This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft File: dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft (raw, json) Hash identifier: Xm6uk01vlIJ2b+ivXelYO+MmXjLNDvISLHT8E3V44Mc= Subject key identifier: A0:E3:C8:0F:DE:8E:9C:F3:51:50:77:5F:19:D4:A1:59:95:60:4D:33 Authority key identifier: 76:50:63:4C:4E:41:77:B9:18:44:B6:DC:0A:EB:73:29:8D:8B:43:FA Certificate issuer: /CN=7650634c4e4177b91844b6dc0aeb73298d8b43fa Certificate serial: 019B31C44E52F58B9418E7934D77DA31DEAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft Manifest number: 06CA Signing time: Thu 18 Dec 2025 14:01:47 +0000 Manifest this update: Thu 18 Dec 2025 14:01:47 +0000 Manifest next update: Fri 19 Dec 2025 14:01:47 +0000 Files and hashes: 1: bsvx6NPc5wE4z82KVeJlkoJxWms.roa (hash: 6rlBzLZqcg/z+eAbxCr25c2freBfaX3gVlYhMsk4Kok=) 2: dlBjTE5Bd7kYRLbcCutzKY2LQ_o.crl (hash: 8InrmY6xHtdKT4B9cKwdcGy5ioB/yrD3JDr0UV5cLo4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft rsync://rpki.ripe.net/repository/DEFAULT/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:c4:4e:52:f5:8b:94:18:e7:93:4d:77:da:31:de:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7650634c4e4177b91844b6dc0aeb73298d8b43fa Validity Not Before: Dec 18 14:01:47 2025 GMT Not After : Dec 19 14:01:47 2025 GMT Subject: CN=a0e3c80fde8e9cf35150775f19d4a15995604d33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0a:69:40:3b:00:b0:37:fa:b1:49:e5:27:d6: bc:4f:0d:83:c7:03:dd:cb:05:f5:bf:41:0b:93:e6: 1e:d2:ad:75:72:12:0a:12:e3:35:18:e6:3b:55:28: 3e:43:3a:c7:82:a7:47:8a:9a:46:ba:1a:af:e1:07: e6:c9:37:90:e3:27:8c:cf:ee:0b:fc:32:77:59:0a: b0:14:14:69:08:45:3f:72:d9:85:59:35:2e:64:ef: e4:c0:6f:bf:fd:2b:de:13:c6:b9:7b:8a:d4:40:81: c7:58:f0:f5:81:79:e3:81:54:79:7e:d4:ab:8b:99: c3:17:de:6f:b9:00:88:23:19:83:c1:c7:2f:84:30: cf:ac:5a:5a:a0:1c:3e:cb:5d:5c:20:75:8f:f1:ea: c2:34:cb:71:60:3e:eb:e5:68:b9:44:39:f0:e9:fa: 3a:93:a6:da:7b:ea:a7:2f:80:6f:05:fe:1a:14:22: cf:e5:3e:cd:84:45:1e:1a:57:26:e1:1d:a3:ca:eb: 39:7f:70:1e:23:6e:39:4b:27:65:06:11:5e:ea:99: 73:4b:4c:0b:39:ac:0b:4c:91:84:22:1e:0c:f6:e8: e4:09:03:60:53:46:04:43:70:4f:e5:f3:86:2a:71: 94:aa:8d:9d:14:db:93:98:db:fe:81:99:89:f6:9e: a4:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:E3:C8:0F:DE:8E:9C:F3:51:50:77:5F:19:D4:A1:59:95:60:4D:33 X509v3 Authority Key Identifier: keyid:76:50:63:4C:4E:41:77:B9:18:44:B6:DC:0A:EB:73:29:8D:8B:43:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a4f6e4-12e7-421f-aa31-4115bd508284/1/dlBjTE5Bd7kYRLbcCutzKY2LQ_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:2b:8e:62:13:bc:fc:aa:41:8a:0f:4d:bc:93:5a:f5:36:9f: 