This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft File: D3Tlry-nIVykabJ8EHnx_9X8rvg.mft (raw, json) Hash identifier: ZB743EnVShAWx5Rifn+u1k3+DVsCZms4EZofJ+a21mc= Subject key identifier: F2:B4:EE:C8:12:C0:27:41:BC:19:97:BA:FD:AB:CF:56:10:7F:63:3B Authority key identifier: 0F:74:E5:AF:2F:A7:21:5C:A4:69:B2:7C:10:79:F1:FF:D5:FC:AE:F8 Certificate issuer: /CN=0f74e5af2fa7215ca469b27c1079f1ffd5fcaef8 Certificate serial: 019B3CEBB18E28C2640A21B0F885B5C687F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft Manifest number: 0617 Signing time: Sat 20 Dec 2025 18:00:37 +0000 Manifest this update: Sat 20 Dec 2025 18:00:37 +0000 Manifest next update: Sun 21 Dec 2025 18:00:37 +0000 Files and hashes: 1: D3Tlry-nIVykabJ8EHnx_9X8rvg.crl (hash: Sy2kNCIMhx6OfcTgszILrnrK1QiJ6tbD2IA1HsJ6u0E=) 2: VDPfxaZNYgN6f0mgtDD2wmc6NUg.roa (hash: 0dxJ0L7unUdYddqR9bLGYECF59D15vEhelIex1V/ecQ=) 3: sllzpkHFh9mOLjlCML4tbQK0pwU.roa (hash: E6feljoCdpMR0hz/J2bpGEFeQDlLz1z/a780M0tQTGM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.crl rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:b1:8e:28:c2:64:0a:21:b0:f8:85:b5:c6:87:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f74e5af2fa7215ca469b27c1079f1ffd5fcaef8 Validity Not Before: Dec 20 18:00:37 2025 GMT Not After : Dec 21 18:00:37 2025 GMT Subject: CN=f2b4eec812c02741bc1997bafdabcf56107f633b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e1:67:b1:01:3e:f2:39:b0:62:85:8c:e1:87: 3a:49:b4:f4:bc:a9:0b:21:08:9c:b1:01:da:3f:34: b6:28:6e:35:39:cb:f7:77:f0:16:4b:88:c8:59:f5: c1:c9:68:8d:a4:af:9c:b0:93:d2:50:b7:ab:5e:83: 01:df:85:77:f9:b9:7b:4f:47:17:96:18:15:26:1b: c4:44:0a:4d:ce:01:d3:07:5d:de:38:af:4d:10:15: 00:42:a4:46:07:46:53:c3:50:1d:21:bb:d0:b8:14: a1:a0:e0:13:30:d6:29:78:36:20:ff:c3:80:79:89: ea:64:a5:2e:0d:ab:51:59:e3:4e:7e:ff:4a:59:3c: b0:cf:d5:de:4a:97:c0:e0:8f:2f:fb:2d:48:9f:4e: 3c:62:32:28:fb:b7:91:1f:a5:f6:3d:e8:42:23:23: 96:38:43:b3:91:ed:5e:b0:57:a7:96:0a:7d:b5:15: f6:4f:43:85:d0:33:5b:40:a6:b0:de:33:55:e1:9b: 7c:5e:9d:3e:fd:a3:41:de:6c:f8:c9:da:4a:a2:c1: fe:a0:41:c0:8b:a3:47:5f:71:c5:4c:e8:ac:9d:7c: bb:b3:7c:80:74:13:cb:bc:da:b5:a4:e7:bd:b6:f1: c9:71:02:ea:37:d8:9b:13:80:11:41:04:4d:fb:7d: c1:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B4:EE:C8:12:C0:27:41:BC:19:97:BA:FD:AB:CF:56:10:7F:63:3B X509v3 Authority Key Identifier: keyid:0F:74:E5:AF:2F:A7:21:5C:A4:69:B2:7C:10:79:F1:FF:D5:FC:AE:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3Tlry-nIVykabJ8EHnx_9X8rvg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/49ace8-291d-4d4f-922e-eabcbc083f9b/1/D3Tlry-nIVykabJ8EHnx_9X8rvg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:65:10:1e:78:3b:33:52:01:ce:93:01:42:4b:20:9a:d9:ef: 