This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft File: DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft (raw, json) Hash identifier: SAZ7cleW10XXLOLnsft+EfW8MnGIdRlQVcLRP7mkAGo= Subject key identifier: 70:65:BA:E7:E3:AA:39:1A:19:58:CB:43:A2:71:A0:C7:8B:DD:8B:77 Authority key identifier: 0E:B5:10:D7:C9:15:A4:BE:6D:F6:B1:6F:F5:82:FD:2D:6A:D2:36:05 Certificate issuer: /CN=0eb510d7c915a4be6df6b16ff582fd2d6ad23605 Certificate serial: 019AF5410D231FF70791135ECCEBB8F5444D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DrUQ18kVpL5t9rFv9YL9LWrSNgU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 20:01:12 +0000 Manifest this update: Sat 06 Dec 2025 20:01:12 +0000 Manifest next update: Sun 07 Dec 2025 20:01:12 +0000 Files and hashes: 1: DrUQ18kVpL5t9rFv9YL9LWrSNgU.crl (hash: Uup3HQnvu/B8bPeeWBiL/RJj9btswhZmo6+agxRgC9I=) 2: rG4uV5FpPy0fw9yTiKRJUxEEj4o.roa (hash: BaS8t7omCzvSgmaV1xikWxIAkO9HyfZ7kCUC9REWlSg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.crl rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft rsync://rpki.ripe.net/repository/DEFAULT/DrUQ18kVpL5t9rFv9YL9LWrSNgU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:41:0d:23:1f:f7:07:91:13:5e:cc:eb:b8:f5:44:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0eb510d7c915a4be6df6b16ff582fd2d6ad23605 Validity Not Before: Dec 6 20:01:12 2025 GMT Not After : Dec 7 20:01:12 2025 GMT Subject: CN=7065bae7e3aa391a1958cb43a271a0c78bdd8b77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:3e:6c:12:22:89:23:8b:bb:64:93:8f:dd:39: cf:86:0c:6d:8b:0f:4e:c9:71:c2:54:16:d3:e4:40: 42:f8:6b:63:d8:6d:4b:16:b9:5e:b8:13:c8:0a:4b: d1:78:33:59:c2:32:ef:21:06:c2:72:0d:3d:9a:e8: 85:e5:8d:fe:fb:55:49:cb:ac:0e:30:a1:3d:c0:48: 4b:e8:74:f5:96:53:61:ce:1e:7f:35:dd:b0:05:3d: ac:b9:ff:6d:40:66:54:6b:fe:0d:96:9d:0b:14:6b: bb:48:50:4f:ae:a4:3d:4c:50:8b:30:fe:de:c2:1b: be:aa:8d:e8:74:7d:1e:fa:68:78:f5:46:ca:6b:73: ed:54:ae:8e:4e:e4:f3:62:d7:0c:24:b4:8f:36:64: c5:d9:0c:c7:79:0e:65:c5:53:e6:67:d1:fa:b3:2f: c3:e0:bf:f3:ff:2e:8e:a4:db:b5:91:0b:04:60:70: 0b:8d:2b:e7:02:c0:95:47:e5:93:03:68:b9:50:b8: af:81:0b:87:38:36:80:6b:9b:bf:b0:2c:77:22:0b: f1:ac:b8:96:d9:ce:60:4b:63:6f:56:07:b4:c5:19: 59:ab:d8:86:4a:9c:07:0a:c6:4a:96:0e:4b:dc:12: de:c8:5e:9f:41:76:44:61:be:57:62:f9:84:ee:c0: e2:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:65:BA:E7:E3:AA:39:1A:19:58:CB:43:A2:71:A0:C7:8B:DD:8B:77 X509v3 Authority Key Identifier: keyid:0E:B5:10:D7:C9:15:A4:BE:6D:F6:B1:6F:F5:82:FD:2D:6A:D2:36:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DrUQ18kVpL5t9rFv9YL9LWrSNgU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:c4:b7:13:06:26:44:e9:b8:85:1b:a7:2f:77:88:0a:29:c1: 10:14:0a:d1:10:a2:06:13:63:4b:0d:06:f6:74:ff:b4:a6:40: 40:de:f8:82:61:10:b6:ba:ff:72:18:a8:36:81:71:af:17:73: ad:f7:3b:26:b9:ba:43:b3:d1:96:72:11:0b:7c:96:3c:23:6d: 16:c5:3a:a3:3e:11:0c:70:12:e7:88:76:89:68:9d:b4:0b:38: 44:b5:3c:c1:e4:13:92:62:79:6e:bf:c6:cc:4a:73:27:10:5e: a6:4d:b3:1d:a5:4e:1d:cd:c3:b8:8d:c0:7b:94:b2:83:bc:1f: 75:fb:7b:33:22:06:46:6e:0a:b9:70:80:53:33:2b:4a:54:7a: 35:4b:e6:2b:0f:3d:ba:2a:a5:fc:68:4a:85:96:5b:57:de:f0: 57:ba:e8:29:1c:41:26:85:51:ff:dd:5e:d1:5b:b8:0f:55:4c: 07:2a:fd:6f:3b:58:9b:1b:d4:38:2b:79:cd:00:27:93:fb:4a: 06:fc:b8:44:7e:e2:8d:f8:26:97:70:5b:a8:6b:b2:27:ed:30: 28:40:1a:b6:de:fd:bc:85:d4:22:b5:97:ba:f4:6c:85:cc:0a: e9:35:07:13:79:ed:31:a3:f3:5c:ea:9d:54:95:a1:ca:37:bf: 10:aa:89:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QQ0jH/cHkRNezOu49URNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlYjUxMGQ3YzkxNWE0YmU2ZGY2YjE2ZmY1ODJmZDJkNmFk MjM2MDUwHhcNMjUxMjA2MjAwMTEyWhcNMjUxMjA3MjAwMTEyWjAzMTEwLwYDVQQD Eyg3MDY1YmFlN2UzYWEzOTFhMTk1OGNiNDNhMjcxYTBjNzhiZGQ4Yjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5j5sEiKJI4u7ZJOP3TnPhgxtiw9O yXHCVBbT5EBC+Gtj2G1LFrleuBPICkvReDNZwjLvIQbCcg09muiF5Y3++1VJy6wO MKE9wEhL6HT1llNhzh5/Nd2wBT2suf9tQGZUa/4Nlp0LFGu7SFBPrqQ9TFCLMP7e whu+qo3odH0e+mh49UbKa3PtVK6OTuTzYtcMJLSPNmTF2QzHeQ5lxVPmZ9H6sy/D 4L/z/y6OpNu1kQsEYHALjSvnAsCVR+WTA2i5ULivgQuHODaAa5u/sCx3IgvxrLiW 2c5gS2NvVge0xRlZq9iGSpwHCsZKlg5L3BLeyF6fQXZEYb5XYvmE7sDizwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHBluufjqjkaGVjLQ6JxoMeL3Yt3MB8GA1UdIwQY MBaAFA61ENfJFaS+bfaxb/WC/S1q0jYFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHJVUTE4a1ZwTDV0OXJGdjlZTDlMV3JTTmdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi85NmJlM2QtZDdkMi00NzUzLWE3ODMt ZDYzOGEzYmU4OGNhLzEvRHJVUTE4a1ZwTDV0OXJGdjlZTDlMV3JTTmdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi85NmJlM2QtZDdkMi00NzUzLWE3ODMtZDYzOGEzYmU4OGNh LzEvRHJVUTE4a1ZwTDV0OXJGdjlZTDlMV3JTTmdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW8S3EwYm ROm4hRunL3eICinBEBQK0RCiBhNjSw0G9nT/tKZAQN74gmEQtrr/chioNoFxrxdz rfc7Jrm6Q7PRlnIRC3yWPCNtFsU6oz4RDHAS54h2iWidtAs4RLU8weQTkmJ5br/G zEpzJxBepk2zHaVOHc3DuI3Ae5Syg7wfdft7MyIGRm4KuXCAUzMrSlR6NUvmKw89 uiql/GhKhZZbV97wV7roKRxBJoVR/91e0Vu4D1VMByr9bztYmxvUOCt5zQAnk/tK Bvy4RH7ijfgml3BbqGuyJ+0wKEAatt79vIXUIrWXuvRshcwK6TUHE3ntMaPzXOqd VJWhyje/EKqJvA== -----END CERTIFICATE-----Generated at Sun Dec 7 03:07:24 2025 by rpki-client