This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.mft File: dtAtj564761YOO-TGIVJb8-vHGE.mft (raw, json) Hash identifier: Ad8Sd4suVytS8Daifl/E9S+9z2a4DyBQooWeJgVj1Kg= Subject key identifier: E9:B5:EB:60:CB:2A:03:38:B9:90:8D:71:43:AD:80:F5:35:3E:D9:A4 Authority key identifier: 76:D0:2D:8F:9E:B8:EF:AD:58:38:EF:93:18:85:49:6F:CF:AF:1C:61 Certificate issuer: /CN=76d02d8f9eb8efad5838ef931885496fcfaf1c61 Certificate serial: 019B650D56685C399467BAB036F24D2D12F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dtAtj564761YOO-TGIVJb8-vHGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.mft Manifest number: 179B Signing time: Sun 28 Dec 2025 13:02:11 +0000 Manifest this update: Sun 28 Dec 2025 13:02:11 +0000 Manifest next update: Mon 29 Dec 2025 13:02:11 +0000 Files and hashes: 1: dtAtj564761YOO-TGIVJb8-vHGE.crl (hash: QAOJZeEnJhw8P93ZCKgD54Y2y5XAanuf8WOfCzBV4NU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.crl rsync://rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.mft rsync://rpki.ripe.net/repository/DEFAULT/dtAtj564761YOO-TGIVJb8-vHGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 13:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:0d:56:68:5c:39:94:67:ba:b0:36:f2:4d:2d:12:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76d02d8f9eb8efad5838ef931885496fcfaf1c61 Validity Not Before: Dec 28 13:02:11 2025 GMT Not After : Dec 29 13:02:11 2025 GMT Subject: CN=e9b5eb60cb2a0338b9908d7143ad80f5353ed9a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:59:ee:0e:b9:92:64:e0:fd:20:02:5d:25:14: 0e:e7:b8:ff:a7:97:e0:73:6a:1a:89:5b:44:5a:64: 3d:d3:8b:a5:e0:52:0b:da:9a:8e:9a:ef:10:76:98: 8b:22:ae:51:5b:dd:12:40:3a:7a:ca:fc:23:99:04: 78:40:46:d7:be:58:3e:2e:30:09:47:be:70:8c:4f: 81:1b:9d:ab:6a:3a:7b:7c:d9:6c:a0:e4:5e:9d:b9: 67:84:8b:f3:47:52:47:87:d2:bc:c0:c7:95:47:ce: 0c:e1:05:fa:0d:2f:62:31:23:3b:ec:95:bd:42:43: 3a:8b:f3:f7:60:47:e2:e4:da:cb:af:90:7d:05:e7: cf:e5:6c:5f:7d:7a:1e:86:9d:22:60:d8:97:d4:10: 36:7c:bc:4c:ad:62:d0:dc:d6:8d:e0:04:17:c5:11: 2c:04:36:0f:49:72:63:37:90:b7:64:6a:ff:22:9c: c1:a9:7e:fe:5e:20:1b:a1:a7:65:1d:25:d1:08:56: 1d:41:8c:c1:57:c1:21:bf:0c:84:87:a3:c2:ce:f4: 3c:07:e8:04:b4:50:8f:81:94:a4:8c:45:33:1e:e7: b4:77:1d:1a:e7:2b:7e:cf:cb:a9:28:ad:75:95:3d: a2:69:48:5b:86:5f:a9:58:aa:9d:67:08:2d:53:9a: 2f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:B5:EB:60:CB:2A:03:38:B9:90:8D:71:43:AD:80:F5:35:3E:D9:A4 X509v3 Authority Key Identifier: keyid:76:D0:2D:8F:9E:B8:EF:AD:58:38:EF:93:18:85:49:6F:CF:AF:1C:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dtAtj564761YOO-TGIVJb8-vHGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:a4:94:d0:fe:54:af:c2:88:22:07:b8:d4:39:f1:39:f1:3b: 95:cd:bf:52:34:88:b1:2d:8d:c1:b7:7d:32:a4:d2:cb:8e:5d: 81:5a:fa:47:a1:e4:fa:57:55:5c:31:c7:da:27:dd:ec:3e:73: 9f:13:ff:fd:4f:41:7c:6b:55:64:64:c9:f9:f3:dc:8d:7f:80: b9:3f:17:41:cd:ea:de:aa:d6:b6:16:5e:ef:ec:f2:55:71:5c: 71:58:ad:2f:94:4b:09:7e:af:ad:5c:77:30:a9:48:9f:73:48: 83:a7:4e:ea:85:db:84:33:10:72:62:99:1e:da:5c:99:b2:81: 75:af:00:94:b8:98:24:58:1f:92:61:d7:15:b6:69:f6:70:97: 05:bb:b0:5f:e7:d8:46:af:03:e9:a9:3a:93:0d:b4:1c:f8:65: 44:8b:38:d3:51:6b:28:34:7d:da:bf:54:a0:90:54:1f:f0:ac: 51:b1:61:eb:18:be:a8:d0:7e:ac:38:cf:0a:80:4f:10:a7:ac: 35:c4:bd:3a:69:07:e8:c5:e1:9d:0b:d1:72:98:88:e3:2c:d6: 55:54:d2:9d:b8:b1:bf:08:33:48:ea:f8:ef:67:d1:d5:38:d6: 27:3c:eb:d9:89:77:ea:b5:21:1e:d9:0d:89:01:6a:1a:2d:41: 41:f7:7f:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlDVZoXDmUZ7qwNvJNLRLwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2ZDAyZDhmOWViOGVmYWQ1ODM4ZWY5MzE4ODU0OTZmY2Zh ZjFjNjEwHhcNMjUxMjI4MTMwMjExWhcNMjUxMjI5MTMwMjExWjAzMTEwLwYDVQQD EyhlOWI1ZWI2MGNiMmEwMzM4Yjk5MDhkNzE0M2FkODBmNTM1M2VkOWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVnuDrmSZOD9IAJdJRQO57j/p5fg c2oaiVtEWmQ904ul4FIL2pqOmu8QdpiLIq5RW90SQDp6yvwjmQR4QEbXvlg+LjAJ R75wjE+BG52rajp7fNlsoORenblnhIvzR1JHh9K8wMeVR84M4QX6DS9iMSM77JW9 QkM6i/P3YEfi5NrLr5B9BefP5WxffXoehp0iYNiX1BA2fLxMrWLQ3NaN4AQXxREs BDYPSXJjN5C3ZGr/IpzBqX7+XiAboadlHSXRCFYdQYzBV8EhvwyEh6PCzvQ8B+gE tFCPgZSkjEUzHue0dx0a5yt+z8upKK11lT2iaUhbhl+pWKqdZwgtU5ovwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOm162DLKgM4uZCNcUOtgPU1PtmkMB8GA1UdIwQY MBaAFHbQLY+euO+tWDjvkxiFSW/PrxxhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHRBdGo1NjQ3NjFZT08tVEdJVkpiOC12SEdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8yMzI3NjMtMjZmOC00NDFiLTk2Yjgt MDUxNjFmZjcxZDgwLzEvZHRBdGo1NjQ3NjFZT08tVEdJVkpiOC12SEdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS8yMzI3NjMtMjZmOC00NDFiLTk2YjgtMDUxNjFmZjcxZDgw LzEvZHRBdGo1NjQ3NjFZT08tVEdJVkpiOC12SEdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOKSU0P5U r8KIIge41DnxOfE7lc2/UjSIsS2Nwbd9MqTSy45dgVr6R6Hk+ldVXDHH2ifd7D5z nxP//U9BfGtVZGTJ+fPcjX+AuT8XQc3q3qrWthZe7+zyVXFccVitL5RLCX6vrVx3 MKlIn3NIg6dO6oXbhDMQcmKZHtpcmbKBda8AlLiYJFgfkmHXFbZp9nCXBbuwX+fY Rq8D6ak6kw20HPhlRIs401FrKDR92r9UoJBUH/CsUbFh6xi+qNB+rDjPCoBPEKes NcS9OmkH6MXhnQvRcpiI4yzWVVTSnbixvwgzSOr472fR1TjWJzzr2Yl36rUhHtkN iQFqGi1BQfd/uA== -----END CERTIFICATE-----Generated at Sun Dec 28 23:22:47 2025 by rpki-client