This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.mft File: dpcDbZO0rGcPD_xakM6ral-LwpU.mft (raw, json) Hash identifier: ia13aO9beHcvjAmYyPZnw3wqWl59/tCcoG2jwfDM1vg= Subject key identifier: 73:52:D4:CB:66:89:0F:39:65:2A:E6:DC:6E:19:81:B3:6D:B3:17:3A Authority key identifier: 76:97:03:6D:93:B4:AC:67:0F:0F:FC:5A:90:CE:AB:6A:5F:8B:C2:95 Certificate issuer: /CN=7697036d93b4ac670f0ffc5a90ceab6a5f8bc295 Certificate serial: 019B4FCE3C4D80631ED45D3DE884356DF015 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dpcDbZO0rGcPD_xakM6ral-LwpU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.mft Manifest number: 0FB0 Signing time: Wed 24 Dec 2025 10:01:14 +0000 Manifest this update: Wed 24 Dec 2025 10:01:14 +0000 Manifest next update: Thu 25 Dec 2025 10:01:14 +0000 Files and hashes: 1: dpcDbZO0rGcPD_xakM6ral-LwpU.crl (hash: 25B3B2AzbJE7BSHTLEb1DZdLxGyNAP0ppT7OymUFtxk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.mft rsync://rpki.ripe.net/repository/DEFAULT/dpcDbZO0rGcPD_xakM6ral-LwpU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:ce:3c:4d:80:63:1e:d4:5d:3d:e8:84:35:6d:f0:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7697036d93b4ac670f0ffc5a90ceab6a5f8bc295 Validity Not Before: Dec 24 10:01:14 2025 GMT Not After : Dec 25 10:01:14 2025 GMT Subject: CN=7352d4cb66890f39652ae6dc6e1981b36db3173a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e8:c0:6f:ba:fa:33:8a:f3:94:de:7e:74:e8: 9e:14:91:c1:95:a8:60:28:d2:75:9a:7f:7c:22:d8: 19:6c:20:5a:d4:e5:80:8b:90:8d:e9:f3:19:82:46: f3:50:6c:27:f6:f9:d4:03:59:3b:88:09:71:d7:49: 82:ea:3a:83:d5:04:81:01:1f:16:61:cf:4e:5c:fe: 20:2f:43:19:2f:9f:88:01:26:ff:ee:28:ff:f2:17: b4:74:c4:af:63:e9:dd:e6:93:21:d4:45:17:b9:0e: 0e:3e:27:3f:b1:a9:53:d4:18:18:93:f4:4c:31:60: 4c:71:31:33:8b:84:19:07:e9:cd:70:ea:a4:ef:e7: c5:87:4e:ff:43:49:e3:e8:5b:b6:74:4e:ee:c3:a0: 7c:75:85:a7:f8:a3:b0:07:c8:49:25:10:f0:f5:7b: a9:fb:56:07:2b:8b:e5:27:5b:f3:4c:c6:3c:ed:c4: d0:5c:6a:86:1a:ff:89:d1:87:8b:12:76:0c:5c:e1: 6e:2c:00:7d:9d:25:f3:28:eb:98:b2:d6:2a:f0:3c: 77:a4:c5:7c:19:59:8b:4a:7e:3e:94:10:89:5c:75: 88:bb:c7:26:24:36:66:37:20:f4:8a:94:dd:07:5e: f3:1b:12:bc:49:a8:70:3f:67:09:4e:84:a8:12:32: b7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:52:D4:CB:66:89:0F:39:65:2A:E6:DC:6E:19:81:B3:6D:B3:17:3A X509v3 Authority Key Identifier: keyid:76:97:03:6D:93:B4:AC:67:0F:0F:FC:5A:90:CE:AB:6A:5F:8B:C2:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpcDbZO0rGcPD_xakM6ral-LwpU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2e805c-bced-4f54-b320-f9de59c37291/1/dpcDbZO0rGcPD_xakM6ral-LwpU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:ad:c4:1e:f9:ef:39:c5:ed:a4:01:b4:1d:b4:90:59:2f:16: 