This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft File: 1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft (raw, json) Hash identifier: +J39Q47Vn6YVvcig6rLrDdrSaLS/L/uvZstwU7A817Q= Subject key identifier: C8:84:9A:C3:51:83:9C:9A:36:79:89:A0:D7:4D:48:F2:9D:37:45:B8 Authority key identifier: F8:FF:9D:A4:30:BF:F2:68:C8:43:A2:E5:86:09:8C:8D:70:21:CA:06 Certificate issuer: /CN=f8ff9da430bff268c843a2e586098c8d7021ca06 Certificate serial: 019B4FCE3E2414405B6553BACDFC8BAF0D48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft Manifest number: 0E85 Signing time: Wed 24 Dec 2025 10:01:14 +0000 Manifest this update: Wed 24 Dec 2025 10:01:14 +0000 Manifest next update: Thu 25 Dec 2025 10:01:14 +0000 Files and hashes: 1: 1-P-dpDC_8mjIQ6LlhgmMjXAhygY.crl (hash: calqhUHishb68QRr3QHJUc0/SKTRD5co5zrd7L0w0ak=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft rsync://rpki.ripe.net/repository/DEFAULT/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:ce:3e:24:14:40:5b:65:53:ba:cd:fc:8b:af:0d:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8ff9da430bff268c843a2e586098c8d7021ca06 Validity Not Before: Dec 24 10:01:14 2025 GMT Not After : Dec 25 10:01:14 2025 GMT Subject: CN=c8849ac351839c9a367989a0d74d48f29d3745b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:94:a1:ab:83:8b:bf:13:f0:e0:6d:b9:14:e6: 38:e6:72:12:e3:2d:55:50:7b:05:5d:0f:5c:79:70: 64:45:93:23:5f:f0:00:72:c6:30:09:af:0f:43:a8: 06:95:a8:a4:fa:38:18:e4:0d:1a:b7:42:a8:46:f0: 73:71:96:90:85:84:57:92:16:2b:0f:bd:d4:21:e3: fb:4c:0b:1d:2d:b9:ea:a4:26:b4:a4:42:be:71:21: e8:44:16:37:8b:de:7d:36:07:ee:ea:21:20:ea:2e: 76:b8:fc:3a:28:66:f7:4f:66:f9:48:6e:b7:5e:49: 63:c2:ff:49:87:ad:b4:ae:1a:de:44:9e:b7:c4:5b: db:47:88:f7:84:07:0b:da:59:5d:62:2f:24:09:79: b4:ee:3b:88:fe:48:ef:a8:d2:40:97:eb:aa:05:ff: e9:b1:4b:a9:a7:19:b7:ae:0c:00:04:ee:96:90:3a: 80:86:b5:9a:fc:46:c4:46:0c:d1:7e:27:05:74:73: c3:d7:1a:b5:10:20:d7:74:0d:9f:61:07:87:48:dd: 68:08:d2:72:9f:29:cb:39:6c:04:0c:ec:88:dc:7f: 90:5e:07:7f:31:22:fa:9d:1a:84:21:76:8e:dc:f5: 5a:36:34:ef:9a:fb:c2:11:49:1e:e4:84:91:f3:86: c7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:84:9A:C3:51:83:9C:9A:36:79:89:A0:D7:4D:48:F2:9D:37:45:B8 X509v3 Authority Key Identifier: keyid:F8:FF:9D:A4:30:BF:F2:68:C8:43:A2:E5:86:09:8C:8D:70:21:CA:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/31a78f-c31b-4381-8631-6829c0fc738e/1/1-P-dpDC_8mjIQ6LlhgmMjXAhygY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:63:fe:67:94:2d:67:14:1c:af:1d:ba:48:7e:d6:6f:2f:39: 