This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.mft File: Dl4y_yB8MvWmmJS66rVr9jPbqh4.mft (raw, json) Hash identifier: Zak7Rp9Q6e4CQCGVQzqsPUanm+5dYRZJKFTOfRAUf48= Subject key identifier: 9E:57:B5:78:02:E1:B8:C4:66:4C:E7:79:1C:13:6B:E3:3B:03:D5:A9 Authority key identifier: 0E:5E:32:FF:20:7C:32:F5:A6:98:94:BA:EA:B5:6B:F6:33:DB:AA:1E Certificate issuer: /CN=0e5e32ff207c32f5a69894baeab56bf633dbaa1e Certificate serial: 019B4994E34728FA70360A84122BB88735F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dl4y_yB8MvWmmJS66rVr9jPbqh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.mft Manifest number: 0207 Signing time: Tue 23 Dec 2025 05:00:52 +0000 Manifest this update: Tue 23 Dec 2025 05:00:52 +0000 Manifest next update: Wed 24 Dec 2025 05:00:52 +0000 Files and hashes: 1: Dl4y_yB8MvWmmJS66rVr9jPbqh4.crl (hash: Yr0YEOr0DbbE2g3N/VZ9/sFkZOBIsLW4yPZHCaXAIg8=) 2: paTtElWGmU9hAIEDu_IgYgPtAVs.roa (hash: gF5VuGVggwKtY1Dsuv7xJ4ySU2bi6uUiiENjoaY2rmc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.mft rsync://rpki.ripe.net/repository/DEFAULT/Dl4y_yB8MvWmmJS66rVr9jPbqh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 05:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:94:e3:47:28:fa:70:36:0a:84:12:2b:b8:87:35:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e5e32ff207c32f5a69894baeab56bf633dbaa1e Validity Not Before: Dec 23 05:00:52 2025 GMT Not After : Dec 24 05:00:52 2025 GMT Subject: CN=9e57b57802e1b8c4664ce7791c136be33b03d5a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:2b:48:84:d9:a1:6c:35:69:83:77:69:53:c7: 8a:ac:02:55:f1:ec:bd:27:36:e5:b0:f7:09:2c:2e: 4a:0d:b8:a6:2c:e1:ff:e1:16:5e:e4:6c:3d:7d:a9: 09:73:f3:0a:b4:3a:64:09:ce:b0:cc:40:98:59:34: 64:64:c4:e3:25:5c:2e:5a:2d:fb:bd:cf:8a:9a:d1: 49:fa:f0:d5:ac:14:57:c8:38:67:34:78:e7:b9:e6: 73:4e:d2:61:96:b7:ff:b7:99:fb:0b:39:50:75:c4: 63:2b:93:ef:c6:8d:d5:e7:2b:c2:22:ba:c6:66:58: 25:bc:92:2f:94:00:30:ac:42:e9:5b:8a:3a:51:57: 21:6e:f6:e7:83:36:d7:b7:ba:6b:5c:da:62:1f:fe: b6:29:da:43:4f:69:ea:2b:7b:13:54:ff:5d:ef:70: ed:d8:68:66:1e:18:e9:62:ad:80:44:25:30:e3:64: ba:ba:12:ba:da:52:13:78:d3:dd:45:c5:99:61:79: 73:94:e2:86:6c:8b:ad:9c:c5:c5:e7:33:fd:e6:f5: 63:48:f8:6e:1e:20:e6:6f:d6:a3:d7:49:cf:5b:08: c8:15:e4:12:e3:39:ab:07:e7:93:81:3b:42:0a:68: c0:b2:df:c2:a9:4e:ba:f7:7d:1a:12:b8:36:63:54: 97:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:57:B5:78:02:E1:B8:C4:66:4C:E7:79:1C:13:6B:E3:3B:03:D5:A9 X509v3 Authority Key Identifier: keyid:0E:5E:32:FF:20:7C:32:F5:A6:98:94:BA:EA:B5:6B:F6:33:DB:AA:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dl4y_yB8MvWmmJS66rVr9jPbqh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/be9f29-0006-465e-9437-4ba8cb1501fd/1/Dl4y_yB8MvWmmJS66rVr9jPbqh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:e8:e5:88:eb:51:61:0f:87:d9:b4:df:87:01:4f:97:6b:0a: 73:27:e4:3d:34:d7:fe:b1:e1:c4:ec:3f:f8:be:8e:5e:42:51: df:06:8e:af:f7:15:ae:30:ab:d1:ea:5a:17:29:2e:96:77:e2: f3:5a:66:8f:84:f0:c8:40:23:86:b0:bd:b7:2d:b6:19:a7:39: dd:99:64:61:65:30:03:7d:2a:2f:73:4b:11:4e:05:91:55:85: 38:32:04:5c:74:73:10:79:a0:1f:87:ee:47:41:ec:e7:1f:b8: 3b:23:ec:83:0f:03:e1:53:c6:b6:83:4d:64:08:38:8e:78:9e: 41:e0:e7:09:80:5b:b1:3f:af:b1:5b:25:13:69:fe:f0:40:6f: 4c:7a:49:41:e9:22:9e:28:89:4a:03:98:80:ae:6c:63:4b:56: 0a:4c:84:2c:50:a5:c2:2b:45:9d:ba:48:68:a0:ae:6d:6b:6a: ba:cf:ac:e6:b4:b2:cb:e1:50:94:5d:28:43:fb:67:a8:02:18: d4:1e:77:f4:f2:36:a6:4b:02:13:21:cf:56:ac:2a:d6:03:83: b6:4f:5b:2c:46:7e:6b:ed:b3:8b:0b:44:bd:48:24:8c:f5:4a: 22:01:a3:05:fe:f7:9e:80:99:27:5b:73:b8:2d:d3:2e:ca:9f: d8:97:d5:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJlONHKPpwNgqEEiu4hzX0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNWUzMmZmMjA3YzMyZjVhNjk4OTRiYWVhYjU2YmY2MzNk YmFhMWUwHhcNMjUxMjIzMDUwMDUyWhcNMjUxMjI0MDUwMDUyWjAzMTEwLwYDVQQD Eyg5ZTU3YjU3ODAyZTFiOGM0NjY0Y2U3NzkxYzEzNmJlMzNiMDNkNWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ytIhNmhbDVpg3dpU8eKrAJV8ey9 JzblsPcJLC5KDbimLOH/4RZe5Gw9fakJc/MKtDpkCc6wzECYWTRkZMTjJVwuWi37 vc+KmtFJ+vDVrBRXyDhnNHjnueZzTtJhlrf/t5n7CzlQdcRjK5Pvxo3V5yvCIrrG ZlglvJIvlAAwrELpW4o6UVchbvbngzbXt7prXNpiH/62KdpDT2nqK3sTVP9d73Dt 2GhmHhjpYq2ARCUw42S6uhK62lITeNPdRcWZYXlzlOKGbIutnMXF5zP95vVjSPhu HiDmb9aj10nPWwjIFeQS4zmrB+eTgTtCCmjAst/CqU66930aErg2Y1SX/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ5XtXgC4bjEZkzneRwTa+M7A9WpMB8GA1UdIwQY MBaAFA5eMv8gfDL1ppiUuuq1a/Yz26oeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGw0eV95QjhNdldtbUpTNjZyVnI5alBicWg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9iZTlmMjktMDAwNi00NjVlLTk0Mzct NGJhOGNiMTUwMWZkLzEvRGw0eV95QjhNdldtbUpTNjZyVnI5alBicWg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9iZTlmMjktMDAwNi00NjVlLTk0MzctNGJhOGNiMTUwMWZk LzEvRGw0eV95QjhNdldtbUpTNjZyVnI5alBicWg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKejliOtR YQ+H2bTfhwFPl2sKcyfkPTTX/rHhxOw/+L6OXkJR3waOr/cVrjCr0epaFykulnfi 81pmj4TwyEAjhrC9ty22Gac53ZlkYWUwA30qL3NLEU4FkVWFODIEXHRzEHmgH4fu R0Hs5x+4OyPsgw8D4VPGtoNNZAg4jnieQeDnCYBbsT+vsVslE2n+8EBvTHpJQeki niiJSgOYgK5sY0tWCkyELFClwitFnbpIaKCubWtqus+s5rSyy+FQlF0oQ/tnqAIY 1B539PI2pksCEyHPVqwq1gODtk9bLEZ+a+2ziwtEvUgkjPVKIgGjBf73noCZJ1tz uC3TLsqf2JfVhA== -----END CERTIFICATE-----Generated at Tue Dec 23 14:40:08 2025 by rpki-client