This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft File: DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft (raw, json) Hash identifier: 0SLjT5ivmrZsMlq02lNMl1MyrXJpjI5F/I5O96J5xCg= Subject key identifier: CD:04:96:04:5C:B0:85:E4:30:6D:FE:20:0E:CA:7C:1B:8D:EF:BE:2A Authority key identifier: 0C:05:35:54:C8:18:67:4C:D5:46:B7:99:DD:44:78:5A:56:4C:56:CB Certificate issuer: /CN=0c053554c818674cd546b799dd44785a564c56cb Certificate serial: 019B4249D9A7DCF8F6225A72D583158B7812 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAU1VMgYZ0zVRreZ3UR4WlZMVss.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft Manifest number: 0D16 Signing time: Sun 21 Dec 2025 19:01:34 +0000 Manifest this update: Sun 21 Dec 2025 19:01:34 +0000 Manifest next update: Mon 22 Dec 2025 19:01:34 +0000 Files and hashes: 1: DAU1VMgYZ0zVRreZ3UR4WlZMVss.crl (hash: 3CdACjsegaZ5seD3avSsqcZ+mZM8JLOWcxPZiOmHzJ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft rsync://rpki.ripe.net/repository/DEFAULT/DAU1VMgYZ0zVRreZ3UR4WlZMVss.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:d9:a7:dc:f8:f6:22:5a:72:d5:83:15:8b:78:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c053554c818674cd546b799dd44785a564c56cb Validity Not Before: Dec 21 19:01:34 2025 GMT Not After : Dec 22 19:01:34 2025 GMT Subject: CN=cd0496045cb085e4306dfe200eca7c1b8defbe2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a2:e4:89:fb:d2:4d:c9:1f:84:b0:08:ca:8d: b9:cb:fb:4a:2b:fe:89:43:94:82:c5:5b:69:ff:de: 97:e3:13:3d:c6:5d:11:d0:85:ee:15:f5:e5:d7:7d: d8:09:4d:e7:5c:c0:f5:8f:15:a2:c3:6f:46:84:48: 99:2f:7e:ad:ef:9b:d9:a3:1f:07:62:bf:8c:8a:a3: 05:99:15:04:93:a1:16:6f:5a:39:31:6a:cd:1d:af: e7:9a:db:49:34:e3:ff:9b:8b:45:87:8d:7d:23:d5: a6:a3:d0:9a:4a:80:d7:2c:26:67:a4:46:4b:ca:77: b5:45:13:d4:f0:9a:16:73:09:3d:5f:55:fc:ac:99: f0:c6:52:39:44:b7:51:2e:d1:4e:f2:a0:47:06:1e: d6:47:89:64:49:85:41:1d:a8:9d:e0:87:42:2c:67: c6:e5:09:d4:8d:c7:25:44:15:03:fe:e8:04:21:77: bb:d5:88:5a:75:1f:71:df:16:a5:ec:2c:17:e0:e7: 07:96:b6:33:07:7e:b6:46:4b:c4:6d:e3:c4:03:ef: f4:5e:dd:ce:b7:5f:4c:5f:39:aa:00:d9:96:63:10: 41:3e:8e:c9:82:18:c0:14:15:57:e1:55:d0:03:ad: 0f:dc:4e:11:9b:25:88:6d:9a:d0:d9:1c:7e:68:c5: 23:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:04:96:04:5C:B0:85:E4:30:6D:FE:20:0E:CA:7C:1B:8D:EF:BE:2A X509v3 Authority Key Identifier: keyid:0C:05:35:54:C8:18:67:4C:D5:46:B7:99:DD:44:78:5A:56:4C:56:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAU1VMgYZ0zVRreZ3UR4WlZMVss.