This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.mft File: danDqBE5lKqnp7EhGTd3kbIB8Gw.mft (raw, json) Hash identifier: EvTrkCmgiKEdparJPS5YupyWUWLtpAfo31Jpt2fBYJU= Subject key identifier: 8F:E9:C5:92:26:23:77:9D:07:7C:75:02:F2:90:7D:96:FD:EF:39:80 Authority key identifier: 75:A9:C3:A8:11:39:94:AA:A7:A7:B1:21:19:37:77:91:B2:01:F0:6C Certificate issuer: /CN=75a9c3a8113994aaa7a7b12119377791b201f06c Certificate serial: 019B32D7B83378F6D80AC3AE08EFD778EC81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/danDqBE5lKqnp7EhGTd3kbIB8Gw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.mft Manifest number: 0454 Signing time: Thu 18 Dec 2025 19:02:36 +0000 Manifest this update: Thu 18 Dec 2025 19:02:36 +0000 Manifest next update: Fri 19 Dec 2025 19:02:36 +0000 Files and hashes: 1: danDqBE5lKqnp7EhGTd3kbIB8Gw.crl (hash: gRPavYSV2ZQYIyConsm2sWVDSgP8CqquyuyLNXxF2TY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.mft rsync://rpki.ripe.net/repository/DEFAULT/danDqBE5lKqnp7EhGTd3kbIB8Gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:b8:33:78:f6:d8:0a:c3:ae:08:ef:d7:78:ec:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75a9c3a8113994aaa7a7b12119377791b201f06c Validity Not Before: Dec 18 19:02:36 2025 GMT Not After : Dec 19 19:02:36 2025 GMT Subject: CN=8fe9c5922623779d077c7502f2907d96fdef3980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a6:04:66:e1:68:b6:64:40:27:04:84:07:d6: 1f:e8:eb:8f:bf:6f:26:61:4e:fa:3f:cb:91:16:13: e6:3e:16:21:e2:5a:00:0b:ac:29:4e:aa:d0:1b:3d: cb:39:ec:90:e9:15:bd:24:71:62:c5:c1:40:a6:01: e9:78:5e:0a:cd:50:0f:96:dd:c9:4e:2f:e5:b4:2d: 02:96:d9:f1:c6:49:36:6a:17:81:80:0b:8f:63:cf: 3c:e9:8a:fb:b2:a7:54:f9:87:ed:4c:12:83:3c:7e: 71:8f:ca:be:ee:cb:4a:fa:08:1d:4d:db:83:6c:78: 87:14:2d:90:37:76:4b:a0:7d:88:fe:7c:fb:ce:81: e0:9d:19:7c:a7:92:41:c3:5e:f6:83:37:c3:ee:4c: 13:84:b3:1d:8a:e3:b1:bc:93:ac:2e:a7:b0:40:b5: 61:69:58:17:6b:b7:29:d3:69:37:ed:2f:db:7e:ab: 27:5c:b2:72:54:70:aa:fe:ff:ad:2b:57:4d:b7:e0: a6:2e:b0:01:25:f5:59:f0:14:93:87:b7:c1:01:c0: 42:c8:b5:bf:ab:af:c0:88:0e:4e:83:2d:30:70:cf: 46:19:30:a0:82:f0:71:31:03:6d:dc:6a:19:c7:40: d3:2e:23:3c:91:5b:c8:74:4a:f2:d4:5c:cd:05:94: 8f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:E9:C5:92:26:23:77:9D:07:7C:75:02:F2:90:7D:96:FD:EF:39:80 X509v3 Authority Key Identifier: keyid:75:A9:C3:A8:11:39:94:AA:A7:A7:B1:21:19:37:77:91:B2:01:F0:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/danDqBE5lKqnp7EhGTd3kbIB8Gw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8203d9-7e3f-40ab-a6e0-085bc77bcc1c/1/danDqBE5lKqnp7EhGTd3kbIB8Gw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:e8:22:3f:bd:d6:ed:77:16:55:14:71:dd:9e:60:3b:8e:ec: 