This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft File: dRSDZVs1orhHGF9onI_RYB3McYc.mft (raw, json) Hash identifier: S4m2jIQaLTCCrwuuc9Ax7PUzUkRENTHdi5yDIqbM0rU= Subject key identifier: D5:6D:29:A2:12:6D:E2:D8:2F:07:8A:CF:D1:F9:12:D9:01:95:0D:A5 Authority key identifier: 75:14:83:65:5B:35:A2:B8:47:18:5F:68:9C:8F:D1:60:1D:CC:71:87 Certificate issuer: /CN=751483655b35a2b847185f689c8fd1601dcc7187 Certificate serial: 019B33E8ECAA2C7A31A77D980C6C7973EFC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft Manifest number: 1783 Signing time: Fri 19 Dec 2025 00:01:01 +0000 Manifest this update: Fri 19 Dec 2025 00:01:01 +0000 Manifest next update: Sat 20 Dec 2025 00:01:01 +0000 Files and hashes: 1: dRSDZVs1orhHGF9onI_RYB3McYc.crl (hash: MVMejUqeFFFnaD3QcoKeVfeYYxBeXKrGCCLCUk3YNec=) 2: qzRYbIxueG7BxO2kIyNYDm59o0o.roa (hash: ZxnZOMA5hmEug+cRf8g9nRIfM3tLtcITJFQSj4Zq/Vg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 00:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e8:ec:aa:2c:7a:31:a7:7d:98:0c:6c:79:73:ef:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=751483655b35a2b847185f689c8fd1601dcc7187 Validity Not Before: Dec 19 00:01:01 2025 GMT Not After : Dec 20 00:01:01 2025 GMT Subject: CN=d56d29a2126de2d82f078acfd1f912d901950da5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0a:c1:96:13:92:0d:68:cd:11:49:c3:f1:5f: 51:5a:4d:5a:7f:e1:91:0a:4b:38:00:dc:b4:44:76: 57:30:42:15:3b:73:96:11:43:f5:ba:3e:0e:d5:fe: 47:f9:6b:54:66:a1:1b:6f:b1:09:d2:c4:97:29:b4: 3b:86:19:a6:95:de:56:b3:00:ba:22:e1:4f:6a:35: 6d:0e:aa:62:6c:1d:b5:49:d4:91:45:26:7b:5e:11: 86:38:83:0d:5c:8b:98:55:2c:df:a9:ae:c2:98:f6: 9e:62:93:7b:c2:36:0c:56:7d:1d:ca:5d:04:68:c5: 78:df:8b:92:76:9d:ab:c0:00:6b:57:a3:f4:24:f0: 0f:ce:e1:24:6e:30:5c:a0:6f:ef:55:c3:46:2d:aa: 53:d8:70:98:08:d8:c5:e1:41:94:43:dc:f2:37:3d: b4:ce:ec:93:77:1b:c5:66:34:65:d1:d5:ca:00:d7: 23:4a:40:1a:67:fc:80:96:47:55:6e:3b:6b:18:ba: fa:5e:ad:b4:a9:d8:d8:2a:c1:9f:d9:b1:1e:87:4a: 75:2e:60:93:93:6a:8a:37:27:18:30:53:12:b5:a2: e2:2d:ea:62:87:02:db:56:61:f3:92:3e:74:1b:35: ac:3b:c1:17:2d:42:39:8d:90:e2:f1:c6:56:1d:d4: 35:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:6D:29:A2:12:6D:E2:D8:2F:07:8A:CF:D1:F9:12:D9:01:95:0D:A5 X509v3 Authority Key Identifier: keyid:75:14:83:65:5B:35:A2:B8:47:18:5F:68:9C:8F:D1:60:1D:CC:71:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:06:41:32:c2:7c:ed:4e:7e:b8:37:71:de:94:8e:68:9e:91: 