This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft File: RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft (raw, json) Hash identifier: JFzqwLSxb5z/zsBDBlLSNRA/FnAcZkyhy2lRiFtnR9k= Subject key identifier: 02:52:F6:B9:4D:13:EB:B2:78:D0:3A:8A:F4:1E:F1:24:EB:B7:4C:DD Authority key identifier: 44:32:F6:1B:BD:3F:D1:1D:7F:AC:BB:15:43:A7:51:A6:5A:3F:64:C3 Certificate issuer: /CN=4432f61bbd3fd11d7facbb1543a751a65a3f64c3 Certificate serial: 019B4E847570DBE157D2221AF8FDBB7253FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft Manifest number: 1790 Signing time: Wed 24 Dec 2025 04:01:01 +0000 Manifest this update: Wed 24 Dec 2025 04:01:01 +0000 Manifest next update: Thu 25 Dec 2025 04:01:01 +0000 Files and hashes: 1: 7pJi6mSeC7Mrh9AG1jBKFX0rR-0.roa (hash: b11wVnyFk1XxJZbXy67FWmoxGHyh6LyfdFAUoV7JdAI=) 2: RDL2G70_0R1_rLsVQ6dRplo_ZMM.crl (hash: TyeyBd3p0Pmhlb8DKjoUnBuD0pAKg0SzZCr1LZltLpY=) 3: vgV_HmZnBn6siqRpblhJDHolxhY.roa (hash: CU3IQ42U8bx3rzB6RefYOwaftXWSsseBjQQDCbcW70Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 04:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:84:75:70:db:e1:57:d2:22:1a:f8:fd:bb:72:53:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4432f61bbd3fd11d7facbb1543a751a65a3f64c3 Validity Not Before: Dec 24 04:01:01 2025 GMT Not After : Dec 25 04:01:01 2025 GMT Subject: CN=0252f6b94d13ebb278d03a8af41ef124ebb74cdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0f:7d:36:ac:30:ad:22:25:bd:72:ab:44:4a: d1:39:12:c1:38:e9:92:d5:84:bd:6a:7e:8e:fa:ce: 6b:c8:96:3d:ec:15:2e:a2:9c:05:99:84:79:e4:dd: 60:03:04:3c:35:18:e6:ca:95:b3:fb:01:10:e5:03: d0:90:da:33:3a:71:0b:27:63:06:ce:38:ff:ec:15: a2:7c:84:d6:f3:42:ef:40:80:4c:1c:20:c9:6b:f9: a1:66:62:8a:f3:cc:02:75:af:17:99:68:67:0b:c9: e3:ed:e0:2e:59:e4:7c:70:7d:e3:25:14:70:7a:98: 5d:90:b5:82:26:06:27:08:09:91:83:aa:43:9a:e7: ed:7c:42:07:c6:1a:b6:47:cb:6f:de:d7:c5:11:b8: 94:cb:75:2d:6f:0d:d7:72:c3:ce:34:c7:d4:67:3b: f4:63:e6:6d:20:c9:4a:31:48:b3:d2:87:58:c4:ac: a0:02:df:ca:6d:1f:4c:06:6a:c6:0c:08:f4:f8:56: 45:ab:48:45:f5:7e:89:92:bb:5d:ed:02:cb:ef:c9: 8c:7b:56:7d:39:88:c1:c2:7a:c1:94:dc:dc:a0:ca: 4a:01:46:94:f1:43:46:3c:bc:9b:58:75:4b:1a:73: af:d8:d4:9e:ef:8c:a8:ed:ba:e7:20:1e:a4:db:42: e9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:52:F6:B9:4D:13:EB:B2:78:D0:3A:8A:F4:1E:F1:24:EB:B7:4C:DD X509v3 Authority Key Identifier: keyid:44:32:F6:1B:BD:3F:D1:1D:7F:AC:BB:15:43:A7:51:A6:5A:3F:64:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:00:e0:a6:3f:74:60:42:64:33:7d:1d:7f:58:74:ab:45:75: 