This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft File: _Dq1XVdQnL-ueYvXGqojs0RNjlo.mft (raw, json) Hash identifier: vMl/XrydQBKrrCyi/WxfUx1uAglqJGKqPTfUIRFFlfc= Subject key identifier: E0:CA:28:E1:41:87:B3:78:30:93:D2:84:D7:5E:0D:6A:08:A7:1A:A5 Authority key identifier: FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A Certificate issuer: /CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a Certificate serial: 019B4280941BAAF510EEC95DDE3702EAE88D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft Manifest number: 07F2 Signing time: Sun 21 Dec 2025 20:01:21 +0000 Manifest this update: Sun 21 Dec 2025 20:01:21 +0000 Manifest next update: Mon 22 Dec 2025 20:01:21 +0000 Files and hashes: 1: R0kpMB4FLa57YlT9gQTxUhUxTi4.roa (hash: v4gil0pPlLS8kPjffYF1yPMZ2JnOTspISeu5FIjRwfg=) 2: _Dq1XVdQnL-ueYvXGqojs0RNjlo.crl (hash: dLHPjX/95g7KK9Xp6PJrwdflXJbxd1QAiGSxv/SttqA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 20:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:80:94:1b:aa:f5:10:ee:c9:5d:de:37:02:ea:e8:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a Validity Not Before: Dec 21 20:01:21 2025 GMT Not After : Dec 22 20:01:21 2025 GMT Subject: CN=e0ca28e14187b3783093d284d75e0d6a08a71aa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:35:53:f1:3d:37:05:c0:32:2d:72:52:96:40: 46:0c:d7:89:83:8d:ec:5a:20:db:e8:1c:81:2e:2e: 49:54:b7:a8:1f:60:3d:71:5e:50:be:8f:be:8a:de: 88:60:71:ef:cc:b3:59:ec:62:36:70:30:d3:2d:80: f8:31:13:2b:de:98:b0:19:1a:17:d8:11:3b:18:20: e1:22:ed:e9:a9:36:1a:90:24:de:2d:19:98:2f:7a: 4f:9f:77:df:dd:b6:39:0b:cf:37:fa:c4:bb:78:1b: 6b:ae:6b:5f:5e:62:d9:cd:6c:aa:cc:9a:07:df:06: 05:b9:82:84:d1:8d:ec:16:2f:f1:10:22:d5:2b:15: 50:6e:ce:50:c0:51:8f:51:10:b7:17:e3:65:ce:af: 48:a9:0b:77:10:7d:40:91:c1:3b:87:97:a7:4c:70: bc:90:63:8d:31:df:6e:ac:af:6a:91:8b:d1:26:78: 58:a2:68:1d:4e:ea:e4:1e:20:38:2d:75:7d:d1:d2: 6b:27:1d:c2:df:cc:58:1f:00:56:2c:7d:93:38:32: 69:7a:e0:8d:66:e0:df:c7:b1:9a:f6:c9:7b:32:9b: 38:5a:f4:8b:7e:0a:0b:09:13:94:3c:16:4d:86:3b: d9:18:6e:c4:93:ca:1e:9c:2f:90:42:87:e7:f0:94: 04:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:CA:28:E1:41:87:B3:78:30:93:D2:84:D7:5E:0D:6A:08:A7:1A:A5 X509v3 Authority Key Identifier: keyid:FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:c7:dc:68:65:9b:e0:93:9a:6f:8f:40:d9:3d:8f:d6:75:88: 82:fa:ec:55:17:a3:35:d0:56:ac:02:a8:bc:22:1e:04:58:61: eb:fd:13:f9:32:9b:72:2c:bd:42:7b:dc:01:7b:cc:17:09:54: 39:cb:82:5f:85:98:99:15:8e:51:17:6a:54:6a:df:28:60:8d: 19:5f:c4:2d:b7:42:a6:1f:ba:17:b1:dd:7d:a8:59:0a:89:05: 5a:25:8a:9a:05:a0:98:96:86:84:d3:40:4b:99:6d:7d:bc:c1: c0:54:a0:9d:3b:fc:94:a5:8e:08:b7:7f:9e:21:17:84:a1:11: f0:27:c8:23:91:1d:51:92:52:ad:53:f3:84:e0:66:55:26:a1: 26:67:77:2c:3d:5d:51:5a:23:7e:0e:0b:81:97:28:b8:bd:52: 05:a5:1a:72:a3:c1:a0:97:ca:1f:1c:3a:54:f6:4c:d4:e0:86: b6:38:d2:35:c2:74:16:d6:5d:48:18:43:69:8b:9e:84:30:0e: 9a:12:a0:e0:ec:48:ac:fa:50:9e:71:e0:33:85:43:3a:32:db: 5a:6a:36:d7:0b:6c:f7:c3:00:44:05:57:c1:8b:ef:1e:ea:66: 40:ed:31:33:c8:e0:22:28:a0:c6:3e:9e:2e:53:a8:66:eb:e6: c4:1e:06:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCgJQbqvUQ7sld3jcC6uiNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjM2FiNTVkNTc1MDljYmZhZTc5OGJkNzFhYWEyM2IzNDQ0 ZDhlNWEwHhcNMjUxMjIxMjAwMTIxWhcNMjUxMjIyMjAwMTIxWjAzMTEwLwYDVQQD EyhlMGNhMjhlMTQxODdiMzc4MzA5M2QyODRkNzVlMGQ2YTA4YTcxYWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTVT8T03BcAyLXJSlkBGDNeJg43s WiDb6ByBLi5JVLeoH2A9cV5Qvo++it6IYHHvzLNZ7GI2cDDTLYD4MRMr3piwGRoX 2BE7GCDhIu3pqTYakCTeLRmYL3pPn3ff3bY5C883+sS7eBtrrmtfXmLZzWyqzJoH 3wYFuYKE0Y3sFi/xECLVKxVQbs5QwFGPURC3F+Nlzq9IqQt3EH1AkcE7h5enTHC8 kGONMd9urK9qkYvRJnhYomgdTurkHiA4LXV90dJrJx3C38xYHwBWLH2TODJpeuCN ZuDfx7Ga9sl7Mps4WvSLfgoLCROUPBZNhjvZGG7Ek8oenC+QQofn8JQEsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFODKKOFBh7N4MJPShNdeDWoIpxqlMB8GA1UdIwQY MBaAFPw6tV1XUJy/rnmL1xqqI7NETY5aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0RxMVhWZFFuTC11ZVl2WEdxb2pzMFJOamxvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC83MjlkYTktZWIwMy00NTFiLWJmZWYt MGM0NTIxOGU3OTgxLzEvX0RxMVhWZFFuTC11ZVl2WEdxb2pzMFJOamxvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC83MjlkYTktZWIwMy00NTFiLWJmZWYtMGM0NTIxOGU3OTgx LzEvX0RxMVhWZFFuTC11ZVl2WEdxb2pzMFJOamxvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR8fcaGWb 4JOab49A2T2P1nWIgvrsVRejNdBWrAKovCIeBFhh6/0T+TKbciy9QnvcAXvMFwlU OcuCX4WYmRWOURdqVGrfKGCNGV/ELbdCph+6F7HdfahZCokFWiWKmgWgmJaGhNNA S5ltfbzBwFSgnTv8lKWOCLd/niEXhKER8CfII5EdUZJSrVPzhOBmVSahJmd3LD1d UVojfg4LgZcouL1SBaUacqPBoJfKHxw6VPZM1OCGtjjSNcJ0FtZdSBhDaYuehDAO mhKg4OxIrPpQnnHgM4VDOjLbWmo21wts98MARAVXwYvvHupmQO0xM8jgIiigxj6e LlOoZuvmxB4GSA== -----END CERTIFICATE-----Generated at Mon Dec 22 04:39:55 2025 by rpki-client