This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft File: dQrGfFd2g13wkZmDEJYOg8I9ncY.mft (raw, json) Hash identifier: yP9vwPUXkAc3G/whgiDhpFJoeJmELNTku0hPW6KY+jw= Subject key identifier: 9B:2B:7F:E1:DF:54:AE:4D:63:03:72:FE:84:E0:1E:F3:A7:B8:99:FA Authority key identifier: 75:0A:C6:7C:57:76:83:5D:F0:91:99:83:10:96:0E:83:C2:3D:9D:C6 Certificate issuer: /CN=750ac67c5776835df091998310960e83c23d9dc6 Certificate serial: 019AF19A9E3A7F2948A450570AA3FDA155C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft Manifest number: 0B4C Signing time: Sat 06 Dec 2025 03:00:33 +0000 Manifest this update: Sat 06 Dec 2025 03:00:33 +0000 Manifest next update: Sun 07 Dec 2025 03:00:33 +0000 Files and hashes: 1: dQrGfFd2g13wkZmDEJYOg8I9ncY.crl (hash: gjr8tGlnJMGiI91mfnb43S3deUtUBFuAMZFh7w7cL6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:9e:3a:7f:29:48:a4:50:57:0a:a3:fd:a1:55:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=750ac67c5776835df091998310960e83c23d9dc6 Validity Not Before: Dec 6 03:00:33 2025 GMT Not After : Dec 7 03:00:33 2025 GMT Subject: CN=9b2b7fe1df54ae4d630372fe84e01ef3a7b899fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a3:27:d6:5b:c8:f4:9f:85:47:38:ad:a9:bf: ce:2f:99:1f:f6:ea:c6:e5:5b:ec:d0:12:83:73:ad: 01:a6:33:8e:bb:ad:9a:d9:c4:27:b9:49:04:52:a0: 4b:56:55:f2:c9:14:a8:da:35:92:87:2f:c1:40:15: 44:12:2a:d9:4c:c1:4c:08:5a:8a:39:61:97:ee:0c: fc:dc:97:da:1d:7b:67:27:0d:c4:ac:62:dc:2a:fe: de:0f:b3:17:a9:9f:4b:1e:17:9c:f0:a8:6f:53:c7: 0e:f8:62:27:a6:e2:e2:40:ac:ed:ab:71:60:65:eb: cf:36:5d:d4:f5:60:1b:6c:ab:35:fb:3d:a7:58:7a: 54:9e:83:35:1b:17:82:47:5a:05:42:11:8d:68:51: d6:aa:87:97:c9:90:39:b9:9c:48:56:7e:b7:45:73: 37:eb:2c:dc:15:59:e7:f2:12:8b:f4:d5:ac:06:c2: 4d:f5:17:39:f6:6f:86:80:26:d8:20:62:15:eb:e8: 76:ff:6a:cb:89:4d:c7:df:8d:b3:85:09:10:a8:7c: 37:af:4a:bd:90:84:e4:4a:7c:66:d1:80:1c:bb:ed: b2:d4:89:60:e5:18:56:a9:b3:4a:aa:52:87:3a:e3: 61:56:61:f8:7a:fa:1a:14:65:c9:a7:66:c9:a1:d9: aa:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:2B:7F:E1:DF:54:AE:4D:63:03:72:FE:84:E0:1E:F3:A7:B8:99:FA X509v3 Authority Key Identifier: keyid:75:0A:C6:7C:57:76:83:5D:F0:91:99:83:10:96:0E:83:C2:3D:9D:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:03:e3:d0:68:39:1d:39:15:3c:20:08:4a:57:34:bf:23:f7: 97:80:c3:b3:03:79:a7:b4:22:27:92:be:63:58:c0:7f:60:67: 