This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.mft File: DlbJ5Y2Wrx5BMNciQiEZKywTKlw.mft (raw, json) Hash identifier: 1wRCuIVExBM5CwPRbzydwoUNIXB4eAHllk/JqkYu2Po= Subject key identifier: 3C:3F:0E:4A:52:57:2E:48:A0:6B:03:30:DA:7D:01:0A:31:9E:71:47 Authority key identifier: 0E:56:C9:E5:8D:96:AF:1E:41:30:D7:22:42:21:19:2B:2C:13:2A:5C Certificate issuer: /CN=0e56c9e58d96af1e4130d7224221192b2c132a5c Certificate serial: 019B44390868545CA07329A1707680AA2079 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.mft Manifest number: 171D Signing time: Mon 22 Dec 2025 04:02:26 +0000 Manifest this update: Mon 22 Dec 2025 04:02:26 +0000 Manifest next update: Tue 23 Dec 2025 04:02:26 +0000 Files and hashes: 1: DlbJ5Y2Wrx5BMNciQiEZKywTKlw.crl (hash: wkGn3bSLuS4IzeApgAr6ZOwD/+MrICYngK2jaDT61GY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.mft rsync://rpki.ripe.net/repository/DEFAULT/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:39:08:68:54:5c:a0:73:29:a1:70:76:80:aa:20:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e56c9e58d96af1e4130d7224221192b2c132a5c Validity Not Before: Dec 22 04:02:26 2025 GMT Not After : Dec 23 04:02:26 2025 GMT Subject: CN=3c3f0e4a52572e48a06b0330da7d010a319e7147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b5:a8:6b:90:a6:66:f7:95:ad:fa:c1:19:3f: 27:0f:21:2c:c1:0e:ec:db:2c:ed:1a:6a:94:08:c0: b6:60:3f:98:a9:d9:18:1a:b7:f2:69:b3:7b:b6:c3: 1f:bb:8f:64:49:cb:77:36:de:24:95:d1:fa:5f:19: 5a:b4:26:36:51:65:a8:d7:29:01:31:a7:1c:a9:5a: c4:85:26:39:87:02:69:5c:6b:e1:26:68:55:29:6d: 3b:6c:2a:8e:ca:fa:85:08:0a:39:d8:2e:5f:bf:30: 9f:a3:b8:1a:b7:01:d9:32:36:d4:7a:59:ae:8a:89: 46:85:eb:37:1e:7f:b2:16:11:7f:99:64:37:8d:d0: 24:50:f8:bb:92:23:c1:ee:9f:08:66:a9:e3:b4:c6: 40:2d:8c:8b:a8:88:70:2f:7b:f7:77:b3:ed:ab:be: f8:ab:6b:63:23:af:d8:f9:c5:b3:14:69:91:1d:e2: 54:9c:27:cd:8e:cd:9b:3e:64:b4:14:e6:45:61:53: 29:7e:50:da:c7:b1:fe:2c:47:7b:9f:08:bf:ce:77: 3b:6f:06:24:3c:dc:4a:77:95:a7:2c:c7:a5:02:8b: dd:1c:43:40:dd:f1:a6:e9:c9:c1:d7:1c:8d:2d:04: 91:6e:40:6a:55:76:7a:a4:ca:fa:5d:0d:bb:5c:34: 01:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:3F:0E:4A:52:57:2E:48:A0:6B:03:30:DA:7D:01:0A:31:9E:71:47 X509v3 Authority Key Identifier: keyid:0E:56:C9:E5:8D:96:AF:1E:41:30:D7:22:42:21:19:2B:2C:13:2A:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:b0:f5:26:c2:32:12:1a:43:92:8d:30:6c:60:50:90:df:76: b3:be:94:aa:9c:c3:68:53:5f:23:ef:be:f9:03:e4:da:4f:30: 39:27:9e:4e:54:01:cd:5d:d7:cd:b1:b1:80:77:71:10:85:a7: a1:6e:6e:62:c8:86:73:8d:17:75:4d:37:76:53:aa:72:8f:d6: 2c:5a:61:1f:41:e5:85:41:e8:08:51:79:57:53:67:fb:c7:93: a9:22:eb:4e:00:3c:26:00:26:43:b3:49:c0:36:03:1a:e4:3f: 20:26:21:5e:c8:b6:98:fe:f4:9a:27:f1:eb:21:b6:8c:ba:2c: 34:34:38:09:aa:ae:6b:fe:62:29:81:6a:2f:ac:7f:0c:d4:8a: 27:92:51:7c:8b:a0:70:0f:3d:be:f5:f6:68:ee:1e:53:47:b7: 98:fb:3a:c2:42:20:e2:e7:10:3d:e5:9e:4c:4c:ee:71:80:94: 90:44:ff:ee:e1:0a:fd:50:11:f6:00:55:22:d1:86:7e:2e:49: 75:7a:09:ab:1b:fc:c5:b1:6b:a3:b1:e0:21:cc:45:78:61:e1: 06:7f:12:f3:cc:4c:42:12:12:3b:2c:3d:83:19:b8:9b:1d:c9: 6e:6e:00:9c:ba:2a:fd:c9:08:54:1c:a5:43:4a:24:63:e3:12: 5b:9b:04:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOQhoVFygcymhcHaAqiB5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNTZjOWU1OGQ5NmFmMWU0MTMwZDcyMjQyMjExOTJiMmMx MzJhNWMwHhcNMjUxMjIyMDQwMjI2WhcNMjUxMjIzMDQwMjI2WjAzMTEwLwYDVQQD EygzYzNmMGU0YTUyNTcyZTQ4YTA2YjAzMzBkYTdkMDEwYTMxOWU3MTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrWoa5CmZveVrfrBGT8nDyEswQ7s 2yztGmqUCMC2YD+YqdkYGrfyabN7tsMfu49kSct3Nt4kldH6XxlatCY2UWWo1ykB MaccqVrEhSY5hwJpXGvhJmhVKW07bCqOyvqFCAo52C5fvzCfo7gatwHZMjbUelmu iolGhes3Hn+yFhF/mWQ3jdAkUPi7kiPB7p8IZqnjtMZALYyLqIhwL3v3d7Ptq774 q2tjI6/Y+cWzFGmRHeJUnCfNjs2bPmS0FOZFYVMpflDax7H+LEd7nwi/znc7bwYk PNxKd5WnLMelAovdHENA3fGm6cnB1xyNLQSRbkBqVXZ6pMr6XQ27XDQB7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDw/DkpSVy5IoGsDMNp9AQoxnnFHMB8GA1UdIwQY MBaAFA5WyeWNlq8eQTDXIkIhGSssEypcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGxiSjVZMldyeDVCTU5jaVFpRVpLeXdUS2x3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80YzgyMDgtYmEzMC00NzE2LWE2Yzgt ODRmMzUyNDYyNmJkLzEvRGxiSjVZMldyeDVCTU5jaVFpRVpLeXdUS2x3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC80YzgyMDgtYmEzMC00NzE2LWE2YzgtODRmMzUyNDYyNmJk LzEvRGxiSjVZMldyeDVCTU5jaVFpRVpLeXdUS2x3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHrD1JsIy EhpDko0wbGBQkN92s76UqpzDaFNfI++++QPk2k8wOSeeTlQBzV3XzbGxgHdxEIWn oW5uYsiGc40XdU03dlOqco/WLFphH0HlhUHoCFF5V1Nn+8eTqSLrTgA8JgAmQ7NJ wDYDGuQ/ICYhXsi2mP70mifx6yG2jLosNDQ4Caqua/5iKYFqL6x/DNSKJ5JRfIug cA89vvX2aO4eU0e3mPs6wkIg4ucQPeWeTEzucYCUkET/7uEK/VAR9gBVItGGfi5J dXoJqxv8xbFro7HgIcxFeGHhBn8S88xMQhISOyw9gxm4mx3Jbm4AnLoq/ckIVByl Q0okY+MSW5sEcg== -----END CERTIFICATE-----Generated at Mon Dec 22 05:34:47 2025 by rpki-client