This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft File: 1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft (raw, json) Hash identifier: DlDdAL2eMlgj4RXKbTq9g6uRnXuvDqcMgBB183AT8CM= Subject key identifier: 36:12:D7:39:E6:27:4A:5C:44:67:F1:DB:67:F0:82:72:3F:7A:94:D8 Authority key identifier: F8:FF:9D:A4:30:BF:F2:68:C8:43:A2:E5:86:09:8C:8D:70:21:CA:06 Certificate issuer: /CN=f8ff9da430bff268c843a2e586098c8d7021ca06 Certificate serial: 019B5977108DBB9A61F9D6F2C907D9377065 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft Manifest number: 0E8A Signing time: Fri 26 Dec 2025 07:02:13 +0000 Manifest this update: Fri 26 Dec 2025 07:02:13 +0000 Manifest next update: Sat 27 Dec 2025 07:02:13 +0000 Files and hashes: 1: 1-P-dpDC_8mjIQ6LlhgmMjXAhygY.crl (hash: YDb2kGBCrhoYuipSpjQl3EjItWxIHvliicg+qXXIHlw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft rsync://rpki.ripe.net/repository/DEFAULT/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:10:8d:bb:9a:61:f9:d6:f2:c9:07:d9:37:70:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8ff9da430bff268c843a2e586098c8d7021ca06 Validity Not Before: Dec 26 07:02:13 2025 GMT Not After : Dec 27 07:02:13 2025 GMT Subject: CN=3612d739e6274a5c4467f1db67f082723f7a94d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b3:c6:22:2e:46:b4:dc:e2:37:98:cf:7e:0c: 99:25:9b:f1:b2:dc:0f:9e:ef:60:85:e4:40:b2:55: 3f:c3:c8:70:a1:6f:1f:44:3d:43:c6:86:5f:4d:3c: ab:8a:6a:07:f0:bb:0f:59:21:94:1d:85:63:5f:d2: 7a:d7:96:db:71:29:07:b0:54:d4:f7:2b:40:72:08: 7a:f1:6e:e2:b3:1e:d1:a0:b4:b9:f5:a7:f6:b0:d2: 17:cc:40:81:97:95:f5:38:7f:46:ec:c6:67:a2:06: 48:6b:d6:3e:80:ee:c9:e1:5e:56:b7:a2:4e:d0:35: 35:25:a6:82:c9:33:2a:32:d4:a8:3f:9b:53:bf:8d: 0e:5d:8e:23:ae:d1:6a:ad:89:01:b6:12:f0:19:b9: 45:48:b0:23:97:db:6b:de:45:89:c0:da:1d:0e:ac: 63:66:dd:4f:eb:40:5f:ee:a7:08:0f:6a:8d:3c:ac: 75:2c:04:b6:7e:e7:da:f7:12:28:1b:aa:42:ad:bf: d6:3b:6a:16:00:f0:f1:e0:62:9c:9c:ad:94:10:b2: fe:ad:f0:03:6a:fb:f0:76:f2:5e:e4:e5:19:83:f1: b2:ae:e1:d8:3d:8c:c7:ad:ce:f9:e3:1d:ab:15:32: 0c:0d:40:b4:b9:99:a8:01:49:96:8c:3e:97:15:3c: 9e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:12:D7:39:E6:27:4A:5C:44:67:F1:DB:67:F0:82:72:3F:7A:94:D8 X509v3 Authority Key Identifier: keyid:F8:FF:9D:A4:30:BF:F2:68:C8:43:A2:E5:86:09:8C:8D:70:21:CA:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:da:ad:e0:b6:8d:f5:1c:f8:c7:e5:71:0f:62:40:1f:86:81: e2:36:38:f1:9e:bc:f2:71:ce:b8:f6:4d:59:11:b0:f9:c9:a2: ea:c4:74:9e:b8:b6:98:a8:12:8a:e5:cf:77:e2:2c:3a:08:a3: 97:86:85:6a:6a:be:a0:28:7a:cc:f0:a6:a9:30:2b:53:27:1f: 53:fd:0d:77:7b:a9:68:0a:f0:b9:9b:ad:90:b5:72:8c:79:9b: b4:a0:03:5f:15:50:7e:f0:db:e3:9a:ce:6e:f9:9f:6b:6d:94: 19:20:40:fb:18:ec:6c:54:98:3f:a8:ef:ee:d8:a8:81:23:c2: d1:a6:c6:13:20:74:ec:93:85:d0:4e:80:42:db:9e:e5:bc:81: 1c:39:50:de:5f:4c:a1:87:87:b8:97:fe:e0:dd:37:d7:9d:84: 02:b1:75:6f:c4:ec:78:00:fd:80:3a:f9:7f:e3:bd:3b:0d:98: 25:d8:26:58:f9:05:5e:0b:ae:b5:5e:13:09:44:6a:9c:86:ae: 84:eb:19:8f:bb:7a:c7:73:18:36:5d:ea:f9:68:94:a6:82:65: 53:03:6c:de:d7:e7:cf:5b:92:61:32:24:bc:8f:21:01:9a:a7: 12:e7:35:01:77:73:30:00:65:cd:f7:02:36:e0:56:34:f9:6b: 6c:06:1a:1b -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtZdxCNu5ph+dbyyQfZN3BlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZmY5ZGE0MzBiZmYyNjhjODQzYTJlNTg2MDk4YzhkNzAy MWNhMDYwHhcNMjUxMjI2MDcwMjEzWhcNMjUxMjI3MDcwMjEzWjAzMTEwLwYDVQQD EygzNjEyZDczOWU2Mjc0YTVjNDQ2N2YxZGI2N2YwODI3MjNmN2E5NGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7PGIi5GtNziN5jPfgyZJZvxstwP nu9gheRAslU/w8hwoW8fRD1DxoZfTTyrimoH8LsPWSGUHYVjX9J615bbcSkHsFTU 9ytAcgh68W7isx7RoLS59af2sNIXzECBl5X1OH9G7MZnogZIa9Y+gO7J4V5Wt6JO 0DU1JaaCyTMqMtSoP5tTv40OXY4jrtFqrYkBthLwGblFSLAjl9tr3kWJwNodDqxj Zt1P60Bf7qcID2qNPKx1LAS2fufa9xIoG6pCrb/WO2oWAPDx4GKcnK2UELL+rfAD avvwdvJe5OUZg/GyruHYPYzHrc754x2rFTIMDUC0uZmoAUmWjD6XFTyegQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFDYS1znmJ0pcRGfx22fwgnI/epTYMB8GA1UdIwQY MBaAFPj/naQwv/JoyEOi5YYJjI1wIcoGMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1QLWRwRENfOG1qSVE2TGxoZ21NalhBaHlnWS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWYvMzFhNzhmLWMzMWItNDM4MS04NjMx LTY4MjljMGZjNzM4ZS8xLzEtUC1kcERDXzhtaklRNkxsaGdtTWpYQWh5Z1kubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2VmLzMxYTc4Zi1jMzFiLTQzODEtODYzMS02ODI5YzBmYzcz OGUvMS8xLVAtZHBEQ184bWpJUTZMbGhnbU1qWEFoeWdZLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgNqt 4LaN9Rz4x+VxD2JAH4aB4jY48Z688nHOuPZNWRGw+cmi6sR0nri2mKgSiuXPd+Is Ogijl4aFamq+oCh6zPCmqTArUycfU/0Nd3upaArwuZutkLVyjHmbtKADXxVQfvDb 45rObvmfa22UGSBA+xjsbFSYP6jv7tiogSPC0abGEyB07JOF0E6AQtue5byBHDlQ 3l9MoYeHuJf+4N03152EArF1b8TseAD9gDr5f+O9Ow2YJdgmWPkFXguutV4TCURq nIauhOsZj7t6x3MYNl3q+WiUpoJlUwNs3tfnz1uSYTIkvI8hAZqnEuc1AXdzMABl zfcCNuBWNPlrbAYaGw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:30 2025 by rpki-client