This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft File: dQrGfFd2g13wkZmDEJYOg8I9ncY.mft (raw, json) Hash identifier: fWNX1i71k6Xcjeu81d3BGNSi3acGSEsfKTm5h2+fEAM= Subject key identifier: 76:96:5E:96:E9:9A:53:5B:F9:61:60:06:9A:0F:E0:98:61:9C:C1:0F Authority key identifier: 75:0A:C6:7C:57:76:83:5D:F0:91:99:83:10:96:0E:83:C2:3D:9D:C6 Certificate issuer: /CN=750ac67c5776835df091998310960e83c23d9dc6 Certificate serial: 019B40C8EF5F40E7B6730A63297DA226DD87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft Manifest number: 0B75 Signing time: Sun 21 Dec 2025 12:01:08 +0000 Manifest this update: Sun 21 Dec 2025 12:01:08 +0000 Manifest next update: Mon 22 Dec 2025 12:01:08 +0000 Files and hashes: 1: dQrGfFd2g13wkZmDEJYOg8I9ncY.crl (hash: FAz+w0JEEOcmFI8j6rlCHzT+mK9/6RZwCUQ8SFqxfhk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:ef:5f:40:e7:b6:73:0a:63:29:7d:a2:26:dd:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=750ac67c5776835df091998310960e83c23d9dc6 Validity Not Before: Dec 21 12:01:08 2025 GMT Not After : Dec 22 12:01:08 2025 GMT Subject: CN=76965e96e99a535bf96160069a0fe098619cc10f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:20:c7:8a:d6:5f:c5:27:f3:48:a5:91:c0:b8: 09:ca:6b:a2:0b:fb:fc:28:24:7f:c1:4f:d6:a1:f4: 31:30:ea:f3:8b:b7:57:1f:9e:ff:83:95:e8:ff:7d: 70:3b:7f:17:c3:51:a4:d6:64:1d:7d:03:3e:72:97: 73:29:a3:50:d6:45:44:22:f7:68:9c:30:c7:05:3c: ae:6e:b6:ae:4a:02:f7:72:4e:81:cd:0b:8e:ef:be: 8b:f1:7e:28:4e:d8:4d:4b:fa:77:42:62:e7:c6:3a: cd:d8:29:f4:e6:bb:5b:28:38:a9:6f:59:52:8d:82: 93:fd:4e:71:9b:56:36:67:6b:f0:f8:c6:c5:d7:63: 8a:5a:64:e6:bd:4d:a2:0b:f5:e6:d1:9b:54:ba:a7: db:75:00:23:b3:8a:e3:43:a0:8c:ed:b6:5e:63:8e: 67:5e:99:9d:f4:50:1d:fa:6d:28:60:7b:0c:df:02: f0:e8:3a:b5:78:08:c5:0e:ad:4b:8a:7b:f2:dc:bb: b5:69:d5:e9:cb:78:f2:6e:bb:3b:4a:80:65:af:a2: 07:7e:06:45:42:d8:19:24:01:f4:6c:01:af:ec:0b: a5:97:23:da:24:08:90:40:57:dc:4d:06:ba:c8:16: 0b:8b:b3:4c:ec:03:dc:d7:68:94:71:80:f4:70:ad: 12:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:96:5E:96:E9:9A:53:5B:F9:61:60:06:9A:0F:E0:98:61:9C:C1:0F X509v3 Authority Key Identifier: keyid:75:0A:C6:7C:57:76:83:5D:F0:91:99:83:10:96:0E:83:C2:3D:9D:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:89:8f:2d:5f:31:0a:59:fa:11:f1:84:0e:ff:ac:be:55:d4: 56:5e:c1:c2:6c:15:c2:b2:e8:44:73:75:bc:0a:d9:10:a2:8c: 