This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft File: dQrGfFd2g13wkZmDEJYOg8I9ncY.mft (raw, json) Hash identifier: NLV2j5mPNw7tPR+utzKImmej2XQQFEl6MApTCukz/lE= Subject key identifier: 4D:87:65:54:4A:B3:F0:B9:CB:AA:8F:EF:74:C1:60:14:D2:91:56:35 Authority key identifier: 75:0A:C6:7C:57:76:83:5D:F0:91:99:83:10:96:0E:83:C2:3D:9D:C6 Certificate issuer: /CN=750ac67c5776835df091998310960e83c23d9dc6 Certificate serial: 019B42B75751782985CC601497C3A739CDDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft Manifest number: 0B76 Signing time: Sun 21 Dec 2025 21:01:10 +0000 Manifest this update: Sun 21 Dec 2025 21:01:10 +0000 Manifest next update: Mon 22 Dec 2025 21:01:10 +0000 Files and hashes: 1: dQrGfFd2g13wkZmDEJYOg8I9ncY.crl (hash: RhDUcsW2tegCMaljnx1RPEaqvaK6lZqa9mQa3Z9XZwY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:57:51:78:29:85:cc:60:14:97:c3:a7:39:cd:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=750ac67c5776835df091998310960e83c23d9dc6 Validity Not Before: Dec 21 21:01:10 2025 GMT Not After : Dec 22 21:01:10 2025 GMT Subject: CN=4d8765544ab3f0b9cbaa8fef74c16014d2915635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6e:2b:b9:44:2d:b8:5f:f5:0b:b0:59:32:95: 69:66:49:90:80:50:33:8e:de:26:37:2f:8e:61:5d: c5:8e:2b:5c:66:f6:2d:a0:d8:2b:e7:6a:ce:c8:2b: 70:08:58:12:e3:f1:8b:e3:d3:4d:5b:58:e8:65:eb: b4:ae:b7:09:0a:51:a1:0e:f1:5e:2b:6c:fd:f9:c2: e8:cf:0b:aa:ba:ee:85:85:fa:53:1c:36:c2:61:06: cb:cf:67:fb:f7:7b:55:e5:18:f2:a0:83:ce:d2:0c: 73:1b:3a:c8:8c:e1:1b:b1:f5:fd:35:95:db:b9:f5: 95:6e:ef:5a:81:7f:c4:80:18:90:38:04:ff:77:a0: 0b:7c:b8:32:20:f2:7c:9c:55:57:77:89:0b:c2:a1: 04:3d:33:ae:ba:8a:89:46:2a:25:d6:4b:2d:e4:34: 07:98:b6:f6:8d:5e:f8:70:d8:5c:b3:b4:3c:5c:57: 6d:9e:db:9e:ce:7c:70:07:16:b3:c6:1a:44:f2:cb: e6:71:d2:39:04:8a:0b:c9:82:c8:0c:5e:c7:bb:c3: 50:80:6b:ff:e5:15:9c:6f:55:36:75:ea:69:26:de: e3:f5:e3:d4:4b:b9:1c:1b:cb:8b:b7:f1:5b:3e:29: 3a:fe:b9:ae:d2:be:38:29:e5:b9:fb:6d:7f:7b:ad: 83:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:87:65:54:4A:B3:F0:B9:CB:AA:8F:EF:74:C1:60:14:D2:91:56:35 X509v3 Authority Key Identifier: keyid:75:0A:C6:7C:57:76:83:5D:F0:91:99:83:10:96:0E:83:C2:3D:9D:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQrGfFd2g13wkZmDEJYOg8I9ncY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/72778b-c07f-49bb-9e1d-1f0b03544810/1/dQrGfFd2g13wkZmDEJYOg8I9ncY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:18:37:03:18:60:13:94:04:95:46:11:f8:2f:18:b5:8f:55: 