This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft File: dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft (raw, json) Hash identifier: Eyy2MTgv+ZBnOkl/otZUIzeIuH/759bkuJ4EYYWfjVY= Subject key identifier: C6:A4:7A:BC:72:D6:08:09:E3:CA:9F:D3:2E:28:1E:D7:88:E1:85:12 Authority key identifier: 74:2E:57:1D:00:06:FE:7F:66:0B:03:08:CC:C6:1A:16:99:E3:49:17 Certificate issuer: /CN=742e571d0006fe7f660b0308ccc61a1699e34917 Certificate serial: 019B3A8FDA5967CF67D61A37C18A66FFDCBC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dC5XHQAG_n9mCwMIzMYaFpnjSRc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft Manifest number: 1784 Signing time: Sat 20 Dec 2025 07:01:04 +0000 Manifest this update: Sat 20 Dec 2025 07:01:04 +0000 Manifest next update: Sun 21 Dec 2025 07:01:04 +0000 Files and hashes: 1: dC5XHQAG_n9mCwMIzMYaFpnjSRc.crl (hash: sCVsnXaKfgm/wkXxnAMq1MVHDfykNF95x/JixT70wP8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft rsync://rpki.ripe.net/repository/DEFAULT/dC5XHQAG_n9mCwMIzMYaFpnjSRc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:da:59:67:cf:67:d6:1a:37:c1:8a:66:ff:dc:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=742e571d0006fe7f660b0308ccc61a1699e34917 Validity Not Before: Dec 20 07:01:04 2025 GMT Not After : Dec 21 07:01:04 2025 GMT Subject: CN=c6a47abc72d60809e3ca9fd32e281ed788e18512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1e:51:1a:e8:aa:94:30:90:1d:a6:9f:70:f5: 6b:7e:73:70:09:07:f2:13:12:e1:33:fc:a6:41:fa: 03:6b:7e:a8:45:81:17:0d:75:3a:dd:e4:73:69:d2: 01:2b:ab:7c:fb:fc:bb:b2:30:a6:b4:ef:19:48:8f: 33:c2:b5:ec:d2:b4:87:2f:30:b5:06:f7:fd:47:06: 17:00:12:0f:91:6a:61:04:54:50:c3:07:a0:03:d5: 71:40:0a:f5:14:9b:6a:72:08:d9:bf:4b:e7:47:6d: 62:24:bd:0e:a6:53:1d:ac:17:a1:22:1c:87:ad:2f: 79:31:d5:1e:6e:de:e5:77:22:80:83:97:64:eb:a8: bf:28:d7:22:a6:a8:1c:00:1c:e0:22:34:1c:ff:1c: cd:c6:ca:59:22:20:e8:8c:97:94:00:95:21:dd:b9: 4f:64:48:cc:40:87:90:56:bf:ad:de:45:34:62:c7: c2:45:ba:7b:8c:3d:10:5c:b8:67:6d:56:2c:d0:cd: 14:09:b4:ea:c0:bc:79:dc:72:df:4b:b1:b9:e8:9e: 21:d8:4a:41:1e:75:c2:49:a1:4c:14:85:3c:51:94: 67:a2:28:9d:a8:8b:24:cc:5c:a9:cd:c7:28:e8:00: 0c:f9:24:01:2e:01:c3:85:8b:a8:d4:fb:db:95:d5: ca:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:A4:7A:BC:72:D6:08:09:E3:CA:9F:D3:2E:28:1E:D7:88:E1:85:12 X509v3 Authority Key Identifier: keyid:74:2E:57:1D:00:06:FE:7F:66:0B:03:08:CC:C6:1A:16:99:E3:49:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dC5XHQAG_n9mCwMIzMYaFpnjSRc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:31:02:7e:f3:4e:f6:4a:37:d7:21:a8:f2:e1:8e:4d:d6:a7: