This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft File: dLA_BQyflGvisljcSWDsCQhfwVc.mft (raw, json) Hash identifier: FhJOBZ+qfVJUTEzZZrlkAPIZlokY6b9im6ljb2xPwoE= Subject key identifier: 3A:76:AE:EE:26:83:D8:5D:66:94:4A:81:0D:57:0C:0B:86:57:6A:4F Authority key identifier: 74:B0:3F:05:0C:9F:94:6B:E2:B2:58:DC:49:60:EC:09:08:5F:C1:57 Certificate issuer: /CN=74b03f050c9f946be2b258dc4960ec09085fc157 Certificate serial: 019B492717275142801DD4A7E12E82EAC208 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLA_BQyflGvisljcSWDsCQhfwVc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft Manifest number: 05A5 Signing time: Tue 23 Dec 2025 03:00:57 +0000 Manifest this update: Tue 23 Dec 2025 03:00:57 +0000 Manifest next update: Wed 24 Dec 2025 03:00:57 +0000 Files and hashes: 1: 7ky7nj7F_jVbzl2sZpXMbb-mdKw.roa (hash: LY2VlTHDrXTzgp1AOuCkmRPYOmnqACU3YmdlJ3mfogY=) 2: dLA_BQyflGvisljcSWDsCQhfwVc.crl (hash: sNUweYF/VXeAuErlsmXcZs4OudFdQ2MeQLTyg3SHaMw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft rsync://rpki.ripe.net/repository/DEFAULT/dLA_BQyflGvisljcSWDsCQhfwVc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:27:17:27:51:42:80:1d:d4:a7:e1:2e:82:ea:c2:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74b03f050c9f946be2b258dc4960ec09085fc157 Validity Not Before: Dec 23 03:00:57 2025 GMT Not After : Dec 24 03:00:57 2025 GMT Subject: CN=3a76aeee2683d85d66944a810d570c0b86576a4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:79:23:ba:79:fe:23:e2:4e:10:5c:29:c4:31: d8:99:7b:4b:b9:3a:f2:2f:3b:4b:81:cd:dc:5e:87: d2:9c:ee:34:a9:a7:41:4e:5e:84:f3:1e:c1:ae:92: f8:4c:52:5a:08:d5:9a:4a:cd:3b:8a:f3:19:2d:90: 09:0f:99:c4:5c:bb:00:f3:31:22:57:af:0a:ff:2c: 64:5b:67:58:46:af:ef:a8:f1:de:49:d3:e3:d0:29: e9:dc:4d:47:e4:b5:84:b8:e6:64:66:50:29:51:9f: a7:c4:bb:74:e0:5f:14:3a:6a:02:b0:c7:f1:e0:b6: 81:da:d2:2e:70:f1:10:93:55:31:4a:b1:7a:a0:57: fa:85:3a:4b:45:c7:9a:65:f1:ef:27:e3:40:aa:b0: 55:51:4e:ac:e8:b1:e4:a5:f2:ae:64:53:a1:04:ab: 2c:8d:f0:db:40:72:4c:1c:12:fe:2f:d4:61:53:86: 99:ed:de:9b:f6:92:61:56:6b:79:32:10:ce:7a:71: 41:33:cd:8d:33:f9:16:0c:a1:6d:b1:f1:f4:77:d8: 29:25:54:cf:c4:d7:e8:cd:f8:ae:e8:38:9d:d8:6c: 85:d4:89:a4:07:e7:91:55:21:cf:ee:f8:bb:d3:a9: d2:33:2b:46:02:84:4e:6e:7d:75:fb:bf:4e:d9:60: 94:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:76:AE:EE:26:83:D8:5D:66:94:4A:81:0D:57:0C:0B:86:57:6A:4F X509v3 Authority Key Identifier: keyid:74:B0:3F:05:0C:9F:94:6B:E2:B2:58:DC:49:60:EC:09:08:5F:C1:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLA_BQyflGvisljcSWDsCQhfwVc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:0a:c8:f6:49:17:c9:81:46:d7:e1:52:52:df:8f:94:a1:bc: 97:db:06:9f:6b:b5:8e:f2:bf:64:d2:47:95:74:8b:2f:5d:d2: 38:e5:05:d5:d9:14:af:5e:8f:31:3c:06:c7:fa:89:da:b7:c5: d2:ca:d9:b1:3c:32:ca:a2:f6:5b:13:44:a4:10:00:69:1a:c9: 36:78:72:87:d0:a0:2e:e1:e4:0f:57:2f:52:28:3d:76:98:78: 5d:cc:7d:86:ee:13:fa:22:a7:42:26:84:3c:3d:c5:22:ae:4e: 86:45:71:ed:c0:9c:fc:21:a4:b2:a6:2a:66:7e:5a:e5:0d:b8: 6c:3a:e4:dc:0e:cd:3b:a4:6f:dc:c0:bf:61:38:ef:ee:b3:c0: 2b:a1:40:0a:a8:cb:12:2a:59:9f:c8:71:74:44:94:1b:84:56: f4:c6:dd:05:69:c8:49:d3:cd:98:f0:84:72:04:9e:96:ae:36: 5d:e8:64:6e:26:12:a2:fa:ca:f2:a9:00:d2:c8:96:e8:0d:0f: 74:2e:dc:55:1b:e0:83:9e:08:9d:21:22:ff:5c:ee:0f:98:21: d0:04:a6:c7:4d:ba:e1:9e:3a:69:bb:f7:a0:47:fa:4c:4a:17: e1:ef:69:aa:df:9c:30:4e:cf:97:2f:8a:db:e7:f3:72:bc:8a: 24:4a:d3:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJJxcnUUKAHdSn4S6C6sIIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0YjAzZjA1MGM5Zjk0NmJlMmIyNThkYzQ5NjBlYzA5MDg1 ZmMxNTcwHhcNMjUxMjIzMDMwMDU3WhcNMjUxMjI0MDMwMDU3WjAzMTEwLwYDVQQD EygzYTc2YWVlZTI2ODNkODVkNjY5NDRhODEwZDU3MGMwYjg2NTc2YTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXkjunn+I+JOEFwpxDHYmXtLuTry LztLgc3cXofSnO40qadBTl6E8x7BrpL4TFJaCNWaSs07ivMZLZAJD5nEXLsA8zEi V68K/yxkW2dYRq/vqPHeSdPj0Cnp3E1H5LWEuOZkZlApUZ+nxLt04F8UOmoCsMfx 4LaB2tIucPEQk1UxSrF6oFf6hTpLRceaZfHvJ+NAqrBVUU6s6LHkpfKuZFOhBKss jfDbQHJMHBL+L9RhU4aZ7d6b9pJhVmt5MhDOenFBM82NM/kWDKFtsfH0d9gpJVTP xNfozfiu6Did2GyF1ImkB+eRVSHP7vi706nSMytGAoRObn11+79O2WCUwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDp2ru4mg9hdZpRKgQ1XDAuGV2pPMB8GA1UdIwQY MBaAFHSwPwUMn5Rr4rJY3Elg7AkIX8FXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZExBX0JReWZsR3Zpc2xqY1NXRHNDUWhmd1ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9jNzU3NTMtMTdjMi00MzI0LTgyNjQt MzdjNzJhN2FjOGQxLzEvZExBX0JReWZsR3Zpc2xqY1NXRHNDUWhmd1ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9jNzU3NTMtMTdjMi00MzI0LTgyNjQtMzdjNzJhN2FjOGQx LzEvZExBX0JReWZsR3Zpc2xqY1NXRHNDUWhmd1ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFgrI9kkX yYFG1+FSUt+PlKG8l9sGn2u1jvK/ZNJHlXSLL13SOOUF1dkUr16PMTwGx/qJ2rfF 0srZsTwyyqL2WxNEpBAAaRrJNnhyh9CgLuHkD1cvUig9dph4Xcx9hu4T+iKnQiaE PD3FIq5OhkVx7cCc/CGksqYqZn5a5Q24bDrk3A7NO6Rv3MC/YTjv7rPAK6FACqjL EipZn8hxdESUG4RW9MbdBWnISdPNmPCEcgSelq42XehkbiYSovrK8qkA0siW6A0P dC7cVRvgg54InSEi/1zuD5gh0ASmx0264Z46abv3oEf6TEoX4e9pqt+cME7Ply+K 2+fzcryKJErTDA== -----END CERTIFICATE-----Generated at Tue Dec 23 07:18:35 2025 by rpki-client