This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/2DIL1O-Fj9YrskhdCLCoaSDpEcE.mft File: 2DIL1O-Fj9YrskhdCLCoaSDpEcE.mft (raw, json) Hash identifier: QAnwiG771k31Fxj7m6hqmgFE/BU/eK4RWYaxfB7uQJg= Subject key identifier: 74:30:88:96:D2:78:59:7F:F7:D8:2A:20:28:2E:77:1E:C1:F4:BF:F6 Authority key identifier: D8:32:0B:D4:EF:85:8F:D6:2B:B2:48:5D:08:B0:A8:69:20:E9:11:C1 Certificate issuer: /CN=d8320bd4ef858fd62bb2485d08b0a86920e911c1 Certificate serial: 019B3D90C4443B7D692A96D18447077B6018 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DIL1O-Fj9YrskhdCLCoaSDpEcE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/2DIL1O-Fj9YrskhdCLCoaSDpEcE.mft Manifest number: 0E7B Signing time: Sat 20 Dec 2025 21:00:56 +0000 Manifest this update: Sat 20 Dec 2025 21:00:56 +0000 Manifest next update: Sun 21 Dec 2025 21:00:56 +0000 Files and hashes: 1: 2DIL1O-Fj9YrskhdCLCoaSDpEcE.crl (hash: xn48IyonSCJVpXuxlX8f2ex/g0S4sVczIDK2DXRYN2k=) 2: wUSVu8lDNfoUWdaRO2jsDgRSmsg.roa (hash: A2CVwSparFGjp8/uMP7BcSnzpGUx0FpocYCZqqW30C8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/2DIL1O-Fj9YrskhdCLCoaSDpEcE.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/2DIL1O-Fj9YrskhdCLCoaSDpEcE.mft rsync://rpki.ripe.net/repository/DEFAULT/2DIL1O-Fj9YrskhdCLCoaSDpEcE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:c4:44:3b:7d:69:2a:96:d1:84:47:07:7b:60:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8320bd4ef858fd62bb2485d08b0a86920e911c1 Validity Not Before: Dec 20 21:00:56 2025 GMT Not After : Dec 21 21:00:56 2025 GMT Subject: CN=74308896d278597ff7d82a20282e771ec1f4bff6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9e:61:f3:c1:d7:fd:36:3f:bf:8d:78:a0:64: f8:9e:11:ef:af:c4:d3:76:87:26:0e:e2:9b:9d:8e: 96:02:43:e7:f3:25:05:f7:e6:02:78:90:0e:e6:1c: ce:fc:fb:5d:65:f7:0a:35:ea:de:55:2a:87:3f:43: b5:ab:a5:89:09:e6:fa:bf:71:52:7f:dc:f0:12:8d: 5f:8f:ca:03:e4:f2:3c:87:07:11:c1:3d:58:a4:26: db:7e:d4:3b:93:14:5d:40:f4:e6:06:9d:8e:80:59: 0b:34:09:b8:f2:fd:8a:e8:47:32:3e:6a:07:64:c1: 7d:20:57:70:46:01:2e:10:62:83:8f:78:93:ef:3f: 13:5d:4a:cf:70:fb:84:5b:9e:29:12:ad:7a:b9:0c: 33:73:21:9c:6b:ce:2c:dd:53:6a:ff:d3:b4:8e:28: af:c5:5c:51:b8:13:92:a7:e6:27:79:e8:43:2e:a2: 33:88:e3:58:3a:ca:a9:84:1e:0c:e9:91:01:09:0e: 9a:6d:3f:29:cd:af:34:fb:3f:f0:6d:ee:2c:9c:bb: 1d:02:e7:57:97:64:89:7d:3d:c4:ee:2e:7d:68:6b: 8d:99:1d:95:d4:88:e0:53:45:fa:c0:f5:ff:db:88: 3e:c8:19:04:3f:97:13:61:5f:28:e9:0f:c1:66:3a: 1c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:30:88:96:D2:78:59:7F:F7:D8:2A:20:28:2E:77:1E:C1:F4:BF:F6 X509v3 Authority Key Identifier: keyid:D8:32:0B:D4:EF:85:8F:D6:2B:B2:48:5D:08:B0:A8:69:20:E9:11:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DIL1O-Fj9YrskhdCLCoaSDpEcE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/2DIL1O-Fj9YrskhdCLCoaSDpEcE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/2DIL1O-Fj9YrskhdCLCoaSDpEcE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:fa:5c:97:cd:ae:c3:fc:b3:41:e0:7a:63:2d:d3:dd:cf:17: ae:36:ba:1b:c3:ff:ae:ae:a5:f9:82:74:06:45:0b:2e:63:11: ff:3a:3d:ec:10:b3:0e:9f:ca:f8:c1:c5:1d:3e:14:65:f9:ce: 1a:72:2d:45:aa:e3:6a:c5:46:03:9a:bf:58:be:72:9d:32:d6: c1:4b:e3:fc:6f:1d:e1:b1:7a:34:70:36:e3:1c:81:50:00:81: be:fa:5d:a3:1d:05:a9:9c:31:38:0e:9d:54:13:e7:12:57:08: 74:80:aa:ed:88:6c:d8:dc:c3:74:7d:40:cc:ff:13:ab:c8:9d: b8:fd:0c:f6:fc:ac:db:26:e7:1f:9d:b1:68:c3:77:bd:92:fa: 1a:d7:37:54:d3:15:1e:02:db:27:2b:32:c1:75:b6:91:39:a9: 06:65:80:9f:7b:a0:90:cf:0a:2d:79:33:b2:1b:71:a1:98:28: c8:41:0f:db:ec:19:37:02:82:81:fb:56:c3:ff:a0:fa:3f:de: 91:1b:69:8e:87:4a:a5:75:07:a6:c9:fe:36:28:65:fe:92:04: 6e:73:98:7f:72:10:8f:ed:8d:dd:21:b7:4c:74:aa:db:9c:0b: 36:03:54:8e:00:15:34:24:5d:cb:48:c6:63:36:44:95:4d:63: ac:82:d7:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kMREO31pKpbRhEcHe2AYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MzIwYmQ0ZWY4NThmZDYyYmIyNDg1ZDA4YjBhODY5MjBl OTExYzEwHhcNMjUxMjIwMjEwMDU2WhcNMjUxMjIxMjEwMDU2WjAzMTEwLwYDVQQD Eyg3NDMwODg5NmQyNzg1OTdmZjdkODJhMjAyODJlNzcxZWMxZjRiZmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZ5h88HX/TY/v414oGT4nhHvr8TT docmDuKbnY6WAkPn8yUF9+YCeJAO5hzO/PtdZfcKNereVSqHP0O1q6WJCeb6v3FS f9zwEo1fj8oD5PI8hwcRwT1YpCbbftQ7kxRdQPTmBp2OgFkLNAm48v2K6EcyPmoH ZMF9IFdwRgEuEGKDj3iT7z8TXUrPcPuEW54pEq16uQwzcyGca84s3VNq/9O0jiiv xVxRuBOSp+YneehDLqIziONYOsqphB4M6ZEBCQ6abT8pza80+z/wbe4snLsdAudX l2SJfT3E7i59aGuNmR2V1IjgU0X6wPX/24g+yBkEP5cTYV8o6Q/BZjoc6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHQwiJbSeFl/99gqICgudx7B9L/2MB8GA1UdIwQY MBaAFNgyC9TvhY/WK7JIXQiwqGkg6RHBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkRJTDFPLUZqOVlyc2toZENMQ29hU0RwRWNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9iZDgxZTctMzk3ZS00ZDVkLWE1ZjEt M2EwZmFhMjhiNWFjLzEvMkRJTDFPLUZqOVlyc2toZENMQ29hU0RwRWNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9iZDgxZTctMzk3ZS00ZDVkLWE1ZjEtM2EwZmFhMjhiNWFj LzEvMkRJTDFPLUZqOVlyc2toZENMQ29hU0RwRWNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAovpcl82u w/yzQeB6Yy3T3c8Xrja6G8P/rq6l+YJ0BkULLmMR/zo97BCzDp/K+MHFHT4UZfnO GnItRarjasVGA5q/WL5ynTLWwUvj/G8d4bF6NHA24xyBUACBvvpdox0FqZwxOA6d VBPnElcIdICq7Yhs2NzDdH1AzP8Tq8iduP0M9vys2ybnH52xaMN3vZL6Gtc3VNMV HgLbJysywXW2kTmpBmWAn3ugkM8KLXkzshtxoZgoyEEP2+wZNwKCgftWw/+g+j/e kRtpjodKpXUHpsn+Nihl/pIEbnOYf3IQj+2N3SG3THSq25wLNgNUjgAVNCRdy0jG YzZElU1jrILX8w== -----END CERTIFICATE-----Generated at Sun Dec 21 02:20:06 2025 by rpki-client