This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft File: rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft (raw, json) Hash identifier: 1JEfh4VAcADv9w+GGV4IDfQFwxWs+qwxQK1wVCeF10U= Subject key identifier: 37:C4:65:FF:8C:0D:4F:B5:80:AA:FD:30:47:D1:5A:F1:7E:64:F7:D0 Authority key identifier: AD:D9:20:79:94:BA:9C:7D:91:EA:7E:47:9F:EF:D1:B8:09:9F:62:CE Certificate issuer: /CN=add9207994ba9c7d91ea7e479fefd1b8099f62ce Certificate serial: 019AF12E6F755AEFB54372EA5D8516D2041B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft Manifest number: 176B Signing time: Sat 06 Dec 2025 01:02:23 +0000 Manifest this update: Sat 06 Dec 2025 01:02:23 +0000 Manifest next update: Sun 07 Dec 2025 01:02:23 +0000 Files and hashes: 1: rdkgeZS6nH2R6n5Hn-_RuAmfYs4.crl (hash: 4XFueJRSOn2EhYu4yRz8T91JFaYQk/ZXKbBlBBCfxRk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft rsync://rpki.ripe.net/repository/DEFAULT/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:6f:75:5a:ef:b5:43:72:ea:5d:85:16:d2:04:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=add9207994ba9c7d91ea7e479fefd1b8099f62ce Validity Not Before: Dec 6 01:02:23 2025 GMT Not After : Dec 7 01:02:23 2025 GMT Subject: CN=37c465ff8c0d4fb580aafd3047d15af17e64f7d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:82:d5:c0:db:cb:25:89:54:b1:dd:c8:ad:33: 55:eb:a8:80:bc:9a:e1:75:a7:b6:9f:29:c2:9a:e7: de:f2:05:b0:b2:49:77:62:6d:cc:a6:df:e3:4b:9b: 3a:e4:e0:e1:41:0b:2e:d8:63:26:1a:0e:e0:d8:3c: 1d:d0:c1:d5:7c:5c:65:13:1e:cf:f6:0f:b9:bd:ea: 15:ee:5f:61:35:15:2b:52:d6:1c:e8:fb:3f:b0:03: 02:5e:0f:21:56:96:0b:2d:6c:c9:64:da:54:af:e1: 88:58:2a:75:6d:65:63:45:66:b3:b5:88:7c:a6:92: 58:89:67:cc:4f:d6:c6:06:9f:8d:ba:b2:84:af:50: ec:ce:38:77:50:66:35:c7:0b:9d:aa:8c:fc:da:cf: db:18:5b:3d:52:ba:73:5d:c5:18:c6:1c:c9:61:a1: 16:94:79:14:15:77:e1:e6:86:a1:90:88:29:23:4d: fd:30:34:4f:58:be:16:87:00:76:9d:b3:5c:30:ba: a5:51:bd:dc:fe:32:28:4a:ae:09:bb:b8:12:95:a4: 9c:b6:10:b0:a8:6c:ed:7e:f5:b7:59:61:06:b3:cb: 66:62:65:d9:d0:d7:bb:4b:5a:23:08:70:fa:9d:16: e8:79:59:e0:e6:06:5f:af:08:ec:46:de:3a:69:ab: bc:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:C4:65:FF:8C:0D:4F:B5:80:AA:FD:30:47:D1:5A:F1:7E:64:F7:D0 X509v3 Authority Key Identifier: keyid:AD:D9:20:79:94:BA:9C:7D:91:EA:7E:47:9F:EF:D1:B8:09:9F:62:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/47a9c9-d457-4579-b2b0-e5212574f9ec/1/rdkgeZS6nH2R6n5Hn-_RuAmfYs4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:d7:78:45:47:5a:5b:b5:bb:2b:6c:07:5e:7e:53:4f:bd:65: 