This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft File: D33TJ3nBqbKX4oywNf1nmrsZFtE.mft (raw, json) Hash identifier: lsREnaYHN7l9tcIMYqsLraWSeyGyQ5O55ty5Vk9eh7U= Subject key identifier: 92:24:30:28:0E:B4:44:38:FC:E7:2F:06:E2:23:13:F8:CD:F4:19:42 Authority key identifier: 0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1 Certificate issuer: /CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1 Certificate serial: 019B4E4DBE898D161E7D6BAF70DF2C88390D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft Manifest number: 04F8 Signing time: Wed 24 Dec 2025 03:01:16 +0000 Manifest this update: Wed 24 Dec 2025 03:01:16 +0000 Manifest next update: Thu 25 Dec 2025 03:01:16 +0000 Files and hashes: 1: D33TJ3nBqbKX4oywNf1nmrsZFtE.crl (hash: pQoXFajUdT9e61v7eZAMLmTtQNleINRdukakjnAGN2U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 03:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:4d:be:89:8d:16:1e:7d:6b:af:70:df:2c:88:39:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f7dd32779c1a9b297e28cb035fd679abb1916d1 Validity Not Before: Dec 24 03:01:16 2025 GMT Not After : Dec 25 03:01:16 2025 GMT Subject: CN=922430280eb44438fce72f06e22313f8cdf41942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:cb:4e:df:8c:17:75:d8:36:3e:ea:19:51:f0: c0:9f:9e:16:e9:fc:c6:0c:b2:d1:43:46:b1:9b:94: 84:34:f0:1b:7e:83:d4:33:46:79:cb:68:83:49:7e: f9:cb:16:d9:a4:b2:9a:24:cf:84:7a:04:b2:74:61: 64:86:d9:32:0d:83:0f:e5:36:0e:06:57:98:c1:88: 4a:ee:d3:a2:cc:a6:d7:66:c7:0c:ff:4d:09:87:6d: db:5e:62:1e:31:df:49:e5:8d:d6:58:8c:69:17:31: 0e:c8:a3:e7:2b:4d:03:f2:8b:1a:81:fa:82:a9:be: 6d:c2:23:c8:b4:0a:08:64:b2:f8:e8:50:d7:26:b9: f8:92:0d:08:df:12:06:a2:31:36:92:24:9d:f3:4e: 25:29:a8:8d:98:ab:23:0a:96:10:42:c8:71:41:ba: 0d:a6:e4:b6:b4:9a:dc:8d:8a:86:b3:7d:76:05:0c: a5:7e:4c:b4:01:de:33:f1:e3:4a:53:8e:d1:ae:e9: 51:99:42:cc:f9:5c:27:0b:90:47:ab:25:5c:88:f7: 90:35:45:10:46:7f:88:ec:da:79:ff:dd:08:c5:51: 27:d7:55:22:8b:65:26:9f:cd:03:1b:22:5e:2a:db: 66:b1:34:2b:40:c6:ab:08:5f:6a:96:89:89:81:e3: 3d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:24:30:28:0E:B4:44:38:FC:E7:2F:06:E2:23:13:F8:CD:F4:19:42 X509v3 Authority Key Identifier: keyid:0F:7D:D3:27:79:C1:A9:B2:97:E2:8C:B0:35:FD:67:9A:BB:19:16:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D33TJ3nBqbKX4oywNf1nmrsZFtE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/729210-d720-4f38-b6be-acf66f78b2b7/1/D33TJ3nBqbKX4oywNf1nmrsZFtE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:48:7a:ce:4d:56:f9:59:bf:69:f1:39:6c:e7:0e:35:27:a6: 