This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft File: RDtnudTJnHJeNX2BdPt-AkoVAuI.mft (raw, json) Hash identifier: dm4SqYM3QxkQ/+Rzfzg9VyqhOsV2slJeaKMG9lY2jYs= Subject key identifier: 41:52:4A:0B:27:0C:1F:15:80:32:A3:65:C1:A7:A6:FD:71:12:8C:47 Authority key identifier: 44:3B:67:B9:D4:C9:9C:72:5E:35:7D:81:74:FB:7E:02:4A:15:02:E2 Certificate issuer: /CN=443b67b9d4c99c725e357d8174fb7e024a1502e2 Certificate serial: 019AF31D781CC27EF54BE74A63A3E8D52546 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft Manifest number: 07ED Signing time: Sat 06 Dec 2025 10:03:05 +0000 Manifest this update: Sat 06 Dec 2025 10:03:05 +0000 Manifest next update: Sun 07 Dec 2025 10:03:05 +0000 Files and hashes: 1: RDtnudTJnHJeNX2BdPt-AkoVAuI.crl (hash: 5Pz5tRcZ5/U3IpSpuDZ3RbQF74mAM1bjPj1EOcXvhOU=) 2: ys9tkINh9OH6_Tn4SwpKbQKk59U.roa (hash: HKpYNrP2A2wFiOa+MzSBN+sOxWHoc3QcnpQXA9RSqDI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.crl rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:03:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:78:1c:c2:7e:f5:4b:e7:4a:63:a3:e8:d5:25:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=443b67b9d4c99c725e357d8174fb7e024a1502e2 Validity Not Before: Dec 6 10:03:05 2025 GMT Not After : Dec 7 10:03:05 2025 GMT Subject: CN=41524a0b270c1f158032a365c1a7a6fd71128c47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b3:fd:96:02:e7:aa:e2:08:72:4d:9e:a5:19: b4:5d:07:b9:ae:50:13:5b:ef:6b:05:8b:d3:8b:df: 8e:65:22:67:13:02:84:91:17:01:02:14:05:1e:47: 41:44:26:ee:cb:9d:bc:4e:ac:a3:66:8d:fc:be:04: 92:e5:32:94:98:c0:51:de:b2:0c:18:cb:72:d9:94: a1:a0:48:a4:46:5b:fc:0c:2a:f2:28:3a:16:ff:d6: ee:26:28:dd:1d:d4:fe:db:56:04:70:6e:73:4d:45: f0:60:3e:47:b4:16:39:20:d9:8a:58:73:d5:dd:8e: a7:64:ce:ae:b5:c9:26:07:95:b0:24:9d:73:1d:9f: f5:5d:74:f3:db:6a:12:c0:4e:b9:57:f7:c7:bb:44: 7f:71:62:a8:be:d0:c9:19:b2:db:a1:bb:2d:88:21: 9c:bb:d1:0f:ca:f3:68:08:b3:4e:ec:0d:c1:f3:57: ae:fb:36:f3:91:95:d9:97:8d:72:69:39:b6:47:58: 04:5e:6b:f9:cd:15:8d:df:05:84:f3:99:f1:f9:e7: 9b:b9:53:d6:5a:b6:4e:24:21:5d:62:e3:8c:40:b7: 70:ff:54:16:5b:f2:36:1b:07:11:30:62:e0:a4:8d: df:75:0e:b1:27:dc:2b:27:71:22:e4:76:1f:a4:05: 32:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:52:4A:0B:27:0C:1F:15:80:32:A3:65:C1:A7:A6:FD:71:12:8C:47 X509v3 Authority Key Identifier: keyid:44:3B:67:B9:D4:C9:9C:72:5E:35:7D:81:74:FB:7E:02:4A:15:02:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:32:72:7e:1f:3b:12:79:45:68:ac:1c:94:fd:02:1a:2c:e1: 