This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft File: Dp4K_r9UpNIYr7rtVDB3G793d6k.mft (raw, json) Hash identifier: xaQ9l3QqBu/4qh4i6g0WIRfblrjdOcusbYRvaJy9mdU= Subject key identifier: 17:07:B4:48:4F:75:80:A4:22:5D:6B:8A:F3:AA:BB:CA:C0:6E:B6:CA Authority key identifier: 0E:9E:0A:FE:BF:54:A4:D2:18:AF:BA:ED:54:30:77:1B:BF:77:77:A9 Certificate issuer: /CN=0e9e0afebf54a4d218afbaed5430771bbf7777a9 Certificate serial: 019B3532F7E66B4254C4E0D9A85658E0583C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft Manifest number: 1783 Signing time: Fri 19 Dec 2025 06:01:31 +0000 Manifest this update: Fri 19 Dec 2025 06:01:31 +0000 Manifest next update: Sat 20 Dec 2025 06:01:31 +0000 Files and hashes: 1: Dp4K_r9UpNIYr7rtVDB3G793d6k.crl (hash: afTtrNqqnIzCLqCbWn8qjNvYAtdUCnkJEqZ16wUPFNY=) 2: RX3j6hG8jPHQlqgQDFsxWI9wjiU.roa (hash: iX9OHbXh9X/4e6G7wovNf6r/WuAf8SkEeNMsZiGLv+M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.crl rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:f7:e6:6b:42:54:c4:e0:d9:a8:56:58:e0:58:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e9e0afebf54a4d218afbaed5430771bbf7777a9 Validity Not Before: Dec 19 06:01:31 2025 GMT Not After : Dec 20 06:01:31 2025 GMT Subject: CN=1707b4484f7580a4225d6b8af3aabbcac06eb6ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b4:7c:e9:cb:60:63:31:17:13:d8:c2:cd:ad: cb:74:71:a9:0f:b7:f1:9a:5c:c1:98:0f:3a:f8:1e: 6e:8b:f4:ff:26:e6:4e:f5:86:1c:e6:5a:9d:2e:d0: 7e:cc:e0:dd:ff:93:b0:d8:4d:bf:6b:93:82:2e:4b: d8:9c:14:2b:ad:b0:5a:5a:23:18:1f:cf:07:50:f5: 74:91:db:8f:9a:40:b3:8b:a9:aa:2a:d3:91:df:10: a8:eb:de:f0:b8:7c:21:22:27:58:1f:70:0c:80:e0: 8a:d6:e6:a6:1d:75:98:a1:f5:6d:de:ac:20:e5:63: 24:9a:a4:08:2c:5d:f2:63:98:97:8d:aa:4f:5f:0e: 24:0a:84:18:e8:5e:31:de:e7:bc:cf:7a:72:a1:fd: b5:72:36:db:f6:71:54:97:34:5a:47:d7:c7:eb:4b: 61:dd:91:1c:d2:77:77:df:06:c0:7e:a2:39:4b:d4: e1:dc:4b:be:21:cc:a7:9e:43:d8:0b:76:21:51:f6: 9b:2c:cc:82:71:ef:23:ee:7a:03:23:42:bc:07:6c: dd:d0:0d:4b:e7:fa:16:e0:37:fd:62:74:98:05:ba: 69:76:2b:a4:64:49:8c:a5:2e:08:2e:47:3a:0f:c7: e0:7f:6d:35:96:3c:d4:f2:f5:bb:1a:f2:03:b9:0d: fe:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:07:B4:48:4F:75:80:A4:22:5D:6B:8A:F3:AA:BB:CA:C0:6E:B6:CA X509v3 Authority Key Identifier: keyid:0E:9E:0A:FE:BF:54:A4:D2:18:AF:BA:ED:54:30:77:1B:BF:77:77:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dp4K_r9UpNIYr7rtVDB3G793d6k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d22140-d961-4377-b8c6-3ef594e6c696/1/Dp4K_r9UpNIYr7rtVDB3G793d6k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:5d:8d:56:09:f3:72:be:5f:62:00:06:c0:7b:8b:10:a1:3a: dc:55:b4:7f:81:32:58:cb:3d:ab:e0:15:7b:01:22:f8:73:23: 36:e6:71:d2:89:1b:3e:fb:4c:77:f5:8a:d7:17:0a:23:41:7b: 85:2c:5e:1a:a5:58:32:c6:59:0f:4e:cf:b6:2b:f8:01:fb:e4: 9b:5b:12:91:c9:f7:87:e2:c7:a7:58:d3:35:d8:ce:69:5f:84: 62:b3:7f:20:99:55:e2:81:03:88:32:51:9a:3f:77:2b:5b:60: 5f:9c:5b:db:65:58:61:32:91:c8:51:4f:59:a3:79:c6:b4:24: 30:f7:41:39:f4:41:31:c4:cb:d7:d8:25:87:18:9d:f5:4b:b2: 37:1d:cc:5c:68:18:e3:40:d1:b6:25:44:4b:09:0f:cb:0c:29: 77:41:51:3b:ba:ff:c8:e9:c8:4e:8d:7d:1e:96:58:13:c3:8c: 14:5f:32:00:ef:2b:a9:50:9c:6c:62:b3:46:8d:72:90:51:3f: f5:af:ca:87:a6:24:47:a7:9e:f6:d2:ae:00:8a:6e:55:2a:d8: 1d:9e:87:87:de:bb:c2:e5:5f:52:d1:4d:e2:aa:05:20:8f:16: 95:a2:25:c5:ee:d1:13:69:fb:7e:cf:1b:f7:0d:ef:19:6b:4f: 08:9c:ba:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1Mvfma0JUxODZqFZY4Fg8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlOWUwYWZlYmY1NGE0ZDIxOGFmYmFlZDU0MzA3NzFiYmY3 Nzc3YTkwHhcNMjUxMjE5MDYwMTMxWhcNMjUxMjIwMDYwMTMxWjAzMTEwLwYDVQQD EygxNzA3YjQ0ODRmNzU4MGE0MjI1ZDZiOGFmM2FhYmJjYWMwNmViNmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rR86ctgYzEXE9jCza3LdHGpD7fx mlzBmA86+B5ui/T/JuZO9YYc5lqdLtB+zODd/5Ow2E2/a5OCLkvYnBQrrbBaWiMY H88HUPV0kduPmkCzi6mqKtOR3xCo697wuHwhIidYH3AMgOCK1uamHXWYofVt3qwg 5WMkmqQILF3yY5iXjapPXw4kCoQY6F4x3ue8z3pyof21cjbb9nFUlzRaR9fH60th 3ZEc0nd33wbAfqI5S9Th3Eu+IcynnkPYC3YhUfabLMyCce8j7noDI0K8B2zd0A1L 5/oW4Df9YnSYBbppdiukZEmMpS4ILkc6D8fgf201ljzU8vW7GvIDuQ3+NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBcHtEhPdYCkIl1rivOqu8rAbrbKMB8GA1UdIwQY MBaAFA6eCv6/VKTSGK+67VQwdxu/d3epMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHA0S19yOVVwTklZcjdydFZEQjNHNzkzZDZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kMjIxNDAtZDk2MS00Mzc3LWI4YzYt M2VmNTk0ZTZjNjk2LzEvRHA0S19yOVVwTklZcjdydFZEQjNHNzkzZDZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9kMjIxNDAtZDk2MS00Mzc3LWI4YzYtM2VmNTk0ZTZjNjk2 LzEvRHA0S19yOVVwTklZcjdydFZEQjNHNzkzZDZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKV2NVgnz cr5fYgAGwHuLEKE63FW0f4EyWMs9q+AVewEi+HMjNuZx0okbPvtMd/WK1xcKI0F7 hSxeGqVYMsZZD07Ptiv4Afvkm1sSkcn3h+LHp1jTNdjOaV+EYrN/IJlV4oEDiDJR mj93K1tgX5xb22VYYTKRyFFPWaN5xrQkMPdBOfRBMcTL19glhxid9UuyNx3MXGgY 40DRtiVESwkPywwpd0FRO7r/yOnITo19HpZYE8OMFF8yAO8rqVCcbGKzRo1ykFE/ 9a/Kh6YkR6ee9tKuAIpuVSrYHZ6Hh967wuVfUtFN4qoFII8WlaIlxe7RE2n7fs8b 9w3vGWtPCJy6tw== -----END CERTIFICATE-----Generated at Fri Dec 19 15:23:11 2025 by rpki-client