This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft File: dE3LcujLR4z8SyWusfA7QGJmN1w.mft (raw, json) Hash identifier: wKzEO7sEIDfXxGTZdkYzuGK7dlwnAooG3KGmuYZyjus= Subject key identifier: 01:79:20:D2:67:B3:6B:B2:FA:14:F3:14:FA:13:4F:95:29:98:11:9D Authority key identifier: 74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C Certificate issuer: /CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c Certificate serial: 019B1314826D3202FB5C63C4E1878D5019D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft Manifest number: 0BC0 Signing time: Fri 12 Dec 2025 15:01:09 +0000 Manifest this update: Fri 12 Dec 2025 15:01:09 +0000 Manifest next update: Sat 13 Dec 2025 15:01:09 +0000 Files and hashes: 1: 8cafwJu77pkBukQtIkYtwta4vzE.roa (hash: 5ZeO0GQQRhcOKBhez5TUCQIoMyl73wJ5RRHIFaIhJkM=) 2: dE3LcujLR4z8SyWusfA7QGJmN1w.crl (hash: CARzG84+o5bXLdzKbHbL6qL41QCZ1f850IDuB4u+o3M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 15:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:13:14:82:6d:32:02:fb:5c:63:c4:e1:87:8d:50:19:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c Validity Not Before: Dec 12 15:01:09 2025 GMT Not After : Dec 13 15:01:09 2025 GMT Subject: CN=017920d267b36bb2fa14f314fa134f952998119d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:91:1a:b2:d4:f7:eb:9a:e1:9b:ca:ae:67:41: bb:f7:5f:bb:d2:3f:19:99:8a:6b:be:10:d8:b4:74: 1e:a2:0d:93:76:fa:ad:32:a9:4d:3f:27:16:39:1e: 98:d2:fe:63:c9:43:5f:d8:4c:9f:4b:64:83:25:06: fc:eb:7b:52:43:3d:5f:88:8b:e9:39:67:6b:5c:90: 41:f0:a8:41:5e:f9:b1:ea:b3:06:a5:5c:d7:82:bf: 9e:3c:1e:be:f5:64:52:4e:44:61:28:e9:65:0c:88: bf:b2:fb:2c:64:15:3c:6f:07:26:fb:23:b5:ae:dd: 9d:b7:f5:37:d5:c6:dd:e1:65:98:61:14:24:d6:eb: 11:f0:6b:54:d0:15:04:cf:41:c5:6c:80:7d:27:4d: 18:be:95:f3:33:43:f2:ee:5a:17:90:32:4a:2c:84: b4:44:08:86:48:3e:6b:b9:b9:5a:39:27:a0:95:05: 74:e6:28:a7:ed:28:0b:6a:77:e4:6b:76:a4:29:f6: fe:d2:40:2a:2b:98:66:c5:a9:66:79:23:a8:8a:8d: 7f:33:87:55:8d:e9:79:c4:8c:39:fc:4b:bd:92:e4: 00:f5:f3:53:c4:aa:be:5e:4c:e7:91:17:f6:e8:eb: 57:02:98:31:8f:c5:c8:8a:cc:37:68:8f:c9:c8:fa: ae:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:79:20:D2:67:B3:6B:B2:FA:14:F3:14:FA:13:4F:95:29:98:11:9D X509v3 Authority Key Identifier: keyid:74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:fc:85:ac:a1:b3:26:b7:42:26:a8:09:c1:66:91:63:10:16: db:52:c4:c0:80:d5:3e:5c:48:a2:90:51:5b:75:ac:f4:b7:0e: 