This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft File: 1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft (raw, json) Hash identifier: wbQNY/KoQQ3fjWlDfDlC5qZdDphMLdBZNHORthxC0Pc= Subject key identifier: 11:29:B0:B1:54:C3:61:02:5F:88:A9:19:A9:71:59:ED:0D:A9:04:CF Authority key identifier: F8:FF:9D:A4:30:BF:F2:68:C8:43:A2:E5:86:09:8C:8D:70:21:CA:06 Certificate issuer: /CN=f8ff9da430bff268c843a2e586098c8d7021ca06 Certificate serial: 019AF12D40398F2F0DFF18AEA9BBDC5175CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft Manifest number: 0E54 Signing time: Sat 06 Dec 2025 01:01:05 +0000 Manifest this update: Sat 06 Dec 2025 01:01:05 +0000 Manifest next update: Sun 07 Dec 2025 01:01:05 +0000 Files and hashes: 1: 1-P-dpDC_8mjIQ6LlhgmMjXAhygY.crl (hash: Ova5bmjlq7l2vVWyCCU6oz7Bfs0ZrY2EOQyC109ZqVg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft rsync://rpki.ripe.net/repository/DEFAULT/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:40:39:8f:2f:0d:ff:18:ae:a9:bb:dc:51:75:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8ff9da430bff268c843a2e586098c8d7021ca06 Validity Not Before: Dec 6 01:01:05 2025 GMT Not After : Dec 7 01:01:05 2025 GMT Subject: CN=1129b0b154c361025f88a919a97159ed0da904cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:13:fc:91:93:37:32:a4:e2:14:34:04:e3:9a: 00:1e:66:ad:85:ad:cf:36:0a:d4:99:34:2c:9b:26: b5:69:19:09:28:7d:b0:81:b7:17:06:c0:6c:0d:1f: 50:26:51:ff:cd:31:8d:5a:27:d1:99:1d:43:96:fd: 88:d0:a2:5a:b3:46:0a:3a:56:55:7c:0c:76:ee:e3: 0d:ef:9b:2f:1a:95:a2:20:08:c6:0b:d1:47:e8:20: 1d:76:d7:b8:e3:a8:23:dd:06:34:4b:5c:9c:9d:cf: 5f:8b:5a:5a:17:db:89:df:77:93:90:0e:7f:23:6f: 35:f6:ac:d0:77:59:4c:f2:aa:53:60:01:46:8b:4a: 7d:ae:f9:47:11:d8:ac:20:68:f9:3c:d8:40:52:1e: e4:a5:ed:c5:c8:a0:d3:14:87:16:10:4b:7d:c6:52: 0e:20:15:20:f8:0f:18:57:17:70:fa:5c:e3:67:11: a2:67:0a:e4:f2:3e:18:db:3d:5b:ab:02:14:d5:9d: 90:4e:80:c3:17:27:eb:e1:a8:a9:2b:53:48:51:ba: 7d:02:8b:f3:fa:82:41:0d:a8:94:cc:b3:aa:93:32: a7:77:a9:3b:bf:4b:3d:29:9a:63:3b:1f:4a:00:61: 58:e6:06:af:9b:65:0b:8a:90:8f:89:16:8b:25:9b: 75:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:29:B0:B1:54:C3:61:02:5F:88:A9:19:A9:71:59:ED:0D:A9:04:CF X509v3 Authority Key Identifier: keyid:F8:FF:9D:A4:30:BF:F2:68:C8:43:A2:E5:86:09:8C:8D:70:21:CA:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:6b:e5:93:df:35:49:4f:d9:68:7f:a8:3f:8a:a9:ac:c2:94: 