This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.mft File: dWQXildKJgm7bv8cxSG0U9dch9w.mft (raw, json) Hash identifier: uP8HEvwwLZwoJ3objH0+ol1MY6nKRpnuPcycfwKDxiw= Subject key identifier: 04:88:3A:81:A1:C2:99:FC:29:C7:6B:C2:4A:0C:4B:A7:25:3A:AA:AB Authority key identifier: 75:64:17:8A:57:4A:26:09:BB:6E:FF:1C:C5:21:B4:53:D7:5C:87:DC Certificate issuer: /CN=7564178a574a2609bb6eff1cc521b453d75c87dc Certificate serial: 019B405B9F5080EAA9C82F4C36861CB663D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWQXildKJgm7bv8cxSG0U9dch9w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.mft Manifest number: 0EEA Signing time: Sun 21 Dec 2025 10:01:44 +0000 Manifest this update: Sun 21 Dec 2025 10:01:44 +0000 Manifest next update: Mon 22 Dec 2025 10:01:44 +0000 Files and hashes: 1: dWQXildKJgm7bv8cxSG0U9dch9w.crl (hash: TvJ5s7BJbNVfK5QqRjKONlGEcCV5Wv9UjlJ2mg0gXKA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.mft rsync://rpki.ripe.net/repository/DEFAULT/dWQXildKJgm7bv8cxSG0U9dch9w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:9f:50:80:ea:a9:c8:2f:4c:36:86:1c:b6:63:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7564178a574a2609bb6eff1cc521b453d75c87dc Validity Not Before: Dec 21 10:01:44 2025 GMT Not After : Dec 22 10:01:44 2025 GMT Subject: CN=04883a81a1c299fc29c76bc24a0c4ba7253aaaab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c9:47:e0:2d:85:09:46:8e:ea:83:97:07:f4: 36:80:7e:ab:0b:ef:3b:69:88:04:10:cb:84:8b:6e: 19:c6:5a:02:3b:5f:49:cd:bc:39:6e:c8:af:89:28: e6:d9:aa:3e:5f:a0:12:0d:36:41:a1:f8:a8:95:c0: 1d:85:19:7c:3a:28:40:06:0f:48:e3:24:b2:43:81: 3e:db:d3:4b:ad:fd:a7:af:b3:90:f9:c0:39:f3:d1: d4:03:f3:cc:7e:ca:0c:fc:5b:70:88:57:8c:8c:be: 0a:29:a9:78:8a:b7:86:51:4d:27:4a:cd:a3:9c:65: 99:d6:25:5a:da:63:de:ce:64:7c:80:fb:0f:06:43: 02:b0:ac:b8:14:41:38:b9:d3:df:40:84:10:a1:75: eb:21:0d:bd:93:fa:4b:76:38:67:52:47:11:a7:78: 83:c0:22:6d:96:f8:b2:8b:ee:cd:3e:09:70:1f:50: 52:7d:a5:95:a4:92:eb:cf:12:83:02:a2:48:29:54: d2:97:43:70:8f:ab:18:21:45:1c:c8:d8:8c:ef:fa: be:ed:40:1e:46:c1:5e:77:d8:83:1f:77:a1:d6:f9: 33:7f:44:46:2f:b8:b1:fe:0d:0a:49:c0:3f:fc:f3: 9d:9d:8f:8c:27:99:4c:25:c5:72:f6:cc:52:1b:7c: 4b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:88:3A:81:A1:C2:99:FC:29:C7:6B:C2:4A:0C:4B:A7:25:3A:AA:AB X509v3 Authority Key Identifier: keyid:75:64:17:8A:57:4A:26:09:BB:6E:FF:1C:C5:21:B4:53:D7:5C:87:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWQXildKJgm7bv8cxSG0U9dch9w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:88:a2:6b:f2:84:53:17:97:48:10:37:a8:89:d0:86:93:39: af:f9:23:03:ee:8b:f0:6f:fa:e2:09:86:a8:85:d8:42:90:e8: 63:e1:36:2a:dd:3c:c8:12:9c:f5:15:29:4a:58:fd:e8:e4:f1: 5c:80:eb:21:f2:77:85:93:21:13:1f:23:cc:aa:4e:6e:50:41: 44:99:38:cb:d2:4b:06:ba:84:58:78:e0:ab:cb:5d:cf:ec:cc: 88:a5:5f:67:3d:76:5f:24:0c:bf:f3:dc:ce:08:4e:ee:58:8e: 10:ff:18:75:6a:7d:98:91:76:39:e5:41:12:4c:0a:a2:be:2a: 73:d4:93:eb:8a:1a:de:dc:02:fe:cc:96:fe:5c:06:c2:fe:19: bb:de:80:c2:ba:98:97:e4:09:70:1d:57:90:d6:29:d0:00:7b: d2:09:fa:eb:3b:70:0b:81:88:e4:2b:cf:7b:a5:30:5f:12:d1: c7:20:13:7f:b9:af:e4:bf:4e:76:e3:ad:68:0c:cc:bf:d7:02: 52:60:35:e1:c6:c6:fc:37:a4:2a:03:54:a5:27:e1:a1:de:6b: ba:1a:c6:f5:48:cf:f4:f6:df:ea:ca:e5:ce:d1:1e:05:26:02: f3:85:e5:01:e2:cf:ec:fc:96:90:19:49:04:17:d8:e1:b7:05: d1:e7:4a:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAW59QgOqpyC9MNoYctmPZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1NjQxNzhhNTc0YTI2MDliYjZlZmYxY2M1MjFiNDUzZDc1 Yzg3ZGMwHhcNMjUxMjIxMTAwMTQ0WhcNMjUxMjIyMTAwMTQ0WjAzMTEwLwYDVQQD EygwNDg4M2E4MWExYzI5OWZjMjljNzZiYzI0YTBjNGJhNzI1M2FhYWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuslH4C2FCUaO6oOXB/Q2gH6rC+87 aYgEEMuEi24ZxloCO19Jzbw5bsiviSjm2ao+X6ASDTZBofiolcAdhRl8OihABg9I 4ySyQ4E+29NLrf2nr7OQ+cA589HUA/PMfsoM/FtwiFeMjL4KKal4ireGUU0nSs2j nGWZ1iVa2mPezmR8gPsPBkMCsKy4FEE4udPfQIQQoXXrIQ29k/pLdjhnUkcRp3iD wCJtlviyi+7NPglwH1BSfaWVpJLrzxKDAqJIKVTSl0Nwj6sYIUUcyNiM7/q+7UAe RsFed9iDH3eh1vkzf0RGL7ix/g0KScA//POdnY+MJ5lMJcVy9sxSG3xL2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFASIOoGhwpn8KcdrwkoMS6clOqqrMB8GA1UdIwQY MBaAFHVkF4pXSiYJu27/HMUhtFPXXIfcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFdRWGlsZEtKZ203YnY4Y3hTRzBVOWRjaDl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8wY2M4NzUtNjEwZi00YWRkLWE3MTkt M2NhYWY5MDVjZmM2LzEvZFdRWGlsZEtKZ203YnY4Y3hTRzBVOWRjaDl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC8wY2M4NzUtNjEwZi00YWRkLWE3MTktM2NhYWY5MDVjZmM2 LzEvZFdRWGlsZEtKZ203YnY4Y3hTRzBVOWRjaDl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnIiia/KE UxeXSBA3qInQhpM5r/kjA+6L8G/64gmGqIXYQpDoY+E2Kt08yBKc9RUpSlj96OTx XIDrIfJ3hZMhEx8jzKpOblBBRJk4y9JLBrqEWHjgq8tdz+zMiKVfZz12XyQMv/Pc zghO7liOEP8YdWp9mJF2OeVBEkwKor4qc9ST64oa3twC/syW/lwGwv4Zu96AwrqY l+QJcB1XkNYp0AB70gn66ztwC4GI5CvPe6UwXxLRxyATf7mv5L9OduOtaAzMv9cC UmA14cbG/DekKgNUpSfhod5ruhrG9UjP9Pbf6srlztEeBSYC84XlAeLP7PyWkBlJ BBfY4bcF0edKAA== -----END CERTIFICATE-----Generated at Sun Dec 21 19:03:33 2025 by rpki-client