This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft File: dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft (raw, json) Hash identifier: UMehaa54gggrfip15/AphZ0/l9Ao/x/dpPP9aJzVmCw= Subject key identifier: A4:10:93:2A:AA:09:1C:32:1C:3A:C6:75:35:F5:C6:02:44:E9:BC:85 Authority key identifier: 74:D7:DA:63:92:99:99:60:33:95:87:74:48:CE:50:AC:6E:02:13:A9 Certificate issuer: /CN=74d7da63929999603395877448ce50ac6e0213a9 Certificate serial: 019B32D65DC0B450060731F82C7870BC482F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft Manifest number: 0FEA Signing time: Thu 18 Dec 2025 19:01:07 +0000 Manifest this update: Thu 18 Dec 2025 19:01:07 +0000 Manifest next update: Fri 19 Dec 2025 19:01:07 +0000 Files and hashes: 1: dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl (hash: ZQ8StxqzSbKcthWgoe+jWlA0FjVK2xIwWxyAU4ZrWeA=) 2: fU3MlRUECyf8Mob8gpdjGa0WFt0.roa (hash: 1bRjiSyIpRcT6gpZZI2DT+oOrLLRlf7RVwqkDF08rbw=) 3: fzU99qCGkV_CIT5aPe-FRXxnYbQ.roa (hash: vzw9SWyMsFCc6IE8QjYq1it7590sCq4Ux6IdTNIF19M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:5d:c0:b4:50:06:07:31:f8:2c:78:70:bc:48:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74d7da63929999603395877448ce50ac6e0213a9 Validity Not Before: Dec 18 19:01:07 2025 GMT Not After : Dec 19 19:01:07 2025 GMT Subject: CN=a410932aaa091c321c3ac67535f5c60244e9bc85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:6c:82:f5:97:01:1e:c1:dd:4d:26:d1:fb:a8: 6d:34:a4:9e:c7:87:26:13:4a:54:41:7f:a7:78:2f: a2:3f:db:3d:ae:e1:64:1f:6e:e4:41:3c:5c:07:f4: 16:2d:2b:28:fd:25:39:06:24:99:3c:9a:5c:87:a9: f2:41:94:48:5a:bd:db:b5:0f:88:62:36:bf:de:b6: c0:ff:74:fa:8c:57:0e:08:7c:09:d2:fa:37:8e:57: 2d:79:ff:bc:c3:5b:08:e5:1a:3b:c0:b5:9c:d0:87: 2b:30:e4:e8:07:53:d7:a4:4d:64:af:35:f0:8e:90: 05:1a:20:a0:7a:49:82:53:0c:87:66:c1:99:3d:d8: 7b:75:64:c5:86:23:3c:ee:9b:51:29:4c:0f:aa:be: 89:6e:ac:08:d9:3e:28:f2:08:5a:17:ab:34:17:08: f0:ad:7e:c9:10:77:31:56:f3:a1:39:ac:76:6c:95: f1:05:20:88:c1:54:40:e4:53:59:1e:6f:40:54:f9: 7b:e9:67:f0:8a:db:0b:1a:83:4c:f0:42:3b:c4:5f: 66:21:73:d2:1f:6e:8a:58:aa:85:2f:22:54:37:cb: 59:f6:47:06:fd:30:ae:e5:6e:4d:48:d6:3d:b4:de: f1:0e:1d:00:28:40:9f:a7:6e:df:f4:b8:0b:21:e2: 6d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:10:93:2A:AA:09:1C:32:1C:3A:C6:75:35:F5:C6:02:44:E9:BC:85 X509v3 Authority Key Identifier: keyid:74:D7:DA:63:92:99:99:60:33:95:87:74:48:CE:50:AC:6E:02:13:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:89:d3:6c:6a:d2:27:f1:cd:35:3b:49:a1:03:81:58:7b:ee: 