83:c2:01:9d:71:f7:c5:cd:30:a6:93:c2:80:88:8c:87:62:f4: 90:76:9b:6c:22:25:20:de:9d:b9:41:f3:3c:c2:04:1c:da:2d: 87:f9:0d:45:e9:f9:e4:0c:39:9c:5b:4c:60:8c:ca:f5:cc:ba: d2:f2:ea:90:d9:6d:e6:32:62:5d:d7:f5:ab:93:28:cb:74:91: 2a:77:2c:5a:f9:0a:88:e5:de:14:b5:04:92:ea:76:d3:43:d4: 08:fc:ba:81:40:78:47:70:c9:03:ef:b4:75:a4:cb:96:11:83: 5e:93:ee:ec:c2:13:6c:bd:fb:80:39:91:56:b2:6d:bf:56:40: 43:09:2d:8c:91:0e:03:8a:ed:dc:4d:19:38:f4:51:c5:91:fd: 1a:d1:91:23:a4:6b:9a:1a:79:b8:d6:d8:fb:69:13:e6:a1:b2: 27:28:78:52:08:71:1a:65:f0:5d:78:ff:57:39:18:f3:a3:aa: f5:15:23:06:42:eb:90:c0:47:ce:d1:f6:f7:c4:99:01:ff:5d: cd:e9:a5:d3:f8:bd:38:b9:23:02:1b:c4:25:b7:da:2a:cb:71: 5a:22:28:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsTFIJtMgL7XGPE4YeNUBnWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NGRjYjcyZThjYjQ3OGNmYzRiMjVhZWIxZjAzYjQwNjI2 NjM3NWMwHhcNMjUxMjEyMTUwMTA5WhcNMjUxMjEzMTUwMTA5WjAzMTEwLwYDVQQD EygwMTc5MjBkMjY3YjM2YmIyZmExNGYzMTRmYTEzNGY5NTI5OTgxMTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pEastT365rhm8quZ0G791+70j8Z mYprvhDYtHQeog2TdvqtMqlNPycWOR6Y0v5jyUNf2EyfS2SDJQb863tSQz1fiIvp OWdrXJBB8KhBXvmx6rMGpVzXgr+ePB6+9WRSTkRhKOllDIi/svssZBU8bwcm+yO1 rt2dt/U31cbd4WWYYRQk1usR8GtU0BUEz0HFbIB9J00YvpXzM0Py7loXkDJKLIS0 RAiGSD5rublaOSeglQV05iin7SgLanfka3akKfb+0kAqK5hmxalmeSOoio1/M4dV jel5xIw5/Eu9kuQA9fNTxKq+XkznkRf26OtXApgxj8XIisw3aI/JyPqu8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAF5INJns2uy+hTzFPoTT5UpmBGdMB8GA1UdIwQY MBaAFHRNy3Loy0eM/EslrrHwO0BiZjdcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEUzTGN1akxSNHo4U3lXdXNmQTdRR0ptTjF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81ZTFiZTktZTRlYS00Yzg0LWE4Yjct ZDBkNDc2ZjQxZmQ2LzEvZEUzTGN1akxSNHo4U3lXdXNmQTdRR0ptTjF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi81ZTFiZTktZTRlYS00Yzg0LWE4YjctZDBkNDc2ZjQxZmQ2 LzEvZEUzTGN1akxSNHo4U3lXdXNmQTdRR0ptTjF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVvyFrKGz JrdCJqgJwWaRYxAW21LEwIDVPlxIopBRW3Ws9LcOg8IBnXH3xc0wppPCgIiMh2L0 kHabbCIlIN6duUHzPMIEHNoth/kNRen55Aw5nFtMYIzK9cy60vLqkNlt5jJiXdf1 q5Moy3SRKncsWvkKiOXeFLUEkup200PUCPy6gUB4R3DJA++0daTLlhGDXpPu7MIT bL37gDmRVrJtv1ZAQwktjJEOA4rt3E0ZOPRRxZH9GtGRI6Rrmhp5uNbY+2kT5qGy Jyh4UghxGmXwXXj/VzkY86Oq9RUjBkLrkMBHztH298SZAf9dzeml0/i9OLkjAhvE JbfaKstxWiIoKw== -----END CERTIFICATE-----Generated at Fri Dec 12 19:28:31 2025 by rpki-client