This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft File: DtjJoWGXLWi0RTPg4x9R5NzlunU.mft (raw, json) Hash identifier: mVtSicmmCEO2/v5RhEwj0fB6jMW8AZAG3Cj2ropXvjE= Subject key identifier: FE:95:19:77:FF:9D:9A:0D:49:65:62:6F:DA:BE:3E:00:22:1C:79:11 Authority key identifier: 0E:D8:C9:A1:61:97:2D:68:B4:45:33:E0:E3:1F:51:E4:DC:E5:BA:75 Certificate issuer: /CN=0ed8c9a161972d68b44533e0e31f51e4dce5ba75 Certificate serial: 019AF509A907F3ED36BC836D8EFA4158C461 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 19:00:42 +0000 Manifest this update: Sat 06 Dec 2025 19:00:42 +0000 Manifest next update: Sun 07 Dec 2025 19:00:42 +0000 Files and hashes: 1: DtjJoWGXLWi0RTPg4x9R5NzlunU.crl (hash: v5bP6c/Oz6BqDenmc4g70Tj8Onyrg+LcCZ1lUZnquu4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:a9:07:f3:ed:36:bc:83:6d:8e:fa:41:58:c4:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ed8c9a161972d68b44533e0e31f51e4dce5ba75 Validity Not Before: Dec 6 19:00:42 2025 GMT Not After : Dec 7 19:00:42 2025 GMT Subject: CN=fe951977ff9d9a0d4965626fdabe3e00221c7911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f8:af:41:f4:26:b6:59:dc:28:d0:46:1e:6a: cd:d9:79:f7:e7:64:c3:43:4e:ef:48:d2:63:d5:34: 84:76:e2:48:3e:50:ba:14:ca:1f:80:a0:e2:97:06: 00:0e:87:90:03:74:4d:04:9a:c9:34:7c:48:9d:99: 1f:d7:57:54:1d:e5:c1:2e:99:77:49:23:35:34:b8: d8:0e:75:4e:84:9a:25:84:74:8c:a3:e5:10:dc:6c: b6:93:fd:66:1c:37:74:cd:11:e3:58:d7:93:e8:55: b0:4e:73:6a:a2:1b:84:80:dd:bc:d8:f7:2e:64:df: f3:7f:3a:90:7b:b1:8a:c6:3b:8c:7c:86:98:8e:a3: 4c:06:86:af:37:12:f7:c9:4f:d6:f2:54:b1:2c:9a: 4a:bf:84:6f:2a:db:ba:76:a1:43:6d:f6:9f:3d:da: 2a:75:d6:6a:cc:27:6c:8a:5a:af:8a:f5:94:d1:fc: 90:07:b3:9d:c4:c5:a8:00:be:e3:fa:38:0a:0a:ff: 28:38:d6:fa:b3:09:96:a4:1d:7c:62:65:01:68:99: e8:01:49:ac:60:34:9d:87:67:6d:f2:c8:da:57:c1: bd:c1:a9:4b:5b:b3:88:2e:23:96:4f:e6:a3:23:71: 60:80:68:ac:ac:66:8d:f1:36:7f:fd:12:1c:11:c2: 92:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:95:19:77:FF:9D:9A:0D:49:65:62:6F:DA:BE:3E:00:22:1C:79:11 X509v3 Authority Key Identifier: keyid:0E:D8:C9:A1:61:97:2D:68:B4:45:33:E0:E3:1F:51:E4:DC:E5:BA:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:5d:e9:c8:d9:77:0e:2f:d7:67:93:04:41:0d:0d:b4:ad:8c: 18:7a:79:de:10:af:20:56:e5:2e:ab:a5:b4:1f:c2:22:13:00: e7:de:66:b1:16:f8:fe:ee:6d:34:a9:b7:06:8c:78:f0:db:6f: e5:04:72:8c:5e:99:44:60:ff:b3:b5:c5:13:ce:dc:82:b0:47: 57:8a:e2:00:c5:35:cd:33:35:f7:99:11:2b:2a:85:dd:16:2a: 2a:6f:1e:10:43:29:92:01:98:a3:d3:72:dc:b8:2a:ca:93:35: df:11:bf:c5:9c:b8:ac:cf:81:64:42:4b:87:df:6d:4f:3d:24: 85:94:da:25:28:73:ef:19:38:41:c9:c5:af:7d:a7:32:26:05: 50:cb:45:73:1a:d6:a6:71:b5:ef:5a:66:01:99:99:ca:18:85: 97:5d:6c:73:6f:a9:6e:26:7e:2a:01:9b:6f:57:f8:98:87:82: 8f:33:d9:9a:29:80:f3:a2:3b:68:95:d4:50:32:9e:53:51:00: d5:2b:09:0b:af:54:b1:88:50:97:c0:50:a9:31:11:ed:92:d3: b2:4a:90:80:6b:a9:c2:35:70:12:32:1d:5b:5c:14:b5:de:1e: f1:f1:09:57:02:36:0c:2a:54:57:a1:aa:1a:b9:e2:bd:eb:57: fd:0d:60:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CakH8+02vINtjvpBWMRhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlZDhjOWExNjE5NzJkNjhiNDQ1MzNlMGUzMWY1MWU0ZGNl NWJhNzUwHhcNMjUxMjA2MTkwMDQyWhcNMjUxMjA3MTkwMDQyWjAzMTEwLwYDVQQD EyhmZTk1MTk3N2ZmOWQ5YTBkNDk2NTYyNmZkYWJlM2UwMDIyMWM3OTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vivQfQmtlncKNBGHmrN2Xn352TD Q07vSNJj1TSEduJIPlC6FMofgKDilwYADoeQA3RNBJrJNHxInZkf11dUHeXBLpl3 SSM1NLjYDnVOhJolhHSMo+UQ3Gy2k/1mHDd0zRHjWNeT6FWwTnNqohuEgN282Pcu ZN/zfzqQe7GKxjuMfIaYjqNMBoavNxL3yU/W8lSxLJpKv4RvKtu6dqFDbfafPdoq ddZqzCdsilqvivWU0fyQB7OdxMWoAL7j+jgKCv8oONb6swmWpB18YmUBaJnoAUms YDSdh2dt8sjaV8G9walLW7OILiOWT+ajI3FggGisrGaN8TZ//RIcEcKSsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP6VGXf/nZoNSWVib9q+PgAiHHkRMB8GA1UdIwQY MBaAFA7YyaFhly1otEUz4OMfUeTc5bp1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHRqSm9XR1hMV2kwUlRQZzR4OVI1TnpsdW5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi83NDJkMzUtODI3NC00OWFmLWJjMTIt ZGE4NWM1NzMyYjg1LzEvRHRqSm9XR1hMV2kwUlRQZzR4OVI1TnpsdW5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi83NDJkMzUtODI3NC00OWFmLWJjMTItZGE4NWM1NzMyYjg1 LzEvRHRqSm9XR1hMV2kwUlRQZzR4OVI1TnpsdW5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG13pyNl3 Di/XZ5MEQQ0NtK2MGHp53hCvIFblLqultB/CIhMA595msRb4/u5tNKm3Box48Ntv 5QRyjF6ZRGD/s7XFE87cgrBHV4riAMU1zTM195kRKyqF3RYqKm8eEEMpkgGYo9Ny 3LgqypM13xG/xZy4rM+BZEJLh99tTz0khZTaJShz7xk4QcnFr32nMiYFUMtFcxrW pnG171pmAZmZyhiFl11sc2+pbiZ+KgGbb1f4mIeCjzPZmimA86I7aJXUUDKeU1EA 1SsJC69UsYhQl8BQqTER7ZLTskqQgGupwjVwEjIdW1wUtd4e8fEJVwI2DCpUV6Gq GrnivetX/Q1gwQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:56:56 2025 by rpki-client