This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft File: 24oKPWpEpYME4bHb9i5dehaziHo.mft (raw, json) Hash identifier: em5HyqmWbLizg80QS5+8JhDyWvIvc3KH5lrNMYnL66Y= Subject key identifier: 34:E6:E5:C5:11:CF:E1:FF:E7:63:A8:2B:04:01:1B:92:79:9E:1F:5A Authority key identifier: DB:8A:0A:3D:6A:44:A5:83:04:E1:B1:DB:F6:2E:5D:7A:16:B3:88:7A Certificate issuer: /CN=db8a0a3d6a44a58304e1b1dbf62e5d7a16b3887a Certificate serial: 019B544F4BFF103B6667A537258D3E019E9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft Manifest number: 1796 Signing time: Thu 25 Dec 2025 07:00:41 +0000 Manifest this update: Thu 25 Dec 2025 07:00:41 +0000 Manifest next update: Fri 26 Dec 2025 07:00:41 +0000 Files and hashes: 1: 24oKPWpEpYME4bHb9i5dehaziHo.crl (hash: DuvrtCxixr0z9F9JbuNk1j5G3JHNTwVvUInLw3s5ZKk=) 2: wHHMwXNW_N83G6X6FvCX0cxSHMc.roa (hash: EDHNa2I735GRLd+NXqVnh5LuTlV6xmWH1ELRRt1kANs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:4f:4b:ff:10:3b:66:67:a5:37:25:8d:3e:01:9e:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db8a0a3d6a44a58304e1b1dbf62e5d7a16b3887a Validity Not Before: Dec 25 07:00:41 2025 GMT Not After : Dec 26 07:00:41 2025 GMT Subject: CN=34e6e5c511cfe1ffe763a82b04011b92799e1f5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:db:3f:cb:21:28:26:dd:5d:44:ce:3f:d2:5b: 9b:42:c8:c4:c6:a8:4b:87:5d:a6:ed:44:f9:c8:b8: 61:0c:39:db:f6:c2:82:cc:50:41:ff:f0:0c:ef:61: 17:01:fb:9a:01:51:e2:ea:b2:9b:0c:9d:fd:b8:44: 2d:fd:62:b0:fe:58:fb:0b:5d:eb:c9:6f:8d:13:90: 6b:53:5b:58:63:17:5f:d3:29:78:3f:27:e6:d4:cf: fa:bb:67:f3:8d:d4:86:b5:2f:d0:ef:bb:ce:bd:2a: 8f:38:6b:f5:42:3e:eb:0e:28:46:09:8a:29:2e:df: 1f:81:4a:fd:9e:f0:8f:a2:4e:09:57:97:ef:53:d4: 02:e9:93:4e:9f:5e:d3:68:01:e9:7f:a6:30:03:a1: c4:57:1d:d9:02:df:89:be:2e:4c:c5:36:e8:2d:f6: 89:d4:70:d0:07:2a:96:8e:d1:da:9c:63:76:a3:cb: af:6b:66:42:e3:fb:72:d8:b1:9f:f8:20:4f:3c:de: 74:d4:37:7e:1b:a0:4e:39:b1:e4:45:ba:2e:0f:b7: 91:66:0b:b7:0d:2f:b1:f1:0f:e9:75:4e:3b:e2:34: b3:c1:8a:c4:d1:25:f0:44:22:32:f4:ca:12:93:be: ea:40:2d:50:8c:1b:87:c0:a2:53:be:2b:f6:a5:6d: 23:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:E6:E5:C5:11:CF:E1:FF:E7:63:A8:2B:04:01:1B:92:79:9E:1F:5A X509v3 Authority Key Identifier: keyid:DB:8A:0A:3D:6A:44:A5:83:04:E1:B1:DB:F6:2E:5D:7A:16:B3:88:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:8e:4c:d5:93:de:8a:1e:24:c8:28:10:81:7f:a1:e7:af:6a: d6:37:2b:b5:ee:0b:11:83:9b:52:56:6c:e3:eb:8d:e8:c8:a8: c0:92:00:fb:f4:48:b1:db:d4:93:df:7d:85:eb:e6:24:aa:31: 97:e2:1d:35:47:8e:dd:81:42:92:1e:6e:80:a3:26:13:52:29: 45:9f:99:4b:c6:23:95:1c:b3:ed:f5:0f:2e:83:61:17:e5:0d: 85:50:a5:ba:c6:61:10:c2:5f:e2:09:cf:98:69:b0:75:1e:80: 2a:d1:01:f0:c1:de:4f:54:31:f5:ab:64:bb:f4:a3:92:4d:ec: e1:8c:86:4a:9b:7f:36:fb:6c:f5:64:7c:82:cb:15:d5:e0:c8: b8:6c:af:2f:af:79:34:b6:5d:99:9f:1e:07:e4:6c:08:53:30: 02:02:6c:ff:fd:f1:3f:d9:d2:81:90:ab:59:3a:44:a5:a4:1a: e5:c6:9a:5b:8a:45:c0:aa:96:94:6e:cd:b6:52:8f:c6:66:f4: 7d:a9:6c:5f:5f:03:84:66:dd:51:be:cf:71:5e:f6:06:ac:af: 32:79:95:23:a8:2e:0b:95:b0:e9:cf:2b:6c:89:29:39:58:c2: 5f:1a:69:bd:68:84:9c:fa:30:f6:7c:49:9e:a4:aa:5a:2e:a7: 9e:ab:2d:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUT0v/EDtmZ6U3JY0+AZ6cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiOGEwYTNkNmE0NGE1ODMwNGUxYjFkYmY2MmU1ZDdhMTZi Mzg4N2EwHhcNMjUxMjI1MDcwMDQxWhcNMjUxMjI2MDcwMDQxWjAzMTEwLwYDVQQD EygzNGU2ZTVjNTExY2ZlMWZmZTc2M2E4MmIwNDAxMWI5Mjc5OWUxZjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ts/yyEoJt1dRM4/0lubQsjExqhL h12m7UT5yLhhDDnb9sKCzFBB//AM72EXAfuaAVHi6rKbDJ39uEQt/WKw/lj7C13r yW+NE5BrU1tYYxdf0yl4Pyfm1M/6u2fzjdSGtS/Q77vOvSqPOGv1Qj7rDihGCYop Lt8fgUr9nvCPok4JV5fvU9QC6ZNOn17TaAHpf6YwA6HEVx3ZAt+Jvi5MxTboLfaJ 1HDQByqWjtHanGN2o8uva2ZC4/ty2LGf+CBPPN501Dd+G6BOObHkRbouD7eRZgu3 DS+x8Q/pdU474jSzwYrE0SXwRCIy9MoSk77qQC1QjBuHwKJTviv2pW0jmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDTm5cURz+H/52OoKwQBG5J5nh9aMB8GA1UdIwQY MBaAFNuKCj1qRKWDBOGx2/YuXXoWs4h6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjRvS1BXcEVwWU1FNGJIYjlpNWRlaGF6aUhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9lNWEyNTMtMTljZi00Y2U4LTljNWMt NTZjNmQ1NTFhOTMyLzEvMjRvS1BXcEVwWU1FNGJIYjlpNWRlaGF6aUhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9lNWEyNTMtMTljZi00Y2U4LTljNWMtNTZjNmQ1NTFhOTMy LzEvMjRvS1BXcEVwWU1FNGJIYjlpNWRlaGF6aUhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgo5M1ZPe ih4kyCgQgX+h569q1jcrte4LEYObUlZs4+uN6MiowJIA+/RIsdvUk999hevmJKox l+IdNUeO3YFCkh5ugKMmE1IpRZ+ZS8YjlRyz7fUPLoNhF+UNhVClusZhEMJf4gnP mGmwdR6AKtEB8MHeT1Qx9atku/Sjkk3s4YyGSpt/Nvts9WR8gssV1eDIuGyvL695 NLZdmZ8eB+RsCFMwAgJs//3xP9nSgZCrWTpEpaQa5caaW4pFwKqWlG7NtlKPxmb0 falsX18DhGbdUb7PcV72BqyvMnmVI6guC5Ww6c8rbIkpOVjCXxppvWiEnPow9nxJ nqSqWi6nnqstqA== -----END CERTIFICATE-----Generated at Thu Dec 25 11:16:13 2025 by rpki-client