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:47:fb:85:82:dd:d7:1a:f8:a5:d9:c0:a0:09:a8:72:9c:e5: 93:69:e5:21:a5:51:76:71:2f:4d:cb:f1:ac:e8:9a:1d:b0:d1: 46:61:e9:b5:8d:a2:2b:67:16:2e:a9:8c:9f:ea:d0:b8:cd:d2: 57:1d:8e:65:77:2b:31:1e:8f:02:6e:02:44:af:f1:bd:40:9a: 31:6f:c6:9e:3c:d7:ec:b6:a9:2c:c9:6f:8b:0e:4a:a7:46:72: df:f9:5e:a4:9c:33:d2:12:a0:dd:3a:b8:63:27:8d:4f:b4:fc: 1c:14:f2:ef:ec:a1:ba:14:d9:b5:7a:cb:34:6e:a5:a5:b7:ab: d2:37:8a:ad:72:b6:a6:8a:c1:8b:92:49:69:df:2e:53:26:c8: ec:32:76:16:31:7c:4d:b3:49:eb:28:3e:29:21:c7:89:cd:e7: 0e:91:c4:8a:3b:25:85:92:d7:27:1d:18:05:31:94:96:55:91: d3:4a:f0:e2:1d:b2:d0:b6:52:f4:d4:c5:5c:e7:5a:02:74:50: 82:bd:1e:54:2a:84:a7:fd:00:a5:05:c7:eb:a3:37:42:96:fc: 79:6c:08:d4:62:82:e8:e3:79:2e:d3:56:62:66:9c:b1:8b:3e: fb:d6:51:1a:21:a2:36:79:95:ba:0f:fc:6d:45:4b:98:2e:7d: 79:4e:89:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSdmn3Pj2Ilpy1YMVi3gSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMDUzNTU0YzgxODY3NGNkNTQ2Yjc5OWRkNDQ3ODVhNTY0 YzU2Y2IwHhcNMjUxMjIxMTkwMTM0WhcNMjUxMjIyMTkwMTM0WjAzMTEwLwYDVQQD EyhjZDA0OTYwNDVjYjA4NWU0MzA2ZGZlMjAwZWNhN2MxYjhkZWZiZTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKLkifvSTckfhLAIyo25y/tKK/6J Q5SCxVtp/96X4xM9xl0R0IXuFfXl133YCU3nXMD1jxWiw29GhEiZL36t75vZox8H Yr+MiqMFmRUEk6EWb1o5MWrNHa/nmttJNOP/m4tFh419I9Wmo9CaSoDXLCZnpEZL yne1RRPU8JoWcwk9X1X8rJnwxlI5RLdRLtFO8qBHBh7WR4lkSYVBHaid4IdCLGfG 5QnUjcclRBUD/ugEIXe71YhadR9x3xal7CwX4OcHlrYzB362RkvEbePEA+/0Xt3O t19MXzmqANmWYxBBPo7JghjAFBVX4VXQA60P3E4RmyWIbZrQ2Rx+aMUjXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM0ElgRcsIXkMG3+IA7KfBuN774qMB8GA1UdIwQY MBaAFAwFNVTIGGdM1Ua3md1EeFpWTFbLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREFVMVZNZ1laMHpWUnJlWjNVUjRXbFpNVnNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy80NjBmOGEtNmMzOS00NjIyLWI0MGEt YmY5Yzc5MTQ5NDYyLzEvREFVMVZNZ1laMHpWUnJlWjNVUjRXbFpNVnNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy80NjBmOGEtNmMzOS00NjIyLWI0MGEtYmY5Yzc5MTQ5NDYy LzEvREFVMVZNZ1laMHpWUnJlWjNVUjRXbFpNVnNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhkf7hYLd 1xr4pdnAoAmocpzlk2nlIaVRdnEvTcvxrOiaHbDRRmHptY2iK2cWLqmMn+rQuM3S Vx2OZXcrMR6PAm4CRK/xvUCaMW/GnjzX7LapLMlviw5Kp0Zy3/lepJwz0hKg3Tq4 YyeNT7T8HBTy7+yhuhTZtXrLNG6lpber0jeKrXK2porBi5JJad8uUybI7DJ2FjF8 TbNJ6yg+KSHHic3nDpHEijslhZLXJx0YBTGUllWR00rw4h2y0LZS9NTFXOdaAnRQ gr0eVCqEp/0ApQXH66M3Qpb8eWwI1GKC6ON5LtNWYmacsYs++9ZRGiGiNnmVug/8 bUVLmC59eU6JPQ== -----END CERTIFICATE-----Generated at Mon Dec 22 00:06:25 2025 by rpki-client