This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.mft File: dCMNFC7sf2qZsNtAlvk6BCBIP-Y.mft (raw, json) Hash identifier: y+qCc3z8nKHESTCBIwEsZT5o1QuhS0/V6Kwttm/VSQc= Subject key identifier: 96:31:CB:02:32:B7:D6:93:E6:CF:74:50:D6:D1:13:0D:C3:81:5B:6D Authority key identifier: 74:23:0D:14:2E:EC:7F:6A:99:B0:DB:40:96:F9:3A:04:20:48:3F:E6 Certificate issuer: /CN=74230d142eec7f6a99b0db4096f93a0420483fe6 Certificate serial: 019B766E73CCAEF1217BFC54E9EF3CD5B85B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.mft Manifest number: 099B Signing time: Wed 31 Dec 2025 22:01:48 +0000 Manifest this update: Wed 31 Dec 2025 22:01:48 +0000 Manifest next update: Thu 01 Jan 2026 22:01:48 +0000 Files and hashes: 1: dCMNFC7sf2qZsNtAlvk6BCBIP-Y.crl (hash: E8Wo14FFii1VsEmTE3l/02d6F92vLM/JEH6Xsgy3V0w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.crl rsync://rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.mft rsync://rpki.ripe.net/repository/DEFAULT/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 22:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:6e:73:cc:ae:f1:21:7b:fc:54:e9:ef:3c:d5:b8:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74230d142eec7f6a99b0db4096f93a0420483fe6 Validity Not Before: Dec 31 22:01:48 2025 GMT Not After : Jan 1 22:01:48 2026 GMT Subject: CN=9631cb0232b7d693e6cf7450d6d1130dc3815b6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e5:bc:c5:63:05:19:2b:bc:84:fb:28:64:f3: 41:cc:fb:5d:e6:8c:71:4c:41:9d:27:55:a6:50:60: 52:c8:a1:94:1e:23:3e:df:14:d0:55:ab:3a:0c:1a: 2a:5b:bf:2c:a9:5a:eb:7f:20:a1:04:77:0c:90:82: da:34:b8:d7:3f:03:f4:8f:c8:15:43:8e:6f:e5:f9: cd:78:71:69:74:00:48:5f:d5:a3:16:da:d4:df:6a: a2:c5:d1:c5:47:b0:c4:51:d8:00:e8:37:c2:4f:53: 6c:2c:24:11:8a:c5:cf:fa:af:5e:dc:22:b2:c4:bb: 39:11:2a:5f:2b:1a:26:23:bd:6b:60:aa:a4:87:18: 7d:04:69:06:22:9d:fe:59:c7:f2:c3:9a:5f:cb:a0: 00:b8:a8:a6:d2:7d:07:8f:da:a6:d3:c7:80:31:b4: d8:77:05:5c:1b:84:b3:36:d4:6f:8c:53:d3:11:32: 07:33:f5:54:a1:c6:11:44:04:39:c2:79:2f:ad:07: b5:9a:26:b3:fb:ef:5e:a4:bd:62:f2:b1:8c:aa:09: 18:b5:d3:c7:82:b3:5b:7c:a8:93:62:fa:fd:57:6d: d8:cd:98:95:a5:91:df:a1:d2:2a:e9:ee:19:82:5e: bf:6d:52:90:ec:c5:7a:26:23:9b:bd:2c:eb:ad:07: ce:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:31:CB:02:32:B7:D6:93:E6:CF:74:50:D6:D1:13:0D:C3:81:5B:6D X509v3 Authority Key Identifier: keyid:74:23:0D:14:2E:EC:7F:6A:99:B0:DB:40:96:F9:3A:04:20:48:3F:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/dCMNFC7sf2qZsNtAlvk6BCBIP-Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:cc:ef:52:35:e8:ef:a6:33:44:b6:ad:76:f8:bb:08:a5:16: 