This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft File: DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft (raw, json) Hash identifier: cow12loXpUh1twBGj9A0RSz9d0hg2skKrBkZjkFn7EE= Subject key identifier: E2:CD:A1:3F:1C:F5:74:8B:DE:1F:09:AE:D5:66:B9:5B:0F:EB:05:BE Authority key identifier: 0E:B5:10:D7:C9:15:A4:BE:6D:F6:B1:6F:F5:82:FD:2D:6A:D2:36:05 Certificate issuer: /CN=0eb510d7c915a4be6df6b16ff582fd2d6ad23605 Certificate serial: 019B0E5BF51B72071E101F715EB26FEDCCD1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DrUQ18kVpL5t9rFv9YL9LWrSNgU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft Manifest number: 1773 Signing time: Thu 11 Dec 2025 17:01:06 +0000 Manifest this update: Thu 11 Dec 2025 17:01:06 +0000 Manifest next update: Fri 12 Dec 2025 17:01:06 +0000 Files and hashes: 1: DrUQ18kVpL5t9rFv9YL9LWrSNgU.crl (hash: EMgRgW49RdqmxFGsvSpCH/+14XNWBlneRmSYQRBqIc0=) 2: rG4uV5FpPy0fw9yTiKRJUxEEj4o.roa (hash: BaS8t7omCzvSgmaV1xikWxIAkO9HyfZ7kCUC9REWlSg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.crl rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft rsync://rpki.ripe.net/repository/DEFAULT/DrUQ18kVpL5t9rFv9YL9LWrSNgU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 17:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5b:f5:1b:72:07:1e:10:1f:71:5e:b2:6f:ed:cc:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0eb510d7c915a4be6df6b16ff582fd2d6ad23605 Validity Not Before: Dec 11 17:01:06 2025 GMT Not After : Dec 12 17:01:06 2025 GMT Subject: CN=e2cda13f1cf5748bde1f09aed566b95b0feb05be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e5:d5:b9:38:06:0b:d2:f0:3a:04:c7:73:48: 42:25:24:3b:51:68:e2:76:4e:b1:03:84:45:eb:7e: c2:b3:d0:34:05:e5:35:b3:d4:76:3b:fc:d8:d9:ae: fc:6e:fa:2f:ff:4e:d8:a7:34:9e:bf:a5:89:16:50: 36:13:50:c9:72:ec:0e:59:d8:2a:aa:7b:3f:00:6d: 3f:e1:af:f4:ad:81:55:e0:35:2c:3c:d3:6a:ff:08: 99:cf:7b:e4:37:8e:e7:76:94:2a:88:bf:16:e4:f9: 56:f8:81:5d:61:5f:80:ee:86:f9:79:0f:a3:01:b6: 3a:6b:86:9d:7f:0c:6b:db:97:c3:6c:78:71:88:72: a1:d0:37:f7:16:62:95:78:53:be:e5:c4:e2:1c:fd: 13:3a:3d:90:2d:4c:a8:57:43:58:de:1b:fc:c2:4f: c3:5c:79:6e:62:01:ea:e4:50:2c:7e:03:75:49:59: 43:79:05:0d:66:9e:d2:01:c4:8d:ec:a2:20:09:a2: 63:3a:b0:6d:13:ca:9d:f8:fd:9b:fd:a1:2d:d3:14: 38:24:d8:70:32:24:10:1b:b1:ee:cc:65:c5:e0:70: a2:10:85:fe:23:1b:7e:71:4d:7c:ef:ad:da:33:7a: 84:7f:63:9d:94:69:b0:cd:a8:77:28:9f:7e:6b:0f: 0d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:CD:A1:3F:1C:F5:74:8B:DE:1F:09:AE:D5:66:B9:5B:0F:EB:05:BE X509v3 Authority Key Identifier: