This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft File: DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft (raw, json) Hash identifier: Vtvv7LOFjZb2I7mHa1LhvtGWAnIF0sdzRckhcKYE9V0= Subject key identifier: 1C:07:8A:E5:E8:65:31:A8:3A:AA:C2:B7:40:49:89:DE:FE:53:2C:8F Authority key identifier: 0C:20:8B:19:D8:CB:58:65:76:66:BB:C9:E7:92:B6:34:C7:CF:31:A5 Certificate issuer: /CN=0c208b19d8cb58657666bbc9e792b634c7cf31a5 Certificate serial: 019B2219F8E8D4A4BA08B8F81EAD80E85711 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft Manifest number: 1777 Signing time: Mon 15 Dec 2025 13:01:25 +0000 Manifest this update: Mon 15 Dec 2025 13:01:25 +0000 Manifest next update: Tue 16 Dec 2025 13:01:25 +0000 Files and hashes: 1: DCCLGdjLWGV2ZrvJ55K2NMfPMaU.crl (hash: LvJXPVmJSiSvZScAuRDLbQolX9GBH13dgPFUBP4+DWM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.crl rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft rsync://rpki.ripe.net/repository/DEFAULT/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 13:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:19:f8:e8:d4:a4:ba:08:b8:f8:1e:ad:80:e8:57:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c208b19d8cb58657666bbc9e792b634c7cf31a5 Validity Not Before: Dec 15 13:01:25 2025 GMT Not After : Dec 16 13:01:25 2025 GMT Subject: CN=1c078ae5e86531a83aaac2b7404989defe532c8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:f3:e3:da:c9:0d:e2:3e:f3:4c:87:c8:af:04: 38:e0:f8:2d:fe:2f:23:2e:b8:ba:9c:ba:2d:32:ce: a3:91:07:f8:86:02:6b:d2:76:53:2d:c9:1e:78:81: c1:01:d3:9f:05:c1:0e:c1:e3:58:01:4e:65:97:43: 75:ef:6a:ab:1b:04:27:7f:d8:f9:1b:24:c7:cb:4f: d8:10:67:0d:90:49:8c:ad:ab:13:7a:b3:09:04:8c: 15:ca:b1:f9:ab:da:8c:72:79:60:d1:94:d6:2b:0e: fc:2b:d0:10:4d:32:af:9b:ce:a2:7b:8a:c0:f8:9c: 6d:3b:74:70:fb:1b:af:73:17:05:c0:41:b6:ad:c5: e6:23:52:8b:9b:8f:04:a1:96:35:1d:6e:00:72:8a: 17:c8:56:ab:f4:96:4d:3d:c6:5a:bf:cf:b2:6b:ad: ae:61:24:00:cb:21:ed:1d:88:3d:72:06:1a:29:1a: 61:31:da:ce:d6:d6:b7:9f:3e:b9:4e:10:3f:11:02: a1:78:50:37:b9:8d:15:cf:e1:da:7f:b4:cc:98:db: f8:b1:21:79:74:f7:fd:ac:ef:58:61:fc:ac:ed:62: 21:c1:f1:55:4b:0c:01:2c:7f:af:74:90:3b:a8:2a: d7:04:d6:13:50:45:1a:a5:5b:ff:e6:76:80:5b:61: ca:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:07:8A:E5:E8:65:31:A8:3A:AA:C2:B7:40:49:89:DE:FE:53:2C:8F X509v3 Authority Key Identifier: keyid:0C:20:8B:19:D8:CB:58:65:76:66:BB:C9:E7:92:B6:34:C7:CF:31:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d95308-5245-4ac6-a937-4a3699e43bf7/1/DCCLGdjLWGV2ZrvJ55K2NMfPMaU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:cd:79:15:61:83:76:07:cd:26:ce:3e:0c:14:25:42:ba:43: 