This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.mft File: dC44IKB42kewo3Ti06ZtYmPB4j8.mft (raw, json) Hash identifier: FlodX29BihEfG3WokOukkyoa/MkgSKbWlTK+Spj5OKM= Subject key identifier: 69:EF:3F:C9:EF:AD:87:20:43:A1:35:FC:B7:C3:BF:A0:B2:E9:FC:8D Authority key identifier: 74:2E:38:20:A0:78:DA:47:B0:A3:74:E2:D3:A6:6D:62:63:C1:E2:3F Certificate issuer: /CN=742e3820a078da47b0a374e2d3a66d6263c1e23f Certificate serial: 019B34C63BD26150BF50384C5BFB558E2E77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dC44IKB42kewo3Ti06ZtYmPB4j8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.mft Manifest number: 1054 Signing time: Fri 19 Dec 2025 04:02:45 +0000 Manifest this update: Fri 19 Dec 2025 04:02:45 +0000 Manifest next update: Sat 20 Dec 2025 04:02:45 +0000 Files and hashes: 1: dC44IKB42kewo3Ti06ZtYmPB4j8.crl (hash: WxpRqeuAQXqo8AtpzqQAxsBI0n4VId6SZIIvRIy5Ej0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.crl rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.mft rsync://rpki.ripe.net/repository/DEFAULT/dC44IKB42kewo3Ti06ZtYmPB4j8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:02:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c6:3b:d2:61:50:bf:50:38:4c:5b:fb:55:8e:2e:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=742e3820a078da47b0a374e2d3a66d6263c1e23f Validity Not Before: Dec 19 04:02:45 2025 GMT Not After : Dec 20 04:02:45 2025 GMT Subject: CN=69ef3fc9efad872043a135fcb7c3bfa0b2e9fc8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fd:60:3f:ac:ea:bd:26:29:2c:9d:db:8a:8b: 5c:41:1d:f1:88:d8:43:bc:c1:56:a1:ea:ec:2c:28: f6:84:7f:bd:9f:e9:58:2a:28:d2:e2:e3:3c:b3:4b: 18:b1:e7:71:ac:ac:39:1e:13:26:06:55:f6:f9:86: 6e:17:1c:c0:11:8e:88:db:cf:06:1c:1a:ac:8c:5e: 5e:43:00:8f:2a:a2:e7:64:ef:c3:f5:21:e7:82:20: 3c:a3:51:34:b0:86:c1:6e:bd:64:a3:9b:46:e2:30: 09:99:e1:20:17:dc:78:c7:d1:14:40:a3:2a:14:57: 2b:13:1c:ea:38:78:9c:33:f1:31:11:90:70:fd:76: 07:e4:a3:44:51:68:79:f0:e3:0e:45:01:c4:84:b1: a0:ed:e8:b4:17:8c:63:f6:24:8c:34:46:4f:8d:ab: a8:34:44:e4:d6:38:0f:43:73:50:00:fe:dc:1a:df: 5d:14:f8:db:d7:25:dd:c8:8c:74:af:cb:84:e9:cf: 63:3a:2d:76:4b:8b:fa:ae:6e:d8:0c:56:2e:00:71: 41:3d:cf:6a:37:b4:e5:b3:bb:1a:e0:57:4c:73:27: 92:79:c7:18:95:73:8a:99:22:3c:42:21:a1:96:f5: d5:b4:72:7c:a0:17:f4:7e:de:3a:33:67:2c:78:42: 44:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:EF:3F:C9:EF:AD:87:20:43:A1:35:FC:B7:C3:BF:A0:B2:E9:FC:8D X509v3 Authority Key Identifier: keyid:74:2E:38:20:A0:78:DA:47:B0:A3:74:E2:D3:A6:6D:62:63:C1:E2:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dC44IKB42kewo3Ti06ZtYmPB4j8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:d5:a2:d1:92:00:37:8b:25:fd:c1:54:25:c2:04:a1:3d:14: 3c:9f:53:96:af:4a:93:c0:31:c1:d1:fd:b3:c6:e9:57:87:5e: 62:4d:2b:7e:6e:35:db:fb:5c:3b:3a:03:a4:a5:33:8c:50:9d: a9:80:3d:d7:87:90:80:26:cf:72:9f:7f:08:ff:14:4c:22:e8: 2c:4f:6a:b5:25:db:8f:bd:51:a4:c4:69:89:87:cc:06:63:5f: e1:97:fc:cb:b5:20:58:9d:cb:3b:5c:f6:c1:ab:1f:22:a4:cc: 89:ae:1b:e5:06:5d:ff:74:b7:47:a7:5e:a6:14:0f:50:80:02: b3:4f:b0:23:77:53:d5:01:53:da:48:27:81:30:2a:5c:ac:56: 4f:14:2a:e8:13:1e:89:df:a1:fd:e3:91:87:f8:45:3c:9a:8f: 29:55:a7:4e:c4:ca:29:0d:53:b2:36:04:7d:58:5d:fd:36:52: b5:fe:3a:bf:07:a6:71:fd:65:78:2b:d3:17:36:8b:e2:9b:52: a9:a6:4c:27:29:8f:d6:f0:dc:b8:1a:3f:07:ab:36:b0:08:80: 66:87:11:39:06:72:6b:ad:f4:be:46:a4:e9:15:6e:3f:d6:69: ae:c8:f5:91:f7:95:dc:56:72:cc:51:5b:aa:9a:1c:03:e5:e3: b6:8a:a4:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xjvSYVC/UDhMW/tVji53MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0MmUzODIwYTA3OGRhNDdiMGEzNzRlMmQzYTY2ZDYyNjNj MWUyM2YwHhcNMjUxMjE5MDQwMjQ1WhcNMjUxMjIwMDQwMjQ1WjAzMTEwLwYDVQQD Eyg2OWVmM2ZjOWVmYWQ4NzIwNDNhMTM1ZmNiN2MzYmZhMGIyZTlmYzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsf1gP6zqvSYpLJ3biotcQR3xiNhD vMFWoersLCj2hH+9n+lYKijS4uM8s0sYsedxrKw5HhMmBlX2+YZuFxzAEY6I288G HBqsjF5eQwCPKqLnZO/D9SHngiA8o1E0sIbBbr1ko5tG4jAJmeEgF9x4x9EUQKMq FFcrExzqOHicM/ExEZBw/XYH5KNEUWh58OMORQHEhLGg7ei0F4xj9iSMNEZPjauo NETk1jgPQ3NQAP7cGt9dFPjb1yXdyIx0r8uE6c9jOi12S4v6rm7YDFYuAHFBPc9q N7Tls7sa4FdMcyeSeccYlXOKmSI8QiGhlvXVtHJ8oBf0ft46M2cseEJEsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGnvP8nvrYcgQ6E1/LfDv6Cy6fyNMB8GA1UdIwQY MBaAFHQuOCCgeNpHsKN04tOmbWJjweI/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEM0NElLQjQya2V3bzNUaTA2WnRZbVBCNGo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS84OWZjNTEtZDQ3NS00ZWVlLWE5NzAt OTMwNzAwY2E2MTdmLzEvZEM0NElLQjQya2V3bzNUaTA2WnRZbVBCNGo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS84OWZjNTEtZDQ3NS00ZWVlLWE5NzAtOTMwNzAwY2E2MTdm LzEvZEM0NElLQjQya2V3bzNUaTA2WnRZbVBCNGo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR9Wi0ZIA N4sl/cFUJcIEoT0UPJ9Tlq9Kk8AxwdH9s8bpV4deYk0rfm412/tcOzoDpKUzjFCd qYA914eQgCbPcp9/CP8UTCLoLE9qtSXbj71RpMRpiYfMBmNf4Zf8y7UgWJ3LO1z2 wasfIqTMia4b5QZd/3S3R6dephQPUIACs0+wI3dT1QFT2kgngTAqXKxWTxQq6BMe id+h/eORh/hFPJqPKVWnTsTKKQ1TsjYEfVhd/TZStf46vwemcf1leCvTFzaL4ptS qaZMJymP1vDcuBo/B6s2sAiAZocROQZya630vkak6RVuP9Zprsj1kfeV3FZyzFFb qpocA+Xjtoqk7Q== -----END CERTIFICATE-----Generated at Fri Dec 19 10:38:23 2025 by rpki-client