This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft File: dRk72fhLSp7UegO9-JLZ55i3Jyc.mft (raw, json) Hash identifier: 0TkdXs298UQ3Q8kfUOfX4ihCCEmVVY8JqfAedEj25eE= Subject key identifier: C8:84:73:A6:38:B9:EC:60:AE:45:C0:A8:F7:91:E4:D3:79:F5:A8:80 Authority key identifier: 75:19:3B:D9:F8:4B:4A:9E:D4:7A:03:BD:F8:92:D9:E7:98:B7:27:27 Certificate issuer: /CN=75193bd9f84b4a9ed47a03bdf892d9e798b72727 Certificate serial: 019B53AB556EAA80E204A074EA5AB8D0EB33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft Manifest number: 1797 Signing time: Thu 25 Dec 2025 04:01:35 +0000 Manifest this update: Thu 25 Dec 2025 04:01:35 +0000 Manifest next update: Fri 26 Dec 2025 04:01:35 +0000 Files and hashes: 1: dRk72fhLSp7UegO9-JLZ55i3Jyc.crl (hash: Sjvf/wBTA1i1RYMEDuJJRuaSO+5K6lkf454t3AC/Zgs=) 2: kX-VdRHtzW1CfMS8g0O9lVNrN34.roa (hash: 1YTwpLO8F8/c72ElMFw6a0YxOTA0MMlnVtuXBy93WMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.crl rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:ab:55:6e:aa:80:e2:04:a0:74:ea:5a:b8:d0:eb:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75193bd9f84b4a9ed47a03bdf892d9e798b72727 Validity Not Before: Dec 25 04:01:35 2025 GMT Not After : Dec 26 04:01:35 2025 GMT Subject: CN=c88473a638b9ec60ae45c0a8f791e4d379f5a880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9b:a3:5e:e4:e1:c4:36:43:00:61:fb:2d:57: 9f:38:9d:95:83:35:4f:5e:20:91:da:fa:22:c9:19: 1c:24:10:f5:5c:ad:03:2f:3c:a8:91:3e:dc:76:04: 54:39:63:5b:82:77:15:79:02:49:f0:b7:b8:8a:e3: 1a:cb:2d:4b:c0:62:1f:0b:30:58:bb:91:3e:69:44: 13:81:aa:38:cf:5e:04:bd:8c:bf:67:ec:af:f0:8e: 42:3a:7b:ff:a5:26:7b:76:0c:c6:0c:1e:5b:36:49: a9:06:96:9a:6f:dd:61:a3:8b:57:37:09:93:a6:64: fb:06:31:06:df:04:6a:14:53:9e:14:53:c0:60:16: 78:e8:4a:ab:66:de:c2:a4:c1:44:b4:cd:1f:3d:9d: d9:de:3f:f9:46:d5:c0:ab:83:27:df:9b:ee:d4:b4: 17:4c:9f:95:bc:36:bd:74:ac:51:e8:a4:4b:33:06: 14:87:7e:a5:50:6d:b1:d0:f4:0b:0b:c8:ea:b9:2c: cf:dc:a3:eb:f0:d3:ef:ef:8c:c2:7b:03:85:6e:e0: 7b:90:d0:20:5f:67:d3:d7:f8:2f:36:5c:13:49:62: 0a:a4:03:b6:86:dd:01:94:ec:53:2c:4a:ca:2e:80: a1:bc:dc:3f:cd:91:06:26:b6:97:2a:25:e8:d1:39: 9b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:84:73:A6:38:B9:EC:60:AE:45:C0:A8:F7:91:E4:D3:79:F5:A8:80 X509v3 Authority Key Identifier: keyid:75:19:3B:D9:F8:4B:4A:9E:D4:7A:03:BD:F8:92:D9:E7:98:B7:27:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRk72fhLSp7UegO9-JLZ55i3Jyc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c4e6a4-61c2-4388-b844-3b715691d2e9/1/dRk72fhLSp7UegO9-JLZ55i3Jyc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:12:25:79:d3:e6:6d:04:c0:10:cb:b8:c8:c1:6a:9a:c8:01: cd:11:de:13:4b:a3:a9:3d:53:56:d2:f7:11:82:d8:01:1b:58: bd:3d:c6:64:50:fe:32:1c:88:c1:e4:0e:74:2b:b0:d8:a5:47: 28:e4:db:bc:3f:26:86:98:79:57:42:5d:35:34:4f:3f:29:07: cf:bb:00:9d:1f:d3:2c:a0:dc:88:13:a6:cd:51:d2:a9:d9:d5: a7:e6:b2:25:b3:19:f5:5b:87:69:1e:d4:4a:91:de:1f:fb:47: 54:76:ce:4f:5e:55:c8:04:9b:7b:9f:12:a0:ce:8e:38:23:22: fd:bd:16:42:44:3b:b9:a9:f8:f1:1d:27:d2:ae:fb:d8:05:74: 32:35:b4:d6:a7:59:1d:d0:69:35:ac:c8:03:1a:79:31:ba:f6: 42:b3:2e:86:0b:bd:d4:ca:19:50:7a:a0:0d:57:12:5c:1e:54: b1:be:16:74:3c:85:8b:de:72:d8:48:6d:82:df:e9:0e:3b:54: b1:f5:fb:bf:88:68:b0:12:4d:fc:39:f4:4d:9d:24:aa:ca:fd: 21:6a:c0:2e:f5:4b:b6:db:ae:a6:5f:7c:2f:3d:96:a2:85:39: fb:c7:16:6a:47:95:a2:7b:6f:74:7c:23:91:18:8d:98:fd:a0: 26:51:0f:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTq1VuqoDiBKB06lq40OszMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MTkzYmQ5Zjg0YjRhOWVkNDdhMDNiZGY4OTJkOWU3OThi NzI3MjcwHhcNMjUxMjI1MDQwMTM1WhcNMjUxMjI2MDQwMTM1WjAzMTEwLwYDVQQD EyhjODg0NzNhNjM4YjllYzYwYWU0NWMwYThmNzkxZTRkMzc5ZjVhODgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5ujXuThxDZDAGH7LVefOJ2VgzVP XiCR2voiyRkcJBD1XK0DLzyokT7cdgRUOWNbgncVeQJJ8Le4iuMayy1LwGIfCzBY u5E+aUQTgao4z14EvYy/Z+yv8I5COnv/pSZ7dgzGDB5bNkmpBpaab91ho4tXNwmT pmT7BjEG3wRqFFOeFFPAYBZ46EqrZt7CpMFEtM0fPZ3Z3j/5RtXAq4Mn35vu1LQX TJ+VvDa9dKxR6KRLMwYUh36lUG2x0PQLC8jquSzP3KPr8NPv74zCewOFbuB7kNAg X2fT1/gvNlwTSWIKpAO2ht0BlOxTLErKLoChvNw/zZEGJraXKiXo0TmbkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMiEc6Y4uexgrkXAqPeR5NN59aiAMB8GA1UdIwQY MBaAFHUZO9n4S0qe1HoDvfiS2eeYtycnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFJrNzJmaExTcDdVZWdPOS1KTFo1NWkzSnljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9jNGU2YTQtNjFjMi00Mzg4LWI4NDQt M2I3MTU2OTFkMmU5LzEvZFJrNzJmaExTcDdVZWdPOS1KTFo1NWkzSnljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9jNGU2YTQtNjFjMi00Mzg4LWI4NDQtM2I3MTU2OTFkMmU5 LzEvZFJrNzJmaExTcDdVZWdPOS1KTFo1NWkzSnljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjBIledPm bQTAEMu4yMFqmsgBzRHeE0ujqT1TVtL3EYLYARtYvT3GZFD+MhyIweQOdCuw2KVH KOTbvD8mhph5V0JdNTRPPykHz7sAnR/TLKDciBOmzVHSqdnVp+ayJbMZ9VuHaR7U SpHeH/tHVHbOT15VyASbe58SoM6OOCMi/b0WQkQ7uan48R0n0q772AV0MjW01qdZ HdBpNazIAxp5Mbr2QrMuhgu91MoZUHqgDVcSXB5Usb4WdDyFi95y2Ehtgt/pDjtU sfX7v4hosBJN/Dn0TZ0kqsr9IWrALvVLttuupl98Lz2WooU5+8cWakeVontvdHwj kRiNmP2gJlEP/A== -----END CERTIFICATE-----Generated at Thu Dec 25 12:47:31 2025 by rpki-client