66:0c:00:a3:8f:fb:01:24:ef:fe:55:49:84:17:45:e7:39:d8: 56:ec:ed:e0:84:d6:c4:7e:65:31:b1:b0:45:34:6b:0a:36:cf: 77:e0:c7:8b:df:72:e2:c2:f2:d2:42:fd:f3:0c:c1:17:7b:7d: ae:47:17:16:50:ed:74:39:9f:28:63:92:9b:ff:23:3f:10:39: 10:9f:22:98:65:dd:6a:41:70:ba:f7:c1:d1:7c:49:b4:e5:13: 41:59:37:72:0f:bb:eb:fe:32:cd:78:be:d6:8d:f2:d5:1f:3e: 38:b0:34:52:b5:17:d9:1a:17:83:2a:cf:f0:07:e3:0a:ff:23: 55:af:37:08:0d:bf:44:e7:4b:99:04:d8:e2:8d:0b:b7:68:27: b1:62:03:1f:cd:f6:e0:3c:85:7b:80:61:0d:9f:bb:3b:74:1f: de:16:6d:87:17:eb:c5:8b:65:4d:7f:10:a3:b0:ca:62:56:02: b8:c2:ac:c2:06:8e:ff:af:79:8a:1e:03:f3:5d:f6:e9:fa:91: f3:af:dc:85:d6:df:7d:46:e8:d1:82:22:7d:81:23:9e:5c:86: ca:27:1f:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyO9fQOe2cwpjKX2iJt2HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MGFjNjdjNTc3NjgzNWRmMDkxOTk4MzEwOTYwZTgzYzIz ZDlkYzYwHhcNMjUxMjIxMTIwMTA4WhcNMjUxMjIyMTIwMTA4WjAzMTEwLwYDVQQD Eyg3Njk2NWU5NmU5OWE1MzViZjk2MTYwMDY5YTBmZTA5ODYxOWNjMTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CDHitZfxSfzSKWRwLgJymuiC/v8 KCR/wU/WofQxMOrzi7dXH57/g5Xo/31wO38Xw1Gk1mQdfQM+cpdzKaNQ1kVEIvdo nDDHBTyubrauSgL3ck6BzQuO776L8X4oTthNS/p3QmLnxjrN2Cn05rtbKDipb1lS jYKT/U5xm1Y2Z2vw+MbF12OKWmTmvU2iC/Xm0ZtUuqfbdQAjs4rjQ6CM7bZeY45n Xpmd9FAd+m0oYHsM3wLw6Dq1eAjFDq1Linvy3Lu1adXpy3jybrs7SoBlr6IHfgZF QtgZJAH0bAGv7AullyPaJAiQQFfcTQa6yBYLi7NM7APc12iUcYD0cK0SSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHaWXpbpmlNb+WFgBpoP4JhhnMEPMB8GA1UdIwQY MBaAFHUKxnxXdoNd8JGZgxCWDoPCPZ3GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFFyR2ZGZDJnMTN3a1ptREVKWU9nOEk5bmNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS83Mjc3OGItYzA3Zi00OWJiLTllMWQt MWYwYjAzNTQ0ODEwLzEvZFFyR2ZGZDJnMTN3a1ptREVKWU9nOEk5bmNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS83Mjc3OGItYzA3Zi00OWJiLTllMWQtMWYwYjAzNTQ0ODEw LzEvZFFyR2ZGZDJnMTN3a1ptREVKWU9nOEk5bmNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR4mPLV8x Cln6EfGEDv+svlXUVl7BwmwVwrLoRHN1vArZEKKMZgwAo4/7ASTv/lVJhBdF5znY Vuzt4ITWxH5lMbGwRTRrCjbPd+DHi99y4sLy0kL98wzBF3t9rkcXFlDtdDmfKGOS m/8jPxA5EJ8imGXdakFwuvfB0XxJtOUTQVk3cg+76/4yzXi+1o3y1R8+OLA0UrUX 2RoXgyrP8AfjCv8jVa83CA2/ROdLmQTY4o0Lt2gnsWIDH8324DyFe4BhDZ+7O3Qf 3hZthxfrxYtlTX8Qo7DKYlYCuMKswgaO/695ih4D81326fqR86/chdbffUbo0YIi fYEjnlyGyicf7A== -----END CERTIFICATE-----Generated at Sun Dec 21 19:32:40 2025 by rpki-client