This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.mft File: tDGAKt-CucbF8IagvPYLr9MnyGU.mft (raw, json) Hash identifier: TXB4XUJpE5XR3rso6Hhvz53kjA6xAwW424iXWLideNw= Subject key identifier: 63:5A:C5:65:9F:69:A5:88:C5:4F:47:48:A3:46:69:1D:A6:4C:9D:72 Authority key identifier: B4:31:80:2A:DF:82:B9:C6:C5:F0:86:A0:BC:F6:0B:AF:D3:27:C8:65 Certificate issuer: /CN=b431802adf82b9c6c5f086a0bcf60bafd327c865 Certificate serial: 019B10B87939832303AF897871B9EE28852F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDGAKt-CucbF8IagvPYLr9MnyGU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.mft Manifest number: 066D Signing time: Fri 12 Dec 2025 04:01:23 +0000 Manifest this update: Fri 12 Dec 2025 04:01:23 +0000 Manifest next update: Sat 13 Dec 2025 04:01:23 +0000 Files and hashes: 1: tDGAKt-CucbF8IagvPYLr9MnyGU.crl (hash: sv1gu/Amp0qzjzoIqboimbXMflTyVG2Lrj+x98i7Ap4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.crl rsync://rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.mft rsync://rpki.ripe.net/repository/DEFAULT/tDGAKt-CucbF8IagvPYLr9MnyGU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:b8:79:39:83:23:03:af:89:78:71:b9:ee:28:85:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b431802adf82b9c6c5f086a0bcf60bafd327c865 Validity Not Before: Dec 12 04:01:23 2025 GMT Not After : Dec 13 04:01:23 2025 GMT Subject: CN=635ac5659f69a588c54f4748a346691da64c9d72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ab:db:dd:d0:4e:bc:74:df:78:7a:4d:6e:86: 58:59:0e:3a:7f:e6:78:a3:a0:2e:a3:30:19:5c:99: 12:11:9a:22:19:13:7f:4b:ea:0f:8b:d7:58:7f:5a: 9f:5c:b9:1b:64:67:e5:0e:a1:6a:33:3f:a8:a0:61: d8:ba:37:4b:ac:8a:ee:14:2e:ea:36:28:b2:9e:03: 4b:9d:df:71:3f:bc:b7:30:71:8d:da:b3:74:07:75: 11:4f:f2:1b:8f:78:a3:5b:9f:05:c1:09:18:a2:fd: 61:6d:4e:28:91:d6:4b:73:21:48:e3:df:fc:47:8a: 19:bd:0e:d4:2e:47:66:40:72:35:73:2a:58:92:d6: f3:80:8e:f5:42:fb:9a:e6:a1:6f:35:42:ba:44:54: e8:dd:02:4b:34:41:5f:c2:d1:30:f5:03:4f:77:c9: c9:92:76:02:9b:11:6c:4d:3d:d4:3a:09:12:1e:28: 6c:fb:af:87:38:bd:bc:a7:0b:95:fe:d8:50:4a:49: 7c:5d:2a:17:60:15:40:d7:95:6b:5c:b8:aa:f9:48: 1b:f5:52:e7:33:8b:52:93:9b:1b:d5:a9:4d:c4:71: af:1e:0e:83:94:08:99:c1:db:8f:c9:44:a8:c2:90: 17:50:30:bd:dc:c9:69:3d:83:45:cc:d8:5f:c7:93: e1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:5A:C5:65:9F:69:A5:88:C5:4F:47:48:A3:46:69:1D:A6:4C:9D:72 X509v3 Authority Key Identifier: keyid:B4:31:80:2A:DF:82:B9:C6:C5:F0:86:A0:BC:F6:0B:AF:D3:27:C8:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDGAKt-CucbF8IagvPYLr9MnyGU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c92bd2-fba9-4794-ac9a-c911568c8c64/1/tDGAKt-CucbF8IagvPYLr9MnyGU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:0d:25:8a:cd:d7:98:fa:69:15:f1:34:92:1b:14:84:4f:76: a5:8c:8e:c0:ae:aa:d9:1c:97:df:ba:dd:09:e1:b2:85:0b:c5: 96:b3:42:31:02:62:d6:68:f8:b0:8d:c1:a5:f2:87:97:01:a9: a8:17:9b:ae:86:dd:cc:de:2a:74:fd:99:f8:ca:23:6e:26:c3: 6e:84:7f:34:46:f5:61:c8:bc:94:b2:06:eb:ae:88:58:95:e4: 8d:d3:49:7a:01:1b:ec:2f:5e:4b:7a:e4:82:49:ef:9e:4e:24: f9:6c:9a:80:de:f1:8b:cd:ef:1e:93:91:38:30:28:6c:d0:d6: 2d:c7:d3:e9:89:cb:29:2d:84:e1:12:7c:b7:5e:ed:10:ef:38: 8a:01:ec:03:de:5f:4c:ee:bf:3c:41:bc:24:10:d6:e2:18:80: 58:5a:cf:54:78:6c:34:35:ad:a3:ef:77:5a:04:e3:4a:ea:9d: 6f:ed:98:c1:d5:61:fd:2e:d3:32:3a:92:7f:8d:94:49:0f:f8: c8:0a:0f:22:34:8b:a3:84:5f:81:d4:e1:bd:b6:91:13:3d:90: 58:4e:48:d9:da:87:14:ba:03:dd:96:85:98:3d:ce:89:9b:49: 5d:f4:7d:64:e4:39:99:25:4e:9f:cc:8f:25:a2:3a:f0:1d:53: 3a:ed:d4:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQuHk5gyMDr4l4cbnuKIUvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzE4MDJhZGY4MmI5YzZjNWYwODZhMGJjZjYwYmFmZDMy N2M4NjUwHhcNMjUxMjEyMDQwMTIzWhcNMjUxMjEzMDQwMTIzWjAzMTEwLwYDVQQD Eyg2MzVhYzU2NTlmNjlhNTg4YzU0ZjQ3NDhhMzQ2NjkxZGE2NGM5ZDcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56vb3dBOvHTfeHpNboZYWQ46f+Z4 o6AuozAZXJkSEZoiGRN/S+oPi9dYf1qfXLkbZGflDqFqMz+ooGHYujdLrIruFC7q NiiyngNLnd9xP7y3MHGN2rN0B3URT/Ibj3ijW58FwQkYov1hbU4okdZLcyFI49/8 R4oZvQ7ULkdmQHI1cypYktbzgI71Qvua5qFvNUK6RFTo3QJLNEFfwtEw9QNPd8nJ knYCmxFsTT3UOgkSHihs+6+HOL28pwuV/thQSkl8XSoXYBVA15VrXLiq+Ugb9VLn M4tSk5sb1alNxHGvHg6DlAiZwduPyUSowpAXUDC93MlpPYNFzNhfx5Ph4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGNaxWWfaaWIxU9HSKNGaR2mTJ1yMB8GA1UdIwQY MBaAFLQxgCrfgrnGxfCGoLz2C6/TJ8hlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERHQUt0LUN1Y2JGOElhZ3ZQWUxyOU1ueUdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9jOTJiZDItZmJhOS00Nzk0LWFjOWEt YzkxMTU2OGM4YzY0LzEvdERHQUt0LUN1Y2JGOElhZ3ZQWUxyOU1ueUdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9jOTJiZDItZmJhOS00Nzk0LWFjOWEtYzkxMTU2OGM4YzY0 LzEvdERHQUt0LUN1Y2JGOElhZ3ZQWUxyOU1ueUdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArA0lis3X mPppFfE0khsUhE92pYyOwK6q2RyX37rdCeGyhQvFlrNCMQJi1mj4sI3BpfKHlwGp qBebrobdzN4qdP2Z+MojbibDboR/NEb1Yci8lLIG666IWJXkjdNJegEb7C9eS3rk gknvnk4k+WyagN7xi83vHpORODAobNDWLcfT6YnLKS2E4RJ8t17tEO84igHsA95f TO6/PEG8JBDW4hiAWFrPVHhsNDWto+93WgTjSuqdb+2YwdVh/S7TMjqSf42USQ/4 yAoPIjSLo4RfgdThvbaREz2QWE5I2dqHFLoD3ZaFmD3OiZtJXfR9ZOQ5mSVOn8yP JaI68B1TOu3U0g== -----END CERTIFICATE-----Generated at Fri Dec 12 06:39:51 2025 by rpki-client