This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft File: DrG9MNMZGofH0KRi5nkyQxYz3R4.mft (raw, json) Hash identifier: buTG3tn8DLKZrwHQJEu6vZ8iiApl9kSDAQ9xZqGBDHw= Subject key identifier: AD:49:22:D1:70:43:F7:C5:E9:73:71:7B:BB:74:2A:39:5D:63:D6:F9 Authority key identifier: 0E:B1:BD:30:D3:19:1A:87:C7:D0:A4:62:E6:79:32:43:16:33:DD:1E Certificate issuer: /CN=0eb1bd30d3191a87c7d0a462e67932431633dd1e Certificate serial: 019B0E5BE0D17C871284A87EFA4C6680BA05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft Manifest number: 0489 Signing time: Thu 11 Dec 2025 17:01:00 +0000 Manifest this update: Thu 11 Dec 2025 17:01:00 +0000 Manifest next update: Fri 12 Dec 2025 17:01:00 +0000 Files and hashes: 1: DrG9MNMZGofH0KRi5nkyQxYz3R4.crl (hash: dW9HMepVwiFk8t4ysZmoO8eYKWNX1tE+ulok3WGGhwA=) 2: ogxxjz_eGLDn7LYpHHuvCo9x5ng.roa (hash: B2U5jkd3tbLDGtZHWekj2Yva7wWVjyZDFNXj9MRShj4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5b:e0:d1:7c:87:12:84:a8:7e:fa:4c:66:80:ba:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0eb1bd30d3191a87c7d0a462e67932431633dd1e Validity Not Before: Dec 11 17:01:00 2025 GMT Not After : Dec 12 17:01:00 2025 GMT Subject: CN=ad4922d17043f7c5e973717bbb742a395d63d6f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:77:97:ad:5c:7b:15:d1:5a:c4:80:2d:1a:5c: 4b:96:f6:f6:d0:63:26:9d:e2:3c:5d:4a:6f:1f:0e: 69:1f:3f:9e:f8:f5:9b:95:aa:ee:8c:36:87:d5:9b: c3:66:1a:ba:0d:a5:48:4d:62:36:12:18:87:a5:8b: 18:f3:09:ec:c7:cb:e0:89:07:b4:0e:86:4d:9e:65: b1:20:0c:27:65:e7:2a:e7:72:ab:21:a5:2c:90:58: 7f:2e:82:a0:f8:4b:06:ac:b2:7e:e7:f8:ca:4c:e7: b6:b7:dd:7a:6a:3b:9e:8d:22:cc:8a:1f:17:e4:92: 1d:d7:c6:5c:57:ab:5e:8a:5f:e0:3b:bb:e3:40:fa: 39:31:ed:01:93:d0:2f:3c:ba:75:b3:fe:c1:34:77: bb:17:80:8b:be:e8:7c:19:f5:06:37:13:21:7e:a6: a6:de:23:58:da:bc:8e:00:3c:11:b2:1a:d8:90:13: d2:f2:f4:7c:47:58:18:0f:c0:cb:ee:be:a2:52:36: 30:87:e1:4d:a0:7e:bf:95:a4:4c:21:76:28:34:7b: 11:07:77:1f:f9:c6:1c:27:04:33:34:cb:4f:25:32: ea:be:a9:13:d6:b2:45:a5:c8:31:8d:93:b8:0d:08: 5b:db:ba:15:50:6f:da:24:a2:98:56:bd:ea:58:e4: ca:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:49:22:D1:70:43:F7:C5:E9:73:71:7B:BB:74:2A:39:5D:63:D6:F9 X509v3 Authority Key Identifier: keyid:0E:B1:BD:30:D3:19:1A:87:C7:D0:A4:62:E6:79:32:43:16:33:DD:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:f0:30:98:d1:06:8c:a7:e8:3f:07:9a:54:b1:97:e5:79:32: 