This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft File: d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft (raw, json) Hash identifier: qMXlrS8CGH/+xN5pYqLsjSuGE78G+1+6beYA0EgoRbc= Subject key identifier: 7A:D5:AA:FE:4D:48:8F:15:30:75:B1:41:8A:B5:F9:64:B1:37:47:8F Authority key identifier: 77:48:05:27:D0:B3:5C:AF:95:B3:75:02:C4:C6:F9:E3:E8:1F:D8:A3 Certificate issuer: /CN=77480527d0b35caf95b37502c4c6f9e3e81fd8a3 Certificate serial: 019B51BDDA85B3CF6C4002469EE00A270672 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft Manifest number: 1795 Signing time: Wed 24 Dec 2025 19:02:35 +0000 Manifest this update: Wed 24 Dec 2025 19:02:35 +0000 Manifest next update: Thu 25 Dec 2025 19:02:35 +0000 Files and hashes: 1: d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl (hash: s+c+7QFAT8UcxrFHWhyQZ0Z4bbEsPHB5M6NFJLBYyDA=) 2: dl3PAMO_cjTEN-X9xexRuh-Chb4.roa (hash: EybA63Tgz5VJ0tdqhdyDgjCCTh9UVwGU3vK+Wpg2GJ4=) 3: lJ4tZxRFs8zm0c7vVrYQoA3wLAU.roa (hash: UW3HI87+Tvs0vPfpNH93w8VClrUvFKCrCGbfw0Tz9ZU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bd:da:85:b3:cf:6c:40:02:46:9e:e0:0a:27:06:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77480527d0b35caf95b37502c4c6f9e3e81fd8a3 Validity Not Before: Dec 24 19:02:35 2025 GMT Not After : Dec 25 19:02:35 2025 GMT Subject: CN=7ad5aafe4d488f153075b1418ab5f964b137478f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a7:c3:e1:cc:fc:15:b4:2f:d6:c0:c8:1b:28: 75:e1:ca:00:83:0a:27:90:28:e7:c0:19:2b:ec:8e: cc:13:cb:d2:42:96:fe:c0:68:b0:89:ab:22:97:44: 78:75:43:05:8c:bf:bf:da:4f:60:f3:b8:7c:a6:be: f3:03:ca:d3:a3:74:21:5c:40:d6:6c:a0:b2:10:83: 10:92:73:04:94:70:48:fb:6f:1a:82:3b:9e:c8:66: 9c:a8:08:c4:a6:a1:a7:90:73:72:45:e2:29:22:5c: 09:fc:e6:cc:97:53:d7:0f:15:5e:78:20:e8:95:1f: 4c:63:0e:0a:f2:90:ad:1d:48:58:45:5e:c9:e5:8b: a9:7a:de:9a:b3:ce:00:e4:8f:48:80:40:c9:ae:9c: 65:0e:a4:85:73:5c:22:b2:48:d1:f4:ed:d0:e4:51: fc:de:a0:97:ce:9b:c6:6d:a8:50:1d:18:a3:bf:94: fb:28:43:63:58:2c:d8:f3:e6:a9:ee:85:37:8c:14: 8d:85:dc:91:98:99:f4:b8:a2:7c:f7:f4:b4:ee:19: b0:c0:bb:86:4e:e0:e5:d5:16:2e:38:07:0d:c6:8f: 62:42:a7:a0:5e:53:4f:1a:8d:87:6c:ef:76:32:0c: 45:96:b5:15:83:4c:e0:59:b7:2c:24:c2:e0:c8:82: 3f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:D5:AA:FE:4D:48:8F:15:30:75:B1:41:8A:B5:F9:64:B1:37:47:8F X509v3 Authority Key Identifier: keyid:77:48:05:27:D0:B3:5C:AF:95:B3:75:02:C4:C6:F9:E3:E8:1F:D8:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:46:c2:00:4e:30:df:57:7f:1f:68:6e:ac:aa:39:65:90:41: 