This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft File: 1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft (raw, json) Hash identifier: 3tgXk3yjX5oMMWxrcr6Wmrv8vHXB3b/Ok0uGMcpOxGI= Subject key identifier: FC:94:FF:78:B1:D9:80:41:91:6D:B6:4A:62:6D:02:D0:77:4A:1F:33 Authority key identifier: F8:FF:9D:A4:30:BF:F2:68:C8:43:A2:E5:86:09:8C:8D:70:21:CA:06 Certificate issuer: /CN=f8ff9da430bff268c843a2e586098c8d7021ca06 Certificate serial: 019B32D6204F482173CCAAD37D5D2D37B3AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft Manifest number: 0E76 Signing time: Thu 18 Dec 2025 19:00:52 +0000 Manifest this update: Thu 18 Dec 2025 19:00:52 +0000 Manifest next update: Fri 19 Dec 2025 19:00:52 +0000 Files and hashes: 1: 1-P-dpDC_8mjIQ6LlhgmMjXAhygY.crl (hash: FjQUyd7QEXpjwIDp+pwixV+a1dtq4lXXCOlxWTIZJeU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft rsync://rpki.ripe.net/repository/DEFAULT/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:20:4f:48:21:73:cc:aa:d3:7d:5d:2d:37:b3:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8ff9da430bff268c843a2e586098c8d7021ca06 Validity Not Before: Dec 18 19:00:52 2025 GMT Not After : Dec 19 19:00:52 2025 GMT Subject: CN=fc94ff78b1d98041916db64a626d02d0774a1f33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:45:3c:dd:1a:08:02:d8:bb:e7:3c:53:bd:3f: 4b:ce:81:56:ff:2f:51:6a:a8:6c:11:6a:a6:fa:ee: 3c:cf:32:fc:f6:15:71:e5:ee:dc:10:c1:1f:6c:40: 53:be:0e:97:6a:8a:67:82:7b:a2:25:a0:80:5f:18: f4:49:f1:64:24:29:17:99:cf:5d:bb:01:3f:c7:fb: d6:f6:6c:2b:66:b8:eb:66:3b:fb:23:ac:41:11:13: e6:52:e7:83:bc:8b:91:d8:30:ce:bb:07:f4:6d:30: 84:f3:a1:99:5e:10:5a:00:31:64:7c:8f:d6:a4:2a: dc:9c:8f:eb:0d:a5:74:f9:d8:b0:bd:a1:46:cd:7e: 80:1f:c1:80:b6:11:8e:49:7c:0d:17:98:da:7b:74: 2c:dd:47:b7:8c:20:80:a1:bd:11:71:b1:30:5a:f0: 98:88:da:59:12:45:97:2e:44:fc:3e:86:60:da:65: d9:53:16:f2:7a:7a:b5:d7:18:c8:72:26:c5:ad:29: 75:a0:8d:8e:bc:27:ce:2e:26:99:75:74:65:1f:13: 8e:86:aa:87:d9:5d:c0:95:55:74:68:d7:95:5b:e9: be:e3:b9:a5:fb:38:60:40:52:29:30:7e:cb:5c:6d: 2c:c4:0b:7e:ca:98:fe:07:2d:a1:11:51:d2:fe:b5: 27:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:94:FF:78:B1:D9:80:41:91:6D:B6:4A:62:6D:02:D0:77:4A:1F:33 X509v3 Authority Key Identifier: keyid:F8:FF:9D:A4:30:BF:F2:68:C8:43:A2:E5:86:09:8C:8D:70:21:CA:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:4e:f1:59:e8:ed:93:d7:7e:a4:39:04:02:d6:c3:2a:66:a7: 