This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft File: dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft (raw, json) Hash identifier: mV1alJiLLlj6tHLANi91CvnkXpyYf92N6beaietE6bY= Subject key identifier: E4:98:44:B8:2D:F0:DD:40:22:C6:FF:96:F2:4C:52:D7:50:53:A3:43 Authority key identifier: 74:D7:DA:63:92:99:99:60:33:95:87:74:48:CE:50:AC:6E:02:13:A9 Certificate issuer: /CN=74d7da63929999603395877448ce50ac6e0213a9 Certificate serial: 019B38A24B723F96F0148F1EBC0821284DB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft Manifest number: 0FED Signing time: Fri 19 Dec 2025 22:01:58 +0000 Manifest this update: Fri 19 Dec 2025 22:01:58 +0000 Manifest next update: Sat 20 Dec 2025 22:01:58 +0000 Files and hashes: 1: dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl (hash: F5Z2JrnGG4oUHYyfeM69RECxELNI3k4r7cBUQH6RlKU=) 2: fU3MlRUECyf8Mob8gpdjGa0WFt0.roa (hash: 1bRjiSyIpRcT6gpZZI2DT+oOrLLRlf7RVwqkDF08rbw=) 3: fzU99qCGkV_CIT5aPe-FRXxnYbQ.roa (hash: vzw9SWyMsFCc6IE8QjYq1it7590sCq4Ux6IdTNIF19M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:4b:72:3f:96:f0:14:8f:1e:bc:08:21:28:4d:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74d7da63929999603395877448ce50ac6e0213a9 Validity Not Before: Dec 19 22:01:58 2025 GMT Not After : Dec 20 22:01:58 2025 GMT Subject: CN=e49844b82df0dd4022c6ff96f24c52d75053a343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b0:13:72:33:ef:61:8b:14:f6:3b:34:2a:d6: a5:9a:21:fc:c1:26:b7:f8:e3:7b:3e:f7:35:ee:1f: 5d:f8:bf:20:62:a3:f2:7d:4c:5e:65:dd:39:9c:d7: ff:87:39:da:c5:e5:d5:b1:39:86:a7:5d:d5:79:5b: bf:eb:4f:b2:bb:6a:60:bb:a5:1a:f9:75:75:e9:f2: 1d:b9:43:54:9a:88:53:2c:e0:0d:18:da:5d:e6:62: 66:8d:ec:28:06:fc:17:85:aa:06:99:52:10:a8:ed: 9c:5a:b2:7e:4b:cc:c3:e2:4b:84:7d:5d:5b:90:11: 67:a1:7e:08:b9:03:13:e1:f7:4d:ea:24:88:92:ff: 5d:1e:69:e6:d9:89:84:ac:5b:10:59:79:ea:54:e2: 25:5d:2c:bc:f4:0a:25:e0:c3:a9:f2:65:74:60:b7: 94:43:fc:a0:95:1d:0f:51:ee:77:8a:e7:41:2d:ed: bd:e5:67:b5:eb:5b:1f:24:90:ee:76:76:3b:a0:e0: ae:fa:e3:dd:8f:00:ef:c8:81:64:f8:e9:e7:3a:e0: 19:e2:d1:6e:86:7f:8b:75:05:35:c4:6f:e3:d9:6d: a0:27:3e:5b:0b:4b:e9:e9:5d:dd:c6:fa:95:c0:8d: 4b:9c:ee:16:d4:18:b7:77:e2:9e:e9:cd:e9:6e:9d: c4:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:98:44:B8:2D:F0:DD:40:22:C6:FF:96:F2:4C:52:D7:50:53:A3:43 X509v3 Authority Key Identifier: keyid:74:D7:DA:63:92:99:99:60:33:95:87:74:48:CE:50:AC:6E:02:13:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:c8:87:37:07:d0:60:0b:9e:a3:19:7d:8c:e8:00:9e:60:5a: 