This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft File: dcqnmRKIh2aA16yQqFafP8IDh_o.mft (raw, json) Hash identifier: E3uQlLM03o+UY9l/ok3QXABLqA84Hcf9GJEndRPMKS4= Subject key identifier: D8:FC:FC:69:2A:77:FF:A6:63:67:B1:99:F9:92:4E:C0:0A:C8:01:03 Authority key identifier: 75:CA:A7:99:12:88:87:66:80:D7:AC:90:A8:56:9F:3F:C2:03:87:FA Certificate issuer: /CN=75caa7991288876680d7ac90a8569f3fc20387fa Certificate serial: 019B59E38817B38CE5D49401012ED218A5A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcqnmRKIh2aA16yQqFafP8IDh_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft Manifest number: 1794 Signing time: Fri 26 Dec 2025 09:00:42 +0000 Manifest this update: Fri 26 Dec 2025 09:00:42 +0000 Manifest next update: Sat 27 Dec 2025 09:00:42 +0000 Files and hashes: 1: dcqnmRKIh2aA16yQqFafP8IDh_o.crl (hash: ev0taywnkYSlxZxkpJ0xIHPgjxyu54d8Az3pjl6FYms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft rsync://rpki.ripe.net/repository/DEFAULT/dcqnmRKIh2aA16yQqFafP8IDh_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:88:17:b3:8c:e5:d4:94:01:01:2e:d2:18:a5:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75caa7991288876680d7ac90a8569f3fc20387fa Validity Not Before: Dec 26 09:00:42 2025 GMT Not After : Dec 27 09:00:42 2025 GMT Subject: CN=d8fcfc692a77ffa66367b199f9924ec00ac80103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2b:1d:d4:eb:69:48:75:0f:89:59:46:24:ec: 8f:d3:d5:66:2f:1a:86:52:30:21:70:01:ba:89:46: 13:98:88:e2:4b:6d:50:39:0f:75:8d:db:dd:4d:0e: 10:fd:e5:5d:84:8e:48:ba:79:62:48:06:ec:28:36: fc:7c:4a:8e:47:d0:67:b5:73:9d:25:4e:85:eb:ac: c2:0e:c8:b3:76:41:5f:22:04:af:8e:5a:e3:e8:58: 31:16:c1:a6:3d:cd:51:b6:8b:a7:23:df:cf:15:70: 49:a3:d0:5c:53:26:7b:9c:e0:51:75:a1:39:ec:e3: 01:94:a3:67:9b:66:34:79:8c:cb:e8:fa:c2:e5:20: 0a:db:d0:8c:29:6f:44:cc:91:c8:b8:0c:69:92:41: 92:1e:fe:43:56:40:ca:37:93:1a:a8:88:23:f4:3f: 96:96:4a:b4:e0:e5:9c:52:b0:fa:83:e2:bd:3b:52: ae:d7:42:c8:29:f2:87:45:38:a2:ce:1b:be:83:d4: d2:cd:22:c2:12:ac:21:1a:10:1e:26:e2:03:f4:1e: 69:7e:ea:70:a0:8a:c3:b4:7e:9b:66:f3:9e:c6:df: 5a:a9:08:94:fd:6c:1f:6d:e5:05:6b:05:b4:ab:2d: c8:3b:a3:fc:19:9f:ba:08:63:5b:a3:ad:56:b2:f3: eb:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:FC:FC:69:2A:77:FF:A6:63:67:B1:99:F9:92:4E:C0:0A:C8:01:03 X509v3 Authority Key Identifier: keyid:75:CA:A7:99:12:88:87:66:80:D7:AC:90:A8:56:9F:3F:C2:03:87:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcqnmRKIh2aA16yQqFafP8IDh_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:0f:cf:90:eb:7c:7b:7e:c6:d9:b1:c1:dc:87:90:f9:3b:41: 