6b:13:f9:ba:4f:18:f6:5e:1a:64:53:e1:39:3c:3a:fd:b4:da: 99:97:e0:41:0a:4f:d5:5a:7d:b7:59:ef:bc:a3:43:fd:98:17: 32:72:ff:0b:65:0d:f1:35:9a:8f:d4:a2:b3:ea:ba:3a:97:4b: 5f:da:15:d8:dd:80:08:52:6a:49:54:8f:bd:e5:89:eb:f9:e2: 3c:74:67:79:21:28:04:0f:5e:0c:ff:b0:62:63:6b:66:8d:86: 49:60:29:cc:a3:87:3f:19:27:38:f7:b5:4e:4d:08:e4:75:0f: 76:53:5f:b0:59:05:10:65:4f:fd:b1:e8:1d:aa:8d:84:9f:c2: 03:e6:99:74:6e:10:bc:0b:a0:3b:ad:c8:83:58:15:7c:6b:a6: d8:e8:56:1d:6e:a1:84:2d:04:6b:4b:79:cb:54:cf:f8:92:bb: 95:8d:fb:fc:35:86:90:35:e8:99:25:ee:ca:c7:fb:d5:b9:96: 54:35:f8:5e:8c:05:80:1c:d9:57:f7:06:56:61:ac:8a:6c:72: 1f:30:4f:57:b6:ba:43:13:a9:b5:78:8d:f5:0e:c4:e6:0c:70: ad:34:5a:e4:21:49:e0:93:7c:c3:7e:73:ec:51:3d:3d:a5:42: 5f:c0:c5:ae -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsy1iBPSCFzzKrTfV0tN7OqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZmY5ZGE0MzBiZmYyNjhjODQzYTJlNTg2MDk4YzhkNzAy MWNhMDYwHhcNMjUxMjE4MTkwMDUyWhcNMjUxMjE5MTkwMDUyWjAzMTEwLwYDVQQD EyhmYzk0ZmY3OGIxZDk4MDQxOTE2ZGI2NGE2MjZkMDJkMDc3NGExZjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEU83RoIAti75zxTvT9LzoFW/y9R aqhsEWqm+u48zzL89hVx5e7cEMEfbEBTvg6XaopngnuiJaCAXxj0SfFkJCkXmc9d uwE/x/vW9mwrZrjrZjv7I6xBERPmUueDvIuR2DDOuwf0bTCE86GZXhBaADFkfI/W pCrcnI/rDaV0+diwvaFGzX6AH8GAthGOSXwNF5jae3Qs3Ue3jCCAob0RcbEwWvCY iNpZEkWXLkT8PoZg2mXZUxbyenq11xjIcibFrSl1oI2OvCfOLiaZdXRlHxOOhqqH 2V3AlVV0aNeVW+m+47ml+zhgQFIpMH7LXG0sxAt+ypj+By2hEVHS/rUnvwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFPyU/3ix2YBBkW22SmJtAtB3Sh8zMB8GA1UdIwQY MBaAFPj/naQwv/JoyEOi5YYJjI1wIcoGMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1QLWRwRENfOG1qSVE2TGxoZ21NalhBaHlnWS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWYvMzFhNzhmLWMzMWItNDM4MS04NjMx LTY4MjljMGZjNzM4ZS8xLzEtUC1kcERDXzhtaklRNkxsaGdtTWpYQWh5Z1kubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2VmLzMxYTc4Zi1jMzFiLTQzODEtODYzMS02ODI5YzBmYzcz OGUvMS8xLVAtZHBEQ184bWpJUTZMbGhnbU1qWEFoeWdZLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfU7x Wejtk9d+pDkEAtbDKmanaxP5uk8Y9l4aZFPhOTw6/bTamZfgQQpP1Vp9t1nvvKND /ZgXMnL/C2UN8TWaj9Sis+q6OpdLX9oV2N2ACFJqSVSPveWJ6/niPHRneSEoBA9e DP+wYmNrZo2GSWApzKOHPxknOPe1Tk0I5HUPdlNfsFkFEGVP/bHoHaqNhJ/CA+aZ dG4QvAugO63Ig1gVfGum2OhWHW6hhC0Ea0t5y1TP+JK7lY37/DWGkDXomSXuysf7 1bmWVDX4XowFgBzZV/cGVmGsimxyHzBPV7a6QxOptXiN9Q7E5gxwrTRa5CFJ4JN8 w35z7FE9PaVCX8DFrg== -----END CERTIFICATE-----Generated at Fri Dec 19 02:31:01 2025 by rpki-client