This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft File: Da7a5Z2cmvUe9UivsMlkOM73IRw.mft (raw, json) Hash identifier: N8BXqq6GD8H6DGUsrkoSPhqkfOYeGL6SjTnrOgNaEnE= Subject key identifier: 69:FF:BF:08:6E:CD:28:8C:37:45:06:C1:D0:04:D2:2F:26:F1:71:C7 Authority key identifier: 0D:AE:DA:E5:9D:9C:9A:F5:1E:F5:48:AF:B0:C9:64:38:CE:F7:21:1C Certificate issuer: /CN=0daedae59d9c9af51ef548afb0c96438cef7211c Certificate serial: 019AF1D22784ED34B43D81DBA8E4198B8DE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Da7a5Z2cmvUe9UivsMlkOM73IRw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 04:01:12 +0000 Manifest this update: Sat 06 Dec 2025 04:01:12 +0000 Manifest next update: Sun 07 Dec 2025 04:01:12 +0000 Files and hashes: 1: Da7a5Z2cmvUe9UivsMlkOM73IRw.crl (hash: 8rkf0/2Kpd7BzELWpLxYXg50jBIs5Bs0Gp3e9b3ziZ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft rsync://rpki.ripe.net/repository/DEFAULT/Da7a5Z2cmvUe9UivsMlkOM73IRw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:27:84:ed:34:b4:3d:81:db:a8:e4:19:8b:8d:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0daedae59d9c9af51ef548afb0c96438cef7211c Validity Not Before: Dec 6 04:01:12 2025 GMT Not After : Dec 7 04:01:12 2025 GMT Subject: CN=69ffbf086ecd288c374506c1d004d22f26f171c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:46:41:36:f3:be:c8:89:4a:bf:e3:6e:1e:2e: 59:93:74:b3:93:be:ac:8e:d6:28:c4:00:75:97:f4: 7d:fc:68:cc:03:74:f1:2c:74:d3:54:4d:c4:76:04: c9:e5:52:77:46:93:22:47:e5:68:2f:59:ec:c1:0d: b3:70:88:16:2a:6e:cb:40:32:44:b2:7e:16:85:e8: ac:25:53:1f:c7:77:e1:78:af:b1:5b:0b:d6:36:d6: c3:12:1d:59:ec:fc:9e:f8:2a:b6:de:93:b9:e0:eb: c8:08:76:3a:2c:58:fa:c3:14:63:bb:3f:db:4e:a3: ea:f1:97:66:a8:dd:b9:00:db:1f:e8:ae:19:f5:d4: 81:1a:21:91:df:75:5c:d5:36:9c:14:34:ee:82:ef: af:a0:3c:02:46:9d:4e:a7:dd:4d:7c:fa:0b:69:b3: 9c:0b:6a:1b:7e:42:d5:de:d3:a6:64:82:a4:d5:3e: e9:92:f4:37:37:6c:c9:6d:c8:da:8f:39:4b:b1:3f: 43:da:59:cd:d7:74:a1:59:4a:80:41:79:b3:fe:e8: 54:8b:75:f8:e4:a5:e7:3a:f9:15:67:83:4d:7b:23: e2:e1:49:d4:36:47:39:2f:7d:ac:15:40:0a:b3:f7: 1e:1c:6e:28:06:60:5f:ca:15:20:da:9b:d7:1e:55: ec:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:FF:BF:08:6E:CD:28:8C:37:45:06:C1:D0:04:D2:2F:26:F1:71:C7 X509v3 Authority Key Identifier: keyid:0D:AE:DA:E5:9D:9C:9A:F5:1E:F5:48:AF:B0:C9:64:38:CE:F7:21:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Da7a5Z2cmvUe9UivsMlkOM73IRw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:60:eb:b8:e0:86:1e:b3:35:7f:b3:9f:49:ac:4c:7d:b2:5a: 