4b:03:f7:a9:e0:40:a3:8a:dc:e0:3f:7d:f7:f2:a6:56:9b:7d: 12:75:bf:5a:4f:61:f9:5e:b1:e7:24:97:4b:51:07:03:ad:20: df:b4:ac:9e:b0:82:d5:91:e7:61:1e:81:f7:20:84:c9:c2:3a: a8:73:cf:b1:9c:02:4d:82:81:36:49:96:12:40:de:31:77:b6: da:af:3d:f1:94:d4:35:97:e6:12:ef:2b:d4:e5:30:85:90:20: d1:c6:5a:af:c1:29:aa:a4:b3:a0:fd:b9:fb:f3:14:ef:62:9d: 87:99:29:75:ba:f0:b1:13:08:39:08:73:67:52:be:c5:59:ec: ab:3d:36:fe:05:09:43:fe:44:ec:2d:b3:9c:0b:87:e5:55:7d: 75:31:8e:97:92:55:73:7d:8d:0f:b4:50:8b:bb:d0:d8:ba:c5: 84:e1:94:a2:d2:9a:89:8d:d9:44:e0:62:e6:45:3d:c9:4e:d2: ef:3a:3d:e6:2c:c1:05:28:58:06:60:3e:6f:a5:67:3b:17:e8: 54:e1:6d:55:26:8f:bd:8e:26:f4:c1:89:92:39:27:be:6d:4c: 1f:10:79:5e:ec:16:53:3d:9f:e0:37:fb:88:80:9c:66:6b:2c: de:71:eb:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHXgcwn71S+dKY6Po1SVGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0M2I2N2I5ZDRjOTljNzI1ZTM1N2Q4MTc0ZmI3ZTAyNGEx NTAyZTIwHhcNMjUxMjA2MTAwMzA1WhcNMjUxMjA3MTAwMzA1WjAzMTEwLwYDVQQD Eyg0MTUyNGEwYjI3MGMxZjE1ODAzMmEzNjVjMWE3YTZmZDcxMTI4YzQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbP9lgLnquIIck2epRm0XQe5rlAT W+9rBYvTi9+OZSJnEwKEkRcBAhQFHkdBRCbuy528TqyjZo38vgSS5TKUmMBR3rIM GMty2ZShoEikRlv8DCryKDoW/9buJijdHdT+21YEcG5zTUXwYD5HtBY5INmKWHPV 3Y6nZM6utckmB5WwJJ1zHZ/1XXTz22oSwE65V/fHu0R/cWKovtDJGbLbobstiCGc u9EPyvNoCLNO7A3B81eu+zbzkZXZl41yaTm2R1gEXmv5zRWN3wWE85nx+eebuVPW WrZOJCFdYuOMQLdw/1QWW/I2GwcRMGLgpI3fdQ6xJ9wrJ3Ei5HYfpAUy9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEFSSgsnDB8VgDKjZcGnpv1xEoxHMB8GA1UdIwQY MBaAFEQ7Z7nUyZxyXjV9gXT7fgJKFQLiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkR0bnVkVEpuSEplTlgyQmRQdC1Ba29WQXVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9lZWRlMzgtOTJhMi00NjJkLWIyNTIt YzgzYjVmYzI2NTQ1LzEvUkR0bnVkVEpuSEplTlgyQmRQdC1Ba29WQXVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9lZWRlMzgtOTJhMi00NjJkLWIyNTItYzgzYjVmYzI2NTQ1 LzEvUkR0bnVkVEpuSEplTlgyQmRQdC1Ba29WQXVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJTJyfh87 EnlFaKwclP0CGizhSwP3qeBAo4rc4D999/KmVpt9EnW/Wk9h+V6x5ySXS1EHA60g 37SsnrCC1ZHnYR6B9yCEycI6qHPPsZwCTYKBNkmWEkDeMXe22q898ZTUNZfmEu8r 1OUwhZAg0cZar8EpqqSzoP25+/MU72Kdh5kpdbrwsRMIOQhzZ1K+xVnsqz02/gUJ Q/5E7C2znAuH5VV9dTGOl5JVc32ND7RQi7vQ2LrFhOGUotKaiY3ZROBi5kU9yU7S 7zo95izBBShYBmA+b6VnOxfoVOFtVSaPvY4m9MGJkjknvm1MHxB5XuwWUz2f4Df7 iICcZmss3nHr3w== -----END CERTIFICATE-----Generated at Sat Dec 6 16:30:24 2025 by rpki-client