This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft File: _dlCLeliA-XYc-CZVZGjppDdPZI.mft (raw, json) Hash identifier: /X1/CShoRkhpgUlL5U5SbpVI/h5cF2kxh1KQwcITsic= Subject key identifier: 85:5B:CF:3C:E6:E1:65:46:01:F1:21:2B:4E:68:33:87:04:24:E8:C5 Authority key identifier: FD:D9:42:2D:E9:62:03:E5:D8:73:E0:99:55:91:A3:A6:90:DD:3D:92 Certificate issuer: /CN=fdd9422de96203e5d873e0995591a3a690dd3d92 Certificate serial: 019B2E1D9E5E73F2E11A584E10F6FAA34DDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft Manifest number: 1782 Signing time: Wed 17 Dec 2025 21:00:51 +0000 Manifest this update: Wed 17 Dec 2025 21:00:51 +0000 Manifest next update: Thu 18 Dec 2025 21:00:51 +0000 Files and hashes: 1: _dlCLeliA-XYc-CZVZGjppDdPZI.crl (hash: X/A5/WSfjeO8eltAXms/58zFEqNgc0MpP12vBa5HAEs=) 2: sKY5eWcuMLtnQDCwYINlgWrJYiU.roa (hash: CtU3txyv7ojbqzOBjkBrsZCPvN9srqKePBnH0g0kSFY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 21:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:1d:9e:5e:73:f2:e1:1a:58:4e:10:f6:fa:a3:4d:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd9422de96203e5d873e0995591a3a690dd3d92 Validity Not Before: Dec 17 21:00:51 2025 GMT Not After : Dec 18 21:00:51 2025 GMT Subject: CN=855bcf3ce6e1654601f1212b4e6833870424e8c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d4:c2:34:b4:f4:16:27:31:1b:41:af:64:03: 96:16:1f:47:4f:ed:91:be:10:f2:11:83:aa:6e:d5: b7:a4:b9:eb:4e:93:78:cd:c9:9b:b8:32:99:24:0f: 1d:16:73:f5:19:ff:58:fe:26:75:a3:d4:c8:d3:b7: fd:d9:71:db:f2:84:c4:d7:b3:90:db:c6:38:90:0e: 48:e2:d8:6f:a6:51:7b:74:9d:6d:4e:c8:16:75:90: 1f:c0:6b:83:ed:de:99:57:f6:32:c3:90:76:41:c9: 96:84:84:2c:7c:fe:da:f5:08:87:53:27:49:43:6b: 98:bd:14:81:71:6d:96:25:26:c8:64:e9:bb:9b:6c: 5e:1c:ab:35:fd:43:e9:46:7b:b0:55:06:2e:e9:0d: 5c:2c:7c:30:84:b6:1c:f3:8f:f8:06:2e:6b:11:5f: 1a:e7:c9:4e:b2:7a:b1:e4:03:7e:78:83:51:ef:48: de:02:a2:35:ef:ba:2f:85:d7:45:eb:9d:db:8c:e2: 5b:e9:04:15:bd:6e:88:80:4f:a6:fb:1a:83:14:f9: c3:3f:b1:61:bc:32:80:60:66:aa:f6:76:86:b9:f6: 70:6e:85:72:3c:ca:56:98:36:5b:8e:d4:64:e5:1e: e6:4e:ed:9a:75:ec:97:32:3e:cb:ff:4b:44:8a:3d: 09:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:5B:CF:3C:E6:E1:65:46:01:F1:21:2B:4E:68:33:87:04:24:E8:C5 X509v3 Authority Key Identifier: keyid:FD:D9:42:2D:E9:62:03:E5:D8:73:E0:99:55:91:A3:A6:90:DD:3D:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:84:0a:ed:ed:17:5f:8e:73:25:be:f3:2c:a9:ce:90:c8:92: fb:0e:58:9c:8d:c2:cc:8b:48:be:ad:18:b8:7e:3b:4b:e8:c6: 38:a6:0b:e1:5d:6c:08:14:6b:84:69:49:42:18:f2:e8:1c:e2: db:20:ce:fb:a2:c1:a2:d7:fa:15:97:5e:d5:be:04:ca:fc:3a: 8c:a8:fd:23:62:1a:34:d9:1a:6c:eb:bb:b1:92:c1:c9:e5:d2: 40:0d:7c:ce:f2:82:4c:48:93:d4:47:b2:39:a2:df:5c:90:1a: f0:4a:f9:dd:a9:b7:10:25:4f:6d:82:87:3c:fc:1a:c5:6e:86: 71:f2:70:e5:17:2e:ae:b9:96:5f:42:3d:e0:c7:72:26:df:ad: 4e:05:58:19:3c:1d:83:34:83:06:a1:2b:70:ab:e4:f2:d9:3e: 8e:61:2e:9f:fa:fc:9b:f3:e2:94:69:05:60:8a:d0:bf:8b:9b: d6:92:9f:89:3e:ff:ed:a3:53:49:a4:bd:f9:09:47:c8:08:72: ae:8b:76:b4:33:b4:50:d3:17:d8:49:7b:31:c6:b2:1d:a7:1b: 37:e1:05:ee:f8:f8:86:ec:b4:74:77:6f:ea:95:25:ac:d3:53: c2:41:3c:ac:38:61:44:31:2e:79:d7:19:73:d2:d2:cf:3c:bf: 52:d9:f0:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuHZ5ec/LhGlhOEPb6o03aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZDk0MjJkZTk2MjAzZTVkODczZTA5OTU1OTFhM2E2OTBk ZDNkOTIwHhcNMjUxMjE3MjEwMDUxWhcNMjUxMjE4MjEwMDUxWjAzMTEwLwYDVQQD Eyg4NTViY2YzY2U2ZTE2NTQ2MDFmMTIxMmI0ZTY4MzM4NzA0MjRlOGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdTCNLT0FicxG0GvZAOWFh9HT+2R vhDyEYOqbtW3pLnrTpN4zcmbuDKZJA8dFnP1Gf9Y/iZ1o9TI07f92XHb8oTE17OQ 28Y4kA5I4thvplF7dJ1tTsgWdZAfwGuD7d6ZV/Yyw5B2QcmWhIQsfP7a9QiHUydJ Q2uYvRSBcW2WJSbIZOm7m2xeHKs1/UPpRnuwVQYu6Q1cLHwwhLYc84/4Bi5rEV8a 58lOsnqx5AN+eINR70jeAqI177ovhddF653bjOJb6QQVvW6IgE+m+xqDFPnDP7Fh vDKAYGaq9naGufZwboVyPMpWmDZbjtRk5R7mTu2adeyXMj7L/0tEij0J7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIVbzzzm4WVGAfEhK05oM4cEJOjFMB8GA1UdIwQY MBaAFP3ZQi3pYgPl2HPgmVWRo6aQ3T2SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2RsQ0xlbGlBLVhZYy1DWlZaR2pwcERkUFpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9hY2YyZTYtYzhkZC00OGM0LTgzODkt YTE4NTUwYTY5ZjY2LzEvX2RsQ0xlbGlBLVhZYy1DWlZaR2pwcERkUFpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi9hY2YyZTYtYzhkZC00OGM0LTgzODktYTE4NTUwYTY5ZjY2 LzEvX2RsQ0xlbGlBLVhZYy1DWlZaR2pwcERkUFpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwoQK7e0X X45zJb7zLKnOkMiS+w5YnI3CzItIvq0YuH47S+jGOKYL4V1sCBRrhGlJQhjy6Bzi 2yDO+6LBotf6FZde1b4Eyvw6jKj9I2IaNNkabOu7sZLByeXSQA18zvKCTEiT1Eey OaLfXJAa8Er53am3ECVPbYKHPPwaxW6GcfJw5RcurrmWX0I94MdyJt+tTgVYGTwd gzSDBqErcKvk8tk+jmEun/r8m/PilGkFYIrQv4ub1pKfiT7/7aNTSaS9+QlHyAhy rot2tDO0UNMX2El7McayHacbN+EF7vj4huy0dHdv6pUlrNNTwkE8rDhhRDEuedcZ c9LSzzy/UtnwQA== -----END CERTIFICATE-----Generated at Thu Dec 18 06:48:19 2025 by rpki-client