44:d8:16:62:c7:9d:e6:bc:b6:d4:48:6c:c0:fc:b6:d4:a2:fc: 37:eb:2a:ce:8f:c7:d2:1d:32:01:0f:7a:12:96:30:a8:b6:dc: de:60:fe:ed:d9:55:1f:be:ff:00:96:34:f5:be:ba:95:65:7f: 9e:25:e3:d3:cc:30:48:dc:9b:73:7c:b9:42:79:18:90:94:ca: dc:4b:39:72:6a:6b:7d:09:64:e0:03:aa:0b:6d:bb:cf:d4:76: 71:f5:4c:bb:1f:d2:e9:65:62:6c:80:a6:ab:d6:ee:1b:aa:14: c7:64:86:24:91:e0:b1:4d:79:43:1d:b3:9e:93:6c:f7:6c:ed: dc:9c:16:96:68:20:25:4f:1c:03:7c:a1:69:67:78:65:1f:f7: ca:51:87:b0:60:0c:15:f5:d3:09:02:aa:46:45:1e:96:91:a8: e9:d0:35:22:9c:b3:82:29:15:fa:1c:57:e1:1d:e9:ab:7a:7d: 7f:66:e8:f3:23:d1:6a:fc:44:cf:06:06:3a:45:10:c3:ff:42: 06:8a:d6:92:52:b1:85:d3:a9:00:09:ae:2a:19:e5:e0:33:06: 48:e7:53:b1:5e:4b:40:c4:98:2f:b8:be:d8:d6:d1:d9:59:c2: af:6f:a7:a2 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtPzj4kFEBbZVO6zfyLrw1IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZmY5ZGE0MzBiZmYyNjhjODQzYTJlNTg2MDk4YzhkNzAy MWNhMDYwHhcNMjUxMjI0MTAwMTE0WhcNMjUxMjI1MTAwMTE0WjAzMTEwLwYDVQQD EyhjODg0OWFjMzUxODM5YzlhMzY3OTg5YTBkNzRkNDhmMjlkMzc0NWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZShq4OLvxPw4G25FOY45nIS4y1V UHsFXQ9ceXBkRZMjX/AAcsYwCa8PQ6gGlaik+jgY5A0at0KoRvBzcZaQhYRXkhYr D73UIeP7TAsdLbnqpCa0pEK+cSHoRBY3i959Ngfu6iEg6i52uPw6KGb3T2b5SG63 Xkljwv9Jh620rhreRJ63xFvbR4j3hAcL2lldYi8kCXm07juI/kjvqNJAl+uqBf/p sUuppxm3rgwABO6WkDqAhrWa/EbERgzRficFdHPD1xq1ECDXdA2fYQeHSN1oCNJy nynLOWwEDOyI3H+QXgd/MSL6nRqEIXaO3PVaNjTvmvvCEUke5ISR84bH7QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFMiEmsNRg5yaNnmJoNdNSPKdN0W4MB8GA1UdIwQY MBaAFPj/naQwv/JoyEOi5YYJjI1wIcoGMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1QLWRwRENfOG1qSVE2TGxoZ21NalhBaHlnWS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWYvMzFhNzhmLWMzMWItNDM4MS04NjMx LTY4MjljMGZjNzM4ZS8xLzEtUC1kcERDXzhtaklRNkxsaGdtTWpYQWh5Z1kubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2VmLzMxYTc4Zi1jMzFiLTQzODEtODYzMS02ODI5YzBmYzcz OGUvMS8xLVAtZHBEQ184bWpJUTZMbGhnbU1qWEFoeWdZLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKWP+ Z5QtZxQcrx26SH7Wby85RNgWYsed5ry21EhswPy21KL8N+sqzo/H0h0yAQ96EpYw qLbc3mD+7dlVH77/AJY09b66lWV/niXj08wwSNybc3y5QnkYkJTK3Es5cmprfQlk 4AOqC227z9R2cfVMux/S6WVibICmq9buG6oUx2SGJJHgsU15Qx2znpNs92zt3JwW lmggJU8cA3yhaWd4ZR/3ylGHsGAMFfXTCQKqRkUelpGo6dA1IpyzgikV+hxX4R3p q3p9f2bo8yPRavxEzwYGOkUQw/9CBorWklKxhdOpAAmuKhnl4DMGSOdTsV5LQMSY L7i+2NbR2VnCr2+nog== -----END CERTIFICATE-----Generated at Wed Dec 24 11:59:57 2025 by rpki-client