This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft File: DR7vsZI4vpruN5lb700q_Ref8sw.mft (raw, json) Hash identifier: pOOMUx6t6YCS18iJYHoJZi8xRVcP4GW3hEzUuL64Z1w= Subject key identifier: DE:FB:0C:A0:46:31:FA:13:65:2E:F4:7E:1D:E9:88:8F:27:61:15:60 Authority key identifier: 0D:1E:EF:B1:92:38:BE:9A:EE:37:99:5B:EF:4D:2A:FD:17:9F:F2:CC Certificate issuer: /CN=0d1eefb19238be9aee37995bef4d2afd179ff2cc Certificate serial: 019B424A90C3F3DED7572934A6F606B8B8D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DR7vsZI4vpruN5lb700q_Ref8sw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft Manifest number: 0E2F Signing time: Sun 21 Dec 2025 19:02:21 +0000 Manifest this update: Sun 21 Dec 2025 19:02:21 +0000 Manifest next update: Mon 22 Dec 2025 19:02:21 +0000 Files and hashes: 1: DR7vsZI4vpruN5lb700q_Ref8sw.crl (hash: d7KcLWE0jAgE2HOfLzsj1A3HQdJbpP1g/l4lzxDdrZQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft rsync://rpki.ripe.net/repository/DEFAULT/DR7vsZI4vpruN5lb700q_Ref8sw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:90:c3:f3:de:d7:57:29:34:a6:f6:06:b8:b8:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d1eefb19238be9aee37995bef4d2afd179ff2cc Validity Not Before: Dec 21 19:02:21 2025 GMT Not After : Dec 22 19:02:21 2025 GMT Subject: CN=defb0ca04631fa13652ef47e1de9888f27611560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5d:44:4b:2e:3a:38:50:7b:13:82:a3:67:fa: 0b:ce:ca:a7:36:f0:c7:62:97:3d:03:05:33:b0:e0: d4:e2:aa:cd:90:d6:80:e3:bb:3a:1a:c6:4a:c2:f5: 56:f0:d1:3a:19:a9:9e:2a:f9:45:55:fc:d3:38:5f: 42:10:ff:8a:25:7d:04:8d:9f:46:08:ee:86:ab:b3: b6:99:cd:3e:3a:f9:89:86:cc:4d:d0:01:2d:ac:de: 7c:41:c0:3d:df:70:27:73:73:f7:3a:24:3b:bf:5f: 41:08:4e:35:48:ed:fe:cb:d8:b6:f4:d7:b3:86:85: 65:48:7c:6c:0b:97:ba:88:dc:56:18:45:07:fb:72: 9f:cd:ba:0c:cd:79:fe:14:ef:b1:0d:fe:a8:d9:2b: 3b:db:e3:12:39:2c:8c:00:4d:53:6d:d3:23:e3:d0: bf:ef:2a:ca:9f:91:b9:40:ab:e9:8c:31:0f:e2:b0: 5c:e8:c9:92:3c:b0:67:23:49:2d:2b:8e:50:4c:cb: 1c:b9:ce:1a:23:28:5a:a9:bc:b2:d6:f2:d4:a6:aa: 0a:6f:3a:82:d9:c9:75:a3:54:92:e6:2e:61:02:5d: 53:3b:57:bc:d4:4c:0f:43:15:6c:32:90:b8:34:0f: 95:99:d7:7e:31:f2:6d:bb:91:ba:71:be:80:af:a3: a4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:FB:0C:A0:46:31:FA:13:65:2E:F4:7E:1D:E9:88:8F:27:61:15:60 X509v3 Authority Key Identifier: keyid:0D:1E:EF:B1:92:38:BE:9A:EE:37:99:5B:EF:4D:2A:FD:17:9F:F2:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DR7vsZI4vpruN5lb700q_Ref8sw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:82:15:9d:14:84:f6:0c:b1:5f:9e:98:69:ae:06:55:68:a3: 