This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft File: dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft (raw, json) Hash identifier: J9/IeNgyleLcAogt6TEZEb4h3V7bFkBDbJW4YxF5NQk= Subject key identifier: 7B:EB:74:F1:C3:68:57:F1:40:DC:37:BA:8F:09:A0:5A:F6:3C:3A:54 Authority key identifier: 76:51:76:2D:E3:D3:F1:9C:ED:D4:38:B0:3C:F2:39:86:CE:91:72:7F Certificate issuer: /CN=7651762de3d3f19cedd438b03cf23986ce91727f Certificate serial: 019B3EDAF96DB37A7EDCDD8BC433ACCE099D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 03:01:36 +0000 Manifest this update: Sun 21 Dec 2025 03:01:36 +0000 Manifest next update: Mon 22 Dec 2025 03:01:36 +0000 Files and hashes: 1: 00qMnebnoQ1q-0QpuHNtB2jC8kw.roa (hash: eM8vkjcd9zZftIcrd2HQLTAzDHkkoGlg8veiHLYFAc4=) 2: dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl (hash: c5mdx3xz8uFRKoLjuQF3q7/ubqfqP4eygc/vHKz6NtM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 03:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:f9:6d:b3:7a:7e:dc:dd:8b:c4:33:ac:ce:09:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7651762de3d3f19cedd438b03cf23986ce91727f Validity Not Before: Dec 21 03:01:36 2025 GMT Not After : Dec 22 03:01:36 2025 GMT Subject: CN=7beb74f1c36857f140dc37ba8f09a05af63c3a54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:52:d8:cd:6e:bc:6c:99:fa:f8:87:a7:45:08: 9a:68:3a:a2:a6:73:69:02:25:78:ca:14:53:89:eb: ef:f3:90:a1:57:e9:2a:38:4d:e2:f7:09:f5:c6:9b: 6a:a0:3f:a5:e1:ab:84:3c:34:bb:8d:f2:f0:b7:ad: 6c:26:15:af:44:b6:aa:c3:0b:ce:c1:13:7d:e1:b4: c1:84:e1:6e:18:24:01:77:8c:d3:e2:59:e8:37:5a: c6:ee:58:49:dd:da:68:ea:cb:21:8c:94:7b:be:07: ba:d0:9f:36:3e:94:53:2b:3e:17:3f:b6:16:02:b2: d9:ab:f0:7e:00:92:71:45:f1:65:e6:25:22:f5:bc: 66:be:ee:10:a0:3c:30:29:24:35:53:8d:44:e3:dc: 47:5c:01:3f:d8:a1:76:c3:6d:fa:6e:34:e5:82:cf: d2:51:2b:51:7d:0a:33:d2:6c:00:b4:bc:0c:ba:90: f5:04:b3:48:2a:ea:72:ed:a4:da:e8:09:b8:25:d6: 37:27:20:ac:b5:59:2e:99:50:37:5f:45:b9:6b:9c: cd:70:17:75:0d:b6:38:b1:3b:ce:66:94:6a:f6:f0: b1:2e:c9:2f:ca:c1:45:c6:9a:fb:fa:31:84:72:62: 05:af:e0:e7:08:65:5f:28:01:b9:17:18:ce:85:b7: 15:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:EB:74:F1:C3:68:57:F1:40:DC:37:BA:8F:09:A0:5A:F6:3C:3A:54 X509v3 Authority Key Identifier: keyid:76:51:76:2D:E3:D3:F1:9C:ED:D4:38:B0:3C:F2:39:86:CE:91:72:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:1f:8b:af:ab:52:92:eb:8a:51:8b:2d:c8:d0:a8:0c:97:8e: 