69:9a:3b:57:c6:85:42:41:3e:69:91:f5:b0:d4:aa:a9:20:44: a8:a0:7f:7d:87:c6:36:a1:55:cc:8f:d6:5f:02:b3:72:a8:ae: 44:af:17:20:b9:7a:47:26:4c:59:f0:d9:dd:05:f5:7b:0b:d6: 0b:0a:25:f4:21:8c:43:32:b7:48:9a:f2:90:82:f7:b6:e3:96: 30:9d:1c:fe:9d:6a:eb:9a:25:1d:de:dc:64:a3:b0:e9:cd:a4: 1d:f2:4e:65:39:b9:43:f1:d7:d5:a9:05:7c:1c:c8:df:30:fa: ba:06:1a:d5:a8:30:f6:2b:11:cb:89:48:fd:32:97:30:37:9a: 56:05:d6:dc:f3:9c:09:bf:45:61:ee:87:d8:40:0d:58:3b:6e: eb:f9:e8:22:15:27:ed:6b:e9:37:51:cc:39:82:d1:c6:64:5b: 4a:20:b7:44:1b:c9:ba:c0:62:b4:2e:90:68:40:39:cb:ed:c3: ff:a0:43:1c:96:42:71:fb:51:80:0f:a2:16:cb:00:b4:d9:b5: ad:55:77:d0:a6:72:66:3d:bb:ff:4e:87:0c:22:b8:43:68:30: 01:d7:52:b9:15:4c:11:c7:85:14:40:82:f4:61:04:4e:f6:ac: 5c:76:27:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiGfjo1KS6CLj4Hq2A6FcRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMjA4YjE5ZDhjYjU4NjU3NjY2YmJjOWU3OTJiNjM0Yzdj ZjMxYTUwHhcNMjUxMjE1MTMwMTI1WhcNMjUxMjE2MTMwMTI1WjAzMTEwLwYDVQQD EygxYzA3OGFlNWU4NjUzMWE4M2FhYWMyYjc0MDQ5ODlkZWZlNTMyYzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5vPj2skN4j7zTIfIrwQ44Pgt/i8j Lri6nLotMs6jkQf4hgJr0nZTLckeeIHBAdOfBcEOweNYAU5ll0N172qrGwQnf9j5 GyTHy0/YEGcNkEmMrasTerMJBIwVyrH5q9qMcnlg0ZTWKw78K9AQTTKvm86ie4rA +JxtO3Rw+xuvcxcFwEG2rcXmI1KLm48EoZY1HW4AcooXyFar9JZNPcZav8+ya62u YSQAyyHtHYg9cgYaKRphMdrO1ta3nz65ThA/EQKheFA3uY0Vz+Haf7TMmNv4sSF5 dPf9rO9YYfys7WIhwfFVSwwBLH+vdJA7qCrXBNYTUEUapVv/5naAW2HKEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBwHiuXoZTGoOqrCt0BJid7+UyyPMB8GA1UdIwQY MBaAFAwgixnYy1hldma7yeeStjTHzzGlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRENDTEdkakxXR1YyWnJ2SjU1SzJOTWZQTWFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9kOTUzMDgtNTI0NS00YWM2LWE5Mzct NGEzNjk5ZTQzYmY3LzEvRENDTEdkakxXR1YyWnJ2SjU1SzJOTWZQTWFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9kOTUzMDgtNTI0NS00YWM2LWE5MzctNGEzNjk5ZTQzYmY3 LzEvRENDTEdkakxXR1YyWnJ2SjU1SzJOTWZQTWFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoM15FWGD dgfNJs4+DBQlQrpDaZo7V8aFQkE+aZH1sNSqqSBEqKB/fYfGNqFVzI/WXwKzcqiu RK8XILl6RyZMWfDZ3QX1ewvWCwol9CGMQzK3SJrykIL3tuOWMJ0c/p1q65olHd7c ZKOw6c2kHfJOZTm5Q/HX1akFfBzI3zD6ugYa1agw9isRy4lI/TKXMDeaVgXW3POc Cb9FYe6H2EANWDtu6/noIhUn7WvpN1HMOYLRxmRbSiC3RBvJusBitC6QaEA5y+3D /6BDHJZCcftRgA+iFssAtNm1rVV30KZyZj27/06HDCK4Q2gwAddSuRVMEceFFECC 9GEETvasXHYn6g== -----END CERTIFICATE-----Generated at Mon Dec 15 16:50:47 2025 by rpki-client