This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft File: cRdcCDUnGBi7041t7X-Vq7xVdE8.mft (raw, json) Hash identifier: ii5/LbZtjMDohsK5jNZP+3dtkl5OkWP+/ac6V8gqmic= Subject key identifier: D6:86:FD:32:46:A2:F0:0B:C3:1A:96:5C:79:72:C6:3A:35:C3:47:6A Authority key identifier: 71:17:5C:08:35:27:18:18:BB:D3:8D:6D:ED:7F:95:AB:BC:55:74:4F Certificate issuer: /CN=71175c0835271818bbd38d6ded7f95abbc55744f Certificate serial: 019AF19BA00B99A2E579B5FF1ABFF6F60919 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft Manifest number: 0752 Signing time: Sat 06 Dec 2025 03:01:39 +0000 Manifest this update: Sat 06 Dec 2025 03:01:39 +0000 Manifest next update: Sun 07 Dec 2025 03:01:39 +0000 Files and hashes: 1: ElWcrbTwhZb7R0idVXjP0jp7adc.roa (hash: jXElL6yYNfab48AMv19NwH9bI4ZhaqIjJFV1RglaLYg=) 2: cRdcCDUnGBi7041t7X-Vq7xVdE8.crl (hash: bkcQHZGV8kDU4fjZyDIJvdpzkyJkzhvSyPGk3B6WxYk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:a0:0b:99:a2:e5:79:b5:ff:1a:bf:f6:f6:09:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71175c0835271818bbd38d6ded7f95abbc55744f Validity Not Before: Dec 6 03:01:39 2025 GMT Not After : Dec 7 03:01:39 2025 GMT Subject: CN=d686fd3246a2f00bc31a965c7972c63a35c3476a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:10:8b:6b:88:a3:4e:57:8e:6f:e4:1a:93:b1: 66:c4:ee:92:6f:4e:92:cd:63:d7:1a:a0:72:cb:0f: 24:67:13:c3:4f:bc:1b:8f:b4:48:b7:c8:10:37:e3: 84:7d:0f:f6:2f:db:4d:26:ac:2a:80:39:51:3a:a4: ce:f7:a2:e9:f7:72:fc:7f:bf:c0:35:ca:38:15:72: b1:47:c2:e4:65:76:ad:85:ed:31:45:bf:84:d0:c2: 2a:e3:38:f8:3e:af:b8:0a:16:df:a8:f1:a6:6b:8d: 1f:a2:11:b9:65:f3:0d:b3:85:3b:2c:91:0a:b6:24: f1:8d:a3:21:25:f4:78:ca:a6:52:7c:7b:65:cc:80: 09:73:7a:3e:3c:58:b6:92:98:5c:e5:d6:7a:8f:0f: e1:26:3f:b5:35:54:d0:da:e8:10:1c:71:15:a2:31: 65:7c:c2:d2:5f:d9:2a:76:ec:60:72:e4:1f:47:76: 9e:a5:84:04:89:09:49:b6:6b:ec:79:79:ba:75:27: c1:9a:11:06:bd:00:03:e6:8b:df:17:5e:e4:f2:c9: 90:16:af:17:2b:7e:96:5c:ce:fd:39:42:83:a4:5e: 65:27:7a:d6:fb:ec:b8:82:2e:65:56:74:dd:f8:f0: e6:e1:e7:0c:ad:2c:3d:8b:6e:f0:82:ac:3c:a0:18: 14:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:86:FD:32:46:A2:F0:0B:C3:1A:96:5C:79:72:C6:3A:35:C3:47:6A X509v3 Authority Key Identifier: keyid:71:17:5C:08:35:27:18:18:BB:D3:8D:6D:ED:7F:95:AB:BC:55:74:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:8d:94:4e:3f:8e:07:51:69:08:82:2f:c0:53:7b:ec:26:4a: ef:ff:ef:11:27:47:d2:56:d2:2a:48:49:b9:95:0b:b4:37:68: 74:8a:dc:82:cd:7f:a6:df:50:0d:d5:e9:04:7d:eb:6d:16:64: 71:fe:25:ad:cc:50:10:40:99:0a:57:38:83:d5:b6:ea:2e:aa: d7:26:8c:01:f8:93:49:e9:37:d8:33:bc:78:d7:d0:20:c9:d8: 66:ec:ff:2a:92:55:da:c9:71:3a:d0:69:77:f2:cf:ea:fe:88: f7:ec:62:3b:bf:87:38:52:1f:1a:53:3f:91:49:59:b0:15:58: cc:63:bc:72:b0:94:8c:34:ee:a8:51:0e:93:9b:1c:5b:db:cb: dc:aa:e0:d4:60:57:b0:1d:b3:45:96:69:45:89:c2:e3:a7:fb: 8c:5e:53:55:cc:e1:85:69:03:b7:60:05:86:95:2b:0f:a4:7b: 64:e1:92:2f:e6:5b:ae:b7:66:94:3b:b7:c2:69:ec:f6:04:f2: 0e:bf:7c:99:12:6a:1b:41:78:60:76:01:53:0b:a6:30:dc:0e: d2:f3:0e:92:af:bc:d6:b0:56:d1:5d:02:df:ef:f6:22:eb:c4: d1:b1:0d:94:76:e4:43:02:08:57:f1:bd:50:9a:2f:9d:f2:78: ca:1b:c3:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm6ALmaLlebX/Gr/29gkZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMTc1YzA4MzUyNzE4MThiYmQzOGQ2ZGVkN2Y5NWFiYmM1 NTc0NGYwHhcNMjUxMjA2MDMwMTM5WhcNMjUxMjA3MDMwMTM5WjAzMTEwLwYDVQQD EyhkNjg2ZmQzMjQ2YTJmMDBiYzMxYTk2NWM3OTcyYzYzYTM1YzM0NzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xCLa4ijTleOb+Qak7FmxO6Sb06S zWPXGqByyw8kZxPDT7wbj7RIt8gQN+OEfQ/2L9tNJqwqgDlROqTO96Lp93L8f7/A Nco4FXKxR8LkZXathe0xRb+E0MIq4zj4Pq+4ChbfqPGma40fohG5ZfMNs4U7LJEK tiTxjaMhJfR4yqZSfHtlzIAJc3o+PFi2kphc5dZ6jw/hJj+1NVTQ2ugQHHEVojFl fMLSX9kqduxgcuQfR3aepYQEiQlJtmvseXm6dSfBmhEGvQAD5ovfF17k8smQFq8X K36WXM79OUKDpF5lJ3rW++y4gi5lVnTd+PDm4ecMrSw9i27wgqw8oBgUOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNaG/TJGovALwxqWXHlyxjo1w0dqMB8GA1UdIwQY MBaAFHEXXAg1JxgYu9ONbe1/lau8VXRPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1JkY0NEVW5HQmk3MDQxdDdYLVZxN3hWZEU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy85ZDU0NGEtMjI5ZC00NzZhLWIwMmYt MTk0MmUwODlmMGIwLzEvY1JkY0NEVW5HQmk3MDQxdDdYLVZxN3hWZEU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy85ZDU0NGEtMjI5ZC00NzZhLWIwMmYtMTk0MmUwODlmMGIw LzEvY1JkY0NEVW5HQmk3MDQxdDdYLVZxN3hWZEU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc42UTj+O B1FpCIIvwFN77CZK7//vESdH0lbSKkhJuZULtDdodIrcgs1/pt9QDdXpBH3rbRZk cf4lrcxQEECZClc4g9W26i6q1yaMAfiTSek32DO8eNfQIMnYZuz/KpJV2slxOtBp d/LP6v6I9+xiO7+HOFIfGlM/kUlZsBVYzGO8crCUjDTuqFEOk5scW9vL3Krg1GBX sB2zRZZpRYnC46f7jF5TVczhhWkDt2AFhpUrD6R7ZOGSL+ZbrrdmlDu3wmns9gTy Dr98mRJqG0F4YHYBUwumMNwO0vMOkq+81rBW0V0C3+/2IuvE0bENlHbkQwIIV/G9 UJovnfJ4yhvDGg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:19 2025 by rpki-client