This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e98684-302c-4ba8-ab7f-a103874e7c4f/1/DAHrsNsEzE1pGCs47A30sIkiJ40.mft File: DAHrsNsEzE1pGCs47A30sIkiJ40.mft (raw, json) Hash identifier: cswGEfzett0QkZ2n6oMPJKrVisStYT7O422Ex6wFG4c= Subject key identifier: 5B:96:21:B7:17:DA:9F:48:97:76:6E:D3:74:06:B3:1F:FB:26:0D:B3 Authority key identifier: 0C:01:EB:B0:DB:04:CC:4D:69:18:2B:38:EC:0D:F4:B0:89:22:27:8D Certificate issuer: /CN=0c01ebb0db04cc4d69182b38ec0df4b08922278d Certificate serial: 019B273FAB7A3B477410464E898F16214B8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAHrsNsEzE1pGCs47A30sIkiJ40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/e98684-302c-4ba8-ab7f-a103874e7c4f/1/DAHrsNsEzE1pGCs47A30sIkiJ40.mft Manifest number: 1778 Signing time: Tue 16 Dec 2025 13:00:42 +0000 Manifest this update: Tue 16 Dec 2025 13:00:42 +0000 Manifest next update: Wed 17 Dec 2025 13:00:42 +0000 Files and hashes: 1: DAHrsNsEzE1pGCs47A30sIkiJ40.crl (hash: bDPonAxgXgENh1lq02svmDoFdxYsudCe2+RkmPcF4Zk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/e98684-302c-4ba8-ab7f-a103874e7c4f/1/DAHrsNsEzE1pGCs47A30sIkiJ40.crl rsync://rpki.ripe.net/repository/DEFAULT/02/e98684-302c-4ba8-ab7f-a103874e7c4f/1/DAHrsNsEzE1pGCs47A30sIkiJ40.mft rsync://rpki.ripe.net/repository/DEFAULT/DAHrsNsEzE1pGCs47A30sIkiJ40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 13:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:3f:ab:7a:3b:47:74:10:46:4e:89:8f:16:21:4b:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c01ebb0db04cc4d69182b38ec0df4b08922278d Validity Not Before: Dec 16 13:00:42 2025 GMT Not After : Dec 17 13:00:42 2025 GMT Subject: CN=5b9621b717da9f4897766ed37406b31ffb260db3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ef:6a:e3:a5:33:78:6f:66:9b:49:bf:10:92: cd:ff:72:89:6b:3e:59:c6:65:eb:eb:16:e0:8a:01: cf:92:34:3a:1c:6a:54:b5:ba:ee:7e:a5:23:54:a0: 03:50:bc:76:65:5f:32:21:b3:0d:d7:68:c4:ae:22: b9:c2:aa:f1:da:81:b0:42:12:e7:da:09:cf:30:50: 36:59:08:f6:27:4e:4b:ca:05:ee:f6:06:e4:18:b1: 70:de:27:1b:6b:02:cd:1a:3d:54:09:86:57:22:ae: 3d:89:81:8f:0e:f4:29:13:07:a0:73:9d:d5:18:f9: b9:34:b7:0d:8c:bb:40:43:14:7e:5a:2f:a9:4c:26: b1:96:7b:bc:8c:09:34:43:5f:b0:95:0b:2d:ae:9f: 2a:72:d9:77:2e:23:e3:96:8a:45:6a:2c:77:93:be: a6:76:84:6c:e6:11:fa:ec:b5:dd:5b:21:20:f3:ba: 63:02:e9:3f:14:9e:28:91:d2:71:a7:58:70:83:20: 79:28:46:71:04:83:84:97:02:cc:3d:8d:d9:cf:47: 6b:49:2f:1b:9f:38:32:5a:7b:59:83:64:4c:d0:11: 01:dd:fe:e2:2b:fe:e1:2c:17:c5:67:05:55:93:a9: 18:77:95:46:c1:e1:f2:21:92:8b:b1:8e:ca:11:3b: b4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:96:21:B7:17:DA:9F:48:97:76:6E:D3:74:06:B3:1F:FB:26:0D:B3 X509v3 Authority Key Identifier: keyid:0C:01:EB:B0:DB:04:CC:4D:69:18:2B:38:EC:0D:F4:B0:89:22:27:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAHrsNsEzE1pGCs47A30sIkiJ40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e98684-302c-4ba8-ab7f-a103874e7c4f/1/DAHrsNsEzE1pGCs47A30sIkiJ40.