1f:ea:cd:ef:b4:4c:6d:16:68:34:aa:2e:8b:63:b9:4c:cc:81: 98:c3:3c:6b:77:b8:08:27:54:3e:b4:24:61:d3:55:e3:5e:fd: a3:70:34:6e:80:63:9a:22:a3:74:62:c5:f1:1a:39:c3:d7:46: b0:17:bb:27:f2:bd:d2:fc:0f:ea:90:e5:be:69:8d:d6:86:1c: b5:a5:a2:4e:bc:b8:28:fd:fa:c7:09:c5:1f:df:93:f1:0c:dd: 51:43:26:5d:19:7c:9c:3d:aa:96:f7:e6:fc:7e:7b:1a:ee:2b: 08:8e:ae:7e:1e:b1:b3:76:97:b6:0a:5b:dd:4f:ce:55:8b:8a: 8b:94:64:d7:96:d2:20:65:00:bc:30:b8:25:bf:70:d2:b7:19: fe:3a:20:cc:65:36:f9:18:e3:8e:3f:9a:62:42:62:77:77:7e: 6d:76:fd:a5:79:24:69:cb:bd:32:93:c1:4e:c1:4d:cb:3a:2f: 1f:0a:c4:d5:53:30:78:6c:e0:88:a7:5e:13:20:b0:5f:6d:9d: 25:15:5a:56:22:7f:59:3d:41:79:b7:82:30:d4:52:68:e2:03: 04:24:f8:b1:d1:ae:37:05:82:5a:d5:85:7e:b9:04:e9:b0:ee: a3:23:82:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ieE7TS0PYHbqOQZi43hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYWVkYWU1OWQ5YzlhZjUxZWY1NDhhZmIwYzk2NDM4Y2Vm NzIxMWMwHhcNMjUxMjA2MDQwMTEyWhcNMjUxMjA3MDQwMTEyWjAzMTEwLwYDVQQD Eyg2OWZmYmYwODZlY2QyODhjMzc0NTA2YzFkMDA0ZDIyZjI2ZjE3MWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EZBNvO+yIlKv+NuHi5Zk3Szk76s jtYoxAB1l/R9/GjMA3TxLHTTVE3EdgTJ5VJ3RpMiR+VoL1nswQ2zcIgWKm7LQDJE sn4WheisJVMfx3fheK+xWwvWNtbDEh1Z7Pye+Cq23pO54OvICHY6LFj6wxRjuz/b TqPq8ZdmqN25ANsf6K4Z9dSBGiGR33Vc1TacFDTugu+voDwCRp1Op91NfPoLabOc C2obfkLV3tOmZIKk1T7pkvQ3N2zJbcjajzlLsT9D2lnN13ShWUqAQXmz/uhUi3X4 5KXnOvkVZ4NNeyPi4UnUNkc5L32sFUAKs/ceHG4oBmBfyhUg2pvXHlXsswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGn/vwhuzSiMN0UGwdAE0i8m8XHHMB8GA1UdIwQY MBaAFA2u2uWdnJr1HvVIr7DJZDjO9yEcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGE3YTVaMmNtdlVlOVVpdnNNbGtPTTczSVJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kMjlkM2YtMTY5Ni00ZWQ0LTk2ZDIt ZTdlYjgxN2VkZTMwLzEvRGE3YTVaMmNtdlVlOVVpdnNNbGtPTTczSVJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9kMjlkM2YtMTY5Ni00ZWQ0LTk2ZDItZTdlYjgxN2VkZTMw LzEvRGE3YTVaMmNtdlVlOVVpdnNNbGtPTTczSVJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm2DruOCG HrM1f7OfSaxMfbJaH+rN77RMbRZoNKoui2O5TMyBmMM8a3e4CCdUPrQkYdNV4179 o3A0boBjmiKjdGLF8Ro5w9dGsBe7J/K90vwP6pDlvmmN1oYctaWiTry4KP36xwnF H9+T8QzdUUMmXRl8nD2qlvfm/H57Gu4rCI6ufh6xs3aXtgpb3U/OVYuKi5Rk15bS IGUAvDC4Jb9w0rcZ/jogzGU2+Rjjjj+aYkJid3d+bXb9pXkkacu9MpPBTsFNyzov HwrE1VMweGzgiKdeEyCwX22dJRVaViJ/WT1BebeCMNRSaOIDBCT4sdGuNwWCWtWF frkE6bDuoyOC8Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:25:21 2025 by rpki-client