This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft File: dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft (raw, json) Hash identifier: Xu5YD0BBRmfY2EN42jhcffcJVFXypECe9OWDTcMcNY4= Subject key identifier: BC:D4:79:FA:11:1D:72:6C:5E:3D:D8:AE:69:DC:79:82:88:B0:52:E1 Authority key identifier: 74:F6:75:A1:67:98:16:79:3D:5B:30:AD:2F:25:3F:56:C8:E2:44:5C Certificate issuer: /CN=74f675a1679816793d5b30ad2f253f56c8e2445c Certificate serial: 019B39EAC1CD4B053D52BAE732207EE05FE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft Manifest number: 1782 Signing time: Sat 20 Dec 2025 04:00:44 +0000 Manifest this update: Sat 20 Dec 2025 04:00:44 +0000 Manifest next update: Sun 21 Dec 2025 04:00:44 +0000 Files and hashes: 1: dPZ1oWeYFnk9WzCtLyU_VsjiRFw.crl (hash: AbmpPHXazRN7By3aqQqTxVKfnoBnftRB3CE2Uk54nwo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft rsync://rpki.ripe.net/repository/DEFAULT/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 04:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:ea:c1:cd:4b:05:3d:52:ba:e7:32:20:7e:e0:5f:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74f675a1679816793d5b30ad2f253f56c8e2445c Validity Not Before: Dec 20 04:00:44 2025 GMT Not After : Dec 21 04:00:44 2025 GMT Subject: CN=bcd479fa111d726c5e3dd8ae69dc798288b052e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a4:57:d6:da:a6:a7:99:80:16:10:54:59:03: 82:a6:8a:ba:94:8f:83:73:74:7d:0f:99:71:d3:76: 85:2c:58:ad:38:66:a5:86:65:1b:f1:55:61:37:ca: db:03:55:2c:98:b0:ae:2d:7f:df:94:f7:d1:89:fc: 87:14:9a:23:7d:50:bc:53:53:ea:48:fb:e8:e3:16: 8f:10:e0:4f:f4:21:b8:48:0e:4e:df:66:47:1e:c9: 37:0d:fe:d9:de:53:ac:ed:c3:81:f1:c0:27:4d:2f: 28:d1:0b:cb:cf:7c:43:7a:1b:c6:1e:6b:1e:cc:6f: be:20:60:87:9d:83:a8:48:88:93:c7:d7:9f:d3:7c: 73:ed:b8:65:9f:91:c5:b8:31:91:51:d5:55:f0:6a: 48:da:77:60:3d:3c:66:a0:ae:d3:77:0f:d6:e8:7c: 2f:09:75:74:76:66:ce:cf:51:7d:eb:61:e4:47:8c: cb:1d:42:35:54:5f:9c:54:16:39:bb:b0:0f:5b:36: 83:5f:0d:b0:8d:fc:29:50:60:c7:d1:64:4a:28:3d: 89:12:4d:c8:d2:60:13:88:a3:71:ec:df:7e:81:56: 45:5a:2e:4c:f7:5f:f5:39:46:91:d1:48:14:13:93: f7:49:29:df:39:93:e3:74:f3:99:37:fa:ce:c1:95: d3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:D4:79:FA:11:1D:72:6C:5E:3D:D8:AE:69:DC:79:82:88:B0:52:E1 X509v3 Authority Key Identifier: keyid:74:F6:75:A1:67:98:16:79:3D:5B:30:AD:2F:25:3F:56:C8:E2:44:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:ca:6e:92:67:e4:34:75:30:ba:11:74:d4:ab:b1:eb:68:90: 