This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.mft File: DloI_DRpD1LbDCt-R-jlOIMUWpg.mft (raw, json) Hash identifier: BX9vV2ykqPxMffB3MdXhRt6sKrEqLjsUkGc1RkgfWQ8= Subject key identifier: A1:13:18:5B:15:CC:07:A0:34:29:35:B4:D6:EC:9C:BB:04:3B:3F:72 Authority key identifier: 0E:5A:08:FC:34:69:0F:52:DB:0C:2B:7E:47:E8:E5:38:83:14:5A:98 Certificate issuer: /CN=0e5a08fc34690f52db0c2b7e47e8e53883145a98 Certificate serial: 019B2AAE8E06DB51DFE856489B5FE0BFFBC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DloI_DRpD1LbDCt-R-jlOIMUWpg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.mft Manifest number: 028F Signing time: Wed 17 Dec 2025 05:00:41 +0000 Manifest this update: Wed 17 Dec 2025 05:00:41 +0000 Manifest next update: Thu 18 Dec 2025 05:00:41 +0000 Files and hashes: 1: DloI_DRpD1LbDCt-R-jlOIMUWpg.crl (hash: vAmHFzmV8MJKjLKjguLF1f1yLovf0duULIXIRi4RIOU=) 2: xjqb8HoLRLAR-p4-R3Sb4dWDULU.roa (hash: 1mq/X/AhDxzJxbocaN5soLh/qNxvhHjRbgctopoVrKg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.crl rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.mft rsync://rpki.ripe.net/repository/DEFAULT/DloI_DRpD1LbDCt-R-jlOIMUWpg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 05:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:ae:8e:06:db:51:df:e8:56:48:9b:5f:e0:bf:fb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e5a08fc34690f52db0c2b7e47e8e53883145a98 Validity Not Before: Dec 17 05:00:41 2025 GMT Not After : Dec 18 05:00:41 2025 GMT Subject: CN=a113185b15cc07a0342935b4d6ec9cbb043b3f72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:19:04:cf:dc:a1:76:7d:af:3f:75:7f:36:1c: d4:da:21:4c:16:31:7e:8d:61:f5:4d:bf:3e:6d:91: 95:04:0a:18:ef:80:d2:55:b0:43:e1:43:06:b0:b8: a4:ec:42:c2:44:0c:72:d6:69:00:07:f8:59:82:81: 3f:0e:b0:be:8a:11:11:72:4c:f6:90:63:de:ec:b6: 6e:17:9a:34:c9:29:95:80:54:09:21:5f:ec:eb:02: 2a:0c:62:60:36:db:67:bc:58:68:d4:a1:df:a3:8a: 61:cf:c3:96:ee:e0:45:44:38:16:b3:da:51:87:25: 16:aa:bc:85:c2:50:81:ff:42:b5:f3:c2:8c:bc:50: 50:c9:98:b1:80:16:9c:fc:da:7a:b9:16:20:66:3d: bf:42:11:8b:0c:e2:54:dc:ab:28:7b:03:17:a1:9e: b9:4a:40:fb:bd:fc:b6:48:36:11:12:fd:37:bc:6e: 5c:59:e1:3f:54:9b:08:f9:54:96:7d:97:3b:7a:5a: 99:ce:47:15:f9:b6:25:c3:2d:dd:48:32:74:15:71: 22:94:ff:4d:5e:47:0b:43:94:63:e3:93:0b:30:47: 41:db:e8:41:ac:38:a4:58:65:8b:23:15:7c:50:bb: bb:9b:f8:2e:2b:23:1a:3f:94:70:4a:3f:97:63:c0: 1e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:13:18:5B:15:CC:07:A0:34:29:35:B4:D6:EC:9C:BB:04:3B:3F:72 X509v3 Authority Key Identifier: