This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft File: RDtnudTJnHJeNX2BdPt-AkoVAuI.mft (raw, json) Hash identifier: GEdN7B9auhZ2cNtuDgK3tMDhQj9X0cuAa2iZKlxGvrw= Subject key identifier: EA:B1:BD:82:CC:02:C8:3E:A5:50:7C:32:5E:1B:94:55:30:7D:A8:BD Authority key identifier: 44:3B:67:B9:D4:C9:9C:72:5E:35:7D:81:74:FB:7E:02:4A:15:02:E2 Certificate issuer: /CN=443b67b9d4c99c725e357d8174fb7e024a1502e2 Certificate serial: 019B12037648BB635AB4EF14661F21A31CFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft Manifest number: 07FD Signing time: Fri 12 Dec 2025 10:02:55 +0000 Manifest this update: Fri 12 Dec 2025 10:02:55 +0000 Manifest next update: Sat 13 Dec 2025 10:02:55 +0000 Files and hashes: 1: RDtnudTJnHJeNX2BdPt-AkoVAuI.crl (hash: Q7TIhi8nxeLS2G6sDfcRHN0L9t7ExzOpc9hx6m4x26Q=) 2: ys9tkINh9OH6_Tn4SwpKbQKk59U.roa (hash: HKpYNrP2A2wFiOa+MzSBN+sOxWHoc3QcnpQXA9RSqDI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.crl rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:03:76:48:bb:63:5a:b4:ef:14:66:1f:21:a3:1c:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=443b67b9d4c99c725e357d8174fb7e024a1502e2 Validity Not Before: Dec 12 10:02:55 2025 GMT Not After : Dec 13 10:02:55 2025 GMT Subject: CN=eab1bd82cc02c83ea5507c325e1b9455307da8bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7c:b5:3b:ba:e6:e2:2f:f3:4b:74:68:3a:d7: b4:da:b8:fb:24:5e:99:d7:38:75:cc:ac:ba:b3:52: ac:82:a1:ff:72:87:0b:dc:62:57:2c:d9:e2:e6:30: 52:e0:89:2e:75:f9:f2:2f:72:d4:ab:4c:f5:41:54: 65:66:4e:93:33:5a:df:00:c4:22:56:66:0a:bb:20: 2b:c7:68:3b:e7:5f:3b:e1:01:73:4c:21:83:26:42: 8a:a0:9a:09:86:2d:89:f6:18:ea:00:0a:b5:8a:6f: cf:5c:8b:d5:f3:71:0b:59:b2:94:58:18:61:45:fb: c4:48:86:44:02:cb:bf:f4:67:be:13:54:a5:bc:48: e7:78:97:ce:1d:0f:e9:9f:ee:37:9b:72:52:53:b8: 09:f0:19:9b:6b:00:d0:ec:7a:b2:56:9f:0e:3f:f5: b8:4b:12:3b:fc:fd:7e:99:6a:7d:ae:5e:16:c0:16: b5:66:26:4c:05:ca:57:8a:45:b1:06:ab:95:ea:4b: b3:7a:80:41:f3:1d:5b:aa:7d:04:23:fc:fa:d9:bf: 26:df:e8:6a:4f:ec:c4:8f:b1:73:45:12:5d:a9:73: ae:b9:ae:56:2d:3d:d9:b3:37:db:ec:df:f7:6c:1f: 03:5c:d2:b5:8b:4a:b9:1e:60:ba:61:44:1e:5e:ed: 2e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:B1:BD:82:CC:02:C8:3E:A5:50:7C:32:5E:1B:94:55:30:7D:A8:BD X509v3 Authority Key Identifier: keyid:44:3B:67:B9:D4:C9:9C:72:5E:35:7D:81:74:FB:7E:02:4A:15:02:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:f6:57:df:a1:9f:e7:10:52:74:08:52:2d:bd:a5:69:4f:2b: 