This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft File: DP81-NWtPe6lUQZbJAK7DTyNlRk.mft (raw, json) Hash identifier: ZzSBJgCQ3AhFRvIs2wloKNCdLStLsmf5kUFxL5QOeII= Subject key identifier: 79:61:4B:D3:95:3A:26:35:30:6E:41:72:29:90:3C:21:62:38:9C:65 Authority key identifier: 0C:FF:35:F8:D5:AD:3D:EE:A5:51:06:5B:24:02:BB:0D:3C:8D:95:19 Certificate issuer: /CN=0cff35f8d5ad3deea551065b2402bb0d3c8d9519 Certificate serial: 019AF50AA63077A38C62BFED3565E3152DAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DP81-NWtPe6lUQZbJAK7DTyNlRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 19:01:47 +0000 Manifest this update: Sat 06 Dec 2025 19:01:47 +0000 Manifest next update: Sun 07 Dec 2025 19:01:47 +0000 Files and hashes: 1: DP81-NWtPe6lUQZbJAK7DTyNlRk.crl (hash: Pg1wmW2yGbA2ZKeDF/ozUT2QL8QE6loAwkQ8qW4ZqcE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft rsync://rpki.ripe.net/repository/DEFAULT/DP81-NWtPe6lUQZbJAK7DTyNlRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:a6:30:77:a3:8c:62:bf:ed:35:65:e3:15:2d:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cff35f8d5ad3deea551065b2402bb0d3c8d9519 Validity Not Before: Dec 6 19:01:47 2025 GMT Not After : Dec 7 19:01:47 2025 GMT Subject: CN=79614bd3953a2635306e417229903c2162389c65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:92:e3:fb:53:e2:1f:75:52:48:ca:c4:7a:45: 7d:24:4b:b0:cf:46:44:c6:ff:5a:5d:b5:62:f0:a7: 8f:d5:59:48:99:c5:2d:a2:01:92:27:e2:7a:3b:33: 6d:eb:66:2a:0e:76:64:3c:d8:19:db:2b:17:d7:e0: 4e:51:e1:c0:88:43:47:e6:48:83:17:e3:70:e0:3d: eb:d2:15:88:da:76:04:6d:45:62:5f:ab:a3:c3:9a: 69:f2:2a:11:4b:81:47:5b:c8:9c:3a:b5:ee:c5:a5: 42:a9:5b:ef:ad:b0:d9:35:e7:04:8b:06:86:16:c9: 41:1f:73:ea:f8:75:29:0a:bd:5c:d2:8b:f9:31:b0: 7b:17:50:31:6e:d3:16:53:c4:12:1e:42:8a:e9:65: c5:32:09:00:e2:67:c0:d2:db:ea:b5:e3:61:c2:c0: 5d:ef:5c:56:40:e7:c9:f3:d4:78:05:ce:0f:a0:83: 79:c6:48:54:d2:6a:fc:e2:32:8b:86:13:6d:38:93: 72:54:d4:89:47:5a:11:83:e0:91:35:28:9f:0f:85: e5:d8:e6:a5:b1:20:b8:b5:3c:e9:49:d9:58:f8:e8: 5c:5f:0b:7a:e9:7e:de:ef:b5:2e:33:10:12:d6:58: 7e:18:5c:ec:42:fc:e4:56:fd:7a:34:bd:56:7c:5e: 23:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:61:4B:D3:95:3A:26:35:30:6E:41:72:29:90:3C:21:62:38:9C:65 X509v3 Authority Key Identifier: keyid:0C:FF:35:F8:D5:AD:3D:EE:A5:51:06:5B:24:02:BB:0D:3C:8D:95:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DP81-NWtPe6lUQZbJAK7DTyNlRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:e0:ed:48:ea:c6:f8:66:c8:5f:44:70:a9:20:3a:1a:52:e8: e6:b3:97:a2:50:db:17:14:dc:e1:d9:f6:17:82:95:a8:34:8f: 77:c2:20:e9:21:63:ea:bd:e7:6d:bf:ea:9c:fa:4c:6b:4a:03: df:72:36:2a:20:b9:e8:96:62:cc:f5:d9:79:70:4a:ac:33:96: 89:67:ed:0a:c4:6a:54:50:40:dd:ac:61:de:5f:6f:03:68:ed: 44:ed:ed:41:3c:2d:81:fc:ac:cc:0c:11:df:72:b2:9d:5f:60: fe:13:e3:27:b6:05:63:13:28:3b:93:b9:dd:f0:d8:8d:73:fa: a4:8f:81:58:8e:84:40:c9:bf:12:c7:1a:92:7f:b8:0e:94:51: fb:79:22:fd:56:6b:09:20:02:c1:fe:11:12:df:ff:6c:ec:7c: c8:13:e9:53:0a:ba:fd:62:1e:ea:ff:0b:e0:de:40:b7:eb:49: bc:fd:9a:7e:01:f0:6e:b9:3a:84:3c:58:5e:79:61:0e:20:0f: a2:d4:59:21:f2:9a:7c:32:cc:34:3d:7a:f0:ff:82:f4:85:58: e0:78:97:0a:60:3a:e1:3e:36:c9:47:f9:de:a0:dc:03:36:d8: c7:12:18:79:66:2b:e9:41:2e:76:4a:29:58:81:f9:6d:52:47: 46:ed:ad:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CqYwd6OMYr/tNWXjFS2sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZmYzNWY4ZDVhZDNkZWVhNTUxMDY1YjI0MDJiYjBkM2M4 ZDk1MTkwHhcNMjUxMjA2MTkwMTQ3WhcNMjUxMjA3MTkwMTQ3WjAzMTEwLwYDVQQD Eyg3OTYxNGJkMzk1M2EyNjM1MzA2ZTQxNzIyOTkwM2MyMTYyMzg5YzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpLj+1PiH3VSSMrEekV9JEuwz0ZE xv9aXbVi8KeP1VlImcUtogGSJ+J6OzNt62YqDnZkPNgZ2ysX1+BOUeHAiENH5kiD F+Nw4D3r0hWI2nYEbUViX6ujw5pp8ioRS4FHW8icOrXuxaVCqVvvrbDZNecEiwaG FslBH3Pq+HUpCr1c0ov5MbB7F1AxbtMWU8QSHkKK6WXFMgkA4mfA0tvqteNhwsBd 71xWQOfJ89R4Bc4PoIN5xkhU0mr84jKLhhNtOJNyVNSJR1oRg+CRNSifD4Xl2Oal sSC4tTzpSdlY+OhcXwt66X7e77UuMxAS1lh+GFzsQvzkVv16NL1WfF4jywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHlhS9OVOiY1MG5BcimQPCFiOJxlMB8GA1UdIwQY MBaAFAz/NfjVrT3upVEGWyQCuw08jZUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFA4MS1OV3RQZTZsVVFaYkpBSzdEVHlObFJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC83MGFjNTQtOGFjYi00YTFiLTgxMDUt ZTMzZjJiYWFiYzYwLzEvRFA4MS1OV3RQZTZsVVFaYkpBSzdEVHlObFJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC83MGFjNTQtOGFjYi00YTFiLTgxMDUtZTMzZjJiYWFiYzYw LzEvRFA4MS1OV3RQZTZsVVFaYkpBSzdEVHlObFJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXeDtSOrG +GbIX0RwqSA6GlLo5rOXolDbFxTc4dn2F4KVqDSPd8Ig6SFj6r3nbb/qnPpMa0oD 33I2KiC56JZizPXZeXBKrDOWiWftCsRqVFBA3axh3l9vA2jtRO3tQTwtgfyszAwR 33KynV9g/hPjJ7YFYxMoO5O53fDYjXP6pI+BWI6EQMm/Escakn+4DpRR+3ki/VZr CSACwf4REt//bOx8yBPpUwq6/WIe6v8L4N5At+tJvP2afgHwbrk6hDxYXnlhDiAP otRZIfKafDLMND168P+C9IVY4HiXCmA64T42yUf53qDcAzbYxxIYeWYr6UEudkop WIH5bVJHRu2tCw== -----END CERTIFICATE-----Generated at Sun Dec 7 01:33:35 2025 by rpki-client