9b:5e:f9:37:6a:ad:5e:e1:bf:f4:e7:8c:75:49:8b:d0:88:ca: 0e:ec:82:91:4e:0b:9a:86:fa:7b:e8:0b:f0:38:da:1e:c0:a1: 44:12:f4:a3:20:47:3b:73:c2:16:f1:e2:26:69:da:c6:da:00: 9b:5e:a2:c7:c5:86:8f:c4:bb:69:5c:c9:9b:2b:9c:0a:6e:98: b4:9c:bb:3f:18:fa:94:7b:0e:81:47:10:70:35:20:21:14:17: ba:e7:37:0c:30:89:04:ed:ea:c7:33:05:dd:e5:1a:89:78:4d: ae:0e:55:30:6f:78:5b:96:d4:2f:6d:48:e1:4d:5e:3f:5c:f3: 67:1d:86:16:74:ba:8c:71:0f:fe:65:a4:27:87:89:79:ae:32: a4:d2:54:a1:19:34:d6:1b:db:63:28:3a:18:28:f1:b1:d0:4e: 48:5f:6f:d7:46:ba:58:48:0b:d0:40:08:5f:67:8d:f6:78:4b: 23:8b:78:03:79:45:6e:a0:94:09:54:84:05:2c:cd:0a:ae:2f: e4:1d:4c:47:c8:f5:5c:88:da:d5:61:d6:2c:77:f6:cd:fd:06: 7a:74:7c:01:2e:6f:c9:e5:4e:ee:f2:af:2c:c4:00:64:c2:4d: 76:cd:0c:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt2bnPMrvEhe/xU6e881bhbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0MjMwZDE0MmVlYzdmNmE5OWIwZGI0MDk2ZjkzYTA0MjA0 ODNmZTYwHhcNMjUxMjMxMjIwMTQ4WhcNMjYwMTAxMjIwMTQ4WjAzMTEwLwYDVQQD Eyg5NjMxY2IwMjMyYjdkNjkzZTZjZjc0NTBkNmQxMTMwZGMzODE1YjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueW8xWMFGSu8hPsoZPNBzPtd5oxx TEGdJ1WmUGBSyKGUHiM+3xTQVas6DBoqW78sqVrrfyChBHcMkILaNLjXPwP0j8gV Q45v5fnNeHFpdABIX9WjFtrU32qixdHFR7DEUdgA6DfCT1NsLCQRisXP+q9e3CKy xLs5ESpfKxomI71rYKqkhxh9BGkGIp3+Wcfyw5pfy6AAuKim0n0Hj9qm08eAMbTY dwVcG4SzNtRvjFPTETIHM/VUocYRRAQ5wnkvrQe1miaz++9epL1i8rGMqgkYtdPH grNbfKiTYvr9V23YzZiVpZHfodIq6e4Zgl6/bVKQ7MV6JiObvSzrrQfO4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJYxywIyt9aT5s90UNbREw3DgVttMB8GA1UdIwQY MBaAFHQjDRQu7H9qmbDbQJb5OgQgSD/mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZENNTkZDN3NmMnFac050QWx2azZCQ0JJUC1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82OTc1NjQtMDAyNS00ZjkyLThkZmQt Y2UxYzAzNDAwZDRkLzEvZENNTkZDN3NmMnFac050QWx2azZCQ0JJUC1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC82OTc1NjQtMDAyNS00ZjkyLThkZmQtY2UxYzAzNDAwZDRk LzEvZENNTkZDN3NmMnFac050QWx2azZCQ0JJUC1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjszvUjXo 76YzRLatdvi7CKUWm175N2qtXuG/9OeMdUmL0IjKDuyCkU4Lmob6e+gL8DjaHsCh RBL0oyBHO3PCFvHiJmnaxtoAm16ix8WGj8S7aVzJmyucCm6YtJy7Pxj6lHsOgUcQ cDUgIRQXuuc3DDCJBO3qxzMF3eUaiXhNrg5VMG94W5bUL21I4U1eP1zzZx2GFnS6 jHEP/mWkJ4eJea4ypNJUoRk01hvbYyg6GCjxsdBOSF9v10a6WEgL0EAIX2eN9nhL I4t4A3lFbqCUCVSEBSzNCq4v5B1MR8j1XIja1WHWLHf2zf0GenR8AS5vyeVO7vKv LMQAZMJNds0MYA== -----END CERTIFICATE-----Generated at Thu Jan 1 02:50:35 2026 by rpki-client