This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft File: 24gOLcNLroD0K7HjhFf-GXqH1LM.mft (raw, json) Hash identifier: 5YTy788haLq2lVDP1g8noBSN5wdnWpmtzaN/OPZ0cmY= Subject key identifier: ED:06:AF:15:FC:0C:6B:8C:00:A5:4D:81:DE:68:4D:3E:A2:1C:92:A2 Authority key identifier: DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3 Certificate issuer: /CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3 Certificate serial: 019B405BBE5A77BBEB39F595F29523A91C19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft Manifest number: 16BA Signing time: Sun 21 Dec 2025 10:01:52 +0000 Manifest this update: Sun 21 Dec 2025 10:01:52 +0000 Manifest next update: Mon 22 Dec 2025 10:01:52 +0000 Files and hashes: 1: 24gOLcNLroD0K7HjhFf-GXqH1LM.crl (hash: dRAE9ay7Ohv/8FigNX77FQMYHku2+12gsnqWC8bXid0=) 2: 4PwJxAwKax5Reljdgs0YL3qX31Q.roa (hash: UYp5AvhZKwwfeYa3iRTnePJRJNovfCx7buPjdCyUR7I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:be:5a:77:bb:eb:39:f5:95:f2:95:23:a9:1c:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3 Validity Not Before: Dec 21 10:01:52 2025 GMT Not After : Dec 22 10:01:52 2025 GMT Subject: CN=ed06af15fc0c6b8c00a54d81de684d3ea21c92a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:31:cf:11:2c:91:e5:13:c9:37:f3:67:3f:a7: 5a:0e:0d:bb:32:a2:e8:c3:b2:19:c1:79:46:8e:82: 10:2d:38:8f:84:ff:10:df:47:0e:0f:f5:1d:b5:dd: ea:68:20:c1:3f:a1:33:d7:e2:c2:cb:5c:be:8b:61: 08:d1:17:78:aa:c8:0a:93:b7:a5:58:30:28:32:f5: d7:ee:c5:09:8e:ae:7f:f2:19:5a:a3:e9:86:68:d4: 21:62:e9:2f:b6:92:c2:e0:fa:60:e3:aa:e4:fe:ca: 9d:dc:52:92:83:8f:f2:bf:92:82:9a:4f:6b:f2:51: 2c:ba:55:3f:19:a2:28:8a:e2:de:51:2b:94:91:c3: fe:aa:e0:06:3f:68:43:76:df:f2:e5:88:86:27:4d: c4:1b:52:a4:e0:16:5e:bd:cd:1e:5a:51:06:8c:3b: 84:38:5f:81:31:bc:dc:19:39:35:ae:46:f8:29:91: f3:50:b0:22:54:29:e9:d4:fa:23:31:e0:cd:3a:ab: 5e:cb:f6:53:f1:7e:7a:8e:f2:18:8e:1f:22:7c:12: e4:13:a5:42:42:26:ab:eb:68:61:0f:5e:2c:2b:09: b9:5f:df:d9:7c:d9:46:53:60:f9:bb:ca:59:4d:4e: d5:2c:2f:8b:fd:48:ed:05:22:5a:ca:84:8f:8e:bb: 96:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:06:AF:15:FC:0C:6B:8C:00:A5:4D:81:DE:68:4D:3E:A2:1C:92:A2 X509v3 Authority Key Identifier: keyid:DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:67:83:f9:31:da:dc:eb:86:c0:da:53:86:36:63:40:ce:69: 52:b6:36:bc:59:e9:f7:5d:2b:ef:69:5b:3c:78:b6:30:f6:42: 