0a:f4:44:72:fa:39:0f:15:06:ff:00:45:51:ce:5f:21:93:50: 86:3c:b8:ab:1a:89:7e:a4:88:98:2e:69:a0:54:71:c8:f5:93: 97:b4:9a:b4:28:c4:e8:d5:48:58:47:9c:6b:9f:f6:6b:08:ee: 40:20:31:6b:5e:e9:d0:24:77:c1:2e:8b:97:c3:45:be:f0:26: 85:86:65:78:97:6d:8d:d0:0a:9e:9e:b8:cf:0c:c5:f0:7d:17: 4f:9b:1b:c9:0a:42:66:3b:2b:3d:4a:5d:66:d5:f7:e2:0b:5b: ef:22:b6:2e:54:60:9d:8b:ff:45:45:b1:ba:1b:f8:7b:af:cf: 51:9a:b0:bb:53:b5:2a:16:4c:3f:1b:fa:96:39:94:d2:0f:88: 91:8e:75:19:7a:a2:98:fc:9e:58:e2:1c:66:db:0b:f3:a8:6d: e9:20:a5:81:b5:f7:dc:c9:b9:cc:bd:da:d6:9f:e2:3b:fe:05: 3e:37:23:da:22:79:54:2a:11:c0:3c:9d:c5:43:7e:8f:72:4c: af:78:96:18:45:0f:e6:f4:03:d8:aa:ec:9c:94:06:48:f5:fc: a2:a8:1d:18:45:6f:e3:9f:9f:8e:d4:85:f1:0b:37:9f:c8:88: b0:96:43:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOW+DRfIcShKh++kxmgLoFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlYjFiZDMwZDMxOTFhODdjN2QwYTQ2MmU2NzkzMjQzMTYz M2RkMWUwHhcNMjUxMjExMTcwMTAwWhcNMjUxMjEyMTcwMTAwWjAzMTEwLwYDVQQD EyhhZDQ5MjJkMTcwNDNmN2M1ZTk3MzcxN2JiYjc0MmEzOTVkNjNkNmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3eXrVx7FdFaxIAtGlxLlvb20GMm neI8XUpvHw5pHz+e+PWblarujDaH1ZvDZhq6DaVITWI2EhiHpYsY8wnsx8vgiQe0 DoZNnmWxIAwnZecq53KrIaUskFh/LoKg+EsGrLJ+5/jKTOe2t916ajuejSLMih8X 5JId18ZcV6teil/gO7vjQPo5Me0Bk9AvPLp1s/7BNHe7F4CLvuh8GfUGNxMhfqam 3iNY2ryOADwRshrYkBPS8vR8R1gYD8DL7r6iUjYwh+FNoH6/laRMIXYoNHsRB3cf +cYcJwQzNMtPJTLqvqkT1rJFpcgxjZO4DQhb27oVUG/aJKKYVr3qWOTK0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK1JItFwQ/fF6XNxe7t0KjldY9b5MB8GA1UdIwQY MBaAFA6xvTDTGRqHx9CkYuZ5MkMWM90eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHJHOU1OTVpHb2ZIMEtSaTVua3lReFl6M1I0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy83MmU5MWEtMDE0Zi00ODNhLWE1NDQt NGUzMzQyN2Y3MzRlLzEvRHJHOU1OTVpHb2ZIMEtSaTVua3lReFl6M1I0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy83MmU5MWEtMDE0Zi00ODNhLWE1NDQtNGUzMzQyN2Y3MzRl LzEvRHJHOU1OTVpHb2ZIMEtSaTVua3lReFl6M1I0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkvAwmNEG jKfoPweaVLGX5XkyCvREcvo5DxUG/wBFUc5fIZNQhjy4qxqJfqSImC5poFRxyPWT l7SatCjE6NVIWEeca5/2awjuQCAxa17p0CR3wS6Ll8NFvvAmhYZleJdtjdAKnp64 zwzF8H0XT5sbyQpCZjsrPUpdZtX34gtb7yK2LlRgnYv/RUWxuhv4e6/PUZqwu1O1 KhZMPxv6ljmU0g+IkY51GXqimPyeWOIcZtsL86ht6SClgbX33Mm5zL3a1p/iO/4F Pjcj2iJ5VCoRwDydxUN+j3JMr3iWGEUP5vQD2KrsnJQGSPX8oqgdGEVv45+fjtSF 8Qs3n8iIsJZD9w== -----END CERTIFICATE-----Generated at Thu Dec 11 23:19:13 2025 by rpki-client