This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/818ac5-93dd-40fd-bf6f-e04f8fcc2ca1/1/dXHIkpmbtFZLzkgMkhtv8XIF7MY.mft File: dXHIkpmbtFZLzkgMkhtv8XIF7MY.mft (raw, json) Hash identifier: GL4dBwGmVQuETUrUQopitTSrdY6Xds5Nu+gU0QMywdk= Subject key identifier: D2:7D:A7:28:DA:A4:10:44:B5:8F:81:EE:43:61:F2:A5:2B:92:21:8D Authority key identifier: 75:71:C8:92:99:9B:B4:56:4B:CE:48:0C:92:1B:6F:F1:72:05:EC:C6 Certificate issuer: /CN=7571c892999bb4564bce480c921b6ff17205ecc6 Certificate serial: 019AF2093CE3B38EE148EBFB45F50BF52F0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXHIkpmbtFZLzkgMkhtv8XIF7MY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/818ac5-93dd-40fd-bf6f-e04f8fcc2ca1/1/dXHIkpmbtFZLzkgMkhtv8XIF7MY.mft Manifest number: 0740 Signing time: Sat 06 Dec 2025 05:01:22 +0000 Manifest this update: Sat 06 Dec 2025 05:01:22 +0000 Manifest next update: Sun 07 Dec 2025 05:01:22 +0000 Files and hashes: 1: dXHIkpmbtFZLzkgMkhtv8XIF7MY.crl (hash: rH+2ap5gHSE/r4peThbG2NqoBfV0cCw7+R+M8CP71R0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/818ac5-93dd-40fd-bf6f-e04f8fcc2ca1/1/dXHIkpmbtFZLzkgMkhtv8XIF7MY.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/818ac5-93dd-40fd-bf6f-e04f8fcc2ca1/1/dXHIkpmbtFZLzkgMkhtv8XIF7MY.mft rsync://rpki.ripe.net/repository/DEFAULT/dXHIkpmbtFZLzkgMkhtv8XIF7MY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:3c:e3:b3:8e:e1:48:eb:fb:45:f5:0b:f5:2f:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7571c892999bb4564bce480c921b6ff17205ecc6 Validity Not Before: Dec 6 05:01:22 2025 GMT Not After : Dec 7 05:01:22 2025 GMT Subject: CN=d27da728daa41044b58f81ee4361f2a52b92218d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ea:7e:3e:9f:70:ab:18:98:ed:00:c1:c1:60: d6:40:1f:65:80:06:8a:72:4f:07:d1:33:cd:e6:b8: 2f:71:e5:78:ff:73:15:96:e5:5f:ac:c3:3b:ff:af: 2e:9d:ee:05:c2:d6:75:36:52:d0:e4:69:3c:89:87: 7f:7b:ab:15:9b:1b:b8:ad:0e:75:fa:40:46:f8:59: 7c:d2:1e:28:f5:96:4f:4c:d6:dc:00:1a:00:cc:52: d2:ee:ed:c1:f9:a4:c9:bf:b4:bd:df:0b:bb:a1:f9: 71:5d:66:28:71:4c:48:b2:5b:3a:c3:90:7f:0b:75: 95:9a:4d:d3:ea:4e:06:08:16:a1:7c:15:73:4d:ed: 0f:73:53:e5:58:de:86:3f:7e:44:39:08:c1:2a:1a: ca:20:7c:4a:37:83:60:82:6b:9e:8c:5f:22:71:ed: a6:b8:58:98:3e:a4:4d:5d:97:dd:91:d4:37:ac:97: 22:a3:24:84:2d:07:3e:a0:27:b6:c8:b2:ea:41:51: 3a:03:31:7a:f6:58:33:33:c9:78:4a:97:c6:13:c2: f5:a8:02:0e:fa:45:97:e2:83:eb:19:ab:e6:a7:33: 0a:e0:f0:50:9b:73:b0:91:e5:27:79:07:7c:d6:d9: 06:23:be:51:dc:b2:3a:4e:38:ea:c5:e5:73:81:ae: d9:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:7D:A7:28:DA:A4:10:44:B5:8F:81:EE:43:61:F2:A5:2B:92:21:8D X509v3 Authority Key Identifier: keyid:75:71:C8:92:99:9B:B4:56:4B:CE:48:0C:92:1B:6F:F1:72:05:EC:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXHIkpmbtFZLzkgMkhtv8XIF7MY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/818ac5-93dd-40fd-bf6f-e04f8fcc2ca1/1/dXHIkpmbtFZLzkgMkhtv8XIF7MY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/818ac5-93dd-40fd-bf6f-e04f8fcc2ca1/1/dXHIkpmbtFZLzkgMkhtv8XIF7MY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:a1:78:9d:04:e5:f7:1a:e4:89:e2:f7:04:d5:08:93:e0:e4: 76:b0:d0:b5:31:66:92:c4:41:bc:f9:70:ec:21:61:ad:c2:67: e2:f2:3a:80:7d:28:08:63:51:94:40:cc:c1:d1:a7:4b:58:ce: 34:33:3c:9a:94:91:a3:97:1b:41:5a:e3:5a:c0:71:43:ea:0f: 73:44:ab:ed:8d:0e:a2:87:8a:8a:05:57:a9:52:4b:2d:d7:47: e5:75:ef:f6:a3:11:6b:aa:01:29:30:51:18:74:8c:fa:3a:d6: 46:8a:0d:b5:61:d8:5a:46:a6:78:6c:22:ec:f9:ef:fd:4f:f5: 9a:1a:9f:00:6e:63:fa:05:f4:a2:c6:40:95:e9:ef:31:77:30: f9:d3:61:18:f7:50:f6:d8:77:78:78:93:5b:20:20:67:59:f4: 3f:1f:d6:bc:34:38:b2:ab:8b:0d:b2:04:d4:7b:8c:22:60:6a: 63:10:66:99:92:45:ae:51:9e:40:fa:b7:7b:b4:67:d3:1e:01: 87:eb:54:2e:3a:4f:4b:28:71:71:5e:44:b0:84:f4:f7:ff:03: da:9f:37:66:4e:7b:46:13:6d:25:9b:b3:f5:51:53:14:74:d9: b4:4f:cb:79:f1:66:67:92:6e:fd:c6:b3:67:3c:92:95:f5:14: 24:8f:7c:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCTzjs47hSOv7RfUL9S8NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1NzFjODkyOTk5YmI0NTY0YmNlNDgwYzkyMWI2ZmYxNzIw NWVjYzYwHhcNMjUxMjA2MDUwMTIyWhcNMjUxMjA3MDUwMTIyWjAzMTEwLwYDVQQD EyhkMjdkYTcyOGRhYTQxMDQ0YjU4ZjgxZWU0MzYxZjJhNTJiOTIyMThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOp+Pp9wqxiY7QDBwWDWQB9lgAaK ck8H0TPN5rgvceV4/3MVluVfrMM7/68une4FwtZ1NlLQ5Gk8iYd/e6sVmxu4rQ51 +kBG+Fl80h4o9ZZPTNbcABoAzFLS7u3B+aTJv7S93wu7oflxXWYocUxIsls6w5B/ C3WVmk3T6k4GCBahfBVzTe0Pc1PlWN6GP35EOQjBKhrKIHxKN4NggmuejF8ice2m uFiYPqRNXZfdkdQ3rJcioySELQc+oCe2yLLqQVE6AzF69lgzM8l4SpfGE8L1qAIO +kWX4oPrGavmpzMK4PBQm3OwkeUneQd81tkGI75R3LI6TjjqxeVzga7ZmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNJ9pyjapBBEtY+B7kNh8qUrkiGNMB8GA1UdIwQY MBaAFHVxyJKZm7RWS85IDJIbb/FyBezGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFhISWtwbWJ0RlpMemtnTWtodHY4WElGN01ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC84MThhYzUtOTNkZC00MGZkLWJmNmYt ZTA0ZjhmY2MyY2ExLzEvZFhISWtwbWJ0RlpMemtnTWtodHY4WElGN01ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC84MThhYzUtOTNkZC00MGZkLWJmNmYtZTA0ZjhmY2MyY2Ex LzEvZFhISWtwbWJ0RlpMemtnTWtodHY4WElGN01ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkaF4nQTl 9xrkieL3BNUIk+DkdrDQtTFmksRBvPlw7CFhrcJn4vI6gH0oCGNRlEDMwdGnS1jO NDM8mpSRo5cbQVrjWsBxQ+oPc0Sr7Y0OooeKigVXqVJLLddH5XXv9qMRa6oBKTBR GHSM+jrWRooNtWHYWkameGwi7Pnv/U/1mhqfAG5j+gX0osZAlenvMXcw+dNhGPdQ 9th3eHiTWyAgZ1n0Px/WvDQ4squLDbIE1HuMImBqYxBmmZJFrlGeQPq3e7Rn0x4B h+tULjpPSyhxcV5EsIT09/8D2p83Zk57RhNtJZuz9VFTFHTZtE/LefFmZ5Ju/caz ZzySlfUUJI98Dw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:04:49 2025 by rpki-client