This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft File: DDvIzqseeTohA5zQseVHLHJkH2g.mft (raw, json) Hash identifier: jLojP0BCQmcq/5Z/MG06wRFW2C+Suu21R8LHMphnf48= Subject key identifier: 17:EC:F0:F6:36:75:F2:95:F1:52:0E:C9:09:D9:72:7A:25:90:0E:C7 Authority key identifier: 0C:3B:C8:CE:AB:1E:79:3A:21:03:9C:D0:B1:E5:47:2C:72:64:1F:68 Certificate issuer: /CN=0c3bc8ceab1e793a21039cd0b1e5472c72641f68 Certificate serial: 019B378F0900419D5C434C049A7A4DF18D2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDvIzqseeTohA5zQseVHLHJkH2g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft Manifest number: 1783 Signing time: Fri 19 Dec 2025 17:01:19 +0000 Manifest this update: Fri 19 Dec 2025 17:01:19 +0000 Manifest next update: Sat 20 Dec 2025 17:01:19 +0000 Files and hashes: 1: DDvIzqseeTohA5zQseVHLHJkH2g.crl (hash: eKEVDSr1CfMTFieNTR2Otms+d2duE/kCb8/cT8xc++w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.crl rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft rsync://rpki.ripe.net/repository/DEFAULT/DDvIzqseeTohA5zQseVHLHJkH2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8f:09:00:41:9d:5c:43:4c:04:9a:7a:4d:f1:8d:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c3bc8ceab1e793a21039cd0b1e5472c72641f68 Validity Not Before: Dec 19 17:01:19 2025 GMT Not After : Dec 20 17:01:19 2025 GMT Subject: CN=17ecf0f63675f295f1520ec909d9727a25900ec7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:c8:f1:d6:b4:42:4c:6d:af:dd:6d:0b:ff:a3: 6d:ee:98:bf:00:b6:9b:1e:49:71:d4:ce:c3:ac:87: 86:c7:30:6a:a7:66:c8:7e:41:e0:db:1f:3b:6f:ca: 3b:19:12:cc:9f:e1:85:41:59:54:73:36:6a:3d:8c: 63:18:b4:83:60:ea:5c:95:ad:7f:6e:96:64:5b:c0: 57:c1:7f:31:22:18:1c:b9:b3:d6:67:6c:44:00:83: 53:af:97:93:90:d8:59:13:2d:d3:dd:7c:52:bc:d3: f2:0b:6a:49:ce:71:7c:fc:9f:50:df:c7:84:27:16: 89:7a:1c:df:e7:f4:ec:5d:51:6b:f5:e6:ef:23:c3: f8:8d:93:27:e9:cc:f8:e6:2c:ba:de:14:eb:58:15: e0:12:d8:7d:26:a4:8d:0e:d2:60:1d:43:e9:34:72: 10:a6:05:81:62:33:05:cb:92:39:fe:a6:67:8e:a6: 23:8c:31:9c:d6:ba:12:7c:29:87:8f:1d:ca:ae:fc: 8c:5f:79:0d:9e:bd:6d:38:b9:79:22:8d:0d:e9:e7: 3a:a3:64:c4:7e:eb:b2:35:7f:0c:50:c9:4a:f9:1e: 86:15:fd:18:67:77:34:0d:0a:bb:0a:ec:18:18:cd: 27:30:5f:89:ff:9a:d5:29:29:90:28:38:f5:ca:41: a8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:EC:F0:F6:36:75:F2:95:F1:52:0E:C9:09:D9:72:7A:25:90:0E:C7 X509v3 Authority Key Identifier: keyid:0C:3B:C8:CE:AB:1E:79:3A:21:03:9C:D0:B1:E5:47:2C:72:64:1F:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDvIzqseeTohA5zQseVHLHJkH2g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cf3c6e-4836-4415-91d4-f8bac4fb8f8a/1/DDvIzqseeTohA5zQseVHLHJkH2g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:7e:d3:77:16:00:0e:a8:e5:c8:7b:7e:33:bf:de:e4:ae:77: a6:6c:a9:35:ce:5b:46:10:3e:2a:27:59:10:07:1c:dd:7e:4f: 03:a2:cd:28:fe:66:d1:fa:21:42:0a:11:a5:e4:af:65:dc:60: a9:8f:9f:30:43:74:bb:4e:0f:14:fc:dc:14:38:ad:e1:b8:8d: 98:c4:0b:90:ab:10:fe:48:44:c9:18:0a:47:f8:22:66:9d:64: 4c:58:f6:fa:e3:b8:e3:d2:c1:30:c6:03:25:0b:09:f2:79:d9: d2:cd:aa:79:92:31:53:35:5c:2f:75:f5:0d:f5:97:65:b2:3d: fc:67:1a:41:01:ca:46:dc:5a:e6:08:e0:27:54:cd:95:ec:d0: 90:a1:ae:d6:55:7a:44:16:cf:62:35:99:79:dc:e9:6c:21:f7: 88:a0:28:b4:85:7f:b2:ae:43:c8:cf:eb:2b:d2:85:96:a4:ed: 92:64:14:a8:b0:ca:1e:f5:af:f4:a7:24:ff:95:b9:d1:de:2f: 43:62:8a:e6:d0:74:e7:20:28:b6:e4:06:e3:46:3c:01:6f:4d: 59:a6:a6:c5:0d:df:af:80:30:a0:9d:79:e6:3b:32:32:6e:81: c3:05:8b:e8:dd:f0:5d:ec:53:c0:15:2f:cd:95:bf:17:a7:de: 22:29:5f:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3jwkAQZ1cQ0wEmnpN8Y0tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjM2JjOGNlYWIxZTc5M2EyMTAzOWNkMGIxZTU0NzJjNzI2 NDFmNjgwHhcNMjUxMjE5MTcwMTE5WhcNMjUxMjIwMTcwMTE5WjAzMTEwLwYDVQQD EygxN2VjZjBmNjM2NzVmMjk1ZjE1MjBlYzkwOWQ5NzI3YTI1OTAwZWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+sjx1rRCTG2v3W0L/6Nt7pi/ALab Hklx1M7DrIeGxzBqp2bIfkHg2x87b8o7GRLMn+GFQVlUczZqPYxjGLSDYOpcla1/ bpZkW8BXwX8xIhgcubPWZ2xEAINTr5eTkNhZEy3T3XxSvNPyC2pJznF8/J9Q38eE JxaJehzf5/TsXVFr9ebvI8P4jZMn6cz45iy63hTrWBXgEth9JqSNDtJgHUPpNHIQ pgWBYjMFy5I5/qZnjqYjjDGc1roSfCmHjx3KrvyMX3kNnr1tOLl5Io0N6ec6o2TE fuuyNX8MUMlK+R6GFf0YZ3c0DQq7CuwYGM0nMF+J/5rVKSmQKDj1ykGosQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBfs8PY2dfKV8VIOyQnZcnolkA7HMB8GA1UdIwQY MBaAFAw7yM6rHnk6IQOc0LHlRyxyZB9oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRER2SXpxc2VlVG9oQTV6UXNlVkhMSEprSDJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9jZjNjNmUtNDgzNi00NDE1LTkxZDQt ZjhiYWM0ZmI4ZjhhLzEvRER2SXpxc2VlVG9oQTV6UXNlVkhMSEprSDJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My9jZjNjNmUtNDgzNi00NDE1LTkxZDQtZjhiYWM0ZmI4Zjhh LzEvRER2SXpxc2VlVG9oQTV6UXNlVkhMSEprSDJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN37TdxYA DqjlyHt+M7/e5K53pmypNc5bRhA+KidZEAcc3X5PA6LNKP5m0fohQgoRpeSvZdxg qY+fMEN0u04PFPzcFDit4biNmMQLkKsQ/khEyRgKR/giZp1kTFj2+uO449LBMMYD JQsJ8nnZ0s2qeZIxUzVcL3X1DfWXZbI9/GcaQQHKRtxa5gjgJ1TNlezQkKGu1lV6 RBbPYjWZedzpbCH3iKAotIV/sq5DyM/rK9KFlqTtkmQUqLDKHvWv9Kck/5W50d4v Q2KK5tB05yAotuQG40Y8AW9NWaamxQ3fr4AwoJ155jsyMm6BwwWL6N3wXexTwBUv zZW/F6feIilfog== -----END CERTIFICATE-----Generated at Fri Dec 19 21:14:44 2025 by rpki-client