71:1a:4f:28:d5:12:b8:2b:92:4e:0b:19:0d:0b:e9:3c:7b:74: ce:a1:f4:b1:61:3a:22:9b:b4:6f:93:d4:65:da:70:95:bb:25: 7b:a0:8e:ed:74:de:90:23:24:16:6c:85:6b:fc:06:de:e6:0d: 69:15:8d:da:35:8c:2a:a4:86:07:20:9c:0b:76:e5:b5:eb:13: b6:51:02:a6:70:b2:61:84:13:a5:3d:9f:51:ee:69:9d:f6:53: cf:b6:2d:7d:3a:07:c5:7f:74:cc:76:82:16:c7:9c:11:e3:e1: a0:bd:01:0a:9b:2c:1b:f8:2b:dd:95:fa:56:f2:c6:d4:06:1a: 41:fa:76:f8:19:36:82:f5:22:93:33:3e:cf:8e:16:fc:11:73: 6c:09:00:42:1b:fe:54:1a:07:f5:8e:5e:09:4f:ca:27:64:b3: 32:b2:a6:12:57:37:bc:70:85:df:e2:6d:9f:dd:c0:ec:32:8b: 60:2d:63:75:5c:e2:06:e6:2a:9a:be:f1:b0:fc:83:b0:68:45: ed:f5:7c:9b:8c:53:37:19:15:99:e6:05:10:26:35:6d:09:6d: 75:1e:ef:8d:41:91:29:f0:c2:ac:2b:de:db:fd:54:69:48:4f: 4d:aa:0b:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oktyP5bwFI8evAghKE2zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZDdkYTYzOTI5OTk5NjAzMzk1ODc3NDQ4Y2U1MGFjNmUw MjEzYTkwHhcNMjUxMjE5MjIwMTU4WhcNMjUxMjIwMjIwMTU4WjAzMTEwLwYDVQQD EyhlNDk4NDRiODJkZjBkZDQwMjJjNmZmOTZmMjRjNTJkNzUwNTNhMzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rATcjPvYYsU9js0KtalmiH8wSa3 +ON7Pvc17h9d+L8gYqPyfUxeZd05nNf/hznaxeXVsTmGp13VeVu/60+yu2pgu6Ua +XV16fIduUNUmohTLOANGNpd5mJmjewoBvwXhaoGmVIQqO2cWrJ+S8zD4kuEfV1b kBFnoX4IuQMT4fdN6iSIkv9dHmnm2YmErFsQWXnqVOIlXSy89Aol4MOp8mV0YLeU Q/yglR0PUe53iudBLe295We161sfJJDudnY7oOCu+uPdjwDvyIFk+OnnOuAZ4tFu hn+LdQU1xG/j2W2gJz5bC0vp6V3dxvqVwI1LnO4W1Bi3d+Ke6c3pbp3EQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOSYRLgt8N1AIsb/lvJMUtdQU6NDMB8GA1UdIwQY MBaAFHTX2mOSmZlgM5WHdEjOUKxuAhOpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE5mYVk1S1ptV0F6bFlkMFNNNVFyRzRDRTZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8wZWI4NTItYWYzNC00Y2I5LTg3MmUt NGI1ZDVkNWY4Njk5LzEvZE5mYVk1S1ptV0F6bFlkMFNNNVFyRzRDRTZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8wZWI4NTItYWYzNC00Y2I5LTg3MmUtNGI1ZDVkNWY4Njk5 LzEvZE5mYVk1S1ptV0F6bFlkMFNNNVFyRzRDRTZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG8iHNwfQ YAueoxl9jOgAnmBacRpPKNUSuCuSTgsZDQvpPHt0zqH0sWE6Ipu0b5PUZdpwlbsl e6CO7XTekCMkFmyFa/wG3uYNaRWN2jWMKqSGByCcC3bltesTtlECpnCyYYQTpT2f Ue5pnfZTz7YtfToHxX90zHaCFsecEePhoL0BCpssG/gr3ZX6VvLG1AYaQfp2+Bk2 gvUikzM+z44W/BFzbAkAQhv+VBoH9Y5eCU/KJ2SzMrKmElc3vHCF3+Jtn93A7DKL YC1jdVziBuYqmr7xsPyDsGhF7fV8m4xTNxkVmeYFECY1bQltdR7vjUGRKfDCrCve 2/1UaUhPTaoLWA== -----END CERTIFICATE-----Generated at Sat Dec 20 07:29:59 2025 by rpki-client