This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft File: dUE1hHAyFWSttCp213OuPK57vVY.mft (raw, json) Hash identifier: /bpA2MKFInz+Kme0JsVu2xZ4Sozdjy53mQ71L8qFGpQ= Subject key identifier: AC:B9:A0:66:B5:16:D7:F3:97:7C:8E:1C:2C:4C:64:E2:A4:1F:3F:41 Authority key identifier: 75:41:35:84:70:32:15:64:AD:B4:2A:76:D7:73:AE:3C:AE:7B:BD:56 Certificate issuer: /CN=7541358470321564adb42a76d773ae3cae7bbd56 Certificate serial: 019AF12E48771FA0DFBA01B3B55FC087C79C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft Manifest number: 05AC Signing time: Sat 06 Dec 2025 01:02:13 +0000 Manifest this update: Sat 06 Dec 2025 01:02:13 +0000 Manifest next update: Sun 07 Dec 2025 01:02:13 +0000 Files and hashes: 1: dUE1hHAyFWSttCp213OuPK57vVY.crl (hash: 1BLEaV6XPVDvP/wZ9tg60luXI7fH3EBzvAXu4hqAKWs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:48:77:1f:a0:df:ba:01:b3:b5:5f:c0:87:c7:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7541358470321564adb42a76d773ae3cae7bbd56 Validity Not Before: Dec 6 01:02:13 2025 GMT Not After : Dec 7 01:02:13 2025 GMT Subject: CN=acb9a066b516d7f3977c8e1c2c4c64e2a41f3f41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8b:8e:cb:39:05:e5:89:ca:8b:5e:e6:c3:d9: a6:d2:00:e1:f1:03:ab:4f:81:9e:1f:5f:57:2a:67: 4f:22:0a:8b:24:d1:a4:90:41:2e:93:c0:bc:33:4e: 99:c2:bc:a7:25:ff:f1:42:ac:45:4e:33:1d:f8:4c: 75:fd:60:94:7c:1d:37:50:b1:e6:bd:5f:a4:f5:97: c8:6a:b3:f5:d1:8a:5f:ca:55:f1:64:37:a8:7d:cb: c1:88:e6:6d:59:6c:c6:9a:64:8c:ac:4a:05:8b:56: 26:9f:e5:1c:62:e6:cc:b5:fe:cd:90:61:a7:50:32: 3b:45:61:52:0e:6f:e4:8e:90:f9:f4:97:67:2f:e9: cb:fb:9c:fd:cc:a2:b4:7b:9e:86:68:9a:fe:60:4b: 7c:f8:9c:f9:72:43:68:09:48:3c:97:eb:e5:60:b9: 41:7a:c1:e9:e1:5f:44:ae:35:64:44:fa:14:d6:91: 6f:06:ed:98:f9:c2:bf:fc:55:34:9c:73:a6:59:12: 69:40:59:9a:50:71:48:08:e0:d4:c6:36:fd:bd:5e: 36:ad:6c:96:f2:95:e4:59:40:86:d3:26:6c:22:3d: 3d:ff:3f:a2:1c:f9:66:17:55:cf:8d:77:c8:1b:85: dc:3a:d5:f7:ab:fb:b9:9e:70:d1:cb:3b:da:3b:ed: e0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:B9:A0:66:B5:16:D7:F3:97:7C:8E:1C:2C:4C:64:E2:A4:1F:3F:41 X509v3 Authority Key Identifier: keyid:75:41:35:84:70:32:15:64:AD:B4:2A:76:D7:73:AE:3C:AE:7B:BD:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:66:42:c5:c8:73:c4:6a:23:73:71:b1:95:d9:5e:33:c1:1f: e2:23:ec:c9:a6:ab:cf:e2:11:14:3b:05:2f:b9:c0:22:dc:c5: 