This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft File: CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft (raw, json) Hash identifier: CWTGbaMAY2PulXCXkaYv/aWKM60NjbgSAK2NUMPxw+8= Subject key identifier: 4A:40:A7:69:6E:F6:00:13:13:14:BD:3A:16:72:DE:2E:34:37:A2:99 Authority key identifier: 09:D9:43:F9:D5:C7:5B:1F:50:56:4F:2D:1D:D0:51:17:88:EB:0A:FC Certificate issuer: /CN=09d943f9d5c75b1f50564f2d1dd0511788eb0afc Certificate serial: 019B52989375BBA8848DB4C4E440F56C5C20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdlD-dXHWx9QVk8tHdBRF4jrCvw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft Manifest number: 016B Signing time: Wed 24 Dec 2025 23:01:29 +0000 Manifest this update: Wed 24 Dec 2025 23:01:29 +0000 Manifest next update: Thu 25 Dec 2025 23:01:29 +0000 Files and hashes: 1: CdlD-dXHWx9QVk8tHdBRF4jrCvw.crl (hash: QJYNujVWzeZ5dQgvLhiZeT6WjEwaD+quovEJxRV8FqY=) 2: mIMZrEW18-_5KGhaxhfyAse2jaU.roa (hash: 6Qvzu2ngRsyEUpj0qpA3Dkp0CWaU4iSnWXbsJngfWw4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft rsync://rpki.ripe.net/repository/DEFAULT/CdlD-dXHWx9QVk8tHdBRF4jrCvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 23:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:98:93:75:bb:a8:84:8d:b4:c4:e4:40:f5:6c:5c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09d943f9d5c75b1f50564f2d1dd0511788eb0afc Validity Not Before: Dec 24 23:01:29 2025 GMT Not After : Dec 25 23:01:29 2025 GMT Subject: CN=4a40a7696ef600131314bd3a1672de2e3437a299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:03:0b:a8:e1:3c:1a:23:ee:f9:84:64:c5:16: 04:96:76:65:5b:54:76:8e:d5:55:29:7e:1c:4e:24: 00:9c:cd:59:aa:fb:cf:6e:38:e7:14:b7:91:17:c2: c0:a1:0b:c4:57:71:75:f0:44:dc:87:8f:12:f5:10: 93:0a:59:8d:99:b5:69:c6:06:d5:0f:ee:1c:43:65: f0:a4:1b:20:7c:81:08:d3:2c:04:67:32:bf:1c:58: 76:d3:d7:aa:a0:9b:54:34:44:48:47:42:76:2f:77: 3c:4e:a3:f0:8a:4f:7f:65:73:1c:78:b1:44:ad:11: e2:74:72:c6:28:ca:d0:dd:26:02:00:5d:6a:62:ce: 0f:35:64:f3:8a:11:7e:c3:84:84:d6:ea:99:9b:1e: bd:e0:42:44:4d:ed:0f:3d:79:95:37:02:5b:84:83: d2:77:02:6a:88:49:ea:3e:d1:c7:3d:7b:61:f8:3c: b7:c7:cd:81:3a:06:8d:97:29:ae:73:0d:5e:1d:27: 45:8f:28:b7:41:14:a6:78:a5:ce:7c:51:e4:43:18: b2:61:8e:20:dc:64:ae:2b:ce:71:ac:3c:90:ac:06: a8:d5:d7:09:00:38:ea:3b:83:84:14:40:d6:d2:1e: 3c:9b:15:eb:a7:d2:9a:0a:7a:e8:d2:16:7e:ba:3f: 6b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:40:A7:69:6E:F6:00:13:13:14:BD:3A:16:72:DE:2E:34:37:A2:99 X509v3 Authority Key Identifier: