This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft File: D2vaHb-nfHTacoBe7lQY0_DMU50.mft (raw, json) Hash identifier: iIa3zb441C44t88x9B3lJwOMrY1OLWvdWE4p0xtt7Wk= Subject key identifier: 66:A8:B0:0A:4C:A7:F6:B5:F2:41:0A:B5:69:17:07:60:EA:FD:02:96 Authority key identifier: 0F:6B:DA:1D:BF:A7:7C:74:DA:72:80:5E:EE:54:18:D3:F0:CC:53:9D Certificate issuer: /CN=0f6bda1dbfa77c74da72805eee5418d3f0cc539d Certificate serial: 019B41A4C2BA82B1E0379B41D24F80F572FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft Manifest number: 14AE Signing time: Sun 21 Dec 2025 16:01:15 +0000 Manifest this update: Sun 21 Dec 2025 16:01:15 +0000 Manifest next update: Mon 22 Dec 2025 16:01:15 +0000 Files and hashes: 1: D2vaHb-nfHTacoBe7lQY0_DMU50.crl (hash: 8hpWMj9OP7+kf+KJrmn16Xzh1fjEbYbRumamMXoG06w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:c2:ba:82:b1:e0:37:9b:41:d2:4f:80:f5:72:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f6bda1dbfa77c74da72805eee5418d3f0cc539d Validity Not Before: Dec 21 16:01:15 2025 GMT Not After : Dec 22 16:01:15 2025 GMT Subject: CN=66a8b00a4ca7f6b5f2410ab569170760eafd0296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4c:54:a4:4a:46:9f:0a:fb:8a:df:43:95:db: 24:72:55:30:1b:ff:69:d5:07:90:87:a0:d1:0b:c6: bf:b9:fe:71:8d:dd:50:57:b4:d8:4b:e6:9c:06:0e: ff:88:7d:7b:7f:73:9c:1b:4b:89:3f:7e:73:30:69: c7:b6:9b:ec:87:0e:d9:70:34:98:f0:62:af:96:a9: 5f:0d:66:1d:a4:6d:cf:0c:90:e9:67:23:36:8a:4c: e8:8f:24:e8:04:08:3a:92:c5:2b:35:78:c1:e7:30: bd:4a:64:e2:fe:3b:7e:f8:49:d5:30:08:25:a4:c3: 06:f9:c6:c6:07:17:18:88:82:3f:52:e3:b3:bd:16: 8a:b4:20:17:4f:a9:7b:d4:f1:1e:51:66:d3:67:4d: 4e:42:b1:4f:9b:a7:66:54:b5:0f:59:5d:53:78:bd: 2c:32:b9:43:75:02:7e:0e:b9:9f:6a:8c:52:5c:ee: 23:fd:24:a2:a1:cf:b9:bf:22:f5:76:ba:41:ab:02: ac:6d:05:d5:8e:ee:a3:45:42:d4:a5:98:b9:ef:dc: f5:f9:54:da:d3:ab:5d:22:95:d4:f9:87:65:70:81: 0d:f4:10:73:1d:ad:3f:fa:cc:79:e1:a6:52:af:0c: da:ca:a4:11:f1:97:be:64:7d:1c:de:1d:f8:4f:b8: 10:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A8:B0:0A:4C:A7:F6:B5:F2:41:0A:B5:69:17:07:60:EA:FD:02:96 X509v3 Authority Key Identifier: keyid:0F:6B:DA:1D:BF:A7:7C:74:DA:72:80:5E:EE:54:18:D3:F0:CC:53:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:e5:ed:e4:57:89:54:71:fb:8e:f1:46:39:5c:34:57:6d:96: 14:97:22:77:48:fd:38:b4:f7:f5:45:b6:0d:72:4e:ca:30:1a: 