73:44:8d:94:65:59:c7:49:88:cf:37:03:5a:d0:51:d5:4c:e0: 3f:08:43:16:4f:4e:7c:50:5e:ef:8a:c9:c1:cc:9e:ca:23:c9: b3:f1:2d:fb:f1:b9:5f:33:18:fd:e8:54:b6:4c:ae:6d:32:8b: c6:0c:1d:32:24:2c:fb:b0:c2:d5:ad:9d:3d:91:83:ba:81:9b: 14:44:ea:cc:7b:b4:b0:b9:79:d0:9a:4d:c1:32:ec:e4:b1:43: cf:1b:d0:cf:e2:38:69:21:d3:ba:b7:af:7c:c5:02:ec:fc:e5: b0:fe:14:0c:11:95:95:fa:20:25:1b:18:c6:58:2d:ee:69:9b: a3:b8:ec:b2:53:08:a8:29:b1:b9:0c:e7:f4:64:0a:e4:7c:42: 64:2d:eb:86:f8:eb:af:2b:d0:91:20:3e:2a:c3:13:42:d6:76: dd:91:a8:f0:dc:9c:13:f5:97:d0:d4:c9:c8:a6:be:23:fb:41: 84:49:8c:3a:ce:82:cb:b7:fa:60:dd:1d:07:07:61:13:ea:c3: 15:fe:dd:ea:48:46:b1:b2:bf:c9:89:46:45:b9:a3:86:ca:b6: 66:02:29:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAW75ad7vrOfWV8pUjqRwZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiODgwZTJkYzM0YmFlODBmNDJiYjFlMzg0NTdmZTE5N2E4 N2Q0YjMwHhcNMjUxMjIxMTAwMTUyWhcNMjUxMjIyMTAwMTUyWjAzMTEwLwYDVQQD EyhlZDA2YWYxNWZjMGM2YjhjMDBhNTRkODFkZTY4NGQzZWEyMWM5MmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDHPESyR5RPJN/NnP6daDg27MqLo w7IZwXlGjoIQLTiPhP8Q30cOD/Udtd3qaCDBP6Ez1+LCy1y+i2EI0Rd4qsgKk7el WDAoMvXX7sUJjq5/8hlao+mGaNQhYukvtpLC4Ppg46rk/sqd3FKSg4/yv5KCmk9r 8lEsulU/GaIoiuLeUSuUkcP+quAGP2hDdt/y5YiGJ03EG1Kk4BZevc0eWlEGjDuE OF+BMbzcGTk1rkb4KZHzULAiVCnp1PojMeDNOqtey/ZT8X56jvIYjh8ifBLkE6VC Qiar62hhD14sKwm5X9/ZfNlGU2D5u8pZTU7VLC+L/UjtBSJayoSPjruWKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO0GrxX8DGuMAKVNgd5oTT6iHJKiMB8GA1UdIwQY MBaAFNuIDi3DS66A9Cux44RX/hl6h9SzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjRnT0xjTkxyb0QwSzdIamhGZi1HWHFIMUxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80MWE1MWQtNDI2OS00MWEwLTkyZGYt NGQyOWE1ZTI5ODVkLzEvMjRnT0xjTkxyb0QwSzdIamhGZi1HWHFIMUxNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS80MWE1MWQtNDI2OS00MWEwLTkyZGYtNGQyOWE1ZTI5ODVk LzEvMjRnT0xjTkxyb0QwSzdIamhGZi1HWHFIMUxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfmeD+THa 3OuGwNpThjZjQM5pUrY2vFnp910r72lbPHi2MPZCc0SNlGVZx0mIzzcDWtBR1Uzg PwhDFk9OfFBe74rJwcyeyiPJs/Et+/G5XzMY/ehUtkyubTKLxgwdMiQs+7DC1a2d PZGDuoGbFETqzHu0sLl50JpNwTLs5LFDzxvQz+I4aSHTurevfMUC7PzlsP4UDBGV lfogJRsYxlgt7mmbo7jsslMIqCmxuQzn9GQK5HxCZC3rhvjrryvQkSA+KsMTQtZ2 3ZGo8NycE/WX0NTJyKa+I/tBhEmMOs6Cy7f6YN0dBwdhE+rDFf7d6khGsbK/yYlG Rbmjhsq2ZgIpgA== -----END CERTIFICATE-----Generated at Sun Dec 21 18:58:29 2025 by rpki-client