keyid:09:D9:43:F9:D5:C7:5B:1F:50:56:4F:2D:1D:D0:51:17:88:EB:0A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdlD-dXHWx9QVk8tHdBRF4jrCvw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:b1:f7:00:ce:b9:a7:76:43:6b:36:19:33:f2:a5:47:2f:54: 50:7f:6e:cf:bf:65:22:68:e3:0d:49:08:ac:b5:cb:8b:23:64: d0:ae:cd:9d:18:a9:d1:6f:4e:88:c6:11:70:b7:e1:da:3d:97: 43:08:9a:52:c8:ec:42:fa:d4:cf:a5:99:1b:31:d9:b4:2c:63: 0b:43:ab:22:02:b5:64:26:8b:7e:5d:67:e1:1c:ad:61:a0:58: e6:ee:b8:49:fb:d1:58:4f:cd:66:3f:c6:ca:4a:1d:ca:e5:ec: bb:f8:c5:b0:10:f1:30:e2:97:73:39:a0:0e:a9:9b:59:9b:ba: 88:2f:2b:4a:69:ff:ae:a3:9a:2d:55:47:15:da:99:7f:83:fc: 14:cf:75:d4:6a:f6:7e:e5:24:47:67:41:b1:91:3f:a3:ba:93: 4d:8d:42:5f:a3:45:e1:93:91:4f:11:3c:8d:85:08:6f:c9:0c: 1c:c6:1e:f6:14:d8:33:0c:72:dc:cf:f2:6b:97:53:5f:04:33: c1:dd:d1:b8:d9:4b:71:f7:fb:b8:ab:f8:f4:3d:1e:8a:b5:4f: b0:d4:89:b9:93:ee:02:a1:f3:3a:42:05:fe:a8:50:f9:83:62: 73:f2:91:55:e3:ba:dd:6d:bf:31:95:3b:6e:87:59:79:aa:ba: 0b:f3:01:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSmJN1u6iEjbTE5ED1bFwgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZDk0M2Y5ZDVjNzViMWY1MDU2NGYyZDFkZDA1MTE3ODhl YjBhZmMwHhcNMjUxMjI0MjMwMTI5WhcNMjUxMjI1MjMwMTI5WjAzMTEwLwYDVQQD Eyg0YTQwYTc2OTZlZjYwMDEzMTMxNGJkM2ExNjcyZGUyZTM0MzdhMjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAMLqOE8GiPu+YRkxRYElnZlW1R2 jtVVKX4cTiQAnM1ZqvvPbjjnFLeRF8LAoQvEV3F18ETch48S9RCTClmNmbVpxgbV D+4cQ2XwpBsgfIEI0ywEZzK/HFh209eqoJtUNERIR0J2L3c8TqPwik9/ZXMceLFE rRHidHLGKMrQ3SYCAF1qYs4PNWTzihF+w4SE1uqZmx694EJETe0PPXmVNwJbhIPS dwJqiEnqPtHHPXth+Dy3x82BOgaNlymucw1eHSdFjyi3QRSmeKXOfFHkQxiyYY4g 3GSuK85xrDyQrAao1dcJADjqO4OEFEDW0h48mxXrp9KaCnro0hZ+uj9r0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEpAp2lu9gATExS9OhZy3i40N6KZMB8GA1UdIwQY MBaAFAnZQ/nVx1sfUFZPLR3QUReI6wr8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2RsRC1kWEhXeDlRVms4dEhkQlJGNGpyQ3Z3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi82MmMwMDItYjk0Yy00MjNiLWI0ZWIt ZTc5MmNjMmZkMDdlLzEvQ2RsRC1kWEhXeDlRVms4dEhkQlJGNGpyQ3Z3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi82MmMwMDItYjk0Yy00MjNiLWI0ZWItZTc5MmNjMmZkMDdl LzEvQ2RsRC1kWEhXeDlRVms4dEhkQlJGNGpyQ3Z3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtrH3AM65 p3ZDazYZM/KlRy9UUH9uz79lImjjDUkIrLXLiyNk0K7NnRip0W9OiMYRcLfh2j2X QwiaUsjsQvrUz6WZGzHZtCxjC0OrIgK1ZCaLfl1n4RytYaBY5u64SfvRWE/NZj/G ykodyuXsu/jFsBDxMOKXczmgDqmbWZu6iC8rSmn/rqOaLVVHFdqZf4P8FM911Gr2 fuUkR2dBsZE/o7qTTY1CX6NF4ZORTxE8jYUIb8kMHMYe9hTYMwxy3M/ya5dTXwQz wd3RuNlLcff7uKv49D0eirVPsNSJuZPuAqHzOkIF/qhQ+YNic/KRVeO63W2/MZU7 bodZeaq6C/MBLw== -----END CERTIFICATE-----Generated at Thu Dec 25 06:56:07 2025 by rpki-client