This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/b6462f-cc72-4f69-96f4-8bca0561b72d/1/d_M68l-VqylxEYjp_-pQzMshHXY.mft File: d_M68l-VqylxEYjp_-pQzMshHXY.mft (raw, json) Hash identifier: KczleE6FYUGcEwHG9FgmpTRQkxO+klbxP9GWbjxIdoU= Subject key identifier: 42:BC:F3:83:D4:9B:27:05:16:41:67:FB:92:4C:70:29:2C:F8:27:8E Authority key identifier: 77:F3:3A:F2:5F:95:AB:29:71:11:88:E9:FF:EA:50:CC:CB:21:1D:76 Certificate issuer: /CN=77f33af25f95ab29711188e9ffea50cccb211d76 Certificate serial: 019B2A77CD2870B4CD3ADE087EAD307D0F39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_M68l-VqylxEYjp_-pQzMshHXY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/b6462f-cc72-4f69-96f4-8bca0561b72d/1/d_M68l-VqylxEYjp_-pQzMshHXY.mft Manifest number: 0EF4 Signing time: Wed 17 Dec 2025 04:00:52 +0000 Manifest this update: Wed 17 Dec 2025 04:00:52 +0000 Manifest next update: Thu 18 Dec 2025 04:00:52 +0000 Files and hashes: 1: d_M68l-VqylxEYjp_-pQzMshHXY.crl (hash: tXyppTDZKgEpyuXryH3Yv1CJ/XnVB7tJSyqdgAtSHUw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/b6462f-cc72-4f69-96f4-8bca0561b72d/1/d_M68l-VqylxEYjp_-pQzMshHXY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/b6462f-cc72-4f69-96f4-8bca0561b72d/1/d_M68l-VqylxEYjp_-pQzMshHXY.mft rsync://rpki.ripe.net/repository/DEFAULT/d_M68l-VqylxEYjp_-pQzMshHXY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 04:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:77:cd:28:70:b4:cd:3a:de:08:7e:ad:30:7d:0f:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77f33af25f95ab29711188e9ffea50cccb211d76 Validity Not Before: Dec 17 04:00:52 2025 GMT Not After : Dec 18 04:00:52 2025 GMT Subject: CN=42bcf383d49b2705164167fb924c70292cf8278e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:24:32:44:73:29:b1:b8:71:f8:2c:35:86:ce: 64:09:d5:d3:df:07:39:51:13:da:b3:59:d9:e5:3c: 1a:40:21:88:7f:e6:d2:0f:fb:6e:a2:05:4e:a7:32: 2a:fe:9c:70:6c:4d:0a:31:4c:79:8c:1e:ff:9d:17: 96:62:bd:fa:b2:b2:05:d6:84:9e:c1:cb:1c:e4:c9: 68:2a:67:4a:30:c8:da:14:e6:81:34:3d:8b:60:f3: c7:f0:8c:c2:fb:8f:19:40:d4:4a:85:0b:14:1e:fe: 18:d1:bb:e4:f9:cb:8d:68:df:c1:e1:cd:14:0c:09: d0:6e:0b:c4:00:46:3a:72:6e:16:2f:d8:48:3a:0c: 09:6d:b2:35:8a:a4:c0:91:9c:50:c2:fb:c3:9e:19: 51:02:67:46:81:62:65:ce:4e:42:27:08:6b:24:31: 82:47:8e:c4:e8:9d:13:b8:f0:5a:be:04:f6:c3:38: e2:08:9f:f4:d9:a0:6a:2c:41:45:a8:c0:53:5d:c1: fa:83:a2:9e:29:f2:b0:05:17:ed:d4:72:28:3f:16: f8:98:b1:57:cd:68:6b:b1:93:f0:e7:65:c8:63:b9: 14:43:bb:58:76:e5:49:17:33:ae:64:77:41:9e:0e: 96:f2:6b:17:d9:96:64:d1:a3:de:27:ae:2c:4f:7e: 4d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:BC:F3:83:D4:9B:27:05:16:41:67:FB:92:4C:70:29:2C:F8:27:8E X509v3 Authority Key Identifier: keyid:77:F3:3A:F2:5F:95:AB:29:71:11:88:E9:FF:EA:50:CC:CB:21:1D:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_M68l-VqylxEYjp_-pQzMshHXY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b6462f-cc72-4f69-96f4-8bca0561b72d/1/d_M68l-VqylxEYjp_-pQzMshHXY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b6462f-cc72-4f69-96f4-8bca0561b72d/1/d_M68l-VqylxEYjp_-pQzMshHXY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:a0:f8:7a:de:aa:c1:ca:c7:28:81:5a:1a:ea:8f:78:4a:92: 5f:7f:62:25:96:eb:43:99:4e:c7:0f:0a:dc:d4:fa:0c:82:d6: 85:48:9b:07:85:46:aa:8b:a2:02:1e:df:92:bb:f2:a3:a6:f9: 32:48:c2:aa:57:ff:cd:08:4e:19:e7:e2:29:9a:79:76:c1:20: 33:6c:40:51:bf:17:90:d5:48:a3:83:47:08:58:95:44:41:62: 6d:7a:ef:01:a7:69:1b:e4:b5:d5:d4:4e:db:59:3c:1c:e2:94: b1:df:45:3d:50:3f:96:b9:56:c0:f3:04:1e:3e:72:0d:5d:92: e1:90:37:bd:88:c6:45:9d:bb:1a:00:24:0a:dc:98:45:b1:c9: 79:b7:50:ea:f2:43:24:ea:fa:5f:1b:c5:ba:7f:ea:8d:0a:86: aa:6d:9a:83:80:a8:f2:b8:f7:67:4a:0e:49:92:d4:d3:01:9d: e7:e4:63:23:bc:c6:72:90:79:2b:35:ce:6b:e7:2a:55:5d:c1: 19:5c:93:40:37:36:e0:b7:79:28:c2:d9:33:14:5e:00:d6:c5: 7e:65:a3:8b:9f:05:9b:bb:f6:60:13:d3:57:e7:c0:76:84:69: 5c:18:20:29:dd:41:d2:65:ba:36:48:17:5a:a7:f2:17:e6:35: 68:73:37:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsqd80ocLTNOt4Ifq0wfQ85MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3ZjMzYWYyNWY5NWFiMjk3MTExODhlOWZmZWE1MGNjY2Iy MTFkNzYwHhcNMjUxMjE3MDQwMDUyWhcNMjUxMjE4MDQwMDUyWjAzMTEwLwYDVQQD Eyg0MmJjZjM4M2Q0OWIyNzA1MTY0MTY3ZmI5MjRjNzAyOTJjZjgyNzhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiQyRHMpsbhx+Cw1hs5kCdXT3wc5 URPas1nZ5TwaQCGIf+bSD/tuogVOpzIq/pxwbE0KMUx5jB7/nReWYr36srIF1oSe wcsc5MloKmdKMMjaFOaBND2LYPPH8IzC+48ZQNRKhQsUHv4Y0bvk+cuNaN/B4c0U DAnQbgvEAEY6cm4WL9hIOgwJbbI1iqTAkZxQwvvDnhlRAmdGgWJlzk5CJwhrJDGC R47E6J0TuPBavgT2wzjiCJ/02aBqLEFFqMBTXcH6g6KeKfKwBRft1HIoPxb4mLFX zWhrsZPw52XIY7kUQ7tYduVJFzOuZHdBng6W8msX2ZZk0aPeJ64sT35NdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEK884PUmycFFkFn+5JMcCks+CeOMB8GA1UdIwQY MBaAFHfzOvJflaspcRGI6f/qUMzLIR12MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZF9NNjhsLVZxeWx4RVlqcF8tcFF6TXNoSFhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9iNjQ2MmYtY2M3Mi00ZjY5LTk2ZjQt OGJjYTA1NjFiNzJkLzEvZF9NNjhsLVZxeWx4RVlqcF8tcFF6TXNoSFhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9iNjQ2MmYtY2M3Mi00ZjY5LTk2ZjQtOGJjYTA1NjFiNzJk LzEvZF9NNjhsLVZxeWx4RVlqcF8tcFF6TXNoSFhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQaD4et6q wcrHKIFaGuqPeEqSX39iJZbrQ5lOxw8K3NT6DILWhUibB4VGqouiAh7fkrvyo6b5 MkjCqlf/zQhOGefiKZp5dsEgM2xAUb8XkNVIo4NHCFiVREFibXrvAadpG+S11dRO 21k8HOKUsd9FPVA/lrlWwPMEHj5yDV2S4ZA3vYjGRZ27GgAkCtyYRbHJebdQ6vJD JOr6XxvFun/qjQqGqm2ag4Co8rj3Z0oOSZLU0wGd5+RjI7zGcpB5KzXOa+cqVV3B GVyTQDc24Ld5KMLZMxReANbFfmWji58Fm7v2YBPTV+fAdoRpXBggKd1B0mW6NkgX WqfyF+Y1aHM3Eg== -----END CERTIFICATE-----Generated at Wed Dec 17 11:20:44 2025 by rpki-client