This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft File: DtjJoWGXLWi0RTPg4x9R5NzlunU.mft (raw, json) Hash identifier: 7xpqONhPltGCKUqHYNE+29b+CJTvRkHHNxdqURK9PG8= Subject key identifier: 19:A8:A9:55:1D:20:C3:3B:26:F5:AF:D5:1F:EC:13:6A:60:B9:76:53 Authority key identifier: 0E:D8:C9:A1:61:97:2D:68:B4:45:33:E0:E3:1F:51:E4:DC:E5:BA:75 Certificate issuer: /CN=0ed8c9a161972d68b44533e0e31f51e4dce5ba75 Certificate serial: 019B631DCC684726ED20B002F868C7BE83EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft Manifest number: 1797 Signing time: Sun 28 Dec 2025 04:00:55 +0000 Manifest this update: Sun 28 Dec 2025 04:00:55 +0000 Manifest next update: Mon 29 Dec 2025 04:00:55 +0000 Files and hashes: 1: DtjJoWGXLWi0RTPg4x9R5NzlunU.crl (hash: uIQRW0QNnRhsGgTAgU3exb/6GxpCC5OeRdGsHXTujqA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:1d:cc:68:47:26:ed:20:b0:02:f8:68:c7:be:83:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ed8c9a161972d68b44533e0e31f51e4dce5ba75 Validity Not Before: Dec 28 04:00:55 2025 GMT Not After : Dec 29 04:00:55 2025 GMT Subject: CN=19a8a9551d20c33b26f5afd51fec136a60b97653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:50:63:1d:1d:a7:92:b7:89:0e:5c:24:03:3b: be:af:ac:81:c9:be:78:8c:7a:9a:be:88:b7:0f:23: a0:20:3a:cd:1f:53:05:d7:82:8a:b5:68:50:93:69: a1:57:98:a2:40:a5:2a:3f:06:0d:1e:76:88:f9:65: b5:7d:bc:d7:b0:6b:6a:6f:23:26:b6:5c:c4:84:7b: c7:99:18:50:ee:32:9c:4f:b6:f7:08:9b:e8:35:72: c2:53:6b:09:68:f1:0a:7e:65:62:c7:e5:6d:00:01: 53:e9:83:75:ec:4b:7e:b7:ff:33:c9:04:45:6f:62: bf:65:03:aa:04:19:49:f9:18:d0:15:94:28:32:68: d0:eb:3a:39:b3:91:8c:25:63:39:eb:69:69:09:7a: 1b:fb:95:a8:63:0a:bc:47:02:f2:9a:36:eb:39:ad: ee:30:2e:ba:f7:bc:0d:d3:84:8a:f7:5d:07:91:46: 7a:4e:c6:d7:83:6d:79:da:f4:05:f7:f2:d9:79:8b: be:71:48:e5:c0:8f:b5:56:fa:e7:56:56:04:46:53: 70:95:1f:ef:38:e5:a2:a5:d9:28:67:d0:d2:8f:60: 16:c5:85:0c:8e:e8:40:fc:95:7a:c6:cf:b8:e5:73: 24:09:3c:46:ab:be:eb:5e:a6:9e:a2:73:60:3f:70: 26:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:A8:A9:55:1D:20:C3:3B:26:F5:AF:D5:1F:EC:13:6A:60:B9:76:53 X509v3 Authority Key Identifier: keyid:0E:D8:C9:A1:61:97:2D:68:B4:45:33:E0:E3:1F:51:E4:DC:E5:BA:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:a0:22:13:cb:93:4d:aa:d0:6f:99:28:6b:fb:8b:ff:20:32: 39:14:75:9f:a5:7e:bb:a3:7c:f7:18:ca:ba:b9:91:6a:49:f3: 