This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.mft File: dUxXhm6Xqtqtdd7MadDfBy1Qbuc.mft (raw, json) Hash identifier: ZAYQ0ujkpTeQ7ZE9QB1EgLu8T3oTiOreSVWPVAtW78w= Subject key identifier: E9:54:13:5C:84:8D:72:26:D5:6B:5A:57:70:57:45:08:C0:51:42:A7 Authority key identifier: 75:4C:57:86:6E:97:AA:DA:AD:75:DE:CC:69:D0:DF:07:2D:50:6E:E7 Certificate issuer: /CN=754c57866e97aadaad75decc69d0df072d506ee7 Certificate serial: 019AF276F435CA1CFB277388D8025547BA81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.mft Manifest number: 023E Signing time: Sat 06 Dec 2025 07:01:13 +0000 Manifest this update: Sat 06 Dec 2025 07:01:13 +0000 Manifest next update: Sun 07 Dec 2025 07:01:13 +0000 Files and hashes: 1: dUxXhm6Xqtqtdd7MadDfBy1Qbuc.crl (hash: /e3uRqXSz9NrkDYHFrqsWROQ1gt9XfyHeIFXLrqQm1o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.mft rsync://rpki.ripe.net/repository/DEFAULT/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:f4:35:ca:1c:fb:27:73:88:d8:02:55:47:ba:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=754c57866e97aadaad75decc69d0df072d506ee7 Validity Not Before: Dec 6 07:01:13 2025 GMT Not After : Dec 7 07:01:13 2025 GMT Subject: CN=e954135c848d7226d56b5a5770574508c05142a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4e:ce:4a:4c:87:dc:14:0e:cd:df:c7:0a:2e: 31:78:be:4a:b0:fb:8c:19:cb:96:53:2c:2d:98:4f: 22:e6:4c:c3:fd:32:46:eb:72:7d:91:a1:db:47:a8: 3e:aa:7d:eb:b8:99:72:00:20:ab:86:af:c6:1f:a6: cd:b7:cd:8a:a4:9e:b6:46:29:8d:60:9b:36:74:f4: 8b:ac:10:a4:7c:d5:27:75:a4:a1:bf:9e:eb:2c:ad: ee:34:78:46:a7:3f:75:28:bf:17:69:9f:6b:6d:d8: 97:bd:6a:ae:81:40:82:97:19:1c:1a:8f:53:78:bd: ca:22:2b:9b:f2:73:09:d9:06:f6:96:81:3a:86:50: f3:d5:38:00:88:ce:51:e9:56:f9:d1:51:fe:3a:b1: d4:2f:5a:08:b7:a0:17:03:f2:fe:a9:7e:3a:db:27: d5:11:20:60:cd:b2:82:a2:0b:71:d1:3f:b7:24:19: a2:f8:13:4d:1f:1b:bd:70:c7:64:38:59:cd:3d:5d: b0:4a:aa:4f:c8:10:09:d1:20:ac:07:4c:4b:80:13: 5a:e7:8e:94:c8:bf:9d:6a:be:f8:4f:8a:f6:a6:eb: f0:0a:8f:e5:5a:73:c1:e2:15:fa:28:cc:b7:1c:fd: 18:e8:1d:b6:41:0c:80:e1:f5:f8:5c:fa:77:0e:7f: 48:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:54:13:5C:84:8D:72:26:D5:6B:5A:57:70:57:45:08:C0:51:42:A7 X509v3 Authority Key Identifier: keyid:75:4C:57:86:6E:97:AA:DA:AD:75:DE:CC:69:D0:DF:07:2D:50:6E:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:3f:e3:4d:78:81:7f:a8:ce:33:6d:2a:db:a0:8a:80:4b:75: c0:e4:8f:ca:d1:41:d8:fd:32:a9:6d:be:59:19:6e:f0:51:36: 32:4e:28:45:60:a1:01:11:51:61:11:b3:e1:28:3b:41:c6:ca: e2:fb:7d:6c:b3:7f:e7:3e:d9:68:4f:2d:d1:1a:04:86:06:3f: 28:bc:55:09:93:71:98:e3:58:da:86:12:f3:6f:50:bc:35:23: 55:75:33:a8:a2:15:90:d5:2a:b4:61:62:e0:42:d1:bd:18:e3: dd:5c:55:dc:30:0c:5f:42:86:ae:cf:d8:68:39:2d:0b:e1:25: 82:1a:a9:a0:0a:6d:65:22:d9:6b:b1:49:e0:d4:f6:9b:60:87: 97:60:e2:0b:6f:0f:a7:5e:d7:6e:eb:7c:c6:f9:02:44:73:e4: 4b:68:c7:7a:c5:e5:a7:43:05:37:5d:1e:b2:1b:44:71:3a:0c: d4:2a:81:44:61:ad:cf:cb:54:0c:9d:6b:70:63:e4:b0:50:22: 13:9a:13:ce:3d:45:b8:06:b7:6e:25:00:1f:12:d2:9d:b4:34: 8f:46:20:f5:76:d5:37:29:eb:cc:ca:0f:07:e3:0f:00:71:e7: 07:b3:24:22:a4:f7:ad:7d:d1:bd:68:35:b9:da:e6:bf:e1:28: 14:27:03:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydvQ1yhz7J3OI2AJVR7qBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1NGM1Nzg2NmU5N2FhZGFhZDc1ZGVjYzY5ZDBkZjA3MmQ1 MDZlZTcwHhcNMjUxMjA2MDcwMTEzWhcNMjUxMjA3MDcwMTEzWjAzMTEwLwYDVQQD EyhlOTU0MTM1Yzg0OGQ3MjI2ZDU2YjVhNTc3MDU3NDUwOGMwNTE0MmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA107OSkyH3BQOzd/HCi4xeL5KsPuM GcuWUywtmE8i5kzD/TJG63J9kaHbR6g+qn3ruJlyACCrhq/GH6bNt82KpJ62RimN YJs2dPSLrBCkfNUndaShv57rLK3uNHhGpz91KL8XaZ9rbdiXvWqugUCClxkcGo9T eL3KIiub8nMJ2Qb2loE6hlDz1TgAiM5R6Vb50VH+OrHUL1oIt6AXA/L+qX462yfV ESBgzbKCogtx0T+3JBmi+BNNHxu9cMdkOFnNPV2wSqpPyBAJ0SCsB0xLgBNa546U yL+dar74T4r2puvwCo/lWnPB4hX6KMy3HP0Y6B22QQyA4fX4XPp3Dn9IuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOlUE1yEjXIm1WtaV3BXRQjAUUKnMB8GA1UdIwQY MBaAFHVMV4Zul6rarXXezGnQ3wctUG7nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFV4WGhtNlhxdHF0ZGQ3TWFkRGZCeTFRYnVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9lM2JiZGYtOTU4NS00NmU1LWI1Y2Mt ZjY4YTU5ZDJmZTBkLzEvZFV4WGhtNlhxdHF0ZGQ3TWFkRGZCeTFRYnVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9lM2JiZGYtOTU4NS00NmU1LWI1Y2MtZjY4YTU5ZDJmZTBk LzEvZFV4WGhtNlhxdHF0ZGQ3TWFkRGZCeTFRYnVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKT/jTXiB f6jOM20q26CKgEt1wOSPytFB2P0yqW2+WRlu8FE2Mk4oRWChARFRYRGz4Sg7QcbK 4vt9bLN/5z7ZaE8t0RoEhgY/KLxVCZNxmONY2oYS829QvDUjVXUzqKIVkNUqtGFi 4ELRvRjj3VxV3DAMX0KGrs/YaDktC+ElghqpoAptZSLZa7FJ4NT2m2CHl2DiC28P p17Xbut8xvkCRHPkS2jHesXlp0MFN10eshtEcToM1CqBRGGtz8tUDJ1rcGPksFAi E5oTzj1FuAa3biUAHxLSnbQ0j0Yg9XbVNynrzMoPB+MPAHHnB7MkIqT3rX3RvWg1 udrmv+EoFCcDxg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:03:29 2025 by rpki-client