04:d4:4d:ba:c2:1e:cf:9f:1b:0d:6a:58:76:2f:3d:8c:c9:e7: 4c:11:e9:8e:bc:a0:fb:9a:76:1e:61:32:2a:50:8e:08:d9:38: 07:1e:2c:92:39:1e:99:48:f6:29:59:8f:73:22:25:e0:57:1d: 39:fe:21:f9:e3:23:75:43:8b:2e:92:bf:3e:d3:91:c5:d9:f9: 89:3f:02:01:e3:c1:a4:6b:d0:ad:ac:e0:86:05:1e:d0:fe:cb: 2b:fe:db:f9:1c:54:6a:96:c9:7b:4d:63:8f:0b:1a:0d:e8:5f: 5e:d6:f0:7a:c7:e2:ae:2b:74:99:f2:59:22:8c:db:f9:4c:f9: 0f:46:f8:8b:8f:1e:3e:76:52:72:d8:92:94:82:f3:f6:b4:a2: 13:4e:1d:aa:43:a1:3a:e5:ca:48:32:f9:4a:c9:ef:f3:26:50: 0d:0d:4f:e3:65:0d:fe:5b:f1:37:47:56:a8:e5:77:a7:33:3a: 54:63:a8:57:f3:e4:62:b2:54:f6:c5:86:f2:3f:7b:aa:5e:00: f0:95:e4:7a:ea:48:36:18:97:e8:7e:f8:e2:e1:bc:79:26:94: 5b:50:77:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmp46fylIpFBXCqP9oVXHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MGFjNjdjNTc3NjgzNWRmMDkxOTk4MzEwOTYwZTgzYzIz ZDlkYzYwHhcNMjUxMjA2MDMwMDMzWhcNMjUxMjA3MDMwMDMzWjAzMTEwLwYDVQQD Eyg5YjJiN2ZlMWRmNTRhZTRkNjMwMzcyZmU4NGUwMWVmM2E3Yjg5OWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6Mn1lvI9J+FRzitqb/OL5kf9urG 5Vvs0BKDc60BpjOOu62a2cQnuUkEUqBLVlXyyRSo2jWShy/BQBVEEirZTMFMCFqK OWGX7gz83JfaHXtnJw3ErGLcKv7eD7MXqZ9LHhec8KhvU8cO+GInpuLiQKztq3Fg ZevPNl3U9WAbbKs1+z2nWHpUnoM1GxeCR1oFQhGNaFHWqoeXyZA5uZxIVn63RXM3 6yzcFVnn8hKL9NWsBsJN9Rc59m+GgCbYIGIV6+h2/2rLiU3H342zhQkQqHw3r0q9 kITkSnxm0YAcu+2y1Ilg5RhWqbNKqlKHOuNhVmH4evoaFGXJp2bJodmqrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJsrf+HfVK5NYwNy/oTgHvOnuJn6MB8GA1UdIwQY MBaAFHUKxnxXdoNd8JGZgxCWDoPCPZ3GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFFyR2ZGZDJnMTN3a1ptREVKWU9nOEk5bmNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS83Mjc3OGItYzA3Zi00OWJiLTllMWQt MWYwYjAzNTQ0ODEwLzEvZFFyR2ZGZDJnMTN3a1ptREVKWU9nOEk5bmNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS83Mjc3OGItYzA3Zi00OWJiLTllMWQtMWYwYjAzNTQ0ODEw LzEvZFFyR2ZGZDJnMTN3a1ptREVKWU9nOEk5bmNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVwPj0Gg5 HTkVPCAISlc0vyP3l4DDswN5p7QiJ5K+Y1jAf2BnBNRNusIez58bDWpYdi89jMnn TBHpjryg+5p2HmEyKlCOCNk4Bx4skjkemUj2KVmPcyIl4FcdOf4h+eMjdUOLLpK/ PtORxdn5iT8CAePBpGvQrazghgUe0P7LK/7b+RxUapbJe01jjwsaDehfXtbwesfi rit0mfJZIozb+Uz5D0b4i48ePnZSctiSlILz9rSiE04dqkOhOuXKSDL5Ssnv8yZQ DQ1P42UN/lvxN0dWqOV3pzM6VGOoV/PkYrJU9sWG8j97ql4A8JXkeupINhiX6H74 4uG8eSaUW1B3Ow== -----END CERTIFICATE-----Generated at Sat Dec 6 13:35:15 2025 by rpki-client