This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft File: D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft (raw, json) Hash identifier: Ew/G2PS220HhWxfIKdpXNqQJxwa9JoVAayoOf9tBPd8= Subject key identifier: EC:4D:6B:39:55:6A:AD:42:E4:2A:28:37:18:3D:84:40:E2:6A:01:A9 Authority key identifier: 0F:55:4A:FE:67:27:44:74:2B:4E:35:02:7B:40:2E:86:13:C2:03:77 Certificate issuer: /CN=0f554afe672744742b4e35027b402e8613c20377 Certificate serial: 019B61D485A947AE6EB14D454D88E4515C1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1VK_mcnRHQrTjUCe0AuhhPCA3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft Manifest number: 168A Signing time: Sat 27 Dec 2025 22:01:16 +0000 Manifest this update: Sat 27 Dec 2025 22:01:16 +0000 Manifest next update: Sun 28 Dec 2025 22:01:16 +0000 Files and hashes: 1: D1VK_mcnRHQrTjUCe0AuhhPCA3c.crl (hash: kP9nnWuxQXQJG3LTLfsyrfUGXbQl68KgiVyzQ1/kvdM=) 2: JILzl612YbahGyGIhRmTzqH6qN0.roa (hash: KYoAnBG9y6ABJD4N2SyEiYvwxlPEdpp7VacwTGrZd0M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft rsync://rpki.ripe.net/repository/DEFAULT/D1VK_mcnRHQrTjUCe0AuhhPCA3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 22:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:61:d4:85:a9:47:ae:6e:b1:4d:45:4d:88:e4:51:5c:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f554afe672744742b4e35027b402e8613c20377 Validity Not Before: Dec 27 22:01:16 2025 GMT Not After : Dec 28 22:01:16 2025 GMT Subject: CN=ec4d6b39556aad42e42a2837183d8440e26a01a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:bb:54:9d:e3:6c:17:ea:ff:2e:8b:0c:c8:9e: e0:03:3b:fb:ab:ae:7c:aa:00:35:2b:65:c9:e8:3e: e8:7b:0f:ab:6c:d8:82:6a:f3:a2:c9:fb:b8:24:6f: fc:97:9b:a9:3a:9b:af:76:79:20:6c:bb:4e:8b:c0: 45:e1:4d:4a:c9:10:d8:b4:22:d9:25:82:4b:a2:20: c1:36:b6:14:8e:1f:5c:7e:12:13:64:e6:a7:fc:ce: 53:3a:e4:a4:87:1e:75:96:69:62:1c:20:e8:33:f1: 03:e1:18:7c:9b:15:f8:f9:eb:ae:0a:c0:89:29:53: df:8f:8f:ec:49:ef:a3:28:6b:c8:42:d6:35:8d:56: 47:e4:5f:9f:f8:7c:87:cc:6a:0a:c1:51:c2:ba:1c: 04:d1:5a:71:ca:10:12:8c:52:55:09:db:c0:d9:5b: c5:c5:d6:7c:b3:4f:c5:33:22:3e:a2:d0:bb:25:b2: 33:66:7c:68:19:dd:21:63:97:30:07:76:25:72:d9: 51:54:b5:da:8e:4d:82:47:43:b1:85:a5:b2:1d:4b: e7:8d:85:1c:86:2a:e2:cf:77:ec:87:86:64:c5:b8: b7:d5:f7:35:5b:c4:a2:24:28:d0:ce:61:45:db:9d: fc:67:d8:f9:0e:dc:7b:31:bd:2b:e8:0c:0f:17:0d: 15:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:4D:6B:39:55:6A:AD:42:E4:2A:28:37:18:3D:84:40:E2:6A:01:A9 X509v3 Authority Key Identifier: keyid:0F:55:4A:FE:67:27:44:74:2B:4E:35:02:7B:40:2E:86:13:C2:03:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1VK_mcnRHQrTjUCe0AuhhPCA3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:61:4d:b6:79:6d:95:b8:89:5a:43:70:17:a9:3e:74:43:3d: c5:2f:2b:68:24:a7:d7:db:e6:f7:ef:1e:44:05:59:20:4e:c4: 5d:eb:c4:e5:18:28:4c:2a:a1:0e:9a:a0:6e:d7:28:15:04:ad: f0:41:e0:97:b4:f1:31:02:e9:46:c2:60:86:f5:1f:9c:a2:71: 22:d1:f0:5a:f6:3a:86:33:29:46:e2:6b:ea:ea:7c:13:08:33: 13:14:a8:8e:30:e1:eb:f5:a6:85:36:f0:46:55:90:6e:b2:be: 28:d5:0d:c5:f5:c9:c0:72:af:a1:ba:aa:e2:94:b2:84:3e:e3: 0a:5e:ac:2f:0a:53:41:c5:f7:17:f9:ff:32:08:74:06:ae:f4: c8:e1:ef:e7:3a:71:b9:d7:05:30:b5:5f:d9:d1:6f:bb:5c:3f: 54:ea:c8:6d:04:83:2d:bc:aa:f3:eb:e4:f3:5f:3a:2e:d1:e8: cd:15:44:87:30:45:61:a6:e4:d3:2e:0d:04:c0:82:c7:f7:63: ff:e9:38:d2:e2:c7:80:26:af:54:77:f7:2c:03:35:4b:ba:44: 12:84:20:1b:0c:80:b2:40:99:5e:ac:4b:1b:27:18:05:93:ac: 5e:99:a6:2d:b0:c0:b7:61:96:d3:86:59:77:3b:7a:e1:0c:60: 5f:5c:ca:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZth1IWpR65usU1FTYjkUVwfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNTU0YWZlNjcyNzQ0NzQyYjRlMzUwMjdiNDAyZTg2MTNj MjAzNzcwHhcNMjUxMjI3MjIwMTE2WhcNMjUxMjI4MjIwMTE2WjAzMTEwLwYDVQQD EyhlYzRkNmIzOTU1NmFhZDQyZTQyYTI4MzcxODNkODQ0MGUyNmEwMWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2btUneNsF+r/LosMyJ7gAzv7q658 qgA1K2XJ6D7oew+rbNiCavOiyfu4JG/8l5upOpuvdnkgbLtOi8BF4U1KyRDYtCLZ JYJLoiDBNrYUjh9cfhITZOan/M5TOuSkhx51lmliHCDoM/ED4Rh8mxX4+euuCsCJ KVPfj4/sSe+jKGvIQtY1jVZH5F+f+HyHzGoKwVHCuhwE0VpxyhASjFJVCdvA2VvF xdZ8s0/FMyI+otC7JbIzZnxoGd0hY5cwB3YlctlRVLXajk2CR0OxhaWyHUvnjYUc hiriz3fsh4Zkxbi31fc1W8SiJCjQzmFF2538Z9j5Dtx7Mb0r6AwPFw0V8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOxNazlVaq1C5CooNxg9hEDiagGpMB8GA1UdIwQY MBaAFA9VSv5nJ0R0K041AntALoYTwgN3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDFWS19tY25SSFFyVGpVQ2UwQXVoaFBDQTNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yYzE5MzctOWQ5Yi00MzE1LWEzYzUt YzBhZTgwYjc0MmIwLzEvRDFWS19tY25SSFFyVGpVQ2UwQXVoaFBDQTNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8yYzE5MzctOWQ5Yi00MzE1LWEzYzUtYzBhZTgwYjc0MmIw LzEvRDFWS19tY25SSFFyVGpVQ2UwQXVoaFBDQTNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuGFNtnlt lbiJWkNwF6k+dEM9xS8raCSn19vm9+8eRAVZIE7EXevE5RgoTCqhDpqgbtcoFQSt 8EHgl7TxMQLpRsJghvUfnKJxItHwWvY6hjMpRuJr6up8EwgzExSojjDh6/WmhTbw RlWQbrK+KNUNxfXJwHKvobqq4pSyhD7jCl6sLwpTQcX3F/n/Mgh0Bq70yOHv5zpx udcFMLVf2dFvu1w/VOrIbQSDLbyq8+vk8186LtHozRVEhzBFYabk0y4NBMCCx/dj /+k40uLHgCavVHf3LAM1S7pEEoQgGwyAskCZXqxLGycYBZOsXpmmLbDAt2GW04ZZ dzt64QxgX1zKaw== -----END CERTIFICATE-----Generated at Sun Dec 28 04:59:30 2025 by rpki-client