8a:23:1c:70:66:12:87:54:93:27:db:e3:7e:ac:11:00:b5:d1: 62:e0:b0:56:94:83:2c:29:fd:a7:86:c0:ba:5b:8d:fe:56:7e: 8b:c2:56:8e:9f:87:6b:92:2c:73:7d:c7:4d:c9:39:0c:a8:9e: 8e:31:e6:77:ac:ac:0a:f3:de:11:63:c2:4f:55:c5:55:78:a6: cf:57:3d:7c:4a:c3:43:28:b6:a3:73:e6:43:10:00:a0:79:6a: cd:c4:57:c3:a5:27:3d:41:19:76:70:dc:9f:2e:68:6e:a6:e1: 07:53:59:b4:90:12:4c:4c:fe:5b:9c:07:eb:6e:50:07:4f:46: c4:d5:26:c6:c9:e5:13:f5:03:d1:4e:27:b2:19:42:dc:a0:93: c8:6e:8b:5b:9e:4e:57:e0:b7:4b:2b:88:7f:23:61:a8:8a:a9: 5a:af:6a:50:a2:2b:38:61:a7:54:25:82:f6:29:63:0e:36:04: f3:52:e9:40:87:74:d7:e8:11:0e:88:8d:8a:c1:8e:16:0d:d8: 50:bb:05:51:94:a9:a8:f4:8d:87:a9:66:a1:1b:52:bf:87:4e: 05:17:f6:c0:77:bc:6a:38:6e:6f:ca:b7:98:16:e6:22:52:38: 49:fd:e9:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSpDD897XVyk0pvYGuLjZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMWVlZmIxOTIzOGJlOWFlZTM3OTk1YmVmNGQyYWZkMTc5 ZmYyY2MwHhcNMjUxMjIxMTkwMjIxWhcNMjUxMjIyMTkwMjIxWjAzMTEwLwYDVQQD EyhkZWZiMGNhMDQ2MzFmYTEzNjUyZWY0N2UxZGU5ODg4ZjI3NjExNTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqF1ESy46OFB7E4KjZ/oLzsqnNvDH Ypc9AwUzsODU4qrNkNaA47s6GsZKwvVW8NE6GameKvlFVfzTOF9CEP+KJX0EjZ9G CO6Gq7O2mc0+OvmJhsxN0AEtrN58QcA933Anc3P3OiQ7v19BCE41SO3+y9i29Nez hoVlSHxsC5e6iNxWGEUH+3KfzboMzXn+FO+xDf6o2Ss72+MSOSyMAE1TbdMj49C/ 7yrKn5G5QKvpjDEP4rBc6MmSPLBnI0ktK45QTMscuc4aIyhaqbyy1vLUpqoKbzqC 2cl1o1SS5i5hAl1TO1e81EwPQxVsMpC4NA+Vmdd+MfJtu5G6cb6Ar6OkVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN77DKBGMfoTZS70fh3piI8nYRVgMB8GA1UdIwQY MBaAFA0e77GSOL6a7jeZW+9NKv0Xn/LMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFI3dnNaSTR2cHJ1TjVsYjcwMHFfUmVmOHN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9lOTQ0N2EtMWU1Yy00YjFlLTgwNTYt MzQ0OWYzM2ExODQyLzEvRFI3dnNaSTR2cHJ1TjVsYjcwMHFfUmVmOHN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9lOTQ0N2EtMWU1Yy00YjFlLTgwNTYtMzQ0OWYzM2ExODQy LzEvRFI3dnNaSTR2cHJ1TjVsYjcwMHFfUmVmOHN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo4IVnRSE 9gyxX56Yaa4GVWijiiMccGYSh1STJ9vjfqwRALXRYuCwVpSDLCn9p4bAuluN/lZ+ i8JWjp+Ha5Isc33HTck5DKiejjHmd6ysCvPeEWPCT1XFVXimz1c9fErDQyi2o3Pm QxAAoHlqzcRXw6UnPUEZdnDcny5obqbhB1NZtJASTEz+W5wH625QB09GxNUmxsnl E/UD0U4nshlC3KCTyG6LW55OV+C3SyuIfyNhqIqpWq9qUKIrOGGnVCWC9iljDjYE 81LpQId01+gRDoiNisGOFg3YULsFUZSpqPSNh6lmoRtSv4dOBRf2wHe8ajhub8q3 mBbmIlI4Sf3pUw== -----END CERTIFICATE-----Generated at Mon Dec 22 01:24:48 2025 by rpki-client