This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft File: dErqU-9g-KipNF5YKYKppZvBN2c.mft (raw, json) Hash identifier: 6PTY7s2Ujuh7P0qZuMUonvPkUYg+FNyCLgpU45Ft4cs= Subject key identifier: 47:97:AB:96:3F:75:9E:B7:6B:BA:81:D3:AC:F0:74:E5:04:04:85:6C Authority key identifier: 74:4A:EA:53:EF:60:F8:A8:A9:34:5E:58:29:82:A9:A5:9B:C1:37:67 Certificate issuer: /CN=744aea53ef60f8a8a9345e582982a9a59bc13767 Certificate serial: 019B1B3B9CB6E6B018E47648DC2AF1FB31F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft Manifest number: 1777 Signing time: Sun 14 Dec 2025 05:00:50 +0000 Manifest this update: Sun 14 Dec 2025 05:00:50 +0000 Manifest next update: Mon 15 Dec 2025 05:00:50 +0000 Files and hashes: 1: 73A6WhDa3wlQfJZrJ4S5PeiZvCA.asa (hash: tBmvBR7N9kmQj/BVxuXrieLkXDqq6lxu2Xvh+wlDPa0=) 2: OcTgY_TxJBbWYUXl-r4CTTXUle0.roa (hash: 1c7PjEo1UgZPDis6XvL/mHlYibhzZZ7MfR0yuK8HcsA=) 3: dErqU-9g-KipNF5YKYKppZvBN2c.crl (hash: yFh1Poed2Nb4mLTLfQ0kNTro8fOpv4JHf5DJwLr7PU0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:3b:9c:b6:e6:b0:18:e4:76:48:dc:2a:f1:fb:31:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=744aea53ef60f8a8a9345e582982a9a59bc13767 Validity Not Before: Dec 14 05:00:50 2025 GMT Not After : Dec 15 05:00:50 2025 GMT Subject: CN=4797ab963f759eb76bba81d3acf074e50404856c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:51:9a:a1:bf:10:df:87:37:f9:f4:28:3f:dc: ec:d4:aa:0c:d4:32:7f:c4:f4:61:84:77:ce:97:73: d0:c3:e3:c6:23:53:73:9c:8e:56:0c:d1:41:7e:2d: cd:08:c7:d8:9f:68:77:bd:40:d4:fd:a0:94:ed:68: 77:2f:2c:53:de:1d:d6:6b:f0:b3:4d:d8:fa:5c:f4: 86:0a:59:01:21:72:db:05:83:27:22:df:ec:28:ac: 2a:7b:b7:75:0f:b2:bf:3a:56:77:7f:60:e1:97:c1: 2c:c1:4e:72:af:d8:00:7a:9b:2a:fa:3e:4d:76:4e: 6f:08:04:5f:49:b3:38:65:41:75:f6:09:e2:b2:a6: 51:ae:4f:6f:f2:6b:ce:4e:82:98:29:33:5b:ee:6c: c2:ef:00:98:fc:75:df:ca:3a:02:82:c5:70:b3:19: f4:fa:26:50:aa:26:15:1e:98:6e:46:67:07:03:1c: c9:dc:0f:95:ab:30:d1:c8:fa:ea:fa:f2:a8:38:90: b1:90:6e:90:11:cd:81:1e:df:47:39:81:9d:3e:09: 63:7b:b4:ca:e1:a7:0b:31:7c:59:ae:74:89:48:40: be:f7:46:85:0a:e8:e8:6b:07:11:b6:c2:d6:c8:ec: ac:c3:90:1a:45:8c:d5:de:dd:74:1d:de:2d:20:31: 79:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:97:AB:96:3F:75:9E:B7:6B:BA:81:D3:AC:F0:74:E5:04:04:85:6C X509v3 Authority Key Identifier: keyid:74:4A:EA:53:EF:60:F8:A8:A9:34:5E:58:29:82:A9:A5:9B:C1:37:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:ce:ae:23:9f:b1:11:b2:9b:f0:65:83:71:db:5e:31:e3:35: