This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft File: dcqnmRKIh2aA16yQqFafP8IDh_o.mft (raw, json) Hash identifier: S6nXmT325gcU/D+kJpLHIJu5jsSlb54bvHVh4SYD2+Y= Subject key identifier: B4:1C:D8:28:D7:7B:F3:2D:DB:13:BE:4B:19:7A:3C:34:B3:38:A0:B7 Authority key identifier: 75:CA:A7:99:12:88:87:66:80:D7:AC:90:A8:56:9F:3F:C2:03:87:FA Certificate issuer: /CN=75caa7991288876680d7ac90a8569f3fc20387fa Certificate serial: 019AF19B442719AF972B3217B6A2EFD9E5ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcqnmRKIh2aA16yQqFafP8IDh_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 03:01:15 +0000 Manifest this update: Sat 06 Dec 2025 03:01:15 +0000 Manifest next update: Sun 07 Dec 2025 03:01:15 +0000 Files and hashes: 1: dcqnmRKIh2aA16yQqFafP8IDh_o.crl (hash: 8iGKZufR6kMaiTojarXSRtva9z/XbyqOoKVtZdjrdj0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft rsync://rpki.ripe.net/repository/DEFAULT/dcqnmRKIh2aA16yQqFafP8IDh_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:44:27:19:af:97:2b:32:17:b6:a2:ef:d9:e5:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75caa7991288876680d7ac90a8569f3fc20387fa Validity Not Before: Dec 6 03:01:15 2025 GMT Not After : Dec 7 03:01:15 2025 GMT Subject: CN=b41cd828d77bf32ddb13be4b197a3c34b338a0b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:cf:40:2c:de:bd:5e:75:38:92:f4:de:3a:a2: 93:07:49:0d:cb:2a:9c:57:18:a6:67:09:1a:68:12: 97:45:e1:b8:62:31:8c:d1:c9:91:e7:ec:08:61:8d: 08:8e:c5:b3:0b:f5:67:40:be:c4:e8:7e:ed:e9:70: b8:4d:c2:0b:96:d2:ae:dc:af:79:59:6f:15:14:df: 41:15:7b:2b:ae:f0:25:16:68:23:e9:03:82:ea:85: 58:0f:9b:fa:8e:f7:db:3a:86:41:27:1d:3d:c2:69: 9a:6d:e7:17:50:dd:2b:8a:17:29:b7:14:39:e2:1e: 0d:97:0b:21:fd:b5:dd:05:3d:24:fa:13:ef:58:03: 4d:d5:36:1e:09:7e:ca:bc:73:bb:f4:d2:18:c6:19: 84:a8:84:93:99:63:9e:40:cb:1f:09:ee:67:9b:81: f2:de:eb:89:d3:69:d3:2a:cd:35:e0:98:cd:df:ec: 8b:c5:6f:8f:2f:10:d2:bd:3d:e4:dd:ee:81:d5:f0: 72:93:1d:47:81:0c:00:ec:6c:e7:4b:96:63:2c:c7: e3:0b:07:f4:03:35:50:c9:9d:fe:c0:d1:e1:4a:dd: 6a:71:0f:87:6e:40:32:1d:73:f9:5d:65:57:86:82: d9:a9:dd:82:9e:75:c5:63:c0:0b:56:db:50:a4:43: 3e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:1C:D8:28:D7:7B:F3:2D:DB:13:BE:4B:19:7A:3C:34:B3:38:A0:B7 X509v3 Authority Key Identifier: keyid:75:CA:A7:99:12:88:87:66:80:D7:AC:90:A8:56:9F:3F:C2:03:87:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcqnmRKIh2aA16yQqFafP8IDh_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:6c:8a:3c:62:8c:64:f3:d6:af:8d:56:6a:76:9f:69:c6:03: a2:4b:08:44:14:70:34:ef:0d:b8:7f:8c:80:65:25:b4:71:23: 86:d2:81:00:8d:0f:e4:ec:28:c4:f7:f2:f0:88:01:12:7f:bf: a9:16:c7:cd:5c:24:3b:b2:b3:00:fa:41:39:f0:3a:7d:51:86: 95:fa:8d:ce:3c:66:c5:a1:d5:1a:2a:b2:a1:d2:73:e8:21:f6: 46:66:a9:43:ff:c1:1d:a9:e6:a1:9a:ac:85:34:ac:02:85:9f: 46:7b:df:60:c1:34:5c:c6:fb:80:f3:82:48:e1:c6:82:b0:28: 95:3b:0a:2b:ce:21:de:d1:34:8e:55:3c:7d:79:42:f9:52:75: 2c:00:61:91:d9:eb:2e:84:aa:bb:a9:ee:05:f6:c5:28:ed:a5: 61:df:1f:4d:54:c3:c0:5a:d1:d6:37:db:f4:c8:a0:5d:fd:a9: 12:20:a2:ba:97:2a:e8:fd:34:ab:e0:d1:a1:fb:23:47:ab:a4: bd:9f:60:3e:6d:ea:06:0a:18:43:f3:a7:c7:c7:46:83:0e:8e: 06:00:f9:a2:f1:be:aa:83:11:8f:d9:f2:86:44:c4:14:b7:1f: 74:99:bf:69:45:d7:59:42:4e:8c:6e:34:24:e9:ef:ce:04:12: b1:0b:79:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm0QnGa+XKzIXtqLv2eXtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1Y2FhNzk5MTI4ODg3NjY4MGQ3YWM5MGE4NTY5ZjNmYzIw Mzg3ZmEwHhcNMjUxMjA2MDMwMTE1WhcNMjUxMjA3MDMwMTE1WjAzMTEwLwYDVQQD EyhiNDFjZDgyOGQ3N2JmMzJkZGIxM2JlNGIxOTdhM2MzNGIzMzhhMGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0s9ALN69XnU4kvTeOqKTB0kNyyqc VximZwkaaBKXReG4YjGM0cmR5+wIYY0IjsWzC/VnQL7E6H7t6XC4TcILltKu3K95 WW8VFN9BFXsrrvAlFmgj6QOC6oVYD5v6jvfbOoZBJx09wmmabecXUN0rihcptxQ5 4h4Nlwsh/bXdBT0k+hPvWANN1TYeCX7KvHO79NIYxhmEqISTmWOeQMsfCe5nm4Hy 3uuJ02nTKs014JjN3+yLxW+PLxDSvT3k3e6B1fBykx1HgQwA7GznS5ZjLMfjCwf0 AzVQyZ3+wNHhSt1qcQ+HbkAyHXP5XWVXhoLZqd2CnnXFY8ALVttQpEM+iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLQc2CjXe/Mt2xO+Sxl6PDSzOKC3MB8GA1UdIwQY MBaAFHXKp5kSiIdmgNeskKhWnz/CA4f6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGNxbm1SS0loMmFBMTZ5UXFGYWZQOElEaF9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8yNzU0ZGUtYTVkNS00ODdmLTlmZGQt YzMzYjM2NDRkZDNmLzEvZGNxbm1SS0loMmFBMTZ5UXFGYWZQOElEaF9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8yNzU0ZGUtYTVkNS00ODdmLTlmZGQtYzMzYjM2NDRkZDNm LzEvZGNxbm1SS0loMmFBMTZ5UXFGYWZQOElEaF9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsGyKPGKM ZPPWr41WanafacYDoksIRBRwNO8NuH+MgGUltHEjhtKBAI0P5OwoxPfy8IgBEn+/ qRbHzVwkO7KzAPpBOfA6fVGGlfqNzjxmxaHVGiqyodJz6CH2RmapQ//BHanmoZqs hTSsAoWfRnvfYME0XMb7gPOCSOHGgrAolTsKK84h3tE0jlU8fXlC+VJ1LABhkdnr LoSqu6nuBfbFKO2lYd8fTVTDwFrR1jfb9MigXf2pEiCiupcq6P00q+DRofsjR6uk vZ9gPm3qBgoYQ/Onx8dGgw6OBgD5ovG+qoMRj9nyhkTEFLcfdJm/aUXXWUJOjG40 JOnvzgQSsQt59Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:36:52 2025 by rpki-client