31:f0:b8:04:2a:d1:f2:c4:fb:c2:c6:b6:e1:fc:3b:8a:0a:93: 0d:fc:a6:c0:97:d4:b2:4b:d8:26:c1:bb:43:fe:d3:fd:2d:1d: 23:eb:0a:84:d4:00:70:bd:e7:7a:06:07:f0:ca:ac:53:9c:2b: e6:75:11:2e:7f:41:29:38:e2:fe:83:06:f9:e3:67:fc:68:a0: d7:9a:ae:64:40:c8:08:6e:cd:65:8a:52:87:ce:57:69:cf:ba: f3:91:36:6b:88:d2:8c:fa:17:42:8e:68:99:7a:00:47:a7:32: 8d:3e:ae:6b:00:51:c2:10:a7:2c:2b:3b:f6:c0:33:ed:13:e9: 59:7d:74:03:96:d4:9c:24:22:27:6f:7c:81:07:b3:fe:94:da: 0f:6a:67:07:fc:08:9b:08:ee:92:26:54:12:b8:df:ec:3c:56: 62:79:4c:f7:61:73:e1:12:79:dc:6f:c1:49:39:67:94:53:d1: 41:d4:2b:4e:8a:f5:f7:12:18:07:31:8c:04:c1:e6:27:38:76: 78:0d:45:48:8c:3d:22:ac:e5:f2:23:61:32:44:f6:a9:25:7f: 25:61:34:4e:ec:5b:56:c2:14:ce:df:1e:1b:79:02:1e:2b:c6: 1b:30:ce:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxxE5S9YuUGOeTTXfaMd6vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NTA2MzRjNGU0MTc3YjkxODQ0YjZkYzBhZWI3MzI5OGQ4 YjQzZmEwHhcNMjUxMjE4MTQwMTQ3WhcNMjUxMjE5MTQwMTQ3WjAzMTEwLwYDVQQD EyhhMGUzYzgwZmRlOGU5Y2YzNTE1MDc3NWYxOWQ0YTE1OTk1NjA0ZDMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAppQDsAsDf6sUnlJ9a8Tw2DxwPd ywX1v0ELk+Ye0q11chIKEuM1GOY7VSg+QzrHgqdHippGuhqv4QfmyTeQ4yeMz+4L /DJ3WQqwFBRpCEU/ctmFWTUuZO/kwG+//SveE8a5e4rUQIHHWPD1gXnjgVR5ftSr i5nDF95vuQCIIxmDwccvhDDPrFpaoBw+y11cIHWP8erCNMtxYD7r5Wi5RDnw6fo6 k6bae+qnL4BvBf4aFCLP5T7NhEUeGlcm4R2jyus5f3AeI245SydlBhFe6plzS0wL OawLTJGEIh4M9ujkCQNgU0YEQ3BP5fOGKnGUqo2dFNuTmNv+gZmJ9p6kCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKDjyA/ejpzzUVB3XxnUoVmVYE0zMB8GA1UdIwQY MBaAFHZQY0xOQXe5GES23ArrcymNi0P6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGxCalRFNUJkN2tZUkxiY0N1dHpLWTJMUV9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9hNGY2ZTQtMTJlNy00MjFmLWFhMzEt NDExNWJkNTA4Mjg0LzEvZGxCalRFNUJkN2tZUkxiY0N1dHpLWTJMUV9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9hNGY2ZTQtMTJlNy00MjFmLWFhMzEtNDExNWJkNTA4Mjg0 LzEvZGxCalRFNUJkN2tZUkxiY0N1dHpLWTJMUV9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATiuOYhO8 /KpBig9NvJNa9TafMfC4BCrR8sT7wsa24fw7igqTDfymwJfUskvYJsG7Q/7T/S0d I+sKhNQAcL3negYH8MqsU5wr5nURLn9BKTji/oMG+eNn/Gig15quZEDICG7NZYpS h85Xac+685E2a4jSjPoXQo5omXoAR6cyjT6uawBRwhCnLCs79sAz7RPpWX10A5bU nCQiJ298gQez/pTaD2pnB/wImwjukiZUErjf7DxWYnlM92Fz4RJ53G/BSTlnlFPR QdQrTor19xIYBzGMBMHmJzh2eA1FSIw9Iqzl8iNhMkT2qSV/JWE0TuxbVsIUzt8e G3kCHivGGzDOCw== -----END CERTIFICATE-----Generated at Thu Dec 18 18:35:51 2025 by rpki-client