This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft File: D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft (raw, json) Hash identifier: 9HNA7G2grjLX8fmv5s3BAmJ3pAv94W1gRb/1vAn2NKY= Subject key identifier: 78:5C:AE:4A:4F:EC:5F:42:F3:C4:7C:DC:D5:06:21:2F:8B:BD:10:27 Authority key identifier: 0F:79:76:05:20:B7:C1:5C:2E:42:60:30:82:72:B8:49:F8:8E:D6:77 Certificate issuer: /CN=0f79760520b7c15c2e4260308272b849f88ed677 Certificate serial: 019AF163D63C72CDF914C21EA51E77E72035 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3l2BSC3wVwuQmAwgnK4SfiO1nc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 02:00:43 +0000 Manifest this update: Sat 06 Dec 2025 02:00:43 +0000 Manifest next update: Sun 07 Dec 2025 02:00:43 +0000 Files and hashes: 1: D3l2BSC3wVwuQmAwgnK4SfiO1nc.crl (hash: AjKvc7I1vXmY9VZvfMOmbV15Bn4qjo3yaKTpWotA4SE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft rsync://rpki.ripe.net/repository/DEFAULT/D3l2BSC3wVwuQmAwgnK4SfiO1nc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:d6:3c:72:cd:f9:14:c2:1e:a5:1e:77:e7:20:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f79760520b7c15c2e4260308272b849f88ed677 Validity Not Before: Dec 6 02:00:43 2025 GMT Not After : Dec 7 02:00:43 2025 GMT Subject: CN=785cae4a4fec5f42f3c47cdcd506212f8bbd1027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a0:5c:eb:29:65:3a:c3:e9:a1:51:fb:ca:49: 8f:f5:d9:51:ca:6a:96:b4:6b:df:52:f1:67:bb:f2: 69:64:0e:63:b8:7d:14:7d:c4:df:55:02:76:0d:21: 75:eb:5d:b8:e0:35:ab:f7:78:c6:62:34:53:f6:c1: c3:29:f9:bd:4e:c8:fb:3a:35:b6:4d:f9:3f:38:82: c2:4d:ae:c1:fa:b9:bf:25:03:f0:f1:b2:a0:36:38: 4d:f2:40:25:f3:56:44:bd:fc:35:01:6b:48:3c:f7: 6d:9c:1f:b9:c7:c9:64:be:2c:75:06:01:3c:ac:e8: 48:78:10:5f:55:ab:27:a6:da:80:e9:7b:cc:d8:0b: dd:46:ee:64:c4:18:61:c3:fc:97:d2:d4:87:a2:23: ea:5f:d4:f5:63:ec:08:04:e4:9e:96:35:18:6a:a3: 46:83:07:e2:dc:01:24:d2:9f:00:8e:8b:a1:7c:72: 97:f6:69:6c:e8:dc:ad:37:0d:ed:04:41:ed:79:c6: 85:f4:d4:37:ac:c7:20:ad:a2:60:40:c6:32:f8:a0: 25:80:98:27:e6:f4:ee:a3:fc:6f:77:5d:d8:1a:d8: f6:17:25:54:9d:07:7c:44:c9:66:10:ac:56:de:04: 17:ea:62:36:9c:63:53:ae:25:f8:58:15:53:fc:c2: a0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:5C:AE:4A:4F:EC:5F:42:F3:C4:7C:DC:D5:06:21:2F:8B:BD:10:27 X509v3 Authority Key Identifier: keyid:0F:79:76:05:20:B7:C1:5C:2E:42:60:30:82:72:B8:49:F8:8E:D6:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3l2BSC3wVwuQmAwgnK4SfiO1nc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:66:aa:be:aa:03:4f:8e:37:00:ac:0b:e7:ee:b8:02:42:89: ba:d8:75:a9:41:8a:c2:6b:a3:16:a2:02:bb:01:7b:33:38:c6: 3f:2c:f7:87:45:b4:f4:5a:4f:f8:c6:6b:8d:1f:b5:f6:77:c0: dc:a7:3d:dc:99:22:e0:5d:8a:1c:d4:3a:91:ae:c4:1d:f7:3c: 0e:65:0b:82:6b:8f:11:5c:8a:af:87:8a:76:3e:db:62:8c:b8: 7f:fd:41:3b:52:d9:16:c5:30:44:20:cc:f9:0c:ad:31:c2:43: 93:d4:4c:c5:7a:25:b8:d3:3e:8e:f2:13:7e:9a:cf:3c:03:97: 48:12:c6:c8:6e:f2:42:d2:05:ed:b0:28:a2:9a:94:ec:c0:38: ae:d0:8d:35:a9:f3:2e:fc:1f:50:ec:e6:7a:ef:e4:59:90:db: 09:16:19:e1:1e:b2:dd:e2:72:64:b6:34:09:c5:33:89:4d:d9: b1:4b:44:f2:9c:4a:70:5f:90:74:02:0f:d6:ae:be:fa:a1:b5: 4c:84:a1:a6:5a:f4:5c:d3:d4:cc:58:7d:c8:33:49:21:46:65: b1:c1:47:a1:56:3f:3f:6d:0f:2d:bf:bc:17:be:21:a6:f5:0b: 64:b3:bd:cc:57:07:6c:77:35:d6:01:4d:27:a7:34:71:26:69: 71:d2:e1:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY9Y8cs35FMIepR535yA1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNzk3NjA1MjBiN2MxNWMyZTQyNjAzMDgyNzJiODQ5Zjg4 ZWQ2NzcwHhcNMjUxMjA2MDIwMDQzWhcNMjUxMjA3MDIwMDQzWjAzMTEwLwYDVQQD Eyg3ODVjYWU0YTRmZWM1ZjQyZjNjNDdjZGNkNTA2MjEyZjhiYmQxMDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqBc6yllOsPpoVH7ykmP9dlRymqW tGvfUvFnu/JpZA5juH0UfcTfVQJ2DSF161244DWr93jGYjRT9sHDKfm9Tsj7OjW2 Tfk/OILCTa7B+rm/JQPw8bKgNjhN8kAl81ZEvfw1AWtIPPdtnB+5x8lkvix1BgE8 rOhIeBBfVasnptqA6XvM2AvdRu5kxBhhw/yX0tSHoiPqX9T1Y+wIBOSeljUYaqNG gwfi3AEk0p8AjouhfHKX9mls6NytNw3tBEHtecaF9NQ3rMcgraJgQMYy+KAlgJgn 5vTuo/xvd13YGtj2FyVUnQd8RMlmEKxW3gQX6mI2nGNTriX4WBVT/MKgnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHhcrkpP7F9C88R83NUGIS+LvRAnMB8GA1UdIwQY MBaAFA95dgUgt8FcLkJgMIJyuEn4jtZ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDNsMkJTQzN3Vnd1UW1Bd2duSzRTZmlPMW5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mODQ3NGItNWFlYi00MDU4LTlmNGUt MDA0MjQyNWJhYjFhLzEvRDNsMkJTQzN3Vnd1UW1Bd2duSzRTZmlPMW5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9mODQ3NGItNWFlYi00MDU4LTlmNGUtMDA0MjQyNWJhYjFh LzEvRDNsMkJTQzN3Vnd1UW1Bd2duSzRTZmlPMW5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0maqvqoD T443AKwL5+64AkKJuth1qUGKwmujFqICuwF7MzjGPyz3h0W09FpP+MZrjR+19nfA 3Kc93Jki4F2KHNQ6ka7EHfc8DmULgmuPEVyKr4eKdj7bYoy4f/1BO1LZFsUwRCDM +QytMcJDk9RMxXoluNM+jvITfprPPAOXSBLGyG7yQtIF7bAoopqU7MA4rtCNNanz LvwfUOzmeu/kWZDbCRYZ4R6y3eJyZLY0CcUziU3ZsUtE8pxKcF+QdAIP1q6++qG1 TIShplr0XNPUzFh9yDNJIUZlscFHoVY/P20PLb+8F74hpvULZLO9zFcHbHc11gFN J6c0cSZpcdLh5w== -----END CERTIFICATE-----Generated at Sat Dec 6 12:38:17 2025 by rpki-client