5a:44:6d:7e:94:b8:89:43:9e:3e:95:0f:2f:e5:c3:4c:0b:3f: e5:70:68:e7:2f:bf:a3:dd:9e:04:99:7a:f0:84:2b:54:aa:6f: 85:f5:df:af:5c:6d:2b:a8:ff:75:dd:2f:7c:11:4a:5d:73:21: 26:31:2e:63:cf:e3:7c:7a:2a:ad:2d:61:6b:b7:8f:92:2c:0e: 27:85:12:46:74:8a:35:9a:15:93:bb:63:f3:c4:7b:d0:2a:ad: 67:ae:87:eb:81:6d:10:ba:05:dc:59:48:9a:a7:6c:88:bc:ce: 1f:d5:b7:ad:63:90:42:15:82:8e:d8:be:b0:0f:5d:de:2a:bd: 1c:15:e9:86:17:c6:b7:e6:8b:64:ae:d8:f1:ed:0a:d5:0f:c3: 16:c2:77:01:fc:cf:17:51:9a:af:7c:19:e8:2e:9a:6f:e9:12: e3:b1:6f:2a:51:3c:ee:74:9e:2b:9a:27:72:fb:e3:9f:01:a7: f2:09:2c:0f:e3:0f:1f:e1:ae:83:a5:ba:f1:d0:72:f0:ad:78: 7a:6d:ad:6e:d7:3d:77:22:c4:3f:4f:85:1d:c1:55:6c:c8:eb: 0e:6c:f9:17:52:40:fc:e4:3d:9b:e3:32:eb:fc:a4:7e:90:56: 07:94:41:a5 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrxLUA5jy8N/xiuqbvcUXXPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZmY5ZGE0MzBiZmYyNjhjODQzYTJlNTg2MDk4YzhkNzAy MWNhMDYwHhcNMjUxMjA2MDEwMTA1WhcNMjUxMjA3MDEwMTA1WjAzMTEwLwYDVQQD EygxMTI5YjBiMTU0YzM2MTAyNWY4OGE5MTlhOTcxNTllZDBkYTkwNGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4BP8kZM3MqTiFDQE45oAHmatha3P NgrUmTQsmya1aRkJKH2wgbcXBsBsDR9QJlH/zTGNWifRmR1Dlv2I0KJas0YKOlZV fAx27uMN75svGpWiIAjGC9FH6CAddte446gj3QY0S1ycnc9fi1paF9uJ33eTkA5/ I2819qzQd1lM8qpTYAFGi0p9rvlHEdisIGj5PNhAUh7kpe3FyKDTFIcWEEt9xlIO IBUg+A8YVxdw+lzjZxGiZwrk8j4Y2z1bqwIU1Z2QToDDFyfr4aipK1NIUbp9Aovz +oJBDaiUzLOqkzKnd6k7v0s9KZpjOx9KAGFY5gavm2ULipCPiRaLJZt1BwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFBEpsLFUw2ECX4ipGalxWe0NqQTPMB8GA1UdIwQY MBaAFPj/naQwv/JoyEOi5YYJjI1wIcoGMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1QLWRwRENfOG1qSVE2TGxoZ21NalhBaHlnWS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWYvMzFhNzhmLWMzMWItNDM4MS04NjMx LTY4MjljMGZjNzM4ZS8xLzEtUC1kcERDXzhtaklRNkxsaGdtTWpYQWh5Z1kubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2VmLzMxYTc4Zi1jMzFiLTQzODEtODYzMS02ODI5YzBmYzcz OGUvMS8xLVAtZHBEQ184bWpJUTZMbGhnbU1qWEFoeWdZLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqGvl k981SU/ZaH+oP4qprMKUWkRtfpS4iUOePpUPL+XDTAs/5XBo5y+/o92eBJl68IQr VKpvhfXfr1xtK6j/dd0vfBFKXXMhJjEuY8/jfHoqrS1ha7ePkiwOJ4USRnSKNZoV k7tj88R70CqtZ66H64FtELoF3FlImqdsiLzOH9W3rWOQQhWCjti+sA9d3iq9HBXp hhfGt+aLZK7Y8e0K1Q/DFsJ3AfzPF1Gar3wZ6C6ab+kS47FvKlE87nSeK5oncvvj nwGn8gksD+MPH+Gug6W68dBy8K14em2tbtc9dyLEP0+FHcFVbMjrDmz5F1JA/OQ9 m+My6/ykfpBWB5RBpQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:41 2025 by rpki-client