82:a8:34:43:59:9f:97:1b:5b:2b:cc:2f:18:b4:6d:4c:29:9f: 7c:15:c8:88:70:4b:be:0a:d8:e1:8a:72:aa:5d:16:cf:ae:fe: 61:5f:9a:c0:36:55:da:ce:31:32:7e:91:ad:16:cd:56:42:bb: 2a:a4:85:8a:0d:73:ff:a2:2d:13:a5:ef:92:a6:84:f9:6b:58: aa:60:54:5b:54:59:f1:31:81:6e:8e:e3:7d:78:4b:f8:04:75: 65:13:0c:8d:f9:35:9b:38:62:da:9a:db:cb:d1:88:66:27:08: 5c:93:16:14:8a:0b:18:07:44:7d:52:4a:5e:29:8e:79:c4:8f: 2f:6c:a5:5a:6f:b8:04:a8:94:da:2f:34:90:23:54:0e:5e:fa: 0e:bf:e9:8f:c8:4d:58:14:c3:24:8e:81:47:65:46:3e:12:f3: f6:96:0f:f7:46:0b:0a:e8:26:da:70:a9:e7:08:1a:9b:ea:a5: 13:3f:9c:ef:79:a4:18:ba:67:25:4d:75:6a:d0:d6:fc:1a:8a: 42:6e:0d:36:f5:e6:6b:83:97:f4:20:b0:4a:db:56:34:94:7e: 43:5e:98:4e:87:f8:8c:c0:3c:a1:76:87:5c:d2:cc:37:87:31: 8c:4f:34:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOhHVw2+FX0iIa+P27clP+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0MzJmNjFiYmQzZmQxMWQ3ZmFjYmIxNTQzYTc1MWE2NWEz ZjY0YzMwHhcNMjUxMjI0MDQwMTAxWhcNMjUxMjI1MDQwMTAxWjAzMTEwLwYDVQQD EygwMjUyZjZiOTRkMTNlYmIyNzhkMDNhOGFmNDFlZjEyNGViYjc0Y2RkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0w99NqwwrSIlvXKrRErRORLBOOmS 1YS9an6O+s5ryJY97BUuopwFmYR55N1gAwQ8NRjmypWz+wEQ5QPQkNozOnELJ2MG zjj/7BWifITW80LvQIBMHCDJa/mhZmKK88wCda8XmWhnC8nj7eAuWeR8cH3jJRRw ephdkLWCJgYnCAmRg6pDmuftfEIHxhq2R8tv3tfFEbiUy3Utbw3XcsPONMfUZzv0 Y+ZtIMlKMUiz0odYxKygAt/KbR9MBmrGDAj0+FZFq0hF9X6Jkrtd7QLL78mMe1Z9 OYjBwnrBlNzcoMpKAUaU8UNGPLybWHVLGnOv2NSe74yo7brnIB6k20LpqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAJS9rlNE+uyeNA6ivQe8STrt0zdMB8GA1UdIwQY MBaAFEQy9hu9P9Edf6y7FUOnUaZaP2TDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkRMMkc3MF8wUjFfckxzVlE2ZFJwbG9fWk1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82NjRlYjEtZjIyMC00ODA0LThjNWEt OTI3ODg0MGM0OTcwLzEvUkRMMkc3MF8wUjFfckxzVlE2ZFJwbG9fWk1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82NjRlYjEtZjIyMC00ODA0LThjNWEtOTI3ODg0MGM0OTcw LzEvUkRMMkc3MF8wUjFfckxzVlE2ZFJwbG9fWk1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAwDgpj90 YEJkM30df1h0q0V1gqg0Q1mflxtbK8wvGLRtTCmffBXIiHBLvgrY4Ypyql0Wz67+ YV+awDZV2s4xMn6RrRbNVkK7KqSFig1z/6ItE6XvkqaE+WtYqmBUW1RZ8TGBbo7j fXhL+AR1ZRMMjfk1mzhi2prby9GIZicIXJMWFIoLGAdEfVJKXimOecSPL2ylWm+4 BKiU2i80kCNUDl76Dr/pj8hNWBTDJI6BR2VGPhLz9pYP90YLCugm2nCp5wgam+ql Ez+c73mkGLpnJU11atDW/BqKQm4NNvXma4OX9CCwSttWNJR+Q16YTof4jMA8oXaH XNLMN4cxjE80eA== -----END CERTIFICATE-----Generated at Wed Dec 24 10:07:57 2025 by rpki-client