This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.mft File: dCMNFC7sf2qZsNtAlvk6BCBIP-Y.mft (raw, json) Hash identifier: ZhOoz6g2wOFA8I+IfjvSwOgftFPGDsfRxy//HReUuAk= Subject key identifier: 17:23:89:89:9B:35:37:D3:FE:79:BC:0B:4B:45:19:8B:96:E9:73:0A Authority key identifier: 74:23:0D:14:2E:EC:7F:6A:99:B0:DB:40:96:F9:3A:04:20:48:3F:E6 Certificate issuer: /CN=74230d142eec7f6a99b0db4096f93a0420483fe6 Certificate serial: 019B481547D8CE194FEFAB51CC5611E6FF96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.mft Manifest number: 0983 Signing time: Mon 22 Dec 2025 22:01:52 +0000 Manifest this update: Mon 22 Dec 2025 22:01:52 +0000 Manifest next update: Tue 23 Dec 2025 22:01:52 +0000 Files and hashes: 1: dCMNFC7sf2qZsNtAlvk6BCBIP-Y.crl (hash: uDJZQllokx3F3mBVUSFDRvZwyEc3dE/oRZKmO8RRZrg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.crl rsync://rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.mft rsync://rpki.ripe.net/repository/DEFAULT/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:15:47:d8:ce:19:4f:ef:ab:51:cc:56:11:e6:ff:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74230d142eec7f6a99b0db4096f93a0420483fe6 Validity Not Before: Dec 22 22:01:52 2025 GMT Not After : Dec 23 22:01:52 2025 GMT Subject: CN=172389899b3537d3fe79bc0b4b45198b96e9730a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:38:22:ed:1f:75:62:62:a8:19:5e:88:18:bb: b8:eb:52:af:cb:7e:ce:f7:11:ad:a0:c5:59:6c:07: 6c:63:6b:34:63:dd:11:92:6b:c8:67:0b:27:d5:3e: 6a:3b:74:aa:10:35:55:32:ef:c1:0d:ca:f3:b2:77: 69:23:49:0f:ef:5e:46:06:dc:05:2d:ca:ba:2c:8d: 23:09:46:fa:74:8e:92:1f:b1:ac:02:7c:fb:01:a2: 63:e6:a6:c0:e7:2a:80:30:b4:51:c4:7f:c9:b3:89: 51:bd:dd:86:1a:10:0b:27:f4:ce:bd:1d:a9:ff:95: 4a:87:c7:9e:53:fb:24:93:50:05:9e:f7:7c:a9:bb: 1f:6c:e9:c7:b7:b6:38:67:0d:fb:04:a1:09:72:bc: f4:f3:78:40:7c:dd:19:21:d3:52:45:82:c8:2c:5a: fe:cb:89:e7:ea:b4:82:f4:9d:2e:de:2c:55:78:fe: 21:b5:85:f7:e7:db:c7:af:85:43:12:11:70:e7:a3: fb:1b:ad:56:5e:a4:06:66:a7:99:11:da:2b:05:0c: bf:bf:4f:9e:8d:09:9a:67:e6:9d:0a:14:ad:7c:b1: f4:d1:27:b2:c7:ed:50:f2:50:f3:cf:b5:f8:c1:f4: c9:22:5d:e8:b6:39:6c:80:bd:90:0e:74:c6:e2:40: e5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:23:89:89:9B:35:37:D3:FE:79:BC:0B:4B:45:19:8B:96:E9:73:0A X509v3 Authority Key Identifier: keyid:74:23:0D:14:2E:EC:7F:6A:99:B0:DB:40:96:F9:3A:04:20:48:3F:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:7e:0e:e2:1d:32:b4:12:24:88:b2:d5:f0:1c:b5:dc:2d:f1: 