This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft File: dcqnmRKIh2aA16yQqFafP8IDh_o.mft (raw, json) Hash identifier: gXS0FdcUgQgMsCdZleETMJIUeiJYrgHK/5y6ujAYZeo= Subject key identifier: 92:21:82:81:E0:CE:18:C0:E4:42:88:7E:62:9D:12:2A:8A:EE:1C:9B Authority key identifier: 75:CA:A7:99:12:88:87:66:80:D7:AC:90:A8:56:9F:3F:C2:03:87:FA Certificate issuer: /CN=75caa7991288876680d7ac90a8569f3fc20387fa Certificate serial: 019B2F66E169DA397F4AA2C39585F9B1554C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcqnmRKIh2aA16yQqFafP8IDh_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft Manifest number: 177E Signing time: Thu 18 Dec 2025 03:00:30 +0000 Manifest this update: Thu 18 Dec 2025 03:00:30 +0000 Manifest next update: Fri 19 Dec 2025 03:00:30 +0000 Files and hashes: 1: dcqnmRKIh2aA16yQqFafP8IDh_o.crl (hash: U1SbdEddY8GDr+CFyuUCG7OoRwrx6rP5E2kZJWVyMfw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft rsync://rpki.ripe.net/repository/DEFAULT/dcqnmRKIh2aA16yQqFafP8IDh_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:66:e1:69:da:39:7f:4a:a2:c3:95:85:f9:b1:55:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75caa7991288876680d7ac90a8569f3fc20387fa Validity Not Before: Dec 18 03:00:30 2025 GMT Not After : Dec 19 03:00:30 2025 GMT Subject: CN=92218281e0ce18c0e442887e629d122a8aee1c9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:86:3e:3e:2a:ef:3d:39:b4:90:f6:bc:9d:f5: be:e1:f4:b4:ad:95:17:d1:69:ef:66:e7:f0:e1:17: 65:5c:ce:a2:66:3a:83:ab:17:cd:df:e2:81:05:1a: 6c:5b:38:03:28:99:13:09:47:27:d9:11:fa:48:ed: 22:a3:b9:d6:e8:8c:cb:f4:c2:14:d1:2f:12:8a:5c: 98:4b:25:2c:a8:34:d8:3f:48:d1:5b:65:78:5c:fb: 3a:df:03:43:cc:03:33:fe:c4:29:67:9a:c0:ed:c2: 5b:95:de:dc:61:12:b6:67:96:9e:75:73:3b:0a:10: 27:80:66:90:9e:c6:be:a6:b1:98:70:89:79:9f:5c: b7:a5:bd:09:6b:df:93:16:10:e5:30:ba:26:f5:16: 08:06:06:76:3a:53:05:c1:88:e9:dd:6a:58:b2:11: 8d:5e:e6:c3:a1:c4:a4:d5:c0:30:80:f9:24:52:2f: e4:39:af:1a:dd:34:f1:84:4e:97:68:b7:7d:4a:3c: df:44:1d:22:5a:85:db:39:4d:a0:4f:75:3c:ba:ee: 28:91:7c:fb:8c:9f:9d:2b:6d:5c:4e:5b:d6:57:96: 7a:cd:5d:27:5e:56:65:99:b3:58:b1:45:1f:8a:88: c0:bf:70:79:31:4a:2f:d2:0b:9a:45:58:b8:54:26: 76:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:21:82:81:E0:CE:18:C0:E4:42:88:7E:62:9D:12:2A:8A:EE:1C:9B X509v3 Authority Key Identifier: keyid:75:CA:A7:99:12:88:87:66:80:D7:AC:90:A8:56:9F:3F:C2:03:87:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcqnmRKIh2aA16yQqFafP8IDh_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2754de-a5d5-487f-9fdd-c33b3644dd3f/1/dcqnmRKIh2aA16yQqFafP8IDh_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:78:4f:64:5d:42:7d:36:31:a6:32:6e:d3:65:cc:75:75:4f: b4:a5:3e:b8:a2:91:0f:94:83:61:0f:d7:c7:61:8e:ce:b3:22: ee:c0:73:98:cb:bf:68:28:9d:50:9d:bc:b9:3b:71:8d:9b:73: 27:fa:0b:cc:20:d4:13:aa:46:b7:7a:01:05:b7:d7:c9:22:4e: 12:b3:d3:bb:5d:72:0e:1b:26:5d:ab:00:f8:6c:bc:52:eb:61: f3:ca:2b:5e:ff:25:09:df:94:87:89:d9:be:b2:47:41:f0:54: ac:c0:8e:85:6b:bf:3a:13:09:ed:2c:f2:cf:6f:dc:5c:fb:f5: e0:9f:72:22:c3:80:05:35:01:ad:f1:8a:12:fe:7b:7e:7e:a1: de:65:49:21:3d:24:8f:31:bd:c7:65:e0:57:4e:29:9f:ab:d2: b6:d5:46:01:30:ff:a2:4f:0b:23:50:06:f6:03:6d:88:a7:d9: 33:d7:7c:a1:45:c9:d1:c7:fd:ef:5c:79:39:c3:18:36:6f:d0: dc:91:74:ce:09:0a:3b:be:ba:c8:03:6f:42:43:8c:06:1f:c9: ac:7b:45:19:cc:be:37:47:a1:79:5a:4f:fe:61:93:51:72:59: 44:61:5c:1d:cf:de:58:66:24:bc:48:ee:97:04:d9:47:28:bd: 96:94:c1:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZuFp2jl/SqLDlYX5sVVMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1Y2FhNzk5MTI4ODg3NjY4MGQ3YWM5MGE4NTY5ZjNmYzIw Mzg3ZmEwHhcNMjUxMjE4MDMwMDMwWhcNMjUxMjE5MDMwMDMwWjAzMTEwLwYDVQQD Eyg5MjIxODI4MWUwY2UxOGMwZTQ0Mjg4N2U2MjlkMTIyYThhZWUxYzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYY+PirvPTm0kPa8nfW+4fS0rZUX 0WnvZufw4RdlXM6iZjqDqxfN3+KBBRpsWzgDKJkTCUcn2RH6SO0io7nW6IzL9MIU 0S8SilyYSyUsqDTYP0jRW2V4XPs63wNDzAMz/sQpZ5rA7cJbld7cYRK2Z5aedXM7 ChAngGaQnsa+prGYcIl5n1y3pb0Ja9+TFhDlMLom9RYIBgZ2OlMFwYjp3WpYshGN XubDocSk1cAwgPkkUi/kOa8a3TTxhE6XaLd9SjzfRB0iWoXbOU2gT3U8uu4okXz7 jJ+dK21cTlvWV5Z6zV0nXlZlmbNYsUUfiojAv3B5MUov0guaRVi4VCZ2SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJIhgoHgzhjA5EKIfmKdEiqK7hybMB8GA1UdIwQY MBaAFHXKp5kSiIdmgNeskKhWnz/CA4f6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGNxbm1SS0loMmFBMTZ5UXFGYWZQOElEaF9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8yNzU0ZGUtYTVkNS00ODdmLTlmZGQt YzMzYjM2NDRkZDNmLzEvZGNxbm1SS0loMmFBMTZ5UXFGYWZQOElEaF9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8yNzU0ZGUtYTVkNS00ODdmLTlmZGQtYzMzYjM2NDRkZDNm LzEvZGNxbm1SS0loMmFBMTZ5UXFGYWZQOElEaF9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmXhPZF1C fTYxpjJu02XMdXVPtKU+uKKRD5SDYQ/Xx2GOzrMi7sBzmMu/aCidUJ28uTtxjZtz J/oLzCDUE6pGt3oBBbfXySJOErPTu11yDhsmXasA+Gy8Uuth88orXv8lCd+Uh4nZ vrJHQfBUrMCOhWu/OhMJ7Szyz2/cXPv14J9yIsOABTUBrfGKEv57fn6h3mVJIT0k jzG9x2XgV04pn6vSttVGATD/ok8LI1AG9gNtiKfZM9d8oUXJ0cf971x5OcMYNm/Q 3JF0zgkKO766yANvQkOMBh/JrHtFGcy+N0eheVpP/mGTUXJZRGFcHc/eWGYkvEju lwTZRyi9lpTB8w== -----END CERTIFICATE-----Generated at Thu Dec 18 12:42:52 2025 by rpki-client