3c:31:57:55:30:1a:6d:10:fd:d3:8d:ac:a2:ca:8e:38:95:a1: 82:54:3e:84:5c:93:5f:64:be:66:68:8e:ed:1e:ce:5a:6a:39: 58:02:0b:da:57:b0:dc:f0:f3:04:9f:c0:be:3f:a2:c1:6c:bf: 7b:10:8d:45:d9:62:67:aa:41:15:f8:42:6b:dd:5b:67:ef:11: 53:e4:f7:e6:7f:fb:e9:72:89:76:45:f7:54:05:23:30:83:04: c6:5e:13:c3:49:48:6a:41:fe:a7:b7:98:f9:88:47:18:a1:f9: 19:0a:a0:f0:77:eb:74:03:77:f1:42:89:10:51:29:ac:c9:03: 2e:79:6c:08:d7:46:6b:74:fa:41:a4:7c:4f:49:84:80:ed:83: 2c:d2:e5:5c:67:72:69:17:e2:15:02:c5:c4:d0:8f:da:8a:d1: f4:f5:82:e9:fe:b8:68:e6:03:5d:c5:39:75:25:c4:5b:f1:a5: be:dd:2a:3c:f4:bc:56:f3:de:4d:43:1a:f2:57:bb:59:0f:54: 5b:f1:83:e9:03:1b:f6:36:82:52:c6:53:bf:c2:21:91:8b:27: b1:31:fa:e7:b7:e4:77:f9:34:d0:d8:59:63:1f:c1:11:da:4a: 7e:5c:8a:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvdqFs89sQAJGnuAKJwZyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3NDgwNTI3ZDBiMzVjYWY5NWIzNzUwMmM0YzZmOWUzZTgx ZmQ4YTMwHhcNMjUxMjI0MTkwMjM1WhcNMjUxMjI1MTkwMjM1WjAzMTEwLwYDVQQD Eyg3YWQ1YWFmZTRkNDg4ZjE1MzA3NWIxNDE4YWI1Zjk2NGIxMzc0NzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqfD4cz8FbQv1sDIGyh14coAgwon kCjnwBkr7I7ME8vSQpb+wGiwiasil0R4dUMFjL+/2k9g87h8pr7zA8rTo3QhXEDW bKCyEIMQknMElHBI+28agjueyGacqAjEpqGnkHNyReIpIlwJ/ObMl1PXDxVeeCDo lR9MYw4K8pCtHUhYRV7J5Yupet6as84A5I9IgEDJrpxlDqSFc1wiskjR9O3Q5FH8 3qCXzpvGbahQHRijv5T7KENjWCzY8+ap7oU3jBSNhdyRmJn0uKJ89/S07hmwwLuG TuDl1RYuOAcNxo9iQqegXlNPGo2HbO92MgxFlrUVg0zgWbcsJMLgyII/lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHrVqv5NSI8VMHWxQYq1+WSxN0ePMB8GA1UdIwQY MBaAFHdIBSfQs1yvlbN1AsTG+ePoH9ijMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDBnRko5Q3pYSy1WczNVQ3hNYjU0LWdmMktNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iOTc4NDktMmFmNS00YzNlLThmMGUt NGRkMzg1M2EyMjQxLzEvZDBnRko5Q3pYSy1WczNVQ3hNYjU0LWdmMktNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iOTc4NDktMmFmNS00YzNlLThmMGUtNGRkMzg1M2EyMjQx LzEvZDBnRko5Q3pYSy1WczNVQ3hNYjU0LWdmMktNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlkbCAE4w 31d/H2hurKo5ZZBBPDFXVTAabRD9042sosqOOJWhglQ+hFyTX2S+ZmiO7R7OWmo5 WAIL2lew3PDzBJ/Avj+iwWy/exCNRdliZ6pBFfhCa91bZ+8RU+T35n/76XKJdkX3 VAUjMIMExl4Tw0lIakH+p7eY+YhHGKH5GQqg8HfrdAN38UKJEFEprMkDLnlsCNdG a3T6QaR8T0mEgO2DLNLlXGdyaRfiFQLFxNCP2orR9PWC6f64aOYDXcU5dSXEW/Gl vt0qPPS8VvPeTUMa8le7WQ9UW/GD6QMb9jaCUsZTv8IhkYsnsTH657fkd/k00NhZ Yx/BEdpKflyKnA== -----END CERTIFICATE-----Generated at Thu Dec 25 00:56:01 2025 by rpki-client