This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft File: DudNGMQEmi2bgSwqWFXP63Wvpmc.mft (raw, json) Hash identifier: cFOBp1pPDT0B9rf8DnsuF8Yk9Sy8bq1t5wd0SCWBVdk= Subject key identifier: 61:84:5C:19:5F:FD:35:A6:48:09:77:34:7E:61:9A:66:C8:C0:F8:20 Authority key identifier: 0E:E7:4D:18:C4:04:9A:2D:9B:81:2C:2A:58:55:CF:EB:75:AF:A6:67 Certificate issuer: /CN=0ee74d18c4049a2d9b812c2a5855cfeb75afa667 Certificate serial: 019B42B6E96F7BC257A2AA1011A7FC830346 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft Manifest number: 1787 Signing time: Sun 21 Dec 2025 21:00:42 +0000 Manifest this update: Sun 21 Dec 2025 21:00:42 +0000 Manifest next update: Mon 22 Dec 2025 21:00:42 +0000 Files and hashes: 1: DudNGMQEmi2bgSwqWFXP63Wvpmc.crl (hash: Ws5pSLrqbMlX7i3alxHgnz4Hu0RBie5ED/ni0soZH0w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b6:e9:6f:7b:c2:57:a2:aa:10:11:a7:fc:83:03:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ee74d18c4049a2d9b812c2a5855cfeb75afa667 Validity Not Before: Dec 21 21:00:42 2025 GMT Not After : Dec 22 21:00:42 2025 GMT Subject: CN=61845c195ffd35a6480977347e619a66c8c0f820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ef:67:91:61:8c:89:e1:cf:02:e7:50:47:90: 8f:e1:02:98:ee:95:83:9e:09:6e:ca:c6:e8:04:24: e6:1b:1b:c0:c0:54:48:fa:3b:4a:f4:e9:0d:4c:74: a7:4e:32:eb:d7:ca:51:66:5f:c4:d9:93:aa:0a:dd: 63:07:88:92:b5:b9:39:4a:59:38:b7:fb:6c:0b:49: 15:99:54:eb:e7:1f:b6:ab:31:d1:a9:41:67:17:a9: eb:33:2f:78:e0:df:81:f5:00:04:1f:2a:a5:96:a5: 93:b8:0c:6a:ce:27:ad:d5:8f:01:84:24:a4:26:d1: b9:a1:0e:c4:80:10:72:15:b8:ba:f7:8d:97:5e:d7: 0c:1f:65:f4:f1:c3:80:4d:d7:bb:f5:17:40:5c:3d: 6d:9d:46:ae:da:8c:4d:4c:58:a5:b5:1f:a4:b4:97: 45:a8:ef:8e:50:2d:bf:58:02:eb:5f:96:de:d4:a6: e8:3d:43:f8:3f:3a:1e:15:1a:9f:cd:c5:77:32:bb: eb:30:9f:6a:ec:ca:35:79:f2:96:0b:14:0d:e7:c2: f9:8e:1e:7e:be:e0:55:4e:31:3c:5b:d3:99:87:85: 62:58:91:31:fa:b3:1a:93:8d:98:34:e5:5a:af:d0: 2a:e5:85:85:dc:84:95:59:8a:41:ca:c4:91:44:e0: c4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:84:5C:19:5F:FD:35:A6:48:09:77:34:7E:61:9A:66:C8:C0:F8:20 X509v3 Authority Key Identifier: keyid:0E:E7:4D:18:C4:04:9A:2D:9B:81:2C:2A:58:55:CF:EB:75:AF:A6:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:30:9e:2d:14:6f:1e:18:9f:7c:99:4d:48:51:23:d7:f6:3f: 10:83:f8:cf:49:fc:70:80:74:fa:62:1f:c3:95:75:d3:9f:b0: d3:90:08:32:f6:76:64:43:55:55:7d:ca:b0:0b:09:db:a2:6e: 13:06:81:b1:38:67:47:91:13:43:c0:7f:48:11:65:1b:a3:38: 87:fb:9c:6d:ef:a7:c5:23:46:12:c2:c3:54:b3:a8:9b:44:78: e8:ee:69:5f:11:cb:5c:6c:24:a5:ce:16:f9:cd:7c:78:6a:28: 87:09:3c:4f:73:44:b7:b6:1b:66:72:f1:05:47:c4:b6:0d:b5: e5:6f:d6:c6:5b:35:8f:15:b3:99:dd:fb:90:f8:4b:b0:b2:36: 93:2d:ae:26:4e:e3:ce:26:de:6c:6b:d6:be:2e:c7:c5:c1:09: 23:a5:99:de:03:d6:39:62:c1:8c:9b:d0:fe:f8:65:70:78:3b: b7:f8:a2:49:18:da:81:a6:79:42:85:a8:ad:31:63:71:34:d4: 69:28:f0:63:a2:0b:05:b8:6c:2c:6f:59:36:98:b1:db:be:c6: 54:a1:93:bc:d8:50:2f:c3:8f:5f:cb:b0:ce:6c:b5:4a:c2:5b: d0:ab:bf:9b:c8:c3:e6:41:96:f5:78:05:a6:4a:d9:e5:3f:cd: 86:69:99:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCtulve8JXoqoQEaf8gwNGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlZTc0ZDE4YzQwNDlhMmQ5YjgxMmMyYTU4NTVjZmViNzVh ZmE2NjcwHhcNMjUxMjIxMjEwMDQyWhcNMjUxMjIyMjEwMDQyWjAzMTEwLwYDVQQD Eyg2MTg0NWMxOTVmZmQzNWE2NDgwOTc3MzQ3ZTYxOWE2NmM4YzBmODIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqO9nkWGMieHPAudQR5CP4QKY7pWD ngluysboBCTmGxvAwFRI+jtK9OkNTHSnTjLr18pRZl/E2ZOqCt1jB4iStbk5Slk4 t/tsC0kVmVTr5x+2qzHRqUFnF6nrMy944N+B9QAEHyqllqWTuAxqziet1Y8BhCSk JtG5oQ7EgBByFbi6942XXtcMH2X08cOATde79RdAXD1tnUau2oxNTFiltR+ktJdF qO+OUC2/WALrX5be1KboPUP4PzoeFRqfzcV3MrvrMJ9q7Mo1efKWCxQN58L5jh5+ vuBVTjE8W9OZh4ViWJEx+rMak42YNOVar9Aq5YWF3ISVWYpBysSRRODE+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGGEXBlf/TWmSAl3NH5hmmbIwPggMB8GA1UdIwQY MBaAFA7nTRjEBJotm4EsKlhVz+t1r6ZnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHVkTkdNUUVtaTJiZ1N3cVdGWFA2M1d2cG1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8yYzhkYmMtNDBhZS00OWM2LThkZDMt YzI1ZGViY2IxMTk3LzEvRHVkTkdNUUVtaTJiZ1N3cVdGWFA2M1d2cG1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8yYzhkYmMtNDBhZS00OWM2LThkZDMtYzI1ZGViY2IxMTk3 LzEvRHVkTkdNUUVtaTJiZ1N3cVdGWFA2M1d2cG1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdDCeLRRv HhiffJlNSFEj1/Y/EIP4z0n8cIB0+mIfw5V105+w05AIMvZ2ZENVVX3KsAsJ26Ju EwaBsThnR5ETQ8B/SBFlG6M4h/ucbe+nxSNGEsLDVLOom0R46O5pXxHLXGwkpc4W +c18eGoohwk8T3NEt7YbZnLxBUfEtg215W/Wxls1jxWzmd37kPhLsLI2ky2uJk7j zibebGvWvi7HxcEJI6WZ3gPWOWLBjJvQ/vhlcHg7t/iiSRjagaZ5QoWorTFjcTTU aSjwY6ILBbhsLG9ZNpix277GVKGTvNhQL8OPX8uwzmy1SsJb0Ku/m8jD5kGW9XgF pkrZ5T/NhmmZBw== -----END CERTIFICATE-----Generated at Mon Dec 22 01:02:24 2025 by rpki-client