keyid:0E:5A:08:FC:34:69:0F:52:DB:0C:2B:7E:47:E8:E5:38:83:14:5A:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DloI_DRpD1LbDCt-R-jlOIMUWpg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:08:31:98:88:b8:76:4c:75:d8:a5:ed:49:80:67:71:8b:51: b6:84:94:f4:02:71:64:2d:ef:d3:1b:8f:aa:8f:18:a5:ae:1c: 52:07:2c:8a:73:1b:47:20:32:76:6e:5f:8b:ea:93:99:ca:6b: 38:57:14:70:d4:99:a7:ef:e4:54:c5:72:ad:63:d5:b6:66:a3: bc:11:60:65:a6:5e:fa:58:a2:39:56:c0:82:e5:ac:66:45:e2: 8f:28:cc:76:0a:69:3a:da:8f:da:14:e5:a8:47:ee:51:b5:48: e6:45:d1:1d:f1:a0:87:ad:e9:34:e2:22:f8:25:c1:05:d5:0b: 62:38:d9:97:25:cd:8f:05:7f:8c:64:48:8c:13:38:fe:be:15: 41:c7:9b:d4:2c:fe:5a:73:1e:8d:4e:1a:df:e9:c0:67:c6:c1: 68:c3:0b:56:c7:5f:cf:f9:29:07:d4:7a:12:b5:70:2f:1e:e5: aa:5d:9c:d7:8e:cc:f0:5f:fd:c6:15:8f:42:e5:81:5b:c9:46: 57:13:05:8b:ae:ff:4b:ea:ca:bd:86:60:c7:c5:60:7b:5c:06: ac:7f:33:af:d0:f4:96:78:42:f1:59:61:3a:10:95:2d:ad:d3: a6:f3:86:30:ac:71:a7:d3:4e:64:83:3d:92:da:a4:30:c6:23: df:57:19:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsqro4G21Hf6FZIm1/gv/vAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNWEwOGZjMzQ2OTBmNTJkYjBjMmI3ZTQ3ZThlNTM4ODMx NDVhOTgwHhcNMjUxMjE3MDUwMDQxWhcNMjUxMjE4MDUwMDQxWjAzMTEwLwYDVQQD EyhhMTEzMTg1YjE1Y2MwN2EwMzQyOTM1YjRkNmVjOWNiYjA0M2IzZjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRkEz9yhdn2vP3V/NhzU2iFMFjF+ jWH1Tb8+bZGVBAoY74DSVbBD4UMGsLik7ELCRAxy1mkAB/hZgoE/DrC+ihERckz2 kGPe7LZuF5o0ySmVgFQJIV/s6wIqDGJgNttnvFho1KHfo4phz8OW7uBFRDgWs9pR hyUWqryFwlCB/0K188KMvFBQyZixgBac/Np6uRYgZj2/QhGLDOJU3KsoewMXoZ65 SkD7vfy2SDYREv03vG5cWeE/VJsI+VSWfZc7elqZzkcV+bYlwy3dSDJ0FXEilP9N XkcLQ5Rj45MLMEdB2+hBrDikWGWLIxV8ULu7m/guKyMaP5RwSj+XY8Ae1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKETGFsVzAegNCk1tNbsnLsEOz9yMB8GA1UdIwQY MBaAFA5aCPw0aQ9S2wwrfkfo5TiDFFqYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGxvSV9EUnBEMUxiREN0LVItamxPSU1VV3BnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMTc4NDktN2NjZi00ODE1LWJjNjkt YTc3ZjBiMzIxNDRlLzEvRGxvSV9EUnBEMUxiREN0LVItamxPSU1VV3BnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8wMTc4NDktN2NjZi00ODE1LWJjNjktYTc3ZjBiMzIxNDRl LzEvRGxvSV9EUnBEMUxiREN0LVItamxPSU1VV3BnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQwgxmIi4 dkx12KXtSYBncYtRtoSU9AJxZC3v0xuPqo8Ypa4cUgcsinMbRyAydm5fi+qTmcpr OFcUcNSZp+/kVMVyrWPVtmajvBFgZaZe+liiOVbAguWsZkXijyjMdgppOtqP2hTl qEfuUbVI5kXRHfGgh63pNOIi+CXBBdULYjjZlyXNjwV/jGRIjBM4/r4VQceb1Cz+ WnMejU4a3+nAZ8bBaMMLVsdfz/kpB9R6ErVwLx7lql2c147M8F/9xhWPQuWBW8lG VxMFi67/S+rKvYZgx8Vge1wGrH8zr9D0lnhC8VlhOhCVLa3TpvOGMKxxp9NOZIM9 ktqkMMYj31cZTA== -----END CERTIFICATE-----Generated at Wed Dec 17 13:09:34 2025 by rpki-client