d9:ce:2b:b2:1f:a6:5a:9e:dd:fa:ec:08:56:46:f6:15:f6:5d: a4:8d:a8:09:3d:b3:4c:ed:c9:68:84:5b:bb:62:e8:37:d8:4e: 26:4d:f7:01:ed:92:5f:a9:2c:87:61:28:3b:fd:d4:1f:3c:33: f1:32:de:18:89:58:8d:9e:ca:52:77:47:63:5b:3d:70:41:19: 75:db:ec:65:db:23:26:2c:3f:94:fe:f6:25:a4:01:c7:38:74: b2:5c:d1:b7:17:74:5a:7e:11:c1:17:53:1b:62:b0:f0:d4:08: 69:07:f0:fb:c9:d0:42:44:77:72:7b:ea:ec:4a:1e:f9:3d:36: e5:a6:ed:2e:7d:c1:f6:c1:57:0c:ec:d6:c6:64:8d:38:0c:d3: 13:66:b5:0c:66:71:88:9f:78:cf:17:f6:49:9e:1f:21:ef:6f: 1f:66:05:62:63:6f:d5:39:74:2a:7b:92:45:4e:34:4e:fa:03: 29:68:ad:4a:6c:4d:9a:99:0f:fe:1d:10:97:d7:b4:99:2f:26: b7:31:a8:e1:1c:bb:9a:78:26:38:7b:33:59:ff:7d:24:4e:f2: c0:82:96:9f:31:bb:61:dc:c3:6c:d1:a7:f6:ba:aa:7b:cf:1b: 9f:f3:cf:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbO5y25rAY5HZI3Crx+zH5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NGFlYTUzZWY2MGY4YThhOTM0NWU1ODI5ODJhOWE1OWJj MTM3NjcwHhcNMjUxMjE0MDUwMDUwWhcNMjUxMjE1MDUwMDUwWjAzMTEwLwYDVQQD Eyg0Nzk3YWI5NjNmNzU5ZWI3NmJiYTgxZDNhY2YwNzRlNTA0MDQ4NTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVGaob8Q34c3+fQoP9zs1KoM1DJ/ xPRhhHfOl3PQw+PGI1NznI5WDNFBfi3NCMfYn2h3vUDU/aCU7Wh3LyxT3h3Wa/Cz Tdj6XPSGClkBIXLbBYMnIt/sKKwqe7d1D7K/OlZ3f2Dhl8EswU5yr9gAepsq+j5N dk5vCARfSbM4ZUF19gnisqZRrk9v8mvOToKYKTNb7mzC7wCY/HXfyjoCgsVwsxn0 +iZQqiYVHphuRmcHAxzJ3A+VqzDRyPrq+vKoOJCxkG6QEc2BHt9HOYGdPglje7TK 4acLMXxZrnSJSEC+90aFCujoawcRtsLWyOysw5AaRYzV3t10Hd4tIDF53QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEeXq5Y/dZ63a7qB06zwdOUEBIVsMB8GA1UdIwQY MBaAFHRK6lPvYPioqTReWCmCqaWbwTdnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEVycVUtOWctS2lwTkY1WUtZS3BwWnZCTjJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy82ZDM4Y2MtYzBmNi00MDE4LWI5Mjkt OWI2NGMyNTE1NmI5LzEvZEVycVUtOWctS2lwTkY1WUtZS3BwWnZCTjJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy82ZDM4Y2MtYzBmNi00MDE4LWI5MjktOWI2NGMyNTE1NmI5 LzEvZEVycVUtOWctS2lwTkY1WUtZS3BwWnZCTjJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAms6uI5+x EbKb8GWDcdteMeM12c4rsh+mWp7d+uwIVkb2FfZdpI2oCT2zTO3JaIRbu2LoN9hO Jk33Ae2SX6ksh2EoO/3UHzwz8TLeGIlYjZ7KUndHY1s9cEEZddvsZdsjJiw/lP72 JaQBxzh0slzRtxd0Wn4RwRdTG2Kw8NQIaQfw+8nQQkR3cnvq7Eoe+T025abtLn3B 9sFXDOzWxmSNOAzTE2a1DGZxiJ94zxf2SZ4fIe9vH2YFYmNv1Tl0KnuSRU40TvoD KWitSmxNmpkP/h0Ql9e0mS8mtzGo4Ry7mngmOHszWf99JE7ywIKWnzG7YdzDbNGn 9rqqe88bn/PPOA== -----END CERTIFICATE-----Generated at Sun Dec 14 09:30:54 2025 by rpki-client