8f:66:c2:4b:0b:3d:1e:35:8a:45:72:09:b5:d6:dc:17:3f:db: 31:42:49:bc:96:2d:3b:13:62:40:0b:18:ba:b0:0c:40:94:c1: 9a:9d:d8:c0:07:e4:a6:8c:24:db:a1:95:48:a6:4f:9a:f9:16: 66:3d:5b:64:cd:89:4c:2f:e6:99:ed:c6:82:b0:be:2e:44:36: 4d:ea:66:d9:95:5f:74:54:a5:2a:e5:ea:75:67:fd:cc:8a:e6: 2c:02:4e:2a:7b:e5:cf:de:00:e1:bb:6b:96:30:5b:78:7b:44: 32:c1:d8:6d:10:59:a2:0d:99:5c:94:e2:a0:17:ae:34:ed:6a: 32:82:90:c6:c3:c2:bd:d3:91:b3:1f:a6:24:c4:4d:f4:9c:98: 69:f6:76:4a:41:41:3d:67:5b:2c:cd:b1:ac:1c:2e:bf:f0:27: 44:b4:49:cd:3d:58:ca:15:ab:9d:77:24:cd:98:71:37:7a:a8: 87:d8:eb:3c:81:9a:43:3c:d0:99:9e:84:30:aa:b8:07:f4:e2: 2e:05:6e:b9:4c:81:80:13:9c:d7:18:2d:ae:c5:36:55:fa:ec: 59:ed:22:f5:a7:a1:07:0b:ce:7e:5b:71:12:a6:80:e6:42:79: a7:80:46:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ44gXs4zl1JQBAS7SGKWmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1Y2FhNzk5MTI4ODg3NjY4MGQ3YWM5MGE4NTY5ZjNmYzIw Mzg3ZmEwHhcNMjUxMjI2MDkwMDQyWhcNMjUxMjI3MDkwMDQyWjAzMTEwLwYDVQQD EyhkOGZjZmM2OTJhNzdmZmE2NjM2N2IxOTlmOTkyNGVjMDBhYzgwMTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoisd1OtpSHUPiVlGJOyP09VmLxqG UjAhcAG6iUYTmIjiS21QOQ91jdvdTQ4Q/eVdhI5IunliSAbsKDb8fEqOR9BntXOd JU6F66zCDsizdkFfIgSvjlrj6FgxFsGmPc1RtounI9/PFXBJo9BcUyZ7nOBRdaE5 7OMBlKNnm2Y0eYzL6PrC5SAK29CMKW9EzJHIuAxpkkGSHv5DVkDKN5MaqIgj9D+W lkq04OWcUrD6g+K9O1Ku10LIKfKHRTiizhu+g9TSzSLCEqwhGhAeJuID9B5pfupw oIrDtH6bZvOext9aqQiU/WwfbeUFawW0qy3IO6P8GZ+6CGNbo61WsvPrQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNj8/Gkqd/+mY2exmfmSTsAKyAEDMB8GA1UdIwQY MBaAFHXKp5kSiIdmgNeskKhWnz/CA4f6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGNxbm1SS0loMmFBMTZ5UXFGYWZQOElEaF9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8yNzU0ZGUtYTVkNS00ODdmLTlmZGQt YzMzYjM2NDRkZDNmLzEvZGNxbm1SS0loMmFBMTZ5UXFGYWZQOElEaF9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8yNzU0ZGUtYTVkNS00ODdmLTlmZGQtYzMzYjM2NDRkZDNm LzEvZGNxbm1SS0loMmFBMTZ5UXFGYWZQOElEaF9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmQ/PkOt8 e37G2bHB3IeQ+TtBj2bCSws9HjWKRXIJtdbcFz/bMUJJvJYtOxNiQAsYurAMQJTB mp3YwAfkpowk26GVSKZPmvkWZj1bZM2JTC/mme3GgrC+LkQ2Tepm2ZVfdFSlKuXq dWf9zIrmLAJOKnvlz94A4btrljBbeHtEMsHYbRBZog2ZXJTioBeuNO1qMoKQxsPC vdORsx+mJMRN9JyYafZ2SkFBPWdbLM2xrBwuv/AnRLRJzT1YyhWrnXckzZhxN3qo h9jrPIGaQzzQmZ6EMKq4B/TiLgVuuUyBgBOc1xgtrsU2VfrsWe0i9aehBwvOfltx EqaA5kJ5p4BGOg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:55:53 2025 by rpki-client