0b:9b:a2:8c:cd:13:18:0d:b8:6e:f8:0e:74:d4:c3:b0:9f:07: fb:1a:72:e0:9f:13:18:32:f1:13:91:b3:00:a4:be:92:64:ab: 7a:04:4f:29:0f:95:a4:91:f4:8b:c9:ed:a8:6a:76:d1:56:0d: 4b:dd:6b:c4:28:40:d6:19:2a:b3:2f:14:85:6d:bf:07:d8:34: 60:0a:ac:3d:a9:6d:44:27:61:87:bd:67:bc:86:11:19:87:41: 2b:d8:18:e7:84:38:80:84:70:85:fa:73:68:a5:74:04:39:8f: ec:6c:4f:12:87:fb:c2:53:fd:57:db:d3:5d:82:55:11:5c:36: 2e:b1:f2:b3:83:6e:8e:1c:90:5a:9c:07:09:6c:9c:03:1b:6c: 50:65:13:b0:92:32:5f:9c:3b:17:f8:eb:d1:6b:c3:9c:18:7d: 68:89:66:9a:6b:91:2e:a9:e9:ff:49:1e:b1:43:7f:2c:87:4a: f2:02:7d:47:bb:4b:e9:3b:8d:66:1a:a1:03:25:c6:1f:84:01: 8f:97:9d:70:b7:b8:82:20:cf:8e:db:5d:cf:af:63:c0:f2:55: 87:04:2d:a3:2d:d4:5f:af:21:f7:70:b0:54:45:f7:f5:76:85: 66:6e:d5:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6OyqLHoxp32YDGx5c+/JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MTQ4MzY1NWIzNWEyYjg0NzE4NWY2ODljOGZkMTYwMWRj YzcxODcwHhcNMjUxMjE5MDAwMTAxWhcNMjUxMjIwMDAwMTAxWjAzMTEwLwYDVQQD EyhkNTZkMjlhMjEyNmRlMmQ4MmYwNzhhY2ZkMWY5MTJkOTAxOTUwZGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwrBlhOSDWjNEUnD8V9RWk1af+GR Cks4ANy0RHZXMEIVO3OWEUP1uj4O1f5H+WtUZqEbb7EJ0sSXKbQ7hhmmld5WswC6 IuFPajVtDqpibB21SdSRRSZ7XhGGOIMNXIuYVSzfqa7CmPaeYpN7wjYMVn0dyl0E aMV434uSdp2rwABrV6P0JPAPzuEkbjBcoG/vVcNGLapT2HCYCNjF4UGUQ9zyNz20 zuyTdxvFZjRl0dXKANcjSkAaZ/yAlkdVbjtrGLr6Xq20qdjYKsGf2bEeh0p1LmCT k2qKNycYMFMStaLiLepihwLbVmHzkj50GzWsO8EXLUI5jZDi8cZWHdQ12wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNVtKaISbeLYLweKz9H5EtkBlQ2lMB8GA1UdIwQY MBaAFHUUg2VbNaK4RxhfaJyP0WAdzHGHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFJTRFpWczFvcmhIR0Y5b25JX1JZQjNNY1ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8xMjc5ZmMtMWIyNy00MDdjLTgxZjQt YTdmYjM2Y2MyZmUzLzEvZFJTRFpWczFvcmhIR0Y5b25JX1JZQjNNY1ljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi8xMjc5ZmMtMWIyNy00MDdjLTgxZjQtYTdmYjM2Y2MyZmUz LzEvZFJTRFpWczFvcmhIR0Y5b25JX1JZQjNNY1ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADgZBMsJ8 7U5+uDdx3pSOaJ6RC5uijM0TGA24bvgOdNTDsJ8H+xpy4J8TGDLxE5GzAKS+kmSr egRPKQ+VpJH0i8ntqGp20VYNS91rxChA1hkqsy8UhW2/B9g0YAqsPaltRCdhh71n vIYRGYdBK9gY54Q4gIRwhfpzaKV0BDmP7GxPEof7wlP9V9vTXYJVEVw2LrHys4Nu jhyQWpwHCWycAxtsUGUTsJIyX5w7F/jr0WvDnBh9aIlmmmuRLqnp/0kesUN/LIdK 8gJ9R7tL6TuNZhqhAyXGH4QBj5edcLe4giDPjttdz69jwPJVhwQtoy3UX68h93Cw VEX39XaFZm7Vnw== -----END CERTIFICATE-----Generated at Fri Dec 19 09:43:17 2025 by rpki-client