00:27:28:2b:ec:bd:5d:f4:ad:28:a0:91:8d:eb:e1:43:21:04: 36:04:db:0e:26:51:8b:62:07:6e:4d:84:18:a7:98:fc:ab:61: 4e:51:56:1f:d6:00:95:44:a9:a9:22:47:5a:3d:f8:7e:54:04: 5d:0c:24:3c:44:87:33:63:e5:5c:04:b6:fb:87:c3:67:d3:f9: 49:a1:49:fb:66:fa:fa:9d:a6:8f:8b:a3:cb:f2:d5:c7:64:65: fe:e4:5a:28:04:19:7d:45:24:8b:be:a3:11:99:57:a8:04:6a: 13:0a:50:7d:60:13:f8:cf:4a:26:db:b6:d9:c1:04:67:92:a4: 03:68:09:bd:a0:37:ca:d9:cd:d4:9d:15:6e:3b:be:19:ac:b9: 7c:72:14:e4:b1:e9:98:dc:81:ef:cb:d0:fe:60:2a:ab:eb:75: 2b:45:f5:31:53:79:07:69:a2:36:b2:a4:b9:34:ea:e0:cb:a7: cd:5a:77:1a:a0:af:80:de:42:69:a7:a0:3c:6e:78:2b:70:b6: 52:97:54:aa:44:c5:d1:41:2e:f2:60:d8:0c:e2:cf:90:58:96: 04:48:24:0a:16:75:1a:b4:4d:98:01:27:90:f9:1c:37:7e:c0: ae:ed:fb:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOTb6JjRYefWuvcN8siDkNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmN2RkMzI3NzljMWE5YjI5N2UyOGNiMDM1ZmQ2NzlhYmIx OTE2ZDEwHhcNMjUxMjI0MDMwMTE2WhcNMjUxMjI1MDMwMTE2WjAzMTEwLwYDVQQD Eyg5MjI0MzAyODBlYjQ0NDM4ZmNlNzJmMDZlMjIzMTNmOGNkZjQxOTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMtO34wXddg2PuoZUfDAn54W6fzG DLLRQ0axm5SENPAbfoPUM0Z5y2iDSX75yxbZpLKaJM+EegSydGFkhtkyDYMP5TYO BleYwYhK7tOizKbXZscM/00Jh23bXmIeMd9J5Y3WWIxpFzEOyKPnK00D8osagfqC qb5twiPItAoIZLL46FDXJrn4kg0I3xIGojE2kiSd804lKaiNmKsjCpYQQshxQboN puS2tJrcjYqGs312BQylfky0Ad4z8eNKU47RrulRmULM+VwnC5BHqyVciPeQNUUQ Rn+I7Np5/90IxVEn11Uii2Umn80DGyJeKttmsTQrQMarCF9qlomJgeM9hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJIkMCgOtEQ4/OcvBuIjE/jN9BlCMB8GA1UdIwQY MBaAFA990yd5wamyl+KMsDX9Z5q7GRbRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDMzVEozbkJxYktYNG95d05mMW5tcnNaRnRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi83MjkyMTAtZDcyMC00ZjM4LWI2YmUt YWNmNjZmNzhiMmI3LzEvRDMzVEozbkJxYktYNG95d05mMW5tcnNaRnRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi83MjkyMTAtZDcyMC00ZjM4LWI2YmUtYWNmNjZmNzhiMmI3 LzEvRDMzVEozbkJxYktYNG95d05mMW5tcnNaRnRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKUh6zk1W +Vm/afE5bOcONSemACcoK+y9XfStKKCRjevhQyEENgTbDiZRi2IHbk2EGKeY/Kth TlFWH9YAlUSpqSJHWj34flQEXQwkPESHM2PlXAS2+4fDZ9P5SaFJ+2b6+p2mj4uj y/LVx2Rl/uRaKAQZfUUki76jEZlXqARqEwpQfWAT+M9KJtu22cEEZ5KkA2gJvaA3 ytnN1J0Vbju+Gay5fHIU5LHpmNyB78vQ/mAqq+t1K0X1MVN5B2miNrKkuTTq4Mun zVp3GqCvgN5CaaegPG54K3C2UpdUqkTF0UEu8mDYDOLPkFiWBEgkChZ1GrRNmAEn kPkcN37Aru37VQ== -----END CERTIFICATE-----Generated at Wed Dec 24 11:27:59 2025 by rpki-client