This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft File: drtZ2KtKtSd87uX_CYIIQzBiex8.mft (raw, json) Hash identifier: og/c44AJBF0F0RRQr9laB9mZrNbnuTiCHbr/GWaSV7s= Subject key identifier: C2:CF:F5:50:4D:DC:E3:79:54:7D:17:6D:40:69:7B:1A:8F:0B:A2:72 Authority key identifier: 76:BB:59:D8:AB:4A:B5:27:7C:EE:E5:FF:09:82:08:43:30:62:7B:1F Certificate issuer: /CN=76bb59d8ab4ab5277ceee5ff0982084330627b1f Certificate serial: 019B649E65C2252FEC6D31D408B53088C57E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/drtZ2KtKtSd87uX_CYIIQzBiex8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft Manifest number: 0251 Signing time: Sun 28 Dec 2025 11:01:00 +0000 Manifest this update: Sun 28 Dec 2025 11:01:00 +0000 Manifest next update: Mon 29 Dec 2025 11:01:00 +0000 Files and hashes: 1: AMeFJYEOsq8eDF0JklVrrKO_x-w.roa (hash: BUSoz6NuItfjL6psERkejscD0G0Lwnx4YN1Y5CF1al8=) 2: drtZ2KtKtSd87uX_CYIIQzBiex8.crl (hash: K7voQIVj//oBAiXJybguc6To9/ZrVGOBs4KNcZr+d0s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.crl rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft rsync://rpki.ripe.net/repository/DEFAULT/drtZ2KtKtSd87uX_CYIIQzBiex8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:64:9e:65:c2:25:2f:ec:6d:31:d4:08:b5:30:88:c5:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76bb59d8ab4ab5277ceee5ff0982084330627b1f Validity Not Before: Dec 28 11:01:00 2025 GMT Not After : Dec 29 11:01:00 2025 GMT Subject: CN=c2cff5504ddce379547d176d40697b1a8f0ba272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:59:26:45:da:96:08:ae:5d:e2:e2:3a:2b:a3: 21:a4:90:d5:4d:f7:47:29:50:8c:ae:a1:f0:cd:b1: 0c:28:df:fd:c9:0e:0d:53:2f:2b:da:48:be:0a:ae: e4:92:5c:ec:3c:5e:99:5e:6a:ef:6c:12:05:ab:47: be:47:f4:8a:dc:23:37:c0:3a:4d:8a:c9:f7:4a:78: 2d:d5:5b:8f:ba:65:c5:fe:e0:1f:de:fb:60:5b:8a: 73:14:0e:d9:a4:4a:a7:01:5c:76:fc:4c:7f:39:db: 27:74:46:ad:73:ec:c5:09:65:59:a9:04:ae:d1:74: 2b:09:72:65:a1:14:30:49:b6:25:43:dd:66:29:97: e6:20:b2:e8:66:95:1d:72:9a:f5:b0:72:b5:4b:44: 3d:3d:8c:15:62:7e:b8:2f:2c:c9:f1:7b:fe:dc:62: 94:7e:73:aa:83:d4:5b:2e:07:52:1e:22:71:d9:d9: e3:24:28:cd:5f:2a:7b:e6:86:ff:82:42:cd:18:57: e9:89:a2:50:09:78:a4:06:ce:a8:40:d2:6e:a8:08: 62:20:e4:6d:3c:6c:6e:e5:17:3a:8f:91:0b:07:50: c9:5c:e8:b3:bc:97:01:4c:43:b2:5b:48:b9:fe:02: 66:46:15:bc:0f:85:a9:d0:59:50:02:59:3c:ba:80: c6:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:CF:F5:50:4D:DC:E3:79:54:7D:17:6D:40:69:7B:1A:8F:0B:A2:72 X509v3 Authority Key Identifier: keyid:76:BB:59:D8:AB:4A:B5:27:7C:EE:E5:FF:09:82:08:43:30:62:7B:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/drtZ2KtKtSd87uX_CYIIQzBiex8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:4f:cc:8c:bb:4b:8c:5e:68:ea:b6:23:e1:a1:1d:ca:ad:7d: 2c:17:2d:0c:9b:fb:28:56:21:d1:39:4f:0c:03:ac:87:1b:b6: 4f:81:0e:d4:ee:1a:67:3d:36:c4:b0:6b:0e:88:69:91:46:08: d6:f3:91:cf:b4:3c:4c:27:a2:77:72:0c:03:36:0a:a8:cd:6a: 59:ac:32:8a:6a:60:06:1e:81:91:67:61:f0:99:8b:0d:6d:cc: 4b:aa:d2:53:28:84:28:ab:a9:45:df:cf:fc:77:d4:f3:68:5b: e0:a6:e7:4c:c5:c5:39:17:36:14:33:12:b6:41:7b:cb:30:76: 75:39:ce:19:1d:4c:ad:0c:34:00:17:46:5c:c2:ab:30:9c:88: 89:f0:96:1f:8b:a7:94:c7:0e:75:e0:26:db:21:ff:96:de:fa: 56:ba:47:d6:21:ca:b5:79:4c:0e:e0:40:51:06:94:c9:f1:5d: 99:ad:e9:b9:50:f8:99:9b:30:ba:03:31:a1:ce:d8:72:60:42: 9a:ad:46:d5:49:65:5c:14:80:4f:85:da:e4:bc:cd:3e:a1:0a: 7a:0d:e3:bc:97:1e:10:24:22:d4:6d:00:ad:5f:ba:a2:4b:cc: 9a:62:7d:ce:59:35:2a:9b:fd:43:14:eb:15:bd:46:d9:f7:fd: 9f:44:29:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtknmXCJS/sbTHUCLUwiMV+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2YmI1OWQ4YWI0YWI1Mjc3Y2VlZTVmZjA5ODIwODQzMzA2 MjdiMWYwHhcNMjUxMjI4MTEwMTAwWhcNMjUxMjI5MTEwMTAwWjAzMTEwLwYDVQQD EyhjMmNmZjU1MDRkZGNlMzc5NTQ3ZDE3NmQ0MDY5N2IxYThmMGJhMjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVkmRdqWCK5d4uI6K6MhpJDVTfdH KVCMrqHwzbEMKN/9yQ4NUy8r2ki+Cq7kklzsPF6ZXmrvbBIFq0e+R/SK3CM3wDpN isn3Sngt1VuPumXF/uAf3vtgW4pzFA7ZpEqnAVx2/Ex/OdsndEatc+zFCWVZqQSu 0XQrCXJloRQwSbYlQ91mKZfmILLoZpUdcpr1sHK1S0Q9PYwVYn64LyzJ8Xv+3GKU fnOqg9RbLgdSHiJx2dnjJCjNXyp75ob/gkLNGFfpiaJQCXikBs6oQNJuqAhiIORt PGxu5Rc6j5ELB1DJXOizvJcBTEOyW0i5/gJmRhW8D4Wp0FlQAlk8uoDGJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMLP9VBN3ON5VH0XbUBpexqPC6JyMB8GA1UdIwQY MBaAFHa7WdirSrUnfO7l/wmCCEMwYnsfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHJ0WjJLdEt0U2Q4N3VYX0NZSUlRekJpZXg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS84MmQ2NWUtZTBkOS00ZmNkLWIzYWUt NGQzYTVjMDQyZTYxLzEvZHJ0WjJLdEt0U2Q4N3VYX0NZSUlRekJpZXg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS84MmQ2NWUtZTBkOS00ZmNkLWIzYWUtNGQzYTVjMDQyZTYx LzEvZHJ0WjJLdEt0U2Q4N3VYX0NZSUlRekJpZXg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC0/MjLtL jF5o6rYj4aEdyq19LBctDJv7KFYh0TlPDAOshxu2T4EO1O4aZz02xLBrDohpkUYI 1vORz7Q8TCeid3IMAzYKqM1qWawyimpgBh6BkWdh8JmLDW3MS6rSUyiEKKupRd/P /HfU82hb4KbnTMXFORc2FDMStkF7yzB2dTnOGR1MrQw0ABdGXMKrMJyIifCWH4un lMcOdeAm2yH/lt76VrpH1iHKtXlMDuBAUQaUyfFdma3puVD4mZswugMxoc7YcmBC mq1G1UllXBSAT4Xa5LzNPqEKeg3jvJceECQi1G0ArV+6okvMmmJ9zlk1Kpv9QxTr Fb1G2ff9n0Qp/A== -----END CERTIFICATE-----Generated at Sun Dec 28 12:30:04 2025 by rpki-client