0c:d4:9e:79:47:5d:df:4d:a8:19:e8:e6:de:4d:de:6e:f0:78: bd:1c:f3:5e:4e:df:f3:4b:1e:fc:a7:4f:c3:16:34:52:0a:1b: be:2c:2d:c0:31:61:95:4b:d5:b5:3c:68:16:e9:f5:8d:94:53: e6:7d:0e:27:11:37:de:07:9a:f2:c5:8e:4f:33:c2:6e:35:df: d5:72:16:1e:a3:f1:b1:76:fe:45:3f:db:3a:d0:37:15:e5:f9: cc:94:4b:64:6a:0a:8d:4c:01:90:c1:89:94:b1:98:6b:db:d0: ad:44:81:5d:78:8d:82:ab:38:3e:f0:f5:27:ce:19:0e:0d:ac: be:5a:45:ea:fc:03:a0:1e:09:a8:ef:c5:39:4a:fb:f6:eb:e3: 88:dc:e4:4c:b8:c4:0c:d3:bf:00:c0:06:9e:4f:97:39:ae:61: 86:f9:fe:8e:c5:32:60:01:82:74:be:e8:16:9d:5b:1e:cf:c9: f1:06:45:c9:97:09:9c:58:5b:ba:c2:e1:6c:f1:3a:c7:08:7a: 4f:39:f5:e3:72:d2:80:25:0c:78:11:8f:20:59:c5:92:f0:54: f4:10:b8:1c:9a:be:09:c2:3b:dd:ce:99:47:21:d5:42:b4:75: a1:6f:3e:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPzjxNgGMe1F096IQ1bfAVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2OTcwMzZkOTNiNGFjNjcwZjBmZmM1YTkwY2VhYjZhNWY4 YmMyOTUwHhcNMjUxMjI0MTAwMTE0WhcNMjUxMjI1MTAwMTE0WjAzMTEwLwYDVQQD Eyg3MzUyZDRjYjY2ODkwZjM5NjUyYWU2ZGM2ZTE5ODFiMzZkYjMxNzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlejAb7r6M4rzlN5+dOieFJHBlahg KNJ1mn98ItgZbCBa1OWAi5CN6fMZgkbzUGwn9vnUA1k7iAlx10mC6jqD1QSBAR8W Yc9OXP4gL0MZL5+IASb/7ij/8he0dMSvY+nd5pMh1EUXuQ4OPic/salT1BgYk/RM MWBMcTEzi4QZB+nNcOqk7+fFh07/Q0nj6Fu2dE7uw6B8dYWn+KOwB8hJJRDw9Xup +1YHK4vlJ1vzTMY87cTQXGqGGv+J0YeLEnYMXOFuLAB9nSXzKOuYstYq8Dx3pMV8 GVmLSn4+lBCJXHWIu8cmJDZmNyD0ipTdB17zGxK8SahwP2cJToSoEjK3kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHNS1MtmiQ85ZSrm3G4ZgbNtsxc6MB8GA1UdIwQY MBaAFHaXA22TtKxnDw/8WpDOq2pfi8KVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHBjRGJaTzByR2NQRF94YWtNNnJhbC1Md3BVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8yZTgwNWMtYmNlZC00ZjU0LWIzMjAt ZjlkZTU5YzM3MjkxLzEvZHBjRGJaTzByR2NQRF94YWtNNnJhbC1Md3BVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8yZTgwNWMtYmNlZC00ZjU0LWIzMjAtZjlkZTU5YzM3Mjkx LzEvZHBjRGJaTzByR2NQRF94YWtNNnJhbC1Md3BVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAca3EHvnv OcXtpAG0HbSQWS8WDNSeeUdd302oGejm3k3ebvB4vRzzXk7f80se/KdPwxY0Ugob viwtwDFhlUvVtTxoFun1jZRT5n0OJxE33gea8sWOTzPCbjXf1XIWHqPxsXb+RT/b OtA3FeX5zJRLZGoKjUwBkMGJlLGYa9vQrUSBXXiNgqs4PvD1J84ZDg2svlpF6vwD oB4JqO/FOUr79uvjiNzkTLjEDNO/AMAGnk+XOa5hhvn+jsUyYAGCdL7oFp1bHs/J 8QZFyZcJnFhbusLhbPE6xwh6Tzn143LSgCUMeBGPIFnFkvBU9BC4HJq+CcI73c6Z RyHVQrR1oW8+Xg== -----END CERTIFICATE-----Generated at Wed Dec 24 12:02:13 2025 by rpki-client