This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft File: RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft (raw, json) Hash identifier: XIaJdw7IYzm9B+6/yA0i22Gqdtfv0qv70ubLtgZemjk= Subject key identifier: 5B:2A:70:4E:8D:5C:B6:4C:DD:B4:29:E3:F0:FD:E9:D0:37:9E:8B:92 Authority key identifier: 44:32:F6:1B:BD:3F:D1:1D:7F:AC:BB:15:43:A7:51:A6:5A:3F:64:C3 Certificate issuer: /CN=4432f61bbd3fd11d7facbb1543a751a65a3f64c3 Certificate serial: 019B42EE559E2D15D65699CAC0A436DD504E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 22:01:14 +0000 Manifest this update: Sun 21 Dec 2025 22:01:14 +0000 Manifest next update: Mon 22 Dec 2025 22:01:14 +0000 Files and hashes: 1: 7pJi6mSeC7Mrh9AG1jBKFX0rR-0.roa (hash: b11wVnyFk1XxJZbXy67FWmoxGHyh6LyfdFAUoV7JdAI=) 2: RDL2G70_0R1_rLsVQ6dRplo_ZMM.crl (hash: 0exqBGb3ob6ClwUlW0grwILYyjGZOfLlblit/LdPEdY=) 3: vgV_HmZnBn6siqRpblhJDHolxhY.roa (hash: CU3IQ42U8bx3rzB6RefYOwaftXWSsseBjQQDCbcW70Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:55:9e:2d:15:d6:56:99:ca:c0:a4:36:dd:50:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4432f61bbd3fd11d7facbb1543a751a65a3f64c3 Validity Not Before: Dec 21 22:01:14 2025 GMT Not After : Dec 22 22:01:14 2025 GMT Subject: CN=5b2a704e8d5cb64cddb429e3f0fde9d0379e8b92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:73:f5:d6:9b:3a:d6:a9:b4:91:6d:a5:32:bb: b9:6b:d6:a1:c0:a6:38:98:2f:29:92:fe:dd:30:9f: bd:63:19:82:8c:1b:21:89:44:d3:21:32:9f:e3:d0: 43:51:20:78:17:40:bc:85:95:f4:88:28:f9:89:ca: 26:19:11:85:4e:8d:6a:e1:bb:ad:a5:5b:fa:ca:f8: cf:dc:7a:c5:a4:17:de:8d:6a:f7:41:f2:79:ff:02: 24:3f:42:32:6b:c9:d2:fc:1b:b7:f9:ed:96:f7:4d: fb:15:e9:df:1b:8a:a9:e4:6c:46:8d:c4:78:de:e4: 94:4a:f0:0d:54:d7:cd:79:a4:af:5d:82:8d:60:2a: 89:d7:ad:92:17:fa:9b:05:98:64:53:69:0d:8c:a3: 4f:ed:76:7c:0b:cd:37:a0:f9:df:a1:54:c6:2a:2f: 27:9e:b9:04:5d:6f:00:0a:45:85:26:b7:f1:5d:8a: 5f:f6:5c:c4:9b:a6:13:92:0b:ea:25:3c:07:0d:d7: cc:61:ec:9e:ee:3e:3a:db:aa:2e:40:72:81:db:07: 66:00:bc:e7:61:8f:ee:6c:d9:57:77:c6:84:1b:86: 43:af:f6:97:16:47:18:d1:d7:1c:dd:d1:da:35:33: 11:55:47:e6:94:38:02:9f:5b:35:94:76:e8:39:ce: 12:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:2A:70:4E:8D:5C:B6:4C:DD:B4:29:E3:F0:FD:E9:D0:37:9E:8B:92 X509v3 Authority Key Identifier: keyid:44:32:F6:1B:BD:3F:D1:1D:7F:AC:BB:15:43:A7:51:A6:5A:3F:64:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:b9:64:5b:a0:1a:83:db:ce:47:16:e2:e4:6c:b8:c3:55:45: 