UdIwQY MBaAFHydZ/AnqysP8mo1dRRzmv6IA3rJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkoxbjhDZXJLd195YWpWMUZIT2Ffb2dEZXNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC82OThmZTgtNWY2OS00ZDM3LWJkNTgt NjVlYjFiYTZlMzM3LzEvZkoxbjhDZXJLd195YWpWMUZIT2Ffb2dEZXNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC82OThmZTgtNWY2OS00ZDM3LWJkNTgtNjVlYjFiYTZlMzM3 LzEvZkoxbjhDZXJLd195YWpWMUZIT2Ffb2dEZXNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXUnSMAKz t27NZ9Q3l6pON5ZALoDTidpZr/5D1MvZwgtRz86KciHXGDGZiZU6RsClBCTU314z hG1beRlaekocJNBEt2epJOL+64FCDm2CPBztlBwN8dx6T2B6NlpcuaN5lBgQ6jlG OcQ6TNbom+biRYFLughJ4xWj0KDE7QhFzB360upPojXGrfjZ+hiBGpo2M0XPwwVR 3q2hS4q1JO/4SuD6yNSA9iIeWcNoOuZzis2kW2d1x3kPF/rrPkfczIlkG83JqQzd nP8r7UdgF83GkFDDPHjM578zNyuFOz5sf7wUNPHNZ//mS9SdG/9GK/w6B5du+euX oVNhewUQbOWvhg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:21:15 2025 by rpki-client