keyid:0E:B5:10:D7:C9:15:A4:BE:6D:F6:B1:6F:F5:82:FD:2D:6A:D2:36:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DrUQ18kVpL5t9rFv9YL9LWrSNgU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:fe:7d:a0:fe:f4:03:d1:63:57:8f:e7:ad:8b:bc:bc:bb:ba: 40:71:00:a0:eb:66:44:d4:6e:e2:28:67:fe:89:88:50:a2:1d: 3a:a6:0c:da:4a:1d:30:ce:e2:ee:c9:17:e2:31:15:0d:80:d8: d3:a9:ca:3b:99:d7:2e:68:1d:b3:38:1c:ba:33:9d:3d:73:7d: d8:96:39:59:9c:76:f2:db:2f:98:a3:90:91:a2:f0:f5:04:2f: e3:e5:be:2a:5f:ef:ac:44:e2:47:ff:3f:73:c7:ee:ce:1d:24: 40:a3:df:40:83:0e:e7:1a:00:c4:44:af:f7:ce:75:91:12:2f: f3:ca:9b:a2:0b:37:87:0b:5c:fe:7e:c6:78:47:25:82:4e:62: e7:02:52:df:42:4f:cd:f6:07:ea:94:fc:75:d6:2d:93:d2:72: f6:0a:75:f7:7d:ac:ab:2d:e7:c9:db:bf:35:aa:30:5c:24:ab: 41:7b:e2:1d:95:60:04:8f:f5:28:c1:9e:37:c6:ef:05:e1:05: 84:fa:fe:9d:36:b6:9c:0e:05:19:11:94:6c:bd:00:d1:4f:6f: 88:0f:2a:52:4a:35:9b:e5:16:4f:ef:57:a0:07:a9:fa:93:9f: d2:22:ba:3c:9f:03:58:a8:39:0b:c4:92:8e:fb:59:18:c3:05: 30:42:99:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOW/UbcgceEB9xXrJv7czRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlYjUxMGQ3YzkxNWE0YmU2ZGY2YjE2ZmY1ODJmZDJkNmFk MjM2MDUwHhcNMjUxMjExMTcwMTA2WhcNMjUxMjEyMTcwMTA2WjAzMTEwLwYDVQQD EyhlMmNkYTEzZjFjZjU3NDhiZGUxZjA5YWVkNTY2Yjk1YjBmZWIwNWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuXVuTgGC9LwOgTHc0hCJSQ7UWji dk6xA4RF637Cs9A0BeU1s9R2O/zY2a78bvov/07YpzSev6WJFlA2E1DJcuwOWdgq qns/AG0/4a/0rYFV4DUsPNNq/wiZz3vkN47ndpQqiL8W5PlW+IFdYV+A7ob5eQ+j AbY6a4adfwxr25fDbHhxiHKh0Df3FmKVeFO+5cTiHP0TOj2QLUyoV0NY3hv8wk/D XHluYgHq5FAsfgN1SVlDeQUNZp7SAcSN7KIgCaJjOrBtE8qd+P2b/aEt0xQ4JNhw MiQQG7HuzGXF4HCiEIX+Ixt+cU18763aM3qEf2OdlGmwzah3KJ9+aw8NMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOLNoT8c9XSL3h8JrtVmuVsP6wW+MB8GA1UdIwQY MBaAFA61ENfJFaS+bfaxb/WC/S1q0jYFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHJVUTE4a1ZwTDV0OXJGdjlZTDlMV3JTTmdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi85NmJlM2QtZDdkMi00NzUzLWE3ODMt ZDYzOGEzYmU4OGNhLzEvRHJVUTE4a1ZwTDV0OXJGdjlZTDlMV3JTTmdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi85NmJlM2QtZDdkMi00NzUzLWE3ODMtZDYzOGEzYmU4OGNh LzEvRHJVUTE4a1ZwTDV0OXJGdjlZTDlMV3JTTmdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw/59oP70 A9FjV4/nrYu8vLu6QHEAoOtmRNRu4ihn/omIUKIdOqYM2kodMM7i7skX4jEVDYDY 06nKO5nXLmgdszgcujOdPXN92JY5WZx28tsvmKOQkaLw9QQv4+W+Kl/vrETiR/8/ c8fuzh0kQKPfQIMO5xoAxESv9851kRIv88qbogs3hwtc/n7GeEclgk5i5wJS30JP zfYH6pT8ddYtk9Jy9gp1932sqy3nydu/NaowXCSrQXviHZVgBI/1KMGeN8bvBeEF hPr+nTa2nA4FGRGUbL0A0U9viA8qUko1m+UWT+9XoAep+pOf0iK6PJ8DWKg5C8SS jvtZGMMFMEKZHw== -----END CERTIFICATE-----Generated at Fri Dec 12 02:49:37 2025 by rpki-client