0e:e0:dc:78:4b:a4:fb:ba:20:3e:9d:3a:66:2e:ab:f2:a4:4f: 3a:09:c1:cc:fd:91:32:52:50:16:c8:f0:db:24:11:1e:fc:00: 25:52:91:29:78:71:18:8a:bb:2b:d1:d1:4c:24:1b:f4:89:b7: 31:20:74:45:37:2e:c8:e1:68:cc:a7:a7:e3:f8:fd:2f:0b:cd: 0b:8f:98:8b:6f:1a:9c:b5:fc:92:8c:8b:0a:fc:94:8d:a4:06: 96:7d:33:7f:6d:3a:15:8c:38:19:50:7d:4d:79:5f:d6:9b:70: dd:da:bb:14:ee:e3:42:59:5c:18:56:9a:7c:96:90:dc:4d:06: e0:c9:ba:92:bd:d8:20:cc:ac:c8:65:0f:17:93:c9:55:55:98: c2:5e:f4:43:43:d2:f3:d7:0c:db:e7:1e:1d:b2:c3:af:84:81: bc:b9:fc:46:a0:dd:05:95:1f:c8:69:05:69:f0:fe:f3:cf:12: 19:98:57:68:9b:4a:ca:67:15:39:e0:ac:20:00:7e:f5:b1:ec: 25:d1:a2:f3:06:3e:61:11:c9:4e:bd:25:d8:08:94:da:11:82: cb:c4:69:6b:ad:10:3b:ea:44:8c:77:e4:0a:1d:66:25:1c:68: 38:1b:c4:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy17gzePbYCsOuCO/XeOyBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1YTljM2E4MTEzOTk0YWFhN2E3YjEyMTE5Mzc3NzkxYjIw MWYwNmMwHhcNMjUxMjE4MTkwMjM2WhcNMjUxMjE5MTkwMjM2WjAzMTEwLwYDVQQD Eyg4ZmU5YzU5MjI2MjM3NzlkMDc3Yzc1MDJmMjkwN2Q5NmZkZWYzOTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qYEZuFotmRAJwSEB9Yf6OuPv28m YU76P8uRFhPmPhYh4loAC6wpTqrQGz3LOeyQ6RW9JHFixcFApgHpeF4KzVAPlt3J Ti/ltC0Cltnxxkk2aheBgAuPY8886Yr7sqdU+YftTBKDPH5xj8q+7stK+ggdTduD bHiHFC2QN3ZLoH2I/nz7zoHgnRl8p5JBw172gzfD7kwThLMdiuOxvJOsLqewQLVh aVgXa7cp02k37S/bfqsnXLJyVHCq/v+tK1dNt+CmLrABJfVZ8BSTh7fBAcBCyLW/ q6/AiA5Ogy0wcM9GGTCggvBxMQNt3GoZx0DTLiM8kVvIdEry1FzNBZSPAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI/pxZImI3edB3x1AvKQfZb97zmAMB8GA1UdIwQY MBaAFHWpw6gROZSqp6exIRk3d5GyAfBsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGFuRHFCRTVsS3FucDdFaEdUZDNrYklCOEd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC84MjAzZDktN2UzZi00MGFiLWE2ZTAt MDg1YmM3N2JjYzFjLzEvZGFuRHFCRTVsS3FucDdFaEdUZDNrYklCOEd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC84MjAzZDktN2UzZi00MGFiLWE2ZTAtMDg1YmM3N2JjYzFj LzEvZGFuRHFCRTVsS3FucDdFaEdUZDNrYklCOEd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl+giP73W 7XcWVRRx3Z5gO47sDuDceEuk+7ogPp06Zi6r8qRPOgnBzP2RMlJQFsjw2yQRHvwA JVKRKXhxGIq7K9HRTCQb9Im3MSB0RTcuyOFozKen4/j9LwvNC4+Yi28anLX8koyL CvyUjaQGln0zf206FYw4GVB9TXlf1ptw3dq7FO7jQllcGFaafJaQ3E0G4Mm6kr3Y IMysyGUPF5PJVVWYwl70Q0PS89cM2+ceHbLDr4SBvLn8RqDdBZUfyGkFafD+888S GZhXaJtKymcVOeCsIAB+9bHsJdGi8wY+YRHJTr0l2AiU2hGCy8Rpa60QO+pEjHfk Ch1mJRxoOBvEqw== -----END CERTIFICATE-----Generated at Fri Dec 19 01:24:37 2025 by rpki-client