This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c8961f-d1d7-46ac-9f8d-33ebac095077/1/rlDsNS6NuwzfbgjFfHHKoRpEUAM.mft File: rlDsNS6NuwzfbgjFfHHKoRpEUAM.mft (raw, json) Hash identifier: 6DTfqhvgP9yYsFPpLADzaSqMxT+WsyEqr6RnyR5UzXk= Subject key identifier: DF:3E:E4:6F:32:8A:C5:59:C2:05:5F:2A:13:62:79:A8:D1:7B:25:05 Authority key identifier: AE:50:EC:35:2E:8D:BB:0C:DF:6E:08:C5:7C:71:CA:A1:1A:44:50:03 Certificate issuer: /CN=ae50ec352e8dbb0cdf6e08c57c71caa11a445003 Certificate serial: 019B48143ADC450F28F935706AE09210AADE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rlDsNS6NuwzfbgjFfHHKoRpEUAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c8961f-d1d7-46ac-9f8d-33ebac095077/1/rlDsNS6NuwzfbgjFfHHKoRpEUAM.mft Manifest number: 178B Signing time: Mon 22 Dec 2025 22:00:43 +0000 Manifest this update: Mon 22 Dec 2025 22:00:43 +0000 Manifest next update: Tue 23 Dec 2025 22:00:43 +0000 Files and hashes: 1: rlDsNS6NuwzfbgjFfHHKoRpEUAM.crl (hash: HF1HdMzGwngOQ+SNq7bKyN9USCTCSTRoXaxnWe/dFqY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c8961f-d1d7-46ac-9f8d-33ebac095077/1/rlDsNS6NuwzfbgjFfHHKoRpEUAM.crl rsync://rpki.ripe.net/repository/DEFAULT/49/c8961f-d1d7-46ac-9f8d-33ebac095077/1/rlDsNS6NuwzfbgjFfHHKoRpEUAM.mft rsync://rpki.ripe.net/repository/DEFAULT/rlDsNS6NuwzfbgjFfHHKoRpEUAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:14:3a:dc:45:0f:28:f9:35:70:6a:e0:92:10:aa:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae50ec352e8dbb0cdf6e08c57c71caa11a445003 Validity Not Before: Dec 22 22:00:43 2025 GMT Not After : Dec 23 22:00:43 2025 GMT Subject: CN=df3ee46f328ac559c2055f2a136279a8d17b2505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7c:5f:b6:3f:97:07:45:ee:8a:a0:45:99:82: 66:76:b4:4d:c6:54:ac:52:65:e3:7e:b7:8e:bf:33: 8c:21:fd:7b:c7:39:b0:54:fd:3e:e1:58:ba:67:1f: b7:7e:7d:ea:35:1d:24:8e:35:16:78:bd:29:e6:30: 8f:62:d3:09:d7:13:b4:48:77:ab:aa:cd:6c:77:dd: 27:35:5e:94:8c:39:ff:86:2f:9a:20:03:80:60:b7: a2:18:83:6f:97:28:36:54:e2:ec:59:13:0f:cf:f3: 11:64:de:d7:b5:d3:65:14:34:41:42:db:a6:7f:bd: 7a:92:96:fd:9f:8b:4a:c6:cc:bb:4d:ee:08:00:0f: 4c:8f:79:0b:16:1b:79:b1:3e:e3:a7:33:83:9a:15: 95:16:e4:da:dd:23:e9:91:71:aa:da:d8:c9:bb:27: 02:d0:7b:9a:7f:a4:39:17:b9:05:af:d0:90:6f:0c: a4:39:fa:53:ad:36:9f:81:f0:7b:ea:25:cf:83:bd: a6:15:3e:48:8f:a5:19:8f:ea:2c:67:4d:2c:e8:2b: 65:ab:52:b5:32:6c:cf:97:81:dc:40:b2:df:09:06: bf:5f:9a:00:dd:83:20:72:f2:14:68:ab:cb:de:0e: 79:77:2d:3a:32:10:ef:e2:10:ee:13:48:b4:20:2b: e8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:3E:E4:6F:32:8A:C5:59:C2:05:5F:2A:13:62:79:A8:D1:7B:25:05 X509v3 Authority Key Identifier: keyid:AE:50:EC:35:2E:8D:BB:0C:DF:6E:08:C5:7C:71:CA:A1:1A:44:50:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlDsNS6NuwzfbgjFfHHKoRpEUAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c8961f-d1d7-46ac-9f8d-33ebac095077/1/rlDsNS6NuwzfbgjFfHHKoRpEUAM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c8961f-d1d7-46ac-9f8d-33ebac095077/1/rlDsNS6NuwzfbgjFfHHKoRpEUAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:e5:27:8d:06:ec:4b:d4:a4:25:81:e2:f8:8f:c2:90:45:aa: c3:d5:62:72:e0:ca:f3:a4:51:15:5e:58:c9:96:c7:00:6f:41: 4e:1d:1e:0c:db:bd:88:ab:48:46:ea:fc:db:f5:c0:4f:d5:1c: 5a:1b:f7:ce:1c:ef:a7:d0:7d:f5:28:72:d6:57:a0:52:61:56: 2f:1f:e7:b0:ab:6f:23:23:d2:d1:0a:58:78:03:d2:73:81:d6: ae:1b:f6:8e:e5:1c:7e:ad:8b:15:2e:7f:b2:7d:c8:81:ca:04: a4:bd:30:90:54:61:5c:2e:07:e8:2f:7a:8b:69:ce:bc:40:a7: d4:58:a2:40:80:98:4b:46:ff:e2:bb:a0:7d:c7:7d:7c:e5:35: 7e:43:bc:0a:ec:74:bf:4c:2d:78:fe:ef:98:4c:fd:aa:c4:4d: c9:92:40:15:ed:bd:70:73:7b:95:da:00:a9:0a:a3:eb:81:0c: ef:65:c8:47:7c:c8:85:e2:aa:3e:26:1b:b9:f0:da:2b:79:f6: 6f:5b:10:0d:18:85:c4:fc:5e:8c:93:56:2e:98:33:ca:fb:a2: 74:82:88:c8:84:a5:60:9d:9a:b9:4d:23:4d:dd:09:94:b4:cb: 16:b2:b4:c5:84:3b:6e:91:7a:95:f2:85:1f:8e:7d:23:2c:ea: 58:2b:4c:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFDrcRQ8o+TVwauCSEKreMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNTBlYzM1MmU4ZGJiMGNkZjZlMDhjNTdjNzFjYWExMWE0 NDUwMDMwHhcNMjUxMjIyMjIwMDQzWhcNMjUxMjIzMjIwMDQzWjAzMTEwLwYDVQQD EyhkZjNlZTQ2ZjMyOGFjNTU5YzIwNTVmMmExMzYyNzlhOGQxN2IyNTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3xftj+XB0XuiqBFmYJmdrRNxlSs UmXjfreOvzOMIf17xzmwVP0+4Vi6Zx+3fn3qNR0kjjUWeL0p5jCPYtMJ1xO0SHer qs1sd90nNV6UjDn/hi+aIAOAYLeiGINvlyg2VOLsWRMPz/MRZN7XtdNlFDRBQtum f716kpb9n4tKxsy7Te4IAA9Mj3kLFht5sT7jpzODmhWVFuTa3SPpkXGq2tjJuycC 0Huaf6Q5F7kFr9CQbwykOfpTrTafgfB76iXPg72mFT5Ij6UZj+osZ00s6Ctlq1K1 MmzPl4HcQLLfCQa/X5oA3YMgcvIUaKvL3g55dy06MhDv4hDuE0i0ICvoEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN8+5G8yisVZwgVfKhNieajReyUFMB8GA1UdIwQY MBaAFK5Q7DUujbsM324IxXxxyqEaRFADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmxEc05TNk51d3pmYmdqRmZISEtvUnBFVUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9jODk2MWYtZDFkNy00NmFjLTlmOGQt MzNlYmFjMDk1MDc3LzEvcmxEc05TNk51d3pmYmdqRmZISEtvUnBFVUFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9jODk2MWYtZDFkNy00NmFjLTlmOGQtMzNlYmFjMDk1MDc3 LzEvcmxEc05TNk51d3pmYmdqRmZISEtvUnBFVUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfeUnjQbs S9SkJYHi+I/CkEWqw9VicuDK86RRFV5YyZbHAG9BTh0eDNu9iKtIRur82/XAT9Uc Whv3zhzvp9B99Shy1legUmFWLx/nsKtvIyPS0QpYeAPSc4HWrhv2juUcfq2LFS5/ sn3IgcoEpL0wkFRhXC4H6C96i2nOvECn1FiiQICYS0b/4rugfcd9fOU1fkO8Cux0 v0wteP7vmEz9qsRNyZJAFe29cHN7ldoAqQqj64EM72XIR3zIheKqPiYbufDaK3n2 b1sQDRiFxPxejJNWLpgzyvuidIKIyISlYJ2auU0jTd0JlLTLFrK0xYQ7bpF6lfKF H459IyzqWCtMXA== -----END CERTIFICATE-----Generated at Tue Dec 23 05:21:01 2025 by rpki-client