84:fa:50:e6:6d:ff:c3:40:c8:9d:9e:68:25:f1:47:45:11:7b: 16:1d:6d:67:bb:dd:64:4b:41:1a:ba:39:c5:1d:e2:4f:9e:e5: 67:21:1a:b8:98:fc:55:05:0c:23:00:9d:ff:9b:7e:46:75:0e: 41:51:6d:01:4b:70:20:cc:1e:f2:85:b4:3b:8b:9b:a3:cf:a2: af:44:bf:f0:e7:02:9d:e5:81:45:af:98:99:7d:3a:70:f1:f9: 7d:89:02:14:a5:d4:63:0b:82:6e:28:b7:0c:cb:a7:af:c2:79: 26:7e:b7:9a:da:06:5f:02:9b:2e:4c:90:32:dd:64:14:f9:75: 33:8f:24:56:62:b6:8d:59:00:88:a7:e4:d5:36:2e:7e:36:3d: 16:43:a4:03:a3:b2:40:0d:c1:09:be:85:f1:1c:c3:09:4c:a6: 8e:f3:51:06:97:27:35:3f:19:48:4f:5e:bd:ed:b9:dd:17:70: 6d:d2:1a:f9:af:3f:2e:21:95:00:46:5c:55:27:e4:9f:30:20: e7:fb:f1:85:7a:0b:2a:24:f0:71:56:8b:a4:cc:31:14:c1:da: e3:17:2c:35:93:7a:e2:fe:da:28:77:85:c0:02:cc:2f:a9:fa: 17:4e:90:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSA3ZIu2NatO8UZh8hoxz7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0M2I2N2I5ZDRjOTljNzI1ZTM1N2Q4MTc0ZmI3ZTAyNGEx NTAyZTIwHhcNMjUxMjEyMTAwMjU1WhcNMjUxMjEzMTAwMjU1WjAzMTEwLwYDVQQD EyhlYWIxYmQ4MmNjMDJjODNlYTU1MDdjMzI1ZTFiOTQ1NTMwN2RhOGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXy1O7rm4i/zS3RoOte02rj7JF6Z 1zh1zKy6s1KsgqH/cocL3GJXLNni5jBS4IkudfnyL3LUq0z1QVRlZk6TM1rfAMQi VmYKuyArx2g751874QFzTCGDJkKKoJoJhi2J9hjqAAq1im/PXIvV83ELWbKUWBhh RfvESIZEAsu/9Ge+E1SlvEjneJfOHQ/pn+43m3JSU7gJ8BmbawDQ7HqyVp8OP/W4 SxI7/P1+mWp9rl4WwBa1ZiZMBcpXikWxBquV6kuzeoBB8x1bqn0EI/z62b8m3+hq T+zEj7FzRRJdqXOuua5WLT3Zszfb7N/3bB8DXNK1i0q5HmC6YUQeXu0uEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOqxvYLMAsg+pVB8Ml4blFUwfai9MB8GA1UdIwQY MBaAFEQ7Z7nUyZxyXjV9gXT7fgJKFQLiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkR0bnVkVEpuSEplTlgyQmRQdC1Ba29WQXVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9lZWRlMzgtOTJhMi00NjJkLWIyNTIt YzgzYjVmYzI2NTQ1LzEvUkR0bnVkVEpuSEplTlgyQmRQdC1Ba29WQXVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9lZWRlMzgtOTJhMi00NjJkLWIyNTItYzgzYjVmYzI2NTQ1 LzEvUkR0bnVkVEpuSEplTlgyQmRQdC1Ba29WQXVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASPZX36Gf 5xBSdAhSLb2laU8rhPpQ5m3/w0DInZ5oJfFHRRF7Fh1tZ7vdZEtBGro5xR3iT57l ZyEauJj8VQUMIwCd/5t+RnUOQVFtAUtwIMwe8oW0O4ubo8+ir0S/8OcCneWBRa+Y mX06cPH5fYkCFKXUYwuCbii3DMunr8J5Jn63mtoGXwKbLkyQMt1kFPl1M48kVmK2 jVkAiKfk1TYufjY9FkOkA6OyQA3BCb6F8RzDCUymjvNRBpcnNT8ZSE9eve253Rdw bdIa+a8/LiGVAEZcVSfknzAg5/vxhXoLKiTwcVaLpMwxFMHa4xcsNZN64v7aKHeF wALML6n6F06Q7A== -----END CERTIFICATE-----Generated at Fri Dec 12 17:53:58 2025 by rpki-client