6d:5f:ef:f0:fe:70:4b:b5:5b:7d:c7:b6:dd:16:b5:67:12:54: 7c:a5:3e:1d:a5:ab:b0:e7:8a:5a:fd:32:c1:34:9f:6a:2c:cc: 75:9c:b5:b5:b1:f2:c5:18:c8:98:0b:75:12:db:d9:0f:bf:a3: 8d:59:94:df:1d:5d:c8:de:79:19:4e:ba:d8:57:7c:7f:a6:fb: 4e:a3:ac:7a:0e:1f:b6:ed:b9:bf:05:20:0f:80:0f:a6:05:69: d6:2f:47:af:8b:71:68:e8:d3:31:27:24:0d:8e:10:59:47:9c: cf:15:8e:dc:d0:00:94:cc:d9:64:99:45:5a:03:43:c5:50:c8: da:64:4a:67:8a:2d:d9:0f:87:d8:ea:a3:f2:b5:64:ff:ba:a7: bc:a0:cc:4b:14:ca:bb:92:ca:99:5f:ab:74:26:52:a9:c9:66: c1:b1:13:e9:20:08:a9:11:dd:be:e3:39:24:5a:04:67:a5:89: d0:bd:61:32:79:c2:83:7a:81:16:91:c7:5e:76:13:4a:4c:3d: 7c:91:b9:74:b8:cb:41:e3:24:99:26:5e:40:a6:4d:71:45:de: 3d:70:b7:7c:05:6b:af:91:0e:90:a8:6c:4b:2c:83:14:dd:b0: 58:80:fe:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1l3AtFAGBzH4LHhwvEgvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZDdkYTYzOTI5OTk5NjAzMzk1ODc3NDQ4Y2U1MGFjNmUw MjEzYTkwHhcNMjUxMjE4MTkwMTA3WhcNMjUxMjE5MTkwMTA3WjAzMTEwLwYDVQQD EyhhNDEwOTMyYWFhMDkxYzMyMWMzYWM2NzUzNWY1YzYwMjQ0ZTliYzg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9WyC9ZcBHsHdTSbR+6htNKSex4cm E0pUQX+neC+iP9s9ruFkH27kQTxcB/QWLSso/SU5BiSZPJpch6nyQZRIWr3btQ+I Yja/3rbA/3T6jFcOCHwJ0vo3jlctef+8w1sI5Ro7wLWc0IcrMOToB1PXpE1krzXw jpAFGiCgekmCUwyHZsGZPdh7dWTFhiM87ptRKUwPqr6JbqwI2T4o8ghaF6s0Fwjw rX7JEHcxVvOhOax2bJXxBSCIwVRA5FNZHm9AVPl76WfwitsLGoNM8EI7xF9mIXPS H26KWKqFLyJUN8tZ9kcG/TCu5W5NSNY9tN7xDh0AKECfp27f9LgLIeJtjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQQkyqqCRwyHDrGdTX1xgJE6byFMB8GA1UdIwQY MBaAFHTX2mOSmZlgM5WHdEjOUKxuAhOpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE5mYVk1S1ptV0F6bFlkMFNNNVFyRzRDRTZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8wZWI4NTItYWYzNC00Y2I5LTg3MmUt NGI1ZDVkNWY4Njk5LzEvZE5mYVk1S1ptV0F6bFlkMFNNNVFyRzRDRTZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8wZWI4NTItYWYzNC00Y2I5LTg3MmUtNGI1ZDVkNWY4Njk5 LzEvZE5mYVk1S1ptV0F6bFlkMFNNNVFyRzRDRTZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIonTbGrS J/HNNTtJoQOBWHvubV/v8P5wS7Vbfce23Ra1ZxJUfKU+HaWrsOeKWv0ywTSfaizM dZy1tbHyxRjImAt1EtvZD7+jjVmU3x1dyN55GU662Fd8f6b7TqOseg4ftu25vwUg D4APpgVp1i9Hr4txaOjTMSckDY4QWUeczxWO3NAAlMzZZJlFWgNDxVDI2mRKZ4ot 2Q+H2Oqj8rVk/7qnvKDMSxTKu5LKmV+rdCZSqclmwbET6SAIqRHdvuM5JFoEZ6WJ 0L1hMnnCg3qBFpHHXnYTSkw9fJG5dLjLQeMkmSZeQKZNcUXePXC3fAVrr5EOkKhs SyyDFN2wWID+LQ== -----END CERTIFICATE-----Generated at Fri Dec 19 01:22:47 2025 by rpki-client