68:92:22:fc:a1:1b:06:2b:e9:20:bf:1d:62:37:1e:b7:c9:bc: 7b:df:34:a4:ec:6c:6e:91:f7:22:1f:2f:6b:96:54:06:b2:49: aa:72:30:70:8a:18:1b:a5:68:70:f8:aa:33:72:9d:7e:1c:75: fa:f5:c8:d2:21:bf:95:e6:ad:e4:c9:a0:4f:23:3c:ce:11:99: 3e:f2:e5:b7:d7:6f:a2:e8:3a:f6:11:27:e4:46:a2:cb:4c:02: a3:ba:22:c9:47:5b:77:e8:19:ba:d7:23:41:36:0e:fb:0f:7b: 40:f3:61:7e:fb:6a:ac:df:41:e3:8d:ab:11:c9:22:1a:73:c5: 7f:98:e9:60:15:90:38:85:29:da:2e:6d:9a:a9:2e:24:fd:bf: 3b:02:8f:88:2b:dd:29:29:08:1a:97:4b:9c:d0:46:95:6a:fa: b6:46:fd:ec:7d:14:0e:e7:be:34:2f:87:99:48:31:b6:50:cd: a8:c9:88:a6:de:35:16:b5:0c:99:e3:20:81:53:98:5f:c4:69: 4f:64:42:d2:f5:21:09:52:16:72:51:21:87:c6:4f:38:61:06: e3:1e:53:9b:8a:75:64:5a:43:c8:99:bd:01:8f:dd:fd:08:28: 55:7f:69:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs867GOKMJkCiGw+IW1xofyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNzRlNWFmMmZhNzIxNWNhNDY5YjI3YzEwNzlmMWZmZDVm Y2FlZjgwHhcNMjUxMjIwMTgwMDM3WhcNMjUxMjIxMTgwMDM3WjAzMTEwLwYDVQQD EyhmMmI0ZWVjODEyYzAyNzQxYmMxOTk3YmFmZGFiY2Y1NjEwN2Y2MzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uFnsQE+8jmwYoWM4Yc6SbT0vKkL IQicsQHaPzS2KG41Ocv3d/AWS4jIWfXByWiNpK+csJPSULerXoMB34V3+bl7T0cX lhgVJhvERApNzgHTB13eOK9NEBUAQqRGB0ZTw1AdIbvQuBShoOATMNYpeDYg/8OA eYnqZKUuDatRWeNOfv9KWTywz9XeSpfA4I8v+y1In048YjIo+7eRH6X2PehCIyOW OEOzke1esFenlgp9tRX2T0OF0DNbQKaw3jNV4Zt8Xp0+/aNB3mz4ydpKosH+oEHA i6NHX3HFTOisnXy7s3yAdBPLvNq1pOe9tvHJcQLqN9ibE4ARQQRN+33BSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPK07sgSwCdBvBmXuv2rz1YQf2M7MB8GA1UdIwQY MBaAFA905a8vpyFcpGmyfBB58f/V/K74MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDNUbHJ5LW5JVnlrYWJKOEVIbnhfOVg4cnZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC80OWFjZTgtMjkxZC00ZDRmLTkyMmUt ZWFiY2JjMDgzZjliLzEvRDNUbHJ5LW5JVnlrYWJKOEVIbnhfOVg4cnZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC80OWFjZTgtMjkxZC00ZDRmLTkyMmUtZWFiY2JjMDgzZjli LzEvRDNUbHJ5LW5JVnlrYWJKOEVIbnhfOVg4cnZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcWUQHng7 M1IBzpMBQksgmtnvaJIi/KEbBivpIL8dYjcet8m8e980pOxsbpH3Ih8va5ZUBrJJ qnIwcIoYG6VocPiqM3Kdfhx1+vXI0iG/leat5MmgTyM8zhGZPvLlt9dvoug69hEn 5Eaiy0wCo7oiyUdbd+gZutcjQTYO+w97QPNhfvtqrN9B442rEckiGnPFf5jpYBWQ OIUp2i5tmqkuJP2/OwKPiCvdKSkIGpdLnNBGlWr6tkb97H0UDue+NC+HmUgxtlDN qMmIpt41FrUMmeMggVOYX8RpT2RC0vUhCVIWclEhh8ZPOGEG4x5Tm4p1ZFpDyJm9 AY/d/QgoVX9pxQ== -----END CERTIFICATE-----Generated at Sun Dec 21 03:58:16 2025 by rpki-client