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e98684-302c-4ba8-ab7f-a103874e7c4f/1/DAHrsNsEzE1pGCs47A30sIkiJ40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:2a:23:8b:76:fd:f5:bc:09:3b:59:4d:b5:94:9f:bc:11:9c: f8:9c:a9:13:fa:c6:c4:7a:de:2b:38:00:1f:b0:a8:99:53:20: 5b:ce:e7:f5:a4:fc:66:74:9e:a3:c7:2c:03:48:fb:b9:27:d3: 39:39:1e:e5:8b:03:c0:76:91:b9:e5:d2:68:1c:a8:62:6d:be: b0:97:2c:fe:8f:a1:12:14:53:d6:8b:48:cd:4b:e3:d9:d5:c5: 5e:44:51:74:af:f2:ff:48:e8:00:70:e9:4e:9d:ff:a4:d6:f2: 9d:96:64:3e:a1:d7:3d:0d:be:fa:f0:b4:49:4b:9c:14:67:cc: 58:a0:8a:0e:c0:e0:c5:f4:a0:ba:fb:15:6a:44:bb:b7:e3:1f: f1:94:08:ac:64:db:c4:35:b2:b0:1e:da:16:75:ef:c2:9c:b2: fb:a0:27:b2:c4:3c:a5:6b:e5:0f:c0:1a:cf:08:9e:80:18:22: 3d:5b:26:f0:30:a9:50:0c:a7:4f:0b:15:ec:0e:a7:5e:57:85: 8c:40:27:4b:30:60:e2:5e:90:9a:6a:05:18:27:45:f9:37:26: a7:a1:17:43:63:0d:0e:6e:f9:ce:f6:e5:18:56:90:79:7a:10: 7e:7b:15:56:bd:4d:55:f6:54:d2:d5:49:92:87:70:f7:05:3b: b0:1c:56:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnP6t6O0d0EEZOiY8WIUuOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMDFlYmIwZGIwNGNjNGQ2OTE4MmIzOGVjMGRmNGIwODky MjI3OGQwHhcNMjUxMjE2MTMwMDQyWhcNMjUxMjE3MTMwMDQyWjAzMTEwLwYDVQQD Eyg1Yjk2MjFiNzE3ZGE5ZjQ4OTc3NjZlZDM3NDA2YjMxZmZiMjYwZGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqu9q46UzeG9mm0m/EJLN/3KJaz5Z xmXr6xbgigHPkjQ6HGpUtbrufqUjVKADULx2ZV8yIbMN12jEriK5wqrx2oGwQhLn 2gnPMFA2WQj2J05LygXu9gbkGLFw3icbawLNGj1UCYZXIq49iYGPDvQpEwegc53V GPm5NLcNjLtAQxR+Wi+pTCaxlnu8jAk0Q1+wlQstrp8qctl3LiPjlopFaix3k76m doRs5hH67LXdWyEg87pjAuk/FJ4okdJxp1hwgyB5KEZxBIOElwLMPY3Zz0drSS8b nzgyWntZg2RM0BEB3f7iK/7hLBfFZwVVk6kYd5VGweHyIZKLsY7KETu0ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFuWIbcX2p9Il3Zu03QGsx/7Jg2zMB8GA1UdIwQY MBaAFAwB67DbBMxNaRgrOOwN9LCJIieNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREFIcnNOc0V6RTFwR0NzNDdBMzBzSWtpSjQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9lOTg2ODQtMzAyYy00YmE4LWFiN2Yt YTEwMzg3NGU3YzRmLzEvREFIcnNOc0V6RTFwR0NzNDdBMzBzSWtpSjQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9lOTg2ODQtMzAyYy00YmE4LWFiN2YtYTEwMzg3NGU3YzRm LzEvREFIcnNOc0V6RTFwR0NzNDdBMzBzSWtpSjQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGSoji3b9 9bwJO1lNtZSfvBGc+JypE/rGxHreKzgAH7ComVMgW87n9aT8ZnSeo8csA0j7uSfT OTke5YsDwHaRueXSaByoYm2+sJcs/o+hEhRT1otIzUvj2dXFXkRRdK/y/0joAHDp Tp3/pNbynZZkPqHXPQ2++vC0SUucFGfMWKCKDsDgxfSguvsVakS7t+Mf8ZQIrGTb xDWysB7aFnXvwpyy+6AnssQ8pWvlD8AazwiegBgiPVsm8DCpUAynTwsV7A6nXleF jEAnSzBg4l6QmmoFGCdF+Tcmp6EXQ2MNDm75zvblGFaQeXoQfnsVVr1NVfZU0tVJ kodw9wU7sBxW5w== -----END CERTIFICATE-----Generated at Tue Dec 16 23:24:06 2025 by rpki-client