1e:25:20:f5:d2:88:95:c3:b3:a8:6c:62:f0:b4:86:32:25:90: 5b:f7:77:6a:33:3c:e3:ac:0f:92:a0:f9:8c:53:ff:10:95:c4: c4:9a:bf:fe:fe:12:93:97:38:6d:35:81:0c:5d:27:f0:cb:5d: 15:f5:7d:83:c4:2b:72:08:86:ca:fc:38:01:e2:11:53:04:17: c9:32:c1:e5:7f:96:0b:b4:1c:57:17:b0:a5:31:3c:3e:88:a5: 5a:a9:0d:e9:12:e7:76:cf:67:9f:3d:a5:e2:df:f3:93:5b:b8: 9f:64:a8:9f:c2:30:23:e1:e5:4d:56:93:23:75:54:4c:f7:2b: 13:87:ff:4a:b0:14:0e:9d:6e:d9:6b:36:21:d0:ec:82:9f:48: 70:22:65:04:99:37:85:f7:d7:72:5d:a7:ca:10:f5:42:36:ad: 61:a0:74:c5:6f:80:64:ed:cf:16:bd:c9:83:b1:eb:ff:91:38: b1:d1:80:b6:b6:ea:2a:6c:68:12:9c:43:12:f5:77:11:a9:e0: 89:89:0a:8d:8a:f9:08:4b:4f:20:81:f7:ab:dd:35:32:40:32: 41:2e:46:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpMK6grHgN5tB0k+A9XL9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNmJkYTFkYmZhNzdjNzRkYTcyODA1ZWVlNTQxOGQzZjBj YzUzOWQwHhcNMjUxMjIxMTYwMTE1WhcNMjUxMjIyMTYwMTE1WjAzMTEwLwYDVQQD Eyg2NmE4YjAwYTRjYTdmNmI1ZjI0MTBhYjU2OTE3MDc2MGVhZmQwMjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUxUpEpGnwr7it9DldskclUwG/9p 1QeQh6DRC8a/uf5xjd1QV7TYS+acBg7/iH17f3OcG0uJP35zMGnHtpvshw7ZcDSY 8GKvlqlfDWYdpG3PDJDpZyM2ikzojyToBAg6ksUrNXjB5zC9SmTi/jt++EnVMAgl pMMG+cbGBxcYiII/UuOzvRaKtCAXT6l71PEeUWbTZ01OQrFPm6dmVLUPWV1TeL0s MrlDdQJ+DrmfaoxSXO4j/SSioc+5vyL1drpBqwKsbQXVju6jRULUpZi579z1+VTa 06tdIpXU+YdlcIEN9BBzHa0/+sx54aZSrwzayqQR8Ze+ZH0c3h34T7gQdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGaosApMp/a18kEKtWkXB2Dq/QKWMB8GA1UdIwQY MBaAFA9r2h2/p3x02nKAXu5UGNPwzFOdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDJ2YUhiLW5mSFRhY29CZTdsUVkwX0RNVTUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9mZmFjMjQtN2FjNS00NWE2LWE5NDYt ZTA4MTJkZjEyMjFmLzEvRDJ2YUhiLW5mSFRhY29CZTdsUVkwX0RNVTUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9mZmFjMjQtN2FjNS00NWE2LWE5NDYtZTA4MTJkZjEyMjFm LzEvRDJ2YUhiLW5mSFRhY29CZTdsUVkwX0RNVTUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApOXt5FeJ VHH7jvFGOVw0V22WFJcid0j9OLT39UW2DXJOyjAaHiUg9dKIlcOzqGxi8LSGMiWQ W/d3ajM846wPkqD5jFP/EJXExJq//v4Sk5c4bTWBDF0n8MtdFfV9g8QrcgiGyvw4 AeIRUwQXyTLB5X+WC7QcVxewpTE8PoilWqkN6RLnds9nnz2l4t/zk1u4n2Son8Iw I+HlTVaTI3VUTPcrE4f/SrAUDp1u2Ws2IdDsgp9IcCJlBJk3hffXcl2nyhD1Qjat YaB0xW+AZO3PFr3Jg7Hr/5E4sdGAtrbqKmxoEpxDEvV3EangiYkKjYr5CEtPIIH3 q901MkAyQS5GiQ== -----END CERTIFICATE-----Generated at Sun Dec 21 22:28:32 2025 by rpki-client