This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/rDRA8w4wW8AFi4WbaKg0CgM7a0I.mft File: rDRA8w4wW8AFi4WbaKg0CgM7a0I.mft (raw, json) Hash identifier: cPfw17ip1oWc0X0zJPw+4AV12QpdkzD2jpLU4NOBdXA= Subject key identifier: E4:DB:52:35:A0:A1:93:B3:29:1E:ED:29:58:46:05:24:E6:60:1B:C0 Authority key identifier: AC:34:40:F3:0E:30:5B:C0:05:8B:85:9B:68:A8:34:0A:03:3B:6B:42 Certificate issuer: /CN=ac3440f30e305bc0058b859b68a8340a033b6b42 Certificate serial: 019B2552448CDB0F5FB21C2C17918EE08CBF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rDRA8w4wW8AFi4WbaKg0CgM7a0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/rDRA8w4wW8AFi4WbaKg0CgM7a0I.mft Manifest number: 076B Signing time: Tue 16 Dec 2025 04:01:46 +0000 Manifest this update: Tue 16 Dec 2025 04:01:46 +0000 Manifest next update: Wed 17 Dec 2025 04:01:46 +0000 Files and hashes: 1: rDRA8w4wW8AFi4WbaKg0CgM7a0I.crl (hash: qnlkpe2qGJCVz49QSvgGrHnm183ii3OwJYJAJHwDpek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/rDRA8w4wW8AFi4WbaKg0CgM7a0I.crl rsync://rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/rDRA8w4wW8AFi4WbaKg0CgM7a0I.mft rsync://rpki.ripe.net/repository/DEFAULT/rDRA8w4wW8AFi4WbaKg0CgM7a0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:52:44:8c:db:0f:5f:b2:1c:2c:17:91:8e:e0:8c:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac3440f30e305bc0058b859b68a8340a033b6b42 Validity Not Before: Dec 16 04:01:46 2025 GMT Not After : Dec 17 04:01:46 2025 GMT Subject: CN=e4db5235a0a193b3291eed2958460524e6601bc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6c:9f:ad:9f:8b:d5:66:3c:91:26:00:57:69: a0:73:d4:ef:95:96:4e:2f:ca:8f:10:21:d2:d8:85: c6:fe:77:22:36:31:ae:99:5d:55:7d:5e:23:48:7f: 8c:d9:ab:9b:37:2b:0f:29:cb:8f:a7:58:5e:1b:49: a6:32:c6:5a:b5:14:33:a3:c0:03:80:e4:b2:ef:dc: 14:92:73:6c:f2:21:c8:27:49:10:ea:03:0d:9d:34: 93:01:58:ab:9f:0b:81:ca:d8:b1:bf:c1:2d:56:1e: 12:ad:2b:93:5b:96:fd:ff:4b:7e:07:93:f4:f0:9f: ae:db:40:89:96:4a:9a:13:0e:c8:c2:70:93:69:39: cd:99:44:ee:7f:c9:dc:a6:a8:24:79:d6:58:75:dd: 58:89:c1:b4:f0:e9:14:2d:09:4d:6e:fe:93:58:62: 86:8e:ae:78:84:69:7a:6e:cb:17:b1:88:76:93:e0: 9f:5f:24:8e:1e:f2:e7:83:e1:f6:60:2c:56:b4:70: 64:c5:76:d0:88:ef:2d:68:d3:bd:bf:c5:c1:d6:f9: 9c:fd:16:1e:20:c6:ed:c4:39:da:4b:e5:02:8f:5e: 36:2e:f9:ef:cf:12:d7:12:21:5b:fc:0e:c8:01:ce: c0:15:47:0f:d3:38:dd:60:3c:58:1e:f2:5c:12:41: c7:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:DB:52:35:A0:A1:93:B3:29:1E:ED:29:58:46:05:24:E6:60:1B:C0 X509v3 Authority Key Identifier: keyid:AC:34:40:F3:0E:30:5B:C0:05:8B:85:9B:68:A8:34:0A:03:3B:6B:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rDRA8w4wW8AFi4WbaKg0CgM7a0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/rDRA8w4wW8AFi4WbaKg0CgM7a0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/rDRA8w4wW8AFi4WbaKg0CgM7a0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:18:d4:d9:a8:90:8f:7e:2f:b9:74:49:3c:a5:5a:4a:d4:88: 8a:5e:da:76:a0:bd:cc:14:52:50:46:a8:c8:37:d5:db:b5:d6: 34:c0:8e:d3:9c:f1:7b:23:43:07:39:93:e0:f5:34:3f:d4:6c: dc:5e:04:9a:75:cd:29:63:32:ea:45:b5:eb:4c:bd:14:4c:4b: 85:34:df:52:f3:3e:bd:02:eb:61:45:0e:6b:c9:9b:b9:88:d4: fa:22:46:59:e5:a3:a4:90:31:84:cb:a9:c0:f2:41:db:73:97: ee:93:49:b0:37:6a:d4:56:74:1c:a4:0b:0b:6a:f4:db:5f:ce: 55:8c:a1:b5:07:30:c6:b8:d5:e9:b8:94:e0:58:4b:13:e5:51: db:72:66:b3:f6:16:bb:87:18:bf:d2:28:22:b6:fe:9b:0e:09: 60:5d:63:1a:de:5d:84:07:7a:e0:18:13:46:45:28:82:1c:16: 7e:9f:2d:1b:f5:50:de:17:31:39:4d:74:20:f0:83:01:a5:d6: 15:ac:52:af:ca:45:2d:3d:d5:0d:98:18:7d:60:cb:fc:25:0f: 42:30:8e:a1:03:81:c7:6f:ec:53:0c:17:5e:d8:49:56:41:54: a0:c7:c5:30:8d:62:5b:71:4d:55:28:59:6e:77:23:ba:99:49: 0b:24:c0:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUkSM2w9fshwsF5GO4Iy/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjMzQ0MGYzMGUzMDViYzAwNThiODU5YjY4YTgzNDBhMDMz YjZiNDIwHhcNMjUxMjE2MDQwMTQ2WhcNMjUxMjE3MDQwMTQ2WjAzMTEwLwYDVQQD EyhlNGRiNTIzNWEwYTE5M2IzMjkxZWVkMjk1ODQ2MDUyNGU2NjAxYmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmyfrZ+L1WY8kSYAV2mgc9TvlZZO L8qPECHS2IXG/nciNjGumV1VfV4jSH+M2aubNysPKcuPp1heG0mmMsZatRQzo8AD gOSy79wUknNs8iHIJ0kQ6gMNnTSTAVirnwuBytixv8EtVh4SrSuTW5b9/0t+B5P0 8J+u20CJlkqaEw7IwnCTaTnNmUTuf8ncpqgkedZYdd1YicG08OkULQlNbv6TWGKG jq54hGl6bssXsYh2k+CfXySOHvLng+H2YCxWtHBkxXbQiO8taNO9v8XB1vmc/RYe IMbtxDnaS+UCj142LvnvzxLXEiFb/A7IAc7AFUcP0zjdYDxYHvJcEkHHkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOTbUjWgoZOzKR7tKVhGBSTmYBvAMB8GA1UdIwQY MBaAFKw0QPMOMFvABYuFm2ioNAoDO2tCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckRSQTh3NHdXOEFGaTRXYmFLZzBDZ003YTBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9hNjc3N2QtYjc3OC00NDJjLWI4MmYt NDM4ZDQwNGVkYzJhLzEvckRSQTh3NHdXOEFGaTRXYmFLZzBDZ003YTBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9hNjc3N2QtYjc3OC00NDJjLWI4MmYtNDM4ZDQwNGVkYzJh LzEvckRSQTh3NHdXOEFGaTRXYmFLZzBDZ003YTBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaBjU2aiQ j34vuXRJPKVaStSIil7adqC9zBRSUEaoyDfV27XWNMCO05zxeyNDBzmT4PU0P9Rs 3F4EmnXNKWMy6kW160y9FExLhTTfUvM+vQLrYUUOa8mbuYjU+iJGWeWjpJAxhMup wPJB23OX7pNJsDdq1FZ0HKQLC2r021/OVYyhtQcwxrjV6biU4FhLE+VR23Jms/YW u4cYv9IoIrb+mw4JYF1jGt5dhAd64BgTRkUoghwWfp8tG/VQ3hcxOU10IPCDAaXW FaxSr8pFLT3VDZgYfWDL/CUPQjCOoQOBx2/sUwwXXthJVkFUoMfFMI1iW3FNVShZ bncjuplJCyTAWw== -----END CERTIFICATE-----Generated at Tue Dec 16 06:43:49 2025 by rpki-client