57:b7:3a:c1:c1:69:cc:c8:34:e7:2b:d0:92:01:19:46:2b:fb: 89:93:bd:3b:74:29:18:27:2d:99:40:11:9a:07:09:6a:0c:02: 6d:be:bb:cf:23:ae:47:a5:c3:80:75:e2:33:1a:e8:82:d1:74: ce:0e:ba:33:2b:b8:fd:fd:19:be:08:51:65:e6:5a:d7:96:e3: 84:e5:21:64:ea:2a:a7:3e:32:11:32:72:38:29:22:34:07:28: 52:31:5a:92:8e:76:95:0c:72:bd:d2:c8:0c:01:45:c9:eb:2a: fd:1a:d4:95:11:21:19:56:d5:cc:4b:b3:4f:4f:f3:be:bf:ed: b9:c3:f9:5c:13:d5:06:22:7c:20:ce:58:8b:4e:fe:e5:f7:6e: 0d:e8:63:a1:f5:61:9b:a1:f7:be:9c:10:c3:62:1f:fa:88:60: ca:2e:88:d7:5c:6e:9c:15:1c:c2:ef:94:e6:86:09:7c:0c:c9: cb:c9:b7:d0:c7:3a:11:fd:8a:16:f7:2e:12:e8:60:ed:d7:7d: 7f:47:52:8f:ae:19:75:87:40:17:d5:ee:e3:9d:24:b1:3f:a5: 05:fd:48:93:36:ab:25:e9:07:a0:ca:56:09:c2:f0:bd:29:fc: a9:e7:e9:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLm91Wu+1Q3LqXYUW0gQbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkZDkyMDc5OTRiYTljN2Q5MWVhN2U0NzlmZWZkMWI4MDk5 ZjYyY2UwHhcNMjUxMjA2MDEwMjIzWhcNMjUxMjA3MDEwMjIzWjAzMTEwLwYDVQQD EygzN2M0NjVmZjhjMGQ0ZmI1ODBhYWZkMzA0N2QxNWFmMTdlNjRmN2QwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YLVwNvLJYlUsd3IrTNV66iAvJrh dae2nynCmufe8gWwskl3Ym3Mpt/jS5s65ODhQQsu2GMmGg7g2Dwd0MHVfFxlEx7P 9g+5veoV7l9hNRUrUtYc6Ps/sAMCXg8hVpYLLWzJZNpUr+GIWCp1bWVjRWaztYh8 ppJYiWfMT9bGBp+NurKEr1Dszjh3UGY1xwudqoz82s/bGFs9UrpzXcUYxhzJYaEW lHkUFXfh5oahkIgpI039MDRPWL4WhwB2nbNcMLqlUb3c/jIoSq4Ju7gSlaScthCw qGztfvW3WWEGs8tmYmXZ0Ne7S1ojCHD6nRboeVng5gZfrwjsRt46aau8rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDfEZf+MDU+1gKr9MEfRWvF+ZPfQMB8GA1UdIwQY MBaAFK3ZIHmUupx9kep+R5/v0bgJn2LOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmRrZ2VaUzZuSDJSNm41SG4tX1J1QW1mWXM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC80N2E5YzktZDQ1Ny00NTc5LWIyYjAt ZTUyMTI1NzRmOWVjLzEvcmRrZ2VaUzZuSDJSNm41SG4tX1J1QW1mWXM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC80N2E5YzktZDQ1Ny00NTc5LWIyYjAtZTUyMTI1NzRmOWVj LzEvcmRrZ2VaUzZuSDJSNm41SG4tX1J1QW1mWXM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc9d4RUda W7W7K2wHXn5TT71lV7c6wcFpzMg05yvQkgEZRiv7iZO9O3QpGCctmUARmgcJagwC bb67zyOuR6XDgHXiMxrogtF0zg66Myu4/f0ZvghRZeZa15bjhOUhZOoqpz4yETJy OCkiNAcoUjFako52lQxyvdLIDAFFyesq/RrUlREhGVbVzEuzT0/zvr/tucP5XBPV BiJ8IM5Yi07+5fduDehjofVhm6H3vpwQw2If+ohgyi6I11xunBUcwu+U5oYJfAzJ y8m30Mc6Ef2KFvcuEuhg7dd9f0dSj64ZdYdAF9Xu450ksT+lBf1IkzarJekHoMpW CcLwvSn8qefpyg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:38:30 2025 by rpki-client