3b:41:49:28:ec:bc:b6:10:74:b0:06:33:b0:2c:7c:8a:d5:a6: 87:af:d6:cc:7d:01:fc:63:fc:d7:18:6a:72:29:24:c8:21:c6: 97:f8:9c:19:04:d2:6a:9a:c1:12:3b:31:1a:d4:52:83:1f:fe: fa:51:e3:15:8b:30:5f:31:85:22:7f:99:90:b7:83:f1:9f:76: f8:8f:af:f3:77:5e:88:a8:d0:fb:35:1d:49:87:af:bb:f7:7f: 34:70:70:74:a8:bb:2f:10:32:8f:8d:14:77:38:62:22:12:1a: 61:d1:0c:d7:3b:81:8f:25:f9:65:82:cb:e4:6a:c9:06:39:0b: 02:41:d1:57:1a:c4:8d:3e:d2:1d:3b:f6:4d:a1:26:28:08:ff: 84:00:f8:2a:b6:ef:10:3d:52:0c:d2:c5:3a:25:0d:0a:5b:88: 07:26:af:58:14:a8:e3:15:0f:8b:04:55:a8:8e:a3:64:44:20: 72:d6:f1:2f:6b:58:11:09:ab:c5:b7:4b:d4:c5:b0:58:d7:5a: 73:43:86:89:7f:ac:93:c5:00:73:35:0d:5a:8b:72:43:67:84: e0:de:79:91:f7:a3:e7:cd:7c:d5:ae:f8:65:18:d2:d1:96:a3: 8b:49:8f:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7lWeLRXWVpnKwKQ23VBOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0MzJmNjFiYmQzZmQxMWQ3ZmFjYmIxNTQzYTc1MWE2NWEz ZjY0YzMwHhcNMjUxMjIxMjIwMTE0WhcNMjUxMjIyMjIwMTE0WjAzMTEwLwYDVQQD Eyg1YjJhNzA0ZThkNWNiNjRjZGRiNDI5ZTNmMGZkZTlkMDM3OWU4YjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3P11ps61qm0kW2lMru5a9ahwKY4 mC8pkv7dMJ+9YxmCjBshiUTTITKf49BDUSB4F0C8hZX0iCj5icomGRGFTo1q4but pVv6yvjP3HrFpBfejWr3QfJ5/wIkP0Iya8nS/Bu3+e2W9037FenfG4qp5GxGjcR4 3uSUSvANVNfNeaSvXYKNYCqJ162SF/qbBZhkU2kNjKNP7XZ8C803oPnfoVTGKi8n nrkEXW8ACkWFJrfxXYpf9lzEm6YTkgvqJTwHDdfMYeye7j4626ouQHKB2wdmALzn YY/ubNlXd8aEG4ZDr/aXFkcY0dcc3dHaNTMRVUfmlDgCn1s1lHboOc4SzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFsqcE6NXLZM3bQp4/D96dA3nouSMB8GA1UdIwQY MBaAFEQy9hu9P9Edf6y7FUOnUaZaP2TDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkRMMkc3MF8wUjFfckxzVlE2ZFJwbG9fWk1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82NjRlYjEtZjIyMC00ODA0LThjNWEt OTI3ODg0MGM0OTcwLzEvUkRMMkc3MF8wUjFfckxzVlE2ZFJwbG9fWk1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82NjRlYjEtZjIyMC00ODA0LThjNWEtOTI3ODg0MGM0OTcw LzEvUkRMMkc3MF8wUjFfckxzVlE2ZFJwbG9fWk1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZblkW6Aa g9vORxbi5Gy4w1VFO0FJKOy8thB0sAYzsCx8itWmh6/WzH0B/GP81xhqcikkyCHG l/icGQTSaprBEjsxGtRSgx/++lHjFYswXzGFIn+ZkLeD8Z92+I+v83deiKjQ+zUd SYevu/d/NHBwdKi7LxAyj40UdzhiIhIaYdEM1zuBjyX5ZYLL5GrJBjkLAkHRVxrE jT7SHTv2TaEmKAj/hAD4KrbvED1SDNLFOiUNCluIByavWBSo4xUPiwRVqI6jZEQg ctbxL2tYEQmrxbdL1MWwWNdac0OGiX+sk8UAczUNWotyQ2eE4N55kfej58181a74 ZRjS0Zaji0mPuA== -----END CERTIFICATE-----Generated at Mon Dec 22 06:33:12 2025 by rpki-client