This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.mft File: dI6Zox81gkAKtd-nd8YNFqyu3bM.mft (raw, json) Hash identifier: 2+626U8r7KIyaG6JxSymxS31oLzvFe+YqW1mqf5/SHc= Subject key identifier: 2B:5E:73:B6:D0:93:8E:73:63:E3:60:9F:7D:16:74:87:3D:63:19:F4 Authority key identifier: 74:8E:99:A3:1F:35:82:40:0A:B5:DF:A7:77:C6:0D:16:AC:AE:DD:B3 Certificate issuer: /CN=748e99a31f3582400ab5dfa777c60d16acaeddb3 Certificate serial: 019B5787AACA60D84CEDA062A3633DBC227C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dI6Zox81gkAKtd-nd8YNFqyu3bM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.mft Manifest number: 0965 Signing time: Thu 25 Dec 2025 22:01:07 +0000 Manifest this update: Thu 25 Dec 2025 22:01:07 +0000 Manifest next update: Fri 26 Dec 2025 22:01:07 +0000 Files and hashes: 1: VWVp9Cs0S9PvQSERU4KTGGzQ8JI.roa (hash: SxWsENl0azYTplSpEg/TKtQu0dvHaU6Cl+WjOSHnKaA=) 2: dI6Zox81gkAKtd-nd8YNFqyu3bM.crl (hash: cWKgz2n118rx0AJHwpvqr6WZ87joBSBHmRAmeiEQX9Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.mft rsync://rpki.ripe.net/repository/DEFAULT/dI6Zox81gkAKtd-nd8YNFqyu3bM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:57:87:aa:ca:60:d8:4c:ed:a0:62:a3:63:3d:bc:22:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=748e99a31f3582400ab5dfa777c60d16acaeddb3 Validity Not Before: Dec 25 22:01:07 2025 GMT Not After : Dec 26 22:01:07 2025 GMT Subject: CN=2b5e73b6d0938e7363e3609f7d1674873d6319f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c7:07:ec:27:17:45:07:40:1d:16:e0:6a:7e: 13:82:d1:24:d9:cb:9d:b8:86:1f:d0:31:f2:83:9b: 17:be:02:b4:e5:c1:54:0b:48:78:e2:3f:78:eb:ce: f5:c7:c9:c0:d8:b0:ec:53:70:71:18:67:c1:5a:89: fd:d4:dd:ca:55:85:2b:38:fa:cd:5f:7e:c6:5e:2c: 04:00:44:63:a9:7c:f1:c9:8f:59:2a:b2:df:00:4f: 3c:60:fb:f3:6c:a1:5b:b1:bf:b2:aa:95:b2:b8:9a: eb:76:7e:0d:03:40:34:52:74:88:6e:a8:1f:3f:58: db:14:9c:09:86:4f:e6:21:b0:f7:a5:e8:ba:f9:f1: bf:5e:ae:89:d8:30:c1:cb:bd:ad:72:d2:d7:0c:8e: c2:68:fa:8d:9a:03:c4:6d:5f:27:5d:54:72:d5:fa: 0d:a6:f8:1c:0e:1f:86:cb:c1:fd:3f:63:da:e6:43: 0d:3f:e9:7c:13:41:ae:96:2d:87:92:bc:27:fd:f2: 69:6b:48:34:b3:1f:d5:e9:1c:ca:53:83:85:9c:15: 2f:73:3b:32:5e:07:46:da:86:2c:e9:15:99:ef:58: 7d:6a:2b:d9:d9:0b:b1:9e:94:81:71:dd:ae:dd:a3: ca:83:80:02:c8:6b:89:98:33:c9:7a:0d:4b:24:8e: 71:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:5E:73:B6:D0:93:8E:73:63:E3:60:9F:7D:16:74:87:3D:63:19:F4 X509v3 Authority Key Identifier: keyid:74:8E:99:A3:1F:35:82:40:0A:B5:DF:A7:77:C6:0D:16:AC:AE:DD:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dI6Zox81gkAKtd-nd8YNFqyu3bM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/437ae5-c2ab-4c71-9d06-fec6c2701eda/1/dI6Zox81gkAKtd-nd8YNFqyu3bM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:e4:63:19:7f:c9:65:99:7c:74:7d:26:0a:03:40:ef:f2:af: ee:87:ce:c7:41:9c:eb:ed:6f:6b:8d:8f:36:7a:3c:06:4a:19: c4:e5:fd:5c:5c:3f:59:05:40:0f:ff:8c:a1:bd:da:a7:35:05: 24:2a:71:61:ec:5c:c2:c0:af:08:76:82:91:b0:a4:13:2b:46: 72:22:88:81:43:88:7e:a4:0c:20:68:b9:54:77:0c:36:cd:6e: 37:9f:05:22:15:7a:8e:1f:2d:30:df:d3:f7:84:49:66:86:e5: 9d:37:8c:5a:2a:dc:83:1b:d4:28:7d:00:ac:d4:c1:e5:13:8f: c2:ee:2d:ba:2b:01:fa:8c:7b:fd:14:83:42:05:8c:01:d6:40: 47:7d:3a:d8:a5:89:ee:25:cf:e0:65:e8:2e:16:51:7c:6b:b8: 38:81:91:80:d3:cf:48:ba:96:c3:37:a8:95:bd:e7:3e:21:55: 99:89:87:bf:01:ec:d8:3f:bf:85:eb:41:79:18:48:7f:57:29: 7b:db:98:ef:44:be:28:de:40:98:28:4c:7d:f7:49:ac:e6:a7: ed:61:9c:fd:9e:fe:c2:8d:f1:15:9d:b2:69:cb:7d:08:f9:29: 38:1e:29:0a:90:d0:7e:55:92:7b:f6:31:ca:d9:b9:dd:32:a0: 2c:96:6f:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtXh6rKYNhM7aBio2M9vCJ8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OGU5OWEzMWYzNTgyNDAwYWI1ZGZhNzc3YzYwZDE2YWNh ZWRkYjMwHhcNMjUxMjI1MjIwMTA3WhcNMjUxMjI2MjIwMTA3WjAzMTEwLwYDVQQD EygyYjVlNzNiNmQwOTM4ZTczNjNlMzYwOWY3ZDE2NzQ4NzNkNjMxOWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlscH7CcXRQdAHRbgan4TgtEk2cud uIYf0DHyg5sXvgK05cFUC0h44j946871x8nA2LDsU3BxGGfBWon91N3KVYUrOPrN X37GXiwEAERjqXzxyY9ZKrLfAE88YPvzbKFbsb+yqpWyuJrrdn4NA0A0UnSIbqgf P1jbFJwJhk/mIbD3pei6+fG/Xq6J2DDBy72tctLXDI7CaPqNmgPEbV8nXVRy1foN pvgcDh+Gy8H9P2Pa5kMNP+l8E0Guli2Hkrwn/fJpa0g0sx/V6RzKU4OFnBUvczsy XgdG2oYs6RWZ71h9aivZ2QuxnpSBcd2u3aPKg4ACyGuJmDPJeg1LJI5xNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCtec7bQk45zY+Ngn30WdIc9Yxn0MB8GA1UdIwQY MBaAFHSOmaMfNYJACrXfp3fGDRasrt2zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEk2Wm94ODFna0FLdGQtbmQ4WU5GcXl1M2JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80MzdhZTUtYzJhYi00YzcxLTlkMDYt ZmVjNmMyNzAxZWRhLzEvZEk2Wm94ODFna0FLdGQtbmQ4WU5GcXl1M2JNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC80MzdhZTUtYzJhYi00YzcxLTlkMDYtZmVjNmMyNzAxZWRh LzEvZEk2Wm94ODFna0FLdGQtbmQ4WU5GcXl1M2JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAveRjGX/J ZZl8dH0mCgNA7/Kv7ofOx0Gc6+1va42PNno8BkoZxOX9XFw/WQVAD/+Mob3apzUF JCpxYexcwsCvCHaCkbCkEytGciKIgUOIfqQMIGi5VHcMNs1uN58FIhV6jh8tMN/T 94RJZoblnTeMWircgxvUKH0ArNTB5ROPwu4tuisB+ox7/RSDQgWMAdZAR3062KWJ 7iXP4GXoLhZRfGu4OIGRgNPPSLqWwzeolb3nPiFVmYmHvwHs2D+/hetBeRhIf1cp e9uY70S+KN5AmChMffdJrOan7WGc/Z7+wo3xFZ2yact9CPkpOB4pCpDQflWSe/Yx ytm53TKgLJZveA== -----END CERTIFICATE-----Generated at Fri Dec 26 01:27:54 2025 by rpki-client