This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft File: dLA_BQyflGvisljcSWDsCQhfwVc.mft (raw, json) Hash identifier: 9xQPVy7lvxK6Om6qNOkyeFtcKZ3owadyOpo26bvLaHw= Subject key identifier: 9B:A6:74:E6:81:73:D4:8B:ED:48:B8:AE:18:8A:42:D5:2A:78:C4:E7 Authority key identifier: 74:B0:3F:05:0C:9F:94:6B:E2:B2:58:DC:49:60:EC:09:08:5F:C1:57 Certificate issuer: /CN=74b03f050c9f946be2b258dc4960ec09085fc157 Certificate serial: 019B4B1515550D3BB51804A0B973DFD1CF22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLA_BQyflGvisljcSWDsCQhfwVc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft Manifest number: 05A6 Signing time: Tue 23 Dec 2025 12:00:31 +0000 Manifest this update: Tue 23 Dec 2025 12:00:31 +0000 Manifest next update: Wed 24 Dec 2025 12:00:31 +0000 Files and hashes: 1: 7ky7nj7F_jVbzl2sZpXMbb-mdKw.roa (hash: LY2VlTHDrXTzgp1AOuCkmRPYOmnqACU3YmdlJ3mfogY=) 2: dLA_BQyflGvisljcSWDsCQhfwVc.crl (hash: txMiBUX95m/D5Hzn3l2cjujgqn6cfCOfPTSkCfL9K/c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft rsync://rpki.ripe.net/repository/DEFAULT/dLA_BQyflGvisljcSWDsCQhfwVc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 12:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:15:15:55:0d:3b:b5:18:04:a0:b9:73:df:d1:cf:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74b03f050c9f946be2b258dc4960ec09085fc157 Validity Not Before: Dec 23 12:00:31 2025 GMT Not After : Dec 24 12:00:31 2025 GMT Subject: CN=9ba674e68173d48bed48b8ae188a42d52a78c4e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:70:e4:b1:b0:e5:4f:16:96:f5:02:a5:14:f5: d0:55:68:03:ba:fb:78:c8:da:1e:70:8b:d5:18:16: 68:9a:11:95:cf:b8:6d:f5:45:41:ab:a7:5e:85:2c: fd:04:d7:27:d2:45:bc:a5:4c:4e:9a:e3:06:6f:3d: 3b:92:8c:15:96:62:67:e9:a3:a4:48:b6:49:0d:88: 98:84:c5:85:60:89:5b:99:10:15:9e:93:23:60:da: e8:41:af:b2:db:f4:17:79:ef:ec:bd:36:31:50:5a: 08:3b:8f:5f:cd:93:7c:62:f9:19:20:7e:d4:fe:01: e2:71:61:ae:3d:42:b7:79:e1:22:d1:01:d1:b4:8b: 07:9b:fc:09:02:4e:48:8f:90:46:9c:93:f0:63:a8: 96:69:81:60:0a:60:33:b3:9e:dd:87:2a:5b:ed:a9: 71:8a:b9:a4:f0:1d:0d:91:5b:20:93:d4:b3:08:dc: 6a:9c:a1:40:ff:07:f9:5a:49:b8:da:7b:a9:8b:f5: 43:14:d3:1c:0e:b3:cf:db:d6:d5:e7:18:28:61:6c: f1:3a:13:49:f2:43:8b:aa:f7:36:ea:60:ac:9a:ea: 7e:b9:6b:57:80:83:49:6a:49:63:a6:de:4a:93:cc: 50:2a:a1:c9:26:a7:2f:b2:36:52:11:2c:6b:cb:ba: 72:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:A6:74:E6:81:73:D4:8B:ED:48:B8:AE:18:8A:42:D5:2A:78:C4:E7 X509v3 Authority Key Identifier: keyid:74:B0:3F:05:0C:9F:94:6B:E2:B2:58:DC:49:60:EC:09:08:5F:C1:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLA_BQyflGvisljcSWDsCQhfwVc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:cb:c4:6a:8b:5d:71:2f:a8:f9:79:35:05:04:60:18:fa:fd: 8a:a4:6f:00:20:7e:9f:8b:80:00:bb:bf:cb:7d:76:be:46:72: d8:31:cf:77:51:21:c1:77:0c:f1:17:29:74:bf:0c:c5:df:8d: 92:1a:f1:a7:95:9f:ea:93:91:9e:5d:da:6c:98:b8:9b:aa:8f: 27:89:56:d1:5e:f1:06:38:e9:55:87:da:08:12:2a:01:b1:9f: 1e:54:a5:ea:7a:f5:0e:56:d5:44:f4:dc:8c:f6:8e:d2:0e:70: 56:b5:a4:ee:7b:0a:a1:f9:5a:2a:dd:79:bf:4e:c7:ef:01:eb: 05:09:84:76:76:04:79:1a:04:44:d9:be:c9:0f:85:68:c3:ee: b1:ed:14:62:fc:93:1e:af:40:fb:95:7f:ea:75:03:ce:bf:a4: 87:b4:4a:62:12:85:1a:d3:26:1f:f3:cc:d0:64:36:05:f7:94: 17:00:45:e6:a7:5d:db:30:38:21:41:a9:4a:a4:8f:3f:ec:21: 39:12:95:7c:54:be:27:dd:6b:83:ed:a2:f5:ec:bc:47:9b:92: fc:f3:bf:5e:a2:07:0a:50:aa:74:09:90:3b:99:85:32:e5:e0: aa:32:4d:f0:70:a4:13:5f:55:ef:81:45:a8:9f:9c:bb:87:75: 01:e5:86:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLFRVVDTu1GASguXPf0c8iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0YjAzZjA1MGM5Zjk0NmJlMmIyNThkYzQ5NjBlYzA5MDg1 ZmMxNTcwHhcNMjUxMjIzMTIwMDMxWhcNMjUxMjI0MTIwMDMxWjAzMTEwLwYDVQQD Eyg5YmE2NzRlNjgxNzNkNDhiZWQ0OGI4YWUxODhhNDJkNTJhNzhjNGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHDksbDlTxaW9QKlFPXQVWgDuvt4 yNoecIvVGBZomhGVz7ht9UVBq6dehSz9BNcn0kW8pUxOmuMGbz07kowVlmJn6aOk SLZJDYiYhMWFYIlbmRAVnpMjYNroQa+y2/QXee/svTYxUFoIO49fzZN8YvkZIH7U /gHicWGuPUK3eeEi0QHRtIsHm/wJAk5Ij5BGnJPwY6iWaYFgCmAzs57dhypb7alx irmk8B0NkVsgk9SzCNxqnKFA/wf5Wkm42nupi/VDFNMcDrPP29bV5xgoYWzxOhNJ 8kOLqvc26mCsmup+uWtXgINJakljpt5Kk8xQKqHJJqcvsjZSESxry7py6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJumdOaBc9SL7Ui4rhiKQtUqeMTnMB8GA1UdIwQY MBaAFHSwPwUMn5Rr4rJY3Elg7AkIX8FXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZExBX0JReWZsR3Zpc2xqY1NXRHNDUWhmd1ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9jNzU3NTMtMTdjMi00MzI0LTgyNjQt MzdjNzJhN2FjOGQxLzEvZExBX0JReWZsR3Zpc2xqY1NXRHNDUWhmd1ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9jNzU3NTMtMTdjMi00MzI0LTgyNjQtMzdjNzJhN2FjOGQx LzEvZExBX0JReWZsR3Zpc2xqY1NXRHNDUWhmd1ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALsvEaotd cS+o+Xk1BQRgGPr9iqRvACB+n4uAALu/y312vkZy2DHPd1EhwXcM8RcpdL8Mxd+N khrxp5Wf6pORnl3abJi4m6qPJ4lW0V7xBjjpVYfaCBIqAbGfHlSl6nr1DlbVRPTc jPaO0g5wVrWk7nsKoflaKt15v07H7wHrBQmEdnYEeRoERNm+yQ+FaMPuse0UYvyT Hq9A+5V/6nUDzr+kh7RKYhKFGtMmH/PM0GQ2BfeUFwBF5qdd2zA4IUGpSqSPP+wh ORKVfFS+J91rg+2i9ey8R5uS/PO/XqIHClCqdAmQO5mFMuXgqjJN8HCkE19V74FF qJ+cu4d1AeWGKA== -----END CERTIFICATE-----Generated at Tue Dec 23 18:51:40 2025 by rpki-client