2b:3e:ac:5f:d1:80:2c:88:3e:bc:a3:09:08:f9:56:a6:45:2e: 51:bc:77:bd:06:04:b5:d4:f2:44:7d:a4:b9:62:7a:88:a4:e8: 12:a5:62:03:95:a7:5a:77:bc:62:22:55:51:f8:64:5a:21:3b: 35:9d:30:cf:1f:61:eb:40:60:c4:8e:06:eb:c9:14:d5:1a:8f: 62:37:55:3d:cb:c1:65:57:a7:27:83:7c:1c:cb:2d:74:ed:e0: 5d:80:6a:ec:50:6c:56:44:5a:49:c9:5f:82:69:5a:d7:dd:9f: 7b:ec:23:fb:43:70:d4:63:c9:ec:96:23:2a:23:45:77:d1:70: 58:c2:b4:25:21:32:76:31:6f:42:8e:b9:ae:b0:c7:23:a5:39: 3e:1f:73:86:64:a6:a2:49:79:44:ac:e7:e1:2d:00:b0:d4:38: 14:92:bd:3a:9b:b5:56:e0:73:28:e2:bd:4f:a6:35:c9:4d:76: af:ce:6b:df:1c:1f:8f:f6:7e:6d:55:7c:37:09:9f:a0:73:9a: 6b:02:76:6b:c4:dc:01:5e:ce:bf:4e:a2:d1:53:64:f5:91:4b: 1f:84:50:d9:1b:f5:fa:95:78:61:a6:ef:d7:81:be:c1:ef:75: 9e:60:18:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFUfYzhlP76tRzFYR5v+WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0MjMwZDE0MmVlYzdmNmE5OWIwZGI0MDk2ZjkzYTA0MjA0 ODNmZTYwHhcNMjUxMjIyMjIwMTUyWhcNMjUxMjIzMjIwMTUyWjAzMTEwLwYDVQQD EygxNzIzODk4OTliMzUzN2QzZmU3OWJjMGI0YjQ1MTk4Yjk2ZTk3MzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozgi7R91YmKoGV6IGLu461Kvy37O 9xGtoMVZbAdsY2s0Y90RkmvIZwsn1T5qO3SqEDVVMu/BDcrzsndpI0kP715GBtwF Lcq6LI0jCUb6dI6SH7GsAnz7AaJj5qbA5yqAMLRRxH/Js4lRvd2GGhALJ/TOvR2p /5VKh8eeU/skk1AFnvd8qbsfbOnHt7Y4Zw37BKEJcrz083hAfN0ZIdNSRYLILFr+ y4nn6rSC9J0u3ixVeP4htYX359vHr4VDEhFw56P7G61WXqQGZqeZEdorBQy/v0+e jQmaZ+adChStfLH00Seyx+1Q8lDzz7X4wfTJIl3otjlsgL2QDnTG4kDlRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBcjiYmbNTfT/nm8C0tFGYuW6XMKMB8GA1UdIwQY MBaAFHQjDRQu7H9qmbDbQJb5OgQgSD/mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZENNTkZDN3NmMnFac050QWx2azZCQ0JJUC1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82OTc1NjQtMDAyNS00ZjkyLThkZmQt Y2UxYzAzNDAwZDRkLzEvZENNTkZDN3NmMnFac050QWx2azZCQ0JJUC1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC82OTc1NjQtMDAyNS00ZjkyLThkZmQtY2UxYzAzNDAwZDRk LzEvZENNTkZDN3NmMnFac050QWx2azZCQ0JJUC1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADn4O4h0y tBIkiLLV8By13C3xKz6sX9GALIg+vKMJCPlWpkUuUbx3vQYEtdTyRH2kuWJ6iKTo EqViA5WnWne8YiJVUfhkWiE7NZ0wzx9h60BgxI4G68kU1RqPYjdVPcvBZVenJ4N8 HMstdO3gXYBq7FBsVkRaSclfgmla192fe+wj+0Nw1GPJ7JYjKiNFd9FwWMK0JSEy djFvQo65rrDHI6U5Ph9zhmSmokl5RKzn4S0AsNQ4FJK9Opu1VuBzKOK9T6Y1yU12 r85r3xwfj/Z+bVV8NwmfoHOaawJ2a8TcAV7Ov06i0VNk9ZFLH4RQ2Rv1+pV4Yabv 14G+we91nmAY4w== -----END CERTIFICATE-----Generated at Tue Dec 23 04:09:52 2025 by rpki-client