e4:05:29:e6:80:14:7b:82:7c:28:a9:7a:a4:de:76:5e:c6:42: a6:26:8d:51:89:88:27:ca:c6:64:6c:60:18:5a:0b:64:db:a9: 75:7a:b4:62:a7:e7:3b:63:a4:2c:2c:de:11:53:54:56:9b:4c: 9c:81:ac:39:cb:b1:9c:ed:05:31:75:45:b3:c9:25:d8:d3:a8: f2:bb:64:1c:22:fd:40:2d:bf:66:23:98:47:c3:c0:1c:95:0a: 3c:3a:60:03:80:ec:d7:84:2b:f3:0e:54:29:75:1d:0e:22:1f: e3:3c:59:74:70:86:78:01:01:32:21:8b:28:2d:42:5f:d1:31: ed:d0:48:89:de:95:30:77:95:60:47:16:86:18:ae:f5:2b:92: 9a:60:bd:7d:16:cc:bc:ca:e7:a7:b4:94:e6:2c:f6:9c:a4:d3: d1:4b:10:8a:21:d8:79:63:c4:38:83:42:5d:9d:d2:44:c5:2f: 62:b7:c4:2c:83:1e:1a:23:ed:9e:ae:22:d4:6a:c4:01:fb:59: 13:83:7e:9e:31:a0:c5:3f:36:bb:9b:9e:6a:a8:f2:2c:a6:53: 17:6e:0d:cf:3e:e1:08:21:77:a5:4b:14:c1:2a:08:04:bd:13: 6e:8d:a7:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j9pZZ89n1ho3wYpm/9y8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0MmU1NzFkMDAwNmZlN2Y2NjBiMDMwOGNjYzYxYTE2OTll MzQ5MTcwHhcNMjUxMjIwMDcwMTA0WhcNMjUxMjIxMDcwMTA0WjAzMTEwLwYDVQQD EyhjNmE0N2FiYzcyZDYwODA5ZTNjYTlmZDMyZTI4MWVkNzg4ZTE4NTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqx5RGuiqlDCQHaafcPVrfnNwCQfy ExLhM/ymQfoDa36oRYEXDXU63eRzadIBK6t8+/y7sjCmtO8ZSI8zwrXs0rSHLzC1 Bvf9RwYXABIPkWphBFRQwwegA9VxQAr1FJtqcgjZv0vnR21iJL0OplMdrBehIhyH rS95MdUebt7ldyKAg5dk66i/KNcipqgcABzgIjQc/xzNxspZIiDojJeUAJUh3blP ZEjMQIeQVr+t3kU0YsfCRbp7jD0QXLhnbVYs0M0UCbTqwLx53HLfS7G56J4h2EpB HnXCSaFMFIU8UZRnoiidqIskzFypzcco6AAM+SQBLgHDhYuo1PvbldXKTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMakerxy1ggJ48qf0y4oHteI4YUSMB8GA1UdIwQY MBaAFHQuVx0ABv5/ZgsDCMzGGhaZ40kXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEM1WEhRQUdfbjltQ3dNSXpNWWFGcG5qU1JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8yZTAzYWYtODNhNC00YzlmLTkxMWEt ZDU4NDRiM2M1MTc3LzEvZEM1WEhRQUdfbjltQ3dNSXpNWWFGcG5qU1JjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC8yZTAzYWYtODNhNC00YzlmLTkxMWEtZDU4NDRiM2M1MTc3 LzEvZEM1WEhRQUdfbjltQ3dNSXpNWWFGcG5qU1JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsDECfvNO 9ko31yGo8uGOTdan5AUp5oAUe4J8KKl6pN52XsZCpiaNUYmIJ8rGZGxgGFoLZNup dXq0YqfnO2OkLCzeEVNUVptMnIGsOcuxnO0FMXVFs8kl2NOo8rtkHCL9QC2/ZiOY R8PAHJUKPDpgA4Ds14Qr8w5UKXUdDiIf4zxZdHCGeAEBMiGLKC1CX9Ex7dBIid6V MHeVYEcWhhiu9SuSmmC9fRbMvMrnp7SU5iz2nKTT0UsQiiHYeWPEOINCXZ3SRMUv YrfELIMeGiPtnq4i1GrEAftZE4N+njGgxT82u5ueaqjyLKZTF24Nzz7hCCF3pUsU wSoIBL0Tbo2nbQ== -----END CERTIFICATE-----Generated at Sat Dec 20 09:06:09 2025 by rpki-client