21:3d:43:5f:03:f8:14:4f:c0:aa:ba:69:e0:e1:eb:db:9a:cb: f3:8b:bd:05:55:4a:72:31:a9:15:6f:94:ab:dd:26:d6:f0:ff: 5b:af:03:9d:a8:d9:a8:4c:c9:c5:0a:70:1b:11:38:60:c6:07: cb:97:69:a7:79:90:f9:14:76:72:d4:81:b0:da:f2:7b:54:44: 24:84:5f:4b:39:e8:51:a6:91:b7:92:0a:26:0c:e7:b7:46:ec: 1e:d9:4e:cf:7d:dd:bb:c7:48:c6:06:ba:ae:ad:e9:b1:05:8b: 05:2e:0d:2b:57:99:36:dd:95:42:24:66:cc:8e:7d:ae:24:15: 36:39:11:82:63:d0:8f:a0:a0:2b:01:27:2d:57:93:f1:1e:e6: 91:22:0b:9b:27:97:41:62:de:fd:3d:a7:fd:a9:6a:c7:90:dc: ea:91:8a:23:af:38:48:f5:c9:1e:65:b0:74:cf:8e:e5:d2:ec: 72:29:35:bc:a2:22:3a:9a:1a:87:cd:e3:d3:9e:1e:7d:66:d7: 08:d5:0c:14:e6:bc:c0:e2:b8:78:51:8a:78:31:34:c8:62:12: 39:25:1e:00:63:32:ee:24:cf:1d:b6:0b:96:d1:f1:eb:54:43: 23:75:3b:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2vlts3p+3N2LxDOszgmdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NTE3NjJkZTNkM2YxOWNlZGQ0MzhiMDNjZjIzOTg2Y2U5 MTcyN2YwHhcNMjUxMjIxMDMwMTM2WhcNMjUxMjIyMDMwMTM2WjAzMTEwLwYDVQQD Eyg3YmViNzRmMWMzNjg1N2YxNDBkYzM3YmE4ZjA5YTA1YWY2M2MzYTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1LYzW68bJn6+IenRQiaaDqipnNp AiV4yhRTievv85ChV+kqOE3i9wn1xptqoD+l4auEPDS7jfLwt61sJhWvRLaqwwvO wRN94bTBhOFuGCQBd4zT4lnoN1rG7lhJ3dpo6sshjJR7vge60J82PpRTKz4XP7YW ArLZq/B+AJJxRfFl5iUi9bxmvu4QoDwwKSQ1U41E49xHXAE/2KF2w236bjTlgs/S UStRfQoz0mwAtLwMupD1BLNIKupy7aTa6Am4JdY3JyCstVkumVA3X0W5a5zNcBd1 DbY4sTvOZpRq9vCxLskvysFFxpr7+jGEcmIFr+DnCGVfKAG5FxjOhbcVawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHvrdPHDaFfxQNw3uo8JoFr2PDpUMB8GA1UdIwQY MBaAFHZRdi3j0/Gc7dQ4sDzyOYbOkXJ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGxGMkxlUFQ4Wnp0MURpd1BQSTVoczZSY244LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC80ZTI4MDgtZThmNC00MmE3LWE4Mjct N2FiY2U2MDBjMjE4LzEvZGxGMkxlUFQ4Wnp0MURpd1BQSTVoczZSY244Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC80ZTI4MDgtZThmNC00MmE3LWE4MjctN2FiY2U2MDBjMjE4 LzEvZGxGMkxlUFQ4Wnp0MURpd1BQSTVoczZSY244LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANh+Lr6tS kuuKUYstyNCoDJeOIT1DXwP4FE/Aqrpp4OHr25rL84u9BVVKcjGpFW+Uq90m1vD/ W68DnajZqEzJxQpwGxE4YMYHy5dpp3mQ+RR2ctSBsNrye1REJIRfSznoUaaRt5IK Jgznt0bsHtlOz33du8dIxga6rq3psQWLBS4NK1eZNt2VQiRmzI59riQVNjkRgmPQ j6CgKwEnLVeT8R7mkSILmyeXQWLe/T2n/alqx5Dc6pGKI684SPXJHmWwdM+O5dLs cik1vKIiOpoah83j054efWbXCNUMFOa8wOK4eFGKeDE0yGISOSUeAGMy7iTPHbYL ltHx61RDI3U7zg== -----END CERTIFICATE-----Generated at Sun Dec 21 10:34:55 2025 by rpki-client