This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/818ac5-93dd-40fd-bf6f-e04f8fcc2ca1/1/dXHIkpmbtFZLzkgMkhtv8XIF7MY.mft File: dXHIkpmbtFZLzkgMkhtv8XIF7MY.mft (raw, json) Hash identifier: ShEVy+qRE9zVp41gZB8bsgMykYMQyK4qooFOK5AZyc0= Subject key identifier: 80:00:BF:0C:E6:A8:B5:39:06:FB:8D:46:D2:38:DA:3F:EC:CB:DF:E6 Authority key identifier: 75:71:C8:92:99:9B:B4:56:4B:CE:48:0C:92:1B:6F:F1:72:05:EC:C6 Certificate issuer: /CN=7571c892999bb4564bce480c921b6ff17205ecc6 Certificate serial: 019B281B4E17CC94E7C2497A9481DF2EB090 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXHIkpmbtFZLzkgMkhtv8XIF7MY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/818ac5-93dd-40fd-bf6f-e04f8fcc2ca1/1/dXHIkpmbtFZLzkgMkhtv8XIF7MY.mft Manifest number: 075C Signing time: Tue 16 Dec 2025 17:00:36 +0000 Manifest this update: Tue 16 Dec 2025 17:00:36 +0000 Manifest next update: Wed 17 Dec 2025 17:00:36 +0000 Files and hashes: 1: dXHIkpmbtFZLzkgMkhtv8XIF7MY.crl (hash: nsXx96rGq7PcmSOwDl2v3pz1p6DGJhuZZuHMPGpEmw4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/818ac5-93dd-40fd-bf6f-e04f8fcc2ca1/1/dXHIkpmbtFZLzkgMkhtv8XIF7MY.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/818ac5-93dd-40fd-bf6f-e04f8fcc2ca1/1/dXHIkpmbtFZLzkgMkhtv8XIF7MY.mft rsync://rpki.ripe.net/repository/DEFAULT/dXHIkpmbtFZLzkgMkhtv8XIF7MY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:1b:4e:17:cc:94:e7:c2:49:7a:94:81:df:2e:b0:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7571c892999bb4564bce480c921b6ff17205ecc6 Validity Not Before: Dec 16 17:00:36 2025 GMT Not After : Dec 17 17:00:36 2025 GMT Subject: CN=8000bf0ce6a8b53906fb8d46d238da3feccbdfe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:72:9a:ab:09:ad:b4:00:18:da:07:d8:03:31: 0f:74:55:03:69:0d:7b:75:92:9f:36:e9:96:33:ef: 94:0f:1c:d1:6f:12:53:fa:e5:75:83:c0:a8:8d:2f: 87:9f:2c:2d:0c:75:70:2e:1f:db:1d:46:ed:30:89: ab:54:aa:79:88:97:95:d2:7c:9c:9c:a2:71:09:b3: 3b:c3:aa:b0:d7:8e:75:84:88:fd:59:67:4b:28:e6: 76:a4:f3:50:1f:4d:a3:2c:66:ea:49:dc:32:34:66: af:44:cc:1f:99:1e:dc:72:f2:d2:28:05:b1:e4:18: c5:b7:5e:81:0d:c3:d4:12:f2:f6:16:92:55:3b:58: 14:3a:75:68:45:ae:71:15:8f:3d:17:d2:63:46:2c: de:ee:ef:4b:38:44:33:4e:fc:ae:75:4e:67:43:ed: 88:93:a8:8d:cc:62:08:66:99:42:28:6a:ff:37:0a: e9:27:9b:14:78:25:9b:3b:76:ba:32:36:73:00:fb: a8:63:81:a9:6f:57:b9:46:e0:bd:3c:14:83:b1:2e: 6a:f3:bd:98:c5:ca:63:bf:a3:19:5b:26:2c:d9:6a: da:97:d3:ea:68:fa:66:f6:86:3d:a6:07:b0:d6:fd: 29:89:6b:d2:c3:d5:2a:83:0f:91:08:0f:f0:03:fb: f5:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:00:BF:0C:E6:A8:B5:39:06:FB:8D:46:D2:38:DA:3F:EC:CB:DF:E6 X509v3 Authority Key Identifier: keyid:75:71:C8:92:99:9B:B4:56:4B:CE:48:0C:92:1B:6F:F1:72:05:EC:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXHIkpmbtFZLzkgMkhtv8XIF7MY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/818ac5-93dd-40fd-bf6f-e04f8fcc2ca1/1/dXHIkpmbtFZLzkgMkhtv8XIF7MY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/818ac5-93dd-40fd-bf6f-e04f8fcc2ca1/1/dXHIkpmbtFZLzkgMkhtv8XIF7MY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:d4:c0:f3:52:b7:c8:7f:1e:3b:14:1d:8b:36:76:4a:dc:93: 0a:67:fb:36:a2:5b:23:3e:2a:26:b0:5d:44:10:9a:9e:c1:02: 08:1d:6a:a0:16:34:6a:99:f1:7b:62:9e:4e:d1:54:22:40:58: a7:0b:02:d2:fb:02:b6:39:cf:c0:9d:bb:af:d2:14:80:58:2e: 02:77:f6:c7:bf:ab:d1:58:58:46:87:65:f8:72:4a:79:6e:b5: 73:37:9b:2c:80:44:b9:86:d9:6d:c3:a1:37:63:7b:54:32:93: 3e:b1:bf:7f:43:73:43:5d:f6:37:18:d0:f1:11:14:25:1f:11: 3b:80:c4:ae:f2:9b:47:d1:0f:8f:5b:14:53:3d:09:15:6a:d4: 02:59:89:9f:a4:4b:7b:b3:51:22:4c:03:c2:35:b4:87:c3:a1: a0:0e:44:03:63:9d:80:c1:eb:38:5a:ff:a5:eb:7e:c8:d5:50: 6a:24:fb:60:13:3b:aa:43:f6:87:f3:33:84:77:5e:66:72:ec: 3b:43:ac:1a:f0:51:51:39:d2:a3:4f:74:82:58:46:1e:1e:b6: 29:d3:76:e4:48:0d:5f:79:03:f0:28:23:d6:5c:7b:3f:e5:dc: bd:3b:53:46:6c:ac:d4:76:3e:ff:09:6b:b9:25:c2:12:53:1f: 67:9a:6a:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoG04XzJTnwkl6lIHfLrCQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1NzFjODkyOTk5YmI0NTY0YmNlNDgwYzkyMWI2ZmYxNzIw NWVjYzYwHhcNMjUxMjE2MTcwMDM2WhcNMjUxMjE3MTcwMDM2WjAzMTEwLwYDVQQD Eyg4MDAwYmYwY2U2YThiNTM5MDZmYjhkNDZkMjM4ZGEzZmVjY2JkZmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3KaqwmttAAY2gfYAzEPdFUDaQ17 dZKfNumWM++UDxzRbxJT+uV1g8CojS+HnywtDHVwLh/bHUbtMImrVKp5iJeV0nyc nKJxCbM7w6qw1451hIj9WWdLKOZ2pPNQH02jLGbqSdwyNGavRMwfmR7ccvLSKAWx 5BjFt16BDcPUEvL2FpJVO1gUOnVoRa5xFY89F9JjRize7u9LOEQzTvyudU5nQ+2I k6iNzGIIZplCKGr/NwrpJ5sUeCWbO3a6MjZzAPuoY4Gpb1e5RuC9PBSDsS5q872Y xcpjv6MZWyYs2Wral9PqaPpm9oY9pgew1v0piWvSw9Uqgw+RCA/wA/v1ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIAAvwzmqLU5BvuNRtI42j/sy9/mMB8GA1UdIwQY MBaAFHVxyJKZm7RWS85IDJIbb/FyBezGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFhISWtwbWJ0RlpMemtnTWtodHY4WElGN01ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC84MThhYzUtOTNkZC00MGZkLWJmNmYt ZTA0ZjhmY2MyY2ExLzEvZFhISWtwbWJ0RlpMemtnTWtodHY4WElGN01ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC84MThhYzUtOTNkZC00MGZkLWJmNmYtZTA0ZjhmY2MyY2Ex LzEvZFhISWtwbWJ0RlpMemtnTWtodHY4WElGN01ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYtTA81K3 yH8eOxQdizZ2StyTCmf7NqJbIz4qJrBdRBCansECCB1qoBY0apnxe2KeTtFUIkBY pwsC0vsCtjnPwJ27r9IUgFguAnf2x7+r0VhYRodl+HJKeW61czebLIBEuYbZbcOh N2N7VDKTPrG/f0NzQ132NxjQ8REUJR8RO4DErvKbR9EPj1sUUz0JFWrUAlmJn6RL e7NRIkwDwjW0h8OhoA5EA2OdgMHrOFr/pet+yNVQaiT7YBM7qkP2h/MzhHdeZnLs O0OsGvBRUTnSo090glhGHh62KdN25EgNX3kD8Cgj1lx7P+XcvTtTRmys1HY+/wlr uSXCElMfZ5pqPg== -----END CERTIFICATE-----Generated at Wed Dec 17 00:25:53 2025 by rpki-client