72:9a:d2:2a:c8:ad:93:1a:0f:74:0e:89:44:07:32:a5:e4:4d: a6:8f:10:05:71:55:79:bb:e5:45:e6:0e:32:4f:68:c4:49:fa: 8b:70:63:2e:b4:48:99:b9:5a:07:17:9e:af:52:5d:08:91:37: 27:f7:2f:db:ce:33:6c:7f:03:86:05:60:a1:1c:7c:e5:c7:d4: f3:cb:31:47:7a:93:04:fc:34:ed:2e:b0:de:76:3f:0c:2b:cb: fd:e2:53:e5:c8:1b:60:12:59:90:a8:64:fe:7f:df:73:7f:bb: 54:22:43:1e:c7:c9:2c:f2:86:6f:02:3d:d1:7e:21:a1:bf:b8: f7:74:dc:ec:e7:b9:76:95:5c:3a:31:a2:67:07:83:3f:e1:28: 9c:a3:c2:40:7d:d8:02:f2:66:19:79:62:3d:32:eb:1e:b5:03: d5:5b:85:49:a7:9d:79:71:3b:e7:5c:0b:b4:52:ce:87:ea:74: da:b5:6a:13:77:27:65:32:01:5d:26:a3:d3:33:f4:a3:f2:e5: 9b:1b:27:9c:30:a3:a4:9d:91:95:e8:15:d9:33:e7:12:af:e4: 51:d2:07:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLkh3H6DfugGztV/Ah8ecMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1NDEzNTg0NzAzMjE1NjRhZGI0MmE3NmQ3NzNhZTNjYWU3 YmJkNTYwHhcNMjUxMjA2MDEwMjEzWhcNMjUxMjA3MDEwMjEzWjAzMTEwLwYDVQQD EyhhY2I5YTA2NmI1MTZkN2YzOTc3YzhlMWMyYzRjNjRlMmE0MWYzZjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4uOyzkF5YnKi17mw9mm0gDh8QOr T4GeH19XKmdPIgqLJNGkkEEuk8C8M06ZwrynJf/xQqxFTjMd+Ex1/WCUfB03ULHm vV+k9ZfIarP10YpfylXxZDeofcvBiOZtWWzGmmSMrEoFi1Ymn+UcYubMtf7NkGGn UDI7RWFSDm/kjpD59JdnL+nL+5z9zKK0e56GaJr+YEt8+Jz5ckNoCUg8l+vlYLlB esHp4V9ErjVkRPoU1pFvBu2Y+cK//FU0nHOmWRJpQFmaUHFICODUxjb9vV42rWyW 8pXkWUCG0yZsIj09/z+iHPlmF1XPjXfIG4XcOtX3q/u5nnDRyzvaO+3gDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKy5oGa1Ftfzl3yOHCxMZOKkHz9BMB8GA1UdIwQY MBaAFHVBNYRwMhVkrbQqdtdzrjyue71WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFVFMWhIQXlGV1N0dENwMjEzT3VQSzU3dlZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9jMTYwNDMtYTNkZS00YWIzLTllNTYt ODI2NWE5NmU0MjBkLzEvZFVFMWhIQXlGV1N0dENwMjEzT3VQSzU3dlZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9jMTYwNDMtYTNkZS00YWIzLTllNTYtODI2NWE5NmU0MjBk LzEvZFVFMWhIQXlGV1N0dENwMjEzT3VQSzU3dlZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABGZCxchz xGojc3GxldleM8Ef4iPsyaarz+IRFDsFL7nAItzFcprSKsitkxoPdA6JRAcypeRN po8QBXFVebvlReYOMk9oxEn6i3BjLrRImblaBxeer1JdCJE3J/cv284zbH8DhgVg oRx85cfU88sxR3qTBPw07S6w3nY/DCvL/eJT5cgbYBJZkKhk/n/fc3+7VCJDHsfJ LPKGbwI90X4hob+493Tc7Oe5dpVcOjGiZweDP+EonKPCQH3YAvJmGXliPTLrHrUD 1VuFSaedeXE751wLtFLOh+p02rVqE3cnZTIBXSaj0zP0o/LlmxsnnDCjpJ2RlegV 2TPnEq/kUdIHDw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:58:44 2025 by rpki-client