This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft File: D33TJ3nBqbKX4oywNf1nmrsZFtE.mft (raw, json) Hash identifier: hhb8DmuXVLNPTHN4vlGSoojDIScNWbs6fdbTJ83BHZ0= Subject key identifier: 87:35:98:E9:D4:67:75:21:02:55:25:F9:B8:2C:2C:CE:8F:1C:9F:F4 Authority key identifier: 0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1 Certificate issuer: /CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1 Certificate serial: 019B488321410B14A6D83FF40CDD8AE8B057 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft Manifest number: 04F5 Signing time: Tue 23 Dec 2025 00:01:51 +0000 Manifest this update: Tue 23 Dec 2025 00:01:51 +0000 Manifest next update: Wed 24 Dec 2025 00:01:51 +0000 Files and hashes: 1: D33TJ3nBqbKX4oywNf1nmrsZFtE.crl (hash: 2P7jAhC2Zi5oxzvcG6CXt32N84BnVzF/yOpawSQFeE0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:83:21:41:0b:14:a6:d8:3f:f4:0c:dd:8a:e8:b0:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1 Validity Not Before: Dec 23 00:01:51 2025 GMT Not After : Dec 24 00:01:51 2025 GMT Subject: CN=873598e9d4677521025525f9b82c2cce8f1c9ff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:06:b6:e7:ff:60:11:9b:a2:26:c0:13:cf:5c: df:7b:69:49:e6:c6:2a:a9:a1:e6:ab:d8:de:4c:4b: a9:f1:a7:fb:5b:47:09:78:3e:ba:f8:42:10:20:87: c0:6f:fe:84:e0:aa:c3:31:29:c1:d8:90:7a:be:eb: 29:c3:aa:22:bc:dd:01:b9:01:39:81:b9:2c:91:2a: bf:ac:39:c0:7e:7a:a4:4a:0e:df:1b:a8:98:7f:79: e2:ff:2e:15:df:1b:1c:b8:85:c1:c0:7b:e4:6b:cf: ec:d8:49:09:4d:7f:bd:c4:08:1e:3d:e0:42:45:bc: 15:af:98:aa:61:a2:aa:95:01:33:8c:1e:c9:5b:54: 81:07:e3:63:cd:ac:3d:4b:0a:1d:6f:32:2b:77:69: 8b:17:f2:d6:e9:32:97:88:de:bd:b4:eb:00:05:7e: cb:3f:23:3e:7f:61:62:fb:52:5b:db:59:1e:62:19: 1d:c1:34:c5:67:5f:3b:8a:cf:06:3f:b2:1e:24:5d: bd:09:d1:83:70:dc:4c:89:6b:14:1c:a6:47:fe:18: 37:45:72:e5:bd:0c:ed:50:b7:a9:b1:0d:e5:84:4c: 91:db:fc:86:8f:f0:13:6a:f6:4f:95:88:5f:38:b0: 50:13:c3:02:8d:95:fd:ff:32:3e:4f:d1:1a:e4:32: 8d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:35:98:E9:D4:67:75:21:02:55:25:F9:B8:2C:2C:CE:8F:1C:9F:F4 X509v3 Authority Key Identifier: keyid:0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:9d:27:37:38:14:a8:df:de:e4:a9:b1:64:8a:57:6e:5d:c6: 5c:8f:b1:00:67:fc:17:a3:24:99:d8:18:7b:80:05:a9:21:fd: a8:7a:16:c5:b7:b2:2e:88:bc:91:d6:26:1c:f9:a5:af:d9:ee: 6a:b1:cb:b6:d9:3e:68:0e:64:31:e6:07:88:85:43:1e:ff:59: 26:c7:fd:d8:b1:ac:37:d3:81:9c:91:50:dd:40:6f:46:f5:05: 60:29:68:39:62:07:ed:79:cc:d1:95:8d:df:e0:90:08:f1:73: 2f:3f:d1:06:33:a7:72:b2:62:77:62:ba:e0:1e:90:cc:5f:04: f8:93:3f:5f:74:e0:90:de:df:4e:30:92:03:3b:ec:63:8d:fa: 40:36:62:c6:d4:f7:ca:f1:e5:6a:92:3f:f9:f4:90:15:f4:2e: d1:19:b1:a0:b6:9f:1b:29:5c:c0:cc:72:4a:b7:d1:07:e9:c5: 4d:25:bb:ec:af:84:30:f1:ce:d4:09:6f:49:26:55:99:f0:ac: 31:da:61:15:41:9b:06:52:02:74:c0:df:16:23:e4:35:3a:34: b3:a3:87:82:48:9d:d9:28:ca:fd:1c:39:5a:3c:d1:98:de:c2: a0:66:17:b2:12:67:86:ac:27:99:b5:70:cd:52:61:e7:5c:f2: 37:5b:23:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIgyFBCxSm2D/0DN2K6LBXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmN2RkMzI3NzljMWE5YjI5N2UyOGNiMDM1ZmQ2NzlhYmIx OTE2ZDEwHhcNMjUxMjIzMDAwMTUxWhcNMjUxMjI0MDAwMTUxWjAzMTEwLwYDVQQD Eyg4NzM1OThlOWQ0Njc3NTIxMDI1NTI1ZjliODJjMmNjZThmMWM5ZmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wa25/9gEZuiJsATz1zfe2lJ5sYq qaHmq9jeTEup8af7W0cJeD66+EIQIIfAb/6E4KrDMSnB2JB6vuspw6oivN0BuQE5 gbkskSq/rDnAfnqkSg7fG6iYf3ni/y4V3xscuIXBwHvka8/s2EkJTX+9xAgePeBC RbwVr5iqYaKqlQEzjB7JW1SBB+Njzaw9SwodbzIrd2mLF/LW6TKXiN69tOsABX7L PyM+f2Fi+1Jb21keYhkdwTTFZ187is8GP7IeJF29CdGDcNxMiWsUHKZH/hg3RXLl vQztULepsQ3lhEyR2/yGj/ATavZPlYhfOLBQE8MCjZX9/zI+T9Ea5DKNMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIc1mOnUZ3UhAlUl+bgsLM6PHJ/0MB8GA1UdIwQY MBaAFA990yd5wamyl+KMsDX9Z5q7GRbRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDMzVEozbkJxYktYNG95d05mMW5tcnNaRnRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi83MjkyMTAtZDcyMC00ZjM4LWI2YmUt YWNmNjZmNzhiMmI3LzEvRDMzVEozbkJxYktYNG95d05mMW5tcnNaRnRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi83MjkyMTAtZDcyMC00ZjM4LWI2YmUtYWNmNjZmNzhiMmI3 LzEvRDMzVEozbkJxYktYNG95d05mMW5tcnNaRnRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH50nNzgU qN/e5KmxZIpXbl3GXI+xAGf8F6MkmdgYe4AFqSH9qHoWxbeyLoi8kdYmHPmlr9nu arHLttk+aA5kMeYHiIVDHv9ZJsf92LGsN9OBnJFQ3UBvRvUFYCloOWIH7XnM0ZWN 3+CQCPFzLz/RBjOncrJid2K64B6QzF8E+JM/X3TgkN7fTjCSAzvsY436QDZixtT3 yvHlapI/+fSQFfQu0RmxoLafGylcwMxySrfRB+nFTSW77K+EMPHO1AlvSSZVmfCs MdphFUGbBlICdMDfFiPkNTo0s6OHgkid2SjK/Rw5WjzRmN7CoGYXshJnhqwnmbVw zVJh51zyN1sjOQ== -----END CERTIFICATE-----Generated at Tue Dec 23 10:22:01 2025 by rpki-client