51:69:26:69:21:91:92:19:a7:3f:09:9a:1b:0e:ca:e6:70:a0: cf:15:09:c0:b1:8e:8f:50:db:96:c2:94:ca:90:80:9d:38:62: 04:c1:aa:7d:e8:c9:2b:29:31:bf:b9:4f:24:94:85:c3:ac:3c: be:61:af:49:5b:c6:a4:18:8f:73:b1:63:1d:eb:aa:c7:f7:03: 5b:28:9d:d1:f9:94:60:a4:88:d8:34:da:64:62:c9:d6:ed:c2: 7b:91:64:d4:9f:9f:2b:18:12:55:9f:94:38:89:f6:53:93:f4: 58:81:a0:70:e3:c9:0a:f8:aa:b4:71:33:29:68:b8:69:d6:f0: bd:3a:ca:6e:f0:1a:c4:14:85:48:58:45:60:56:75:71:23:7f: 88:62:6e:e6:22:58:f6:60:77:31:5f:2f:87:78:66:a4:2a:05: 74:9b:f1:51:25:ee:9d:f9:7f:24:d0:0e:0d:6f:f3:37:93:56: 92:f3:c4:e5:d9:d3:8b:9e:47:a1:14:e3:e1:1c:85:fd:3e:1f: e3:4d:e6:fc:11:76:c6:df:4a:a6:d2:25:28:17:06:1f:7a:f5: b5:4d:51:2c:1e:54:d6:20:19:4a:f8:ab:5c:71:fa:be:41:0d: 80:1b:0e:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56sHNSwU9UrrnMiB+4F/mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZjY3NWExNjc5ODE2NzkzZDViMzBhZDJmMjUzZjU2Yzhl MjQ0NWMwHhcNMjUxMjIwMDQwMDQ0WhcNMjUxMjIxMDQwMDQ0WjAzMTEwLwYDVQQD EyhiY2Q0NzlmYTExMWQ3MjZjNWUzZGQ4YWU2OWRjNzk4Mjg4YjA1MmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6RX1tqmp5mAFhBUWQOCpoq6lI+D c3R9D5lx03aFLFitOGalhmUb8VVhN8rbA1UsmLCuLX/flPfRifyHFJojfVC8U1Pq SPvo4xaPEOBP9CG4SA5O32ZHHsk3Df7Z3lOs7cOB8cAnTS8o0QvLz3xDehvGHmse zG++IGCHnYOoSIiTx9ef03xz7bhln5HFuDGRUdVV8GpI2ndgPTxmoK7Tdw/W6Hwv CXV0dmbOz1F962HkR4zLHUI1VF+cVBY5u7APWzaDXw2wjfwpUGDH0WRKKD2JEk3I 0mATiKNx7N9+gVZFWi5M91/1OUaR0UgUE5P3SSnfOZPjdPOZN/rOwZXTXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLzUefoRHXJsXj3YrmnceYKIsFLhMB8GA1UdIwQY MBaAFHT2daFnmBZ5PVswrS8lP1bI4kRcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFBaMW9XZVlGbms5V3pDdEx5VV9Wc2ppUkZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84OTc4Y2ItMWEyNy00ZjI0LWI1NTIt MzM2MjkzNzM0NTA3LzEvZFBaMW9XZVlGbms5V3pDdEx5VV9Wc2ppUkZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi84OTc4Y2ItMWEyNy00ZjI0LWI1NTItMzM2MjkzNzM0NTA3 LzEvZFBaMW9XZVlGbms5V3pDdEx5VV9Wc2ppUkZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFspukmfk NHUwuhF01Kux62iQUWkmaSGRkhmnPwmaGw7K5nCgzxUJwLGOj1DblsKUypCAnThi BMGqfejJKykxv7lPJJSFw6w8vmGvSVvGpBiPc7FjHeuqx/cDWyid0fmUYKSI2DTa ZGLJ1u3Ce5Fk1J+fKxgSVZ+UOIn2U5P0WIGgcOPJCviqtHEzKWi4adbwvTrKbvAa xBSFSFhFYFZ1cSN/iGJu5iJY9mB3MV8vh3hmpCoFdJvxUSXunfl/JNAODW/zN5NW kvPE5dnTi55HoRTj4RyF/T4f403m/BF2xt9KptIlKBcGH3r1tU1RLB5U1iAZSvir XHH6vkENgBsOhw== -----END CERTIFICATE-----Generated at Sat Dec 20 12:25:09 2025 by rpki-client