This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.mft File: Dimkgt4NVnRsMEUmn5kgUgT5VIQ.mft (raw, json) Hash identifier: DwOQ5e2WD1Lk3iSioWaeJCcUmBr7ubtkQ5NilhuaLHs= Subject key identifier: 7B:88:67:76:29:87:9E:A9:09:0D:63:D8:AC:8F:38:5A:66:46:DF:08 Authority key identifier: 0E:29:A4:82:DE:0D:56:74:6C:30:45:26:9F:99:20:52:04:F9:54:84 Certificate issuer: /CN=0e29a482de0d56746c3045269f99205204f95484 Certificate serial: 019B6AD869900D2575B5E7F5A8C24708F328 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.mft Manifest number: 1346 Signing time: Mon 29 Dec 2025 16:02:06 +0000 Manifest this update: Mon 29 Dec 2025 16:02:06 +0000 Manifest next update: Tue 30 Dec 2025 16:02:06 +0000 Files and hashes: 1: Dimkgt4NVnRsMEUmn5kgUgT5VIQ.crl (hash: tnZJ/K9m+PwEggGT/U2lttpB8paVY8yS5auh+nsZOuE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 16:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:d8:69:90:0d:25:75:b5:e7:f5:a8:c2:47:08:f3:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e29a482de0d56746c3045269f99205204f95484 Validity Not Before: Dec 29 16:02:06 2025 GMT Not After : Dec 30 16:02:06 2025 GMT Subject: CN=7b88677629879ea9090d63d8ac8f385a6646df08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e1:20:63:13:ec:e5:bf:31:13:01:1e:2a:40: 7c:ca:80:64:c8:2b:94:99:f9:01:42:ef:c3:33:12: 31:8f:50:64:cb:7c:ad:4a:eb:72:e7:de:ef:fa:95: 9a:6e:6c:7a:73:c3:f5:85:8d:42:d9:bc:1b:a5:68: 0b:aa:f6:9c:af:40:c5:9d:71:4d:b7:da:ad:f7:7c: d2:ae:a6:5c:9b:32:7d:be:7a:c4:0d:34:a1:5c:e6: a1:29:06:53:c4:55:82:92:ef:e8:3b:af:83:ba:6a: 2b:cd:12:54:31:82:73:81:e9:63:39:f5:11:97:6e: 7a:71:35:01:05:4d:10:09:c0:60:3a:40:1c:b0:09: da:86:26:5b:a7:8e:30:12:44:92:ef:1f:e8:df:b2: d3:17:31:4a:b8:d5:71:73:78:61:cb:eb:ad:fc:1d: 34:ca:32:4c:96:f9:0a:d5:51:52:77:32:fd:e7:4f: 16:87:a1:bd:eb:3d:ab:49:db:11:5d:b0:dd:5c:88: df:1d:58:8e:4a:3a:24:2a:9c:55:a7:4c:89:96:dd: 37:2d:3f:c2:cb:f2:5b:0a:81:85:7c:c0:cf:91:43: 0a:a8:a3:b0:5f:87:bc:fa:cf:a6:c6:fc:73:87:28: 3d:cc:a0:bb:bf:aa:86:d2:a7:67:0a:16:a1:8a:62: d8:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:88:67:76:29:87:9E:A9:09:0D:63:D8:AC:8F:38:5A:66:46:DF:08 X509v3 Authority Key Identifier: keyid:0E:29:A4:82:DE:0D:56:74:6C:30:45:26:9F:99:20:52:04:F9:54:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:b7:1c:58:69:f7:6e:83:00:3c:22:9e:53:88:5b:90:28:9c: 8a:9b:e9:11:6b:7a:b2:91:04:8f:b8:9a:45:03:de:a3:2c:27: e9:a8:3e:eb:83:20:86:5d:0f:87:c1:57:fc:eb:3d:ce:00:7d: af:8a:04:5f:e9:2c:cb:2a:82:b9:0d:7e:4f:e1:af:4c:af:d0: bb:7b:45:e1:ab:c1:b8:2b:05:75:26:40:48:74:19:7e:47:6e: 83:23:dd:1a:e7:eb:10:59:96:a5:ba:07:40:44:85:5d:10:5b: 6c:c1:22:ab:a3:9d:dc:d6:ef:09:3c:82:50:26:06:aa:b6:07: c0:68:2a:61:13:c2:3c:90:2a:48:0f:c2:28:a7:85:03:10:40: cb:c6:9b:be:9f:c3:8c:bb:a2:f9:b7:18:49:5e:58:35:18:5c: 19:85:df:4c:23:2f:bf:6b:6a:57:59:49:97:79:ab:72:db:5a: 1c:27:94:e9:a9:ef:86:f0:9a:aa:a8:60:7f:33:3d:b7:96:6c: aa:46:4f:cd:fd:2f:19:75:2b:1a:f9:95:14:e1:ec:d1:92:9d: 7d:94:ec:c5:3f:ab:74:4d:f2:99:1f:68:42:64:62:cb:96:13: a7:be:85:f6:4b:de:39:de:04:48:6e:13:8f:13:27:28:e7:2d: 0a:f5:53:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtq2GmQDSV1tef1qMJHCPMoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMjlhNDgyZGUwZDU2NzQ2YzMwNDUyNjlmOTkyMDUyMDRm OTU0ODQwHhcNMjUxMjI5MTYwMjA2WhcNMjUxMjMwMTYwMjA2WjAzMTEwLwYDVQQD Eyg3Yjg4Njc3NjI5ODc5ZWE5MDkwZDYzZDhhYzhmMzg1YTY2NDZkZjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+EgYxPs5b8xEwEeKkB8yoBkyCuU mfkBQu/DMxIxj1Bky3ytSuty597v+pWabmx6c8P1hY1C2bwbpWgLqvacr0DFnXFN t9qt93zSrqZcmzJ9vnrEDTShXOahKQZTxFWCku/oO6+DumorzRJUMYJzgeljOfUR l256cTUBBU0QCcBgOkAcsAnahiZbp44wEkSS7x/o37LTFzFKuNVxc3hhy+ut/B00 yjJMlvkK1VFSdzL9508Wh6G96z2rSdsRXbDdXIjfHViOSjokKpxVp0yJlt03LT/C y/JbCoGFfMDPkUMKqKOwX4e8+s+mxvxzhyg9zKC7v6qG0qdnChahimLY7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHuIZ3Yph56pCQ1j2KyPOFpmRt8IMB8GA1UdIwQY MBaAFA4ppILeDVZ0bDBFJp+ZIFIE+VSEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGlta2d0NE5WblJzTUVVbW41a2dVZ1Q1VklRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xNGEyNzMtOGI3NS00NzZjLWI5ZTMt OGJiZDkzOTQwZWVmLzEvRGlta2d0NE5WblJzTUVVbW41a2dVZ1Q1VklRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8xNGEyNzMtOGI3NS00NzZjLWI5ZTMtOGJiZDkzOTQwZWVm LzEvRGlta2d0NE5WblJzTUVVbW41a2dVZ1Q1VklRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdLccWGn3 boMAPCKeU4hbkCicipvpEWt6spEEj7iaRQPeoywn6ag+64Mghl0Ph8FX/Os9zgB9 r4oEX+ksyyqCuQ1+T+GvTK/Qu3tF4avBuCsFdSZASHQZfkdugyPdGufrEFmWpboH QESFXRBbbMEiq6Od3NbvCTyCUCYGqrYHwGgqYRPCPJAqSA/CKKeFAxBAy8abvp/D jLui+bcYSV5YNRhcGYXfTCMvv2tqV1lJl3mrcttaHCeU6anvhvCaqqhgfzM9t5Zs qkZPzf0vGXUrGvmVFOHs0ZKdfZTsxT+rdE3ymR9oQmRiy5YTp76F9kveOd4ESG4T jxMnKOctCvVTCA== -----END CERTIFICATE-----Generated at Tue Dec 30 01:33:47 2025 by rpki-client