48:e3:dc:12:68:9d:3b:a9:db:68:07:26:8d:08:ae:e3:51:7c: 06:5f:dd:af:80:b6:6c:52:3e:b4:b7:4c:db:c5:86:5c:67:36: 5c:3e:bc:80:9f:32:42:7e:a1:9d:5b:1c:1b:9d:c2:1b:69:44: e4:1f:42:67:ff:a1:ba:e6:63:fa:cf:72:6b:6c:ac:06:d9:96: 77:1b:df:9d:7a:41:d3:ec:fd:68:f8:79:b5:c5:a5:7d:38:a0: 6e:f8:48:af:3f:f9:10:2f:62:bb:b3:dc:70:58:d9:33:35:af: 84:d9:71:76:27:7f:9f:1f:e4:af:1a:ad:97:ca:d5:dd:04:5e: 68:43:32:0d:f1:2c:8e:e4:20:74:b5:5f:5e:76:e1:af:38:97: 2d:e7:1d:32:ee:7a:09:41:c8:58:be:b7:fe:2e:c4:a9:2a:81: d4:35:e2:38:e8:40:ed:af:a5:21:f7:69:45:5d:39:37:4f:2d: 94:e7:d9:98:63:4a:c0:8b:65:3e:17:32:dd:ab:ec:fa:7c:76: 43:f4:f1:d4:00:66:dd:50:7e:c1:38:0f:08:81:cf:0b:77:98: 18:08:55:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjHcxoRybtILAC+GjHvoPrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlZDhjOWExNjE5NzJkNjhiNDQ1MzNlMGUzMWY1MWU0ZGNl NWJhNzUwHhcNMjUxMjI4MDQwMDU1WhcNMjUxMjI5MDQwMDU1WjAzMTEwLwYDVQQD EygxOWE4YTk1NTFkMjBjMzNiMjZmNWFmZDUxZmVjMTM2YTYwYjk3NjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFBjHR2nkreJDlwkAzu+r6yByb54 jHqavoi3DyOgIDrNH1MF14KKtWhQk2mhV5iiQKUqPwYNHnaI+WW1fbzXsGtqbyMm tlzEhHvHmRhQ7jKcT7b3CJvoNXLCU2sJaPEKfmVix+VtAAFT6YN17Et+t/8zyQRF b2K/ZQOqBBlJ+RjQFZQoMmjQ6zo5s5GMJWM562lpCXob+5WoYwq8RwLymjbrOa3u MC6697wN04SK910HkUZ6TsbXg2152vQF9/LZeYu+cUjlwI+1VvrnVlYERlNwlR/v OOWipdkoZ9DSj2AWxYUMjuhA/JV6xs+45XMkCTxGq77rXqaeonNgP3AmuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBmoqVUdIMM7JvWv1R/sE2pguXZTMB8GA1UdIwQY MBaAFA7YyaFhly1otEUz4OMfUeTc5bp1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHRqSm9XR1hMV2kwUlRQZzR4OVI1TnpsdW5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi83NDJkMzUtODI3NC00OWFmLWJjMTIt ZGE4NWM1NzMyYjg1LzEvRHRqSm9XR1hMV2kwUlRQZzR4OVI1TnpsdW5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi83NDJkMzUtODI3NC00OWFmLWJjMTItZGE4NWM1NzMyYjg1 LzEvRHRqSm9XR1hMV2kwUlRQZzR4OVI1TnpsdW5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfKAiE8uT TarQb5koa/uL/yAyORR1n6V+u6N89xjKurmRaknzSOPcEmidO6nbaAcmjQiu41F8 Bl/dr4C2bFI+tLdM28WGXGc2XD68gJ8yQn6hnVscG53CG2lE5B9CZ/+huuZj+s9y a2ysBtmWdxvfnXpB0+z9aPh5tcWlfTigbvhIrz/5EC9iu7PccFjZMzWvhNlxdid/ nx/krxqtl8rV3QReaEMyDfEsjuQgdLVfXnbhrziXLecdMu56CUHIWL63/i7EqSqB 1DXiOOhA7a+lIfdpRV05N08tlOfZmGNKwItlPhcy3avs+nx2Q/Tx1ABm3VB+wTgP CIHPC3eYGAhVnQ== -----END CERTIFICATE-----Generated at Sun Dec 28 06:24:24 2025 by rpki-client