01:8d:d9:fd:40:97:84:30:e2:d4:9b:9d:8a:bb:18:c6:08:5f: 79:03:33:ea:10:b9:36:d1:cb:c5:03:f1:2f:5a:d6:3b:03:d0: b9:b1:00:cb:bd:fc:1c:fb:58:1c:4f:9c:9e:b1:8b:69:13:f6: 59:b3:0e:05:e8:69:18:45:f4:1c:2b:da:0e:af:04:77:39:9e: d3:99:e4:45:9f:72:28:14:ba:37:e1:87:2d:cd:bc:8f:a3:1a: bb:5f:1e:49:e6:91:62:e6:05:e7:33:21:e5:f0:ca:61:1b:e2: 2f:97:b4:09:44:a2:60:27:d5:67:e7:99:49:81:ee:1e:75:f3: e4:b5:3c:27:e7:30:c8:e3:ce:0a:52:49:d8:2d:71:1f:a3:07: 88:03:71:b1:85:b9:14:49:d0:5a:8e:f1:8b:57:95:fb:a5:1b: bd:38:c0:3f:71:b9:e4:1c:69:73:e6:9f:41:3f:2b:eb:73:96: 89:00:73:a4:11:11:f1:67:d7:99:5e:75:50:37:17:9f:a1:57: 3d:b6:73:39:29:40:1c:2b:62:73:17:1b:e2:d5:30:13:29:f8: ad:60:d1:56:9b:64:81:39:03:63:21:5b:94:33:d1:87:fc:a3: ea:5a:a0:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCt1dReCmFzGAUl8OnOc3dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MGFjNjdjNTc3NjgzNWRmMDkxOTk4MzEwOTYwZTgzYzIz ZDlkYzYwHhcNMjUxMjIxMjEwMTEwWhcNMjUxMjIyMjEwMTEwWjAzMTEwLwYDVQQD Eyg0ZDg3NjU1NDRhYjNmMGI5Y2JhYThmZWY3NGMxNjAxNGQyOTE1NjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1W4ruUQtuF/1C7BZMpVpZkmQgFAz jt4mNy+OYV3FjitcZvYtoNgr52rOyCtwCFgS4/GL49NNW1joZeu0rrcJClGhDvFe K2z9+cLozwuquu6FhfpTHDbCYQbLz2f793tV5RjyoIPO0gxzGzrIjOEbsfX9NZXb ufWVbu9agX/EgBiQOAT/d6ALfLgyIPJ8nFVXd4kLwqEEPTOuuoqJRiol1kst5DQH mLb2jV74cNhcs7Q8XFdtntueznxwBxazxhpE8svmcdI5BIoLyYLIDF7Hu8NQgGv/ 5RWcb1U2deppJt7j9ePUS7kcG8uLt/FbPik6/rmu0r44KeW5+21/e62DMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE2HZVRKs/C5y6qP73TBYBTSkVY1MB8GA1UdIwQY MBaAFHUKxnxXdoNd8JGZgxCWDoPCPZ3GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFFyR2ZGZDJnMTN3a1ptREVKWU9nOEk5bmNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS83Mjc3OGItYzA3Zi00OWJiLTllMWQt MWYwYjAzNTQ0ODEwLzEvZFFyR2ZGZDJnMTN3a1ptREVKWU9nOEk5bmNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS83Mjc3OGItYzA3Zi00OWJiLTllMWQtMWYwYjAzNTQ0ODEw LzEvZFFyR2ZGZDJnMTN3a1ptREVKWU9nOEk5bmNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVhg3Axhg E5QElUYR+C8YtY9VAY3Z/UCXhDDi1JudirsYxghfeQMz6hC5NtHLxQPxL1rWOwPQ ubEAy738HPtYHE+cnrGLaRP2WbMOBehpGEX0HCvaDq8Edzme05nkRZ9yKBS6N+GH Lc28j6Mau18eSeaRYuYF5zMh5fDKYRviL5e0CUSiYCfVZ+eZSYHuHnXz5LU8J+cw yOPOClJJ2C1xH6MHiANxsYW5FEnQWo7xi1eV+6UbvTjAP3G55Bxpc+afQT8r63OW iQBzpBER8WfXmV51UDcXn6FXPbZzOSlAHCticxcb4tUwEyn4rWDRVptkgTkDYyFb lDPRh/yj6lqg1g== -----END CERTIFICATE-----Generated at Mon Dec 22 04:00:57 2025 by rpki-client