This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.mft
File: dtAtj564761YOO-TGIVJb8-vHGE.mft (raw, json)
Hash identifier: JsMM72oXQHiserBGlItgtPvNWN8PR5KzWW11ZE85zBY=
Subject key identifier: 0F:D1:10:5D:BF:EE:C4:37:40:FA:07:2D:B1:F6:B5:1A:89:13:AB:5D
Authority key identifier: 76:D0:2D:8F:9E:B8:EF:AD:58:38:EF:93:18:85:49:6F:CF:AF:1C:61
Certificate issuer: /CN=76d02d8f9eb8efad5838ef931885496fcfaf1c61
Certificate serial: 019AF50A6BF528A0A0477EF821E08B5368BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dtAtj564761YOO-TGIVJb8-vHGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.mft
Manifest number: 1761
Signing time: Sat 06 Dec 2025 19:01:32 +0000
Manifest this update: Sat 06 Dec 2025 19:01:32 +0000
Manifest next update: Sun 07 Dec 2025 19:01:32 +0000
Files and hashes: 1: dtAtj564761YOO-TGIVJb8-vHGE.crl (hash: xTc/sn9DxbApIQSqsoh5ujrRH/ySv8bdVvlFtD1a4gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/dtAtj564761YOO-TGIVJb8-vHGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 13:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f5:0a:6b:f5:28:a0:a0:47:7e:f8:21:e0:8b:53:68:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76d02d8f9eb8efad5838ef931885496fcfaf1c61
Validity
Not Before: Dec 6 19:01:32 2025 GMT
Not After : Dec 7 19:01:32 2025 GMT
Subject: CN=0fd1105dbfeec43740fa072db1f6b51a8913ab5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2d:d9:ff:78:82:e4:af:8e:c7:53:e3:1b:44:
3d:b5:2a:f9:a5:51:c4:00:93:a3:d4:18:1e:76:01:
cb:04:9a:a2:32:50:47:3e:dd:02:91:9b:f8:fa:31:
c8:a6:b5:3c:5c:4f:f9:49:6e:f5:87:c7:87:38:d3:
bd:b0:08:77:64:8d:94:26:24:61:b9:27:67:52:0f:
fe:07:54:fa:38:d6:a2:60:3a:bb:0c:f0:f5:2f:54:
f8:d3:66:d0:48:14:bb:a0:a7:88:5f:f3:4e:d7:22:
64:92:d5:38:7b:29:ec:53:28:48:d8:61:eb:12:7f:
41:8e:88:45:27:42:af:f1:6a:93:c1:ac:5d:3e:4f:
74:51:b4:75:de:4f:44:7b:b4:82:8e:19:44:ae:86:
dd:fa:5a:01:4f:76:62:02:e4:d5:28:cb:aa:d0:94:
35:1c:25:43:36:ce:48:1f:07:3e:15:51:01:85:96:
bc:d4:b4:16:bf:b1:bc:d8:1b:1c:f8:c7:48:c8:3d:
d0:2b:74:1b:ca:bb:15:d8:a0:eb:8b:bd:3f:a5:f9:
ba:7a:25:cb:e0:d3:2d:58:a5:c1:10:3b:e7:db:71:
41:29:37:3d:93:31:c5:f8:70:81:fd:b3:d1:f1:dd:
d1:58:5e:7b:6a:35:cd:af:7c:aa:3c:67:c1:d6:f3:
81:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D1:10:5D:BF:EE:C4:37:40:FA:07:2D:B1:F6:B5:1A:89:13:AB:5D
X509v3 Authority Key Identifier:
keyid:76:D0:2D:8F:9E:B8:EF:AD:58:38:EF:93:18:85:49:6F:CF:AF:1C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dtAtj564761YOO-TGIVJb8-vHGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:8d:6c:42:f0:ae:d2:87:cf:3a:fc:b6:47:93:2e:9a:7b:c6:
71:d7:48:65:9a:cc:f0:96:2a:56:29:93:99:2b:14:0d:c4:33:
29:37:10:97:33:cb:1a:98:80:d5:38:26:01:de:5d:69:44:7b:
41:46:a7:29:d9:29:f3:b1:76:1c:ee:7a:5e:7a:31:ca:73:4f:
78:b6:1a:b2:1e:a3:22:23:f7:a8:19:0d:ac:a5:c0:f5:00:c2:
86:ba:8b:a9:35:da:f3:1b:0a:6f:7e:e5:90:25:96:44:0a:f8:
19:4b:60:30:fe:49:40:6f:b3:f7:d3:d9:15:cf:ae:9d:12:86:
50:0d:d9:6c:65:99:83:21:51:07:d4:06:e6:d2:08:1c:b5:7d:
3b:cd:df:1c:7c:e2:7c:c5:dc:fd:ed:6a:de:d2:a7:c4:f0:e6:
eb:d7:a4:4c:c1:ab:bf:34:8a:b2:ef:5c:15:56:d5:bd:ff:87:
bc:e7:13:bb:a4:b1:db:91:bb:10:a7:26:3e:f8:d7:b2:c1:75:
df:db:68:93:cc:e3:be:bd:4d:21:3b:e7:4c:cf:03:d4:8a:33:
b9:1e:40:a3:45:58:29:e8:b7:c7:fe:95:b7:6c:f3:f8:57:9e:
b9:a8:ab:47:21:9a:6d:c2:5f:68:db:5b:45:47:d7:e2:71:b5:
42:34:61:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:42:35 2025 by rpki-client