This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.mft File: danDqBE5lKqnp7EhGTd3kbIB8Gw.mft (raw, json) Hash identifier: fCKkK2ByeUdT8v0w9CeHLlffCZRShoafxby6JvHDcdk= Subject key identifier: D9:20:C8:17:B2:F1:12:AF:79:2D:FF:3E:CD:6B:4A:7A:D1:E9:9F:FC Authority key identifier: 75:A9:C3:A8:11:39:94:AA:A7:A7:B1:21:19:37:77:91:B2:01:F0:6C Certificate issuer: /CN=75a9c3a8113994aaa7a7b12119377791b201f06c Certificate serial: 019B4DE08E96CE2FD6BA2FE3FBE2D7328C79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/danDqBE5lKqnp7EhGTd3kbIB8Gw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.mft Manifest number: 0462 Signing time: Wed 24 Dec 2025 01:02:00 +0000 Manifest this update: Wed 24 Dec 2025 01:02:00 +0000 Manifest next update: Thu 25 Dec 2025 01:02:00 +0000 Files and hashes: 1: danDqBE5lKqnp7EhGTd3kbIB8Gw.crl (hash: /fjD3PT/dRnBp6WORerdQXZdL/viReD2kgk1F6sO8y0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.mft rsync://rpki.ripe.net/repository/DEFAULT/danDqBE5lKqnp7EhGTd3kbIB8Gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:e0:8e:96:ce:2f:d6:ba:2f:e3:fb:e2:d7:32:8c:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75a9c3a8113994aaa7a7b12119377791b201f06c Validity Not Before: Dec 24 01:02:00 2025 GMT Not After : Dec 25 01:02:00 2025 GMT Subject: CN=d920c817b2f112af792dff3ecd6b4a7ad1e99ffc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:73:cb:20:db:87:a6:3c:bb:35:8b:8e:a7:78: a9:82:de:c5:74:62:a8:18:71:60:58:48:f1:77:f8: 24:5c:f4:0b:59:84:3b:39:56:f9:99:bc:ea:51:01: 5f:24:fe:41:13:2f:ea:15:7a:66:2a:56:84:32:92: 2d:3e:c9:56:35:0c:c3:bb:48:c6:0d:3e:ee:15:af: a7:23:6c:66:2d:25:2d:88:ee:15:c2:94:59:f1:49: 3c:17:00:cc:f8:1f:6a:01:b2:b5:5c:a6:dd:9c:40: 6c:df:cb:f6:0d:01:09:01:d2:8c:06:4c:04:26:6b: dd:f2:b0:57:97:84:e1:dc:8d:3f:25:88:25:73:4c: 09:6d:82:f0:30:04:2e:16:5f:26:5e:0b:23:78:b2: 55:8d:9c:7f:2b:45:11:0b:82:0a:51:36:c3:fe:d1: 0f:70:89:33:23:81:7e:77:bd:27:da:ec:ff:1c:20: de:3c:f2:45:7e:8f:1f:98:80:d4:95:c9:af:49:9e: 02:df:75:59:a7:4c:cd:42:33:83:8f:a2:cc:a8:4d: f7:a2:f4:92:bd:98:08:86:45:31:b5:52:5c:68:ed: 6b:1b:7f:51:4c:4c:0a:fb:99:30:4b:43:0e:4d:e7: 35:cc:7b:1a:40:f4:f2:10:f4:12:2a:00:1a:8b:23: bc:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:20:C8:17:B2:F1:12:AF:79:2D:FF:3E:CD:6B:4A:7A:D1:E9:9F:FC X509v3 Authority Key Identifier: keyid:75:A9:C3:A8:11:39:94:AA:A7:A7:B1:21:19:37:77:91:B2:01:F0:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/danDqBE5lKqnp7EhGTd3kbIB8Gw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:29:5b:f0:91:bf:ad:9e:66:2b:7a:c5:bf:a8:39:16:44:96: 69:c9:27:ce:45:9f:cf:b9:ec:3e:24:2c:69:41:31:a7:c1:69: c0:3a:6d:ef:3d:98:20:36:b7:49:49:26:5d:c1:96:f9:bd:cf: c5:d7:2f:65:89:ab:71:ad:24:2a:78:dc:aa:cf:e8:ae:5e:dc: 5c:73:50:fd:be:84:1c:be:ff:c7:c4:9b:da:f9:84:0b:84:cc: ed:69:40:ce:32:fc:86:57:72:ce:c7:47:41:b2:72:57:32:4e: fa:75:e0:bb:1e:56:c5:a3:00:96:bf:ab:21:55:03:14:d3:2a: 4c:db:60:13:68:d3:29:12:8c:1d:d5:77:a5:9a:0c:9a:ec:ab: fe:69:39:fd:f6:50:4a:e9:09:af:3c:26:b0:06:e9:1a:6d:29: 1a:9e:49:9c:f3:27:f3:bd:fa:ed:08:3c:78:1c:80:0e:a3:8f: dc:e8:cd:e5:e0:45:fc:99:ac:36:9f:b6:2a:88:4a:50:60:df: f9:a2:44:af:f6:6c:cb:36:cf:35:0c:bc:7b:bd:d1:b7:75:94: 9c:b8:b6:ea:7a:c1:ba:ac:90:bf:f6:9b:29:26:8d:cc:27:7d: ba:64:a8:37:ae:5c:6d:79:f4:cc:e9:28:ab:e2:46:5a:88:47: 41:42:22:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN4I6Wzi/Wui/j++LXMox5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1YTljM2E4MTEzOTk0YWFhN2E3YjEyMTE5Mzc3NzkxYjIw MWYwNmMwHhcNMjUxMjI0MDEwMjAwWhcNMjUxMjI1MDEwMjAwWjAzMTEwLwYDVQQD EyhkOTIwYzgxN2IyZjExMmFmNzkyZGZmM2VjZDZiNGE3YWQxZTk5ZmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXPLINuHpjy7NYuOp3ipgt7FdGKo GHFgWEjxd/gkXPQLWYQ7OVb5mbzqUQFfJP5BEy/qFXpmKlaEMpItPslWNQzDu0jG DT7uFa+nI2xmLSUtiO4VwpRZ8Uk8FwDM+B9qAbK1XKbdnEBs38v2DQEJAdKMBkwE Jmvd8rBXl4Th3I0/JYglc0wJbYLwMAQuFl8mXgsjeLJVjZx/K0URC4IKUTbD/tEP cIkzI4F+d70n2uz/HCDePPJFfo8fmIDUlcmvSZ4C33VZp0zNQjODj6LMqE33ovSS vZgIhkUxtVJcaO1rG39RTEwK+5kwS0MOTec1zHsaQPTyEPQSKgAaiyO8iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNkgyBey8RKveS3/Ps1rSnrR6Z/8MB8GA1UdIwQY MBaAFHWpw6gROZSqp6exIRk3d5GyAfBsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGFuRHFCRTVsS3FucDdFaEdUZDNrYklCOEd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC84MjAzZDktN2UzZi00MGFiLWE2ZTAt MDg1YmM3N2JjYzFjLzEvZGFuRHFCRTVsS3FucDdFaEdUZDNrYklCOEd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC84MjAzZDktN2UzZi00MGFiLWE2ZTAtMDg1YmM3N2JjYzFj LzEvZGFuRHFCRTVsS3FucDdFaEdUZDNrYklCOEd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlClb8JG/ rZ5mK3rFv6g5FkSWacknzkWfz7nsPiQsaUExp8FpwDpt7z2YIDa3SUkmXcGW+b3P xdcvZYmrca0kKnjcqs/orl7cXHNQ/b6EHL7/x8Sb2vmEC4TM7WlAzjL8hldyzsdH QbJyVzJO+nXgux5WxaMAlr+rIVUDFNMqTNtgE2jTKRKMHdV3pZoMmuyr/mk5/fZQ SukJrzwmsAbpGm0pGp5JnPMn87367Qg8eByADqOP3OjN5eBF/JmsNp+2KohKUGDf +aJEr/ZsyzbPNQy8e73Rt3WUnLi26nrBuqyQv/abKSaNzCd9umSoN65cbXn0zOko q+JGWohHQUIiCQ== -----END CERTIFICATE-----Generated at Wed Dec 24 09:22:54 2025 by rpki-client