This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft File: D81k6vJZSCLz-aLrzRnbm3-nDZo.mft (raw, json) Hash identifier: 1fqxNtdG/ydFtJ36Cbm2VFLhuci7DbvLnypH4z9QNoo= Subject key identifier: 4D:73:AB:62:1F:D1:5F:65:07:EB:B6:96:97:84:DD:7C:49:26:62:43 Authority key identifier: 0F:CD:64:EA:F2:59:48:22:F3:F9:A2:EB:CD:19:DB:9B:7F:A7:0D:9A Certificate issuer: /CN=0fcd64eaf2594822f3f9a2ebcd19db9b7fa70d9a Certificate serial: 019B3D235827936D250F20030ACEE30DA2BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft Manifest number: 0390 Signing time: Sat 20 Dec 2025 19:01:25 +0000 Manifest this update: Sat 20 Dec 2025 19:01:25 +0000 Manifest next update: Sun 21 Dec 2025 19:01:25 +0000 Files and hashes: 1: D81k6vJZSCLz-aLrzRnbm3-nDZo.crl (hash: xAC5X7eZSuiC3Rh8Y2v3r+pgEZx2XV7zVfM9XfhL/Kk=) 2: tCQKTUl91gUF9YCakBjVvOmahA8.roa (hash: +o4wlq7VWOUaSft8SFBzstGqOiur0Xr8ur6qt9Ob1Nc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:58:27:93:6d:25:0f:20:03:0a:ce:e3:0d:a2:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fcd64eaf2594822f3f9a2ebcd19db9b7fa70d9a Validity Not Before: Dec 20 19:01:25 2025 GMT Not After : Dec 21 19:01:25 2025 GMT Subject: CN=4d73ab621fd15f6507ebb6969784dd7c49266243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a5:a7:bb:d8:be:77:35:e5:a3:4a:b2:f3:ac: c7:8c:df:45:83:7b:38:f0:b3:bb:91:40:6a:db:a9: e1:b1:b3:22:d8:f3:ca:ee:84:a7:48:de:57:e0:a7: 25:d7:de:2c:28:a5:95:0b:44:3b:db:5b:89:b7:95: 38:f1:1c:f1:6c:c7:84:0e:81:f1:c4:dd:fb:a8:72: 93:32:ce:c1:a0:01:d0:a1:3c:da:4a:06:6f:0a:cc: d9:92:df:9a:ba:dc:1f:bb:6c:9c:e6:58:a1:60:24: e7:52:d0:e6:e1:2e:b8:3d:9d:5e:da:ff:83:2c:2e: d6:a4:07:d5:97:d4:b6:a2:53:0b:88:1a:7d:1e:22: f6:db:ea:70:fc:2f:db:a9:bb:e9:d1:8f:1d:5c:45: 1e:88:de:28:00:fc:01:79:fc:d6:fe:87:3d:00:ab: 2f:4f:65:7d:2b:2d:64:ee:40:3d:14:94:e6:6d:da: ec:db:b1:fc:8c:7b:b3:ce:e0:01:33:6a:45:89:32: 3a:0a:81:5e:23:40:b2:3a:ca:84:fd:e2:27:27:df: 43:3d:6b:85:b6:06:42:c4:7e:44:86:0a:5c:8f:c3: 03:87:ed:e8:0f:c3:14:48:94:61:fd:07:ed:26:a1: 95:1a:55:a5:8f:6a:62:66:ec:ab:65:04:30:55:f2: 6f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:73:AB:62:1F:D1:5F:65:07:EB:B6:96:97:84:DD:7C:49:26:62:43 X509v3 Authority Key Identifier: keyid:0F:CD:64:EA:F2:59:48:22:F3:F9:A2:EB:CD:19:DB:9B:7F:A7:0D:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:55:5f:96:4b:02:45:a9:c5:42:20:bf:f9:70:a3:45:79:8f: 88:29:13:4a:00:38:f3:ff:17:3a:b3:46:08:b1:76:d5:fd:15: 37:20:50:86:3d:dc:9f:3e:f3:32:1b:ba:22:78:4d:c5:b2:27: a2:a1:c0:c9:60:2c:3d:9b:4e:d1:f4:ce:c7:37:d5:d1:e8:fd: 69:4f:65:5b:6e:24:2b:1e:34:a3:f0:26:73:da:70:dc:78:73: 72:bc:64:72:c3:b4:8f:64:63:92:00:31:cd:fb:fd:f8:7f:a6: 5e:77:1a:20:e8:e2:e5:7b:f2:76:c3:1b:41:00:44:2c:86:b0: d0:3e:82:3d:a3:b5:72:b0:aa:6d:d7:c6:33:75:8a:c4:82:70: c8:c3:b9:04:8a:18:fa:ef:9d:b6:b5:b6:65:90:89:9a:00:f4: 6c:79:3d:76:b0:ee:e4:ee:c9:e8:40:a0:eb:82:35:a9:29:dc: 3f:f3:8b:fe:7b:4b:ad:68:52:ee:88:54:b7:9a:b3:7d:b0:37: 00:85:7c:3d:bd:df:54:a2:d0:75:4d:37:02:3e:fe:17:9f:39: 38:d4:e2:76:df:db:ee:03:ef:ed:eb:4d:43:ed:60:de:b5:94: 3f:5f:04:82:8f:79:9d:9a:ed:d0:90:e0:d1:a8:68:3e:74:5f: 12:65:41:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9I1gnk20lDyADCs7jDaK9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmY2Q2NGVhZjI1OTQ4MjJmM2Y5YTJlYmNkMTlkYjliN2Zh NzBkOWEwHhcNMjUxMjIwMTkwMTI1WhcNMjUxMjIxMTkwMTI1WjAzMTEwLwYDVQQD Eyg0ZDczYWI2MjFmZDE1ZjY1MDdlYmI2OTY5Nzg0ZGQ3YzQ5MjY2MjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26Wnu9i+dzXlo0qy86zHjN9Fg3s4 8LO7kUBq26nhsbMi2PPK7oSnSN5X4Kcl194sKKWVC0Q721uJt5U48RzxbMeEDoHx xN37qHKTMs7BoAHQoTzaSgZvCszZkt+autwfu2yc5lihYCTnUtDm4S64PZ1e2v+D LC7WpAfVl9S2olMLiBp9HiL22+pw/C/bqbvp0Y8dXEUeiN4oAPwBefzW/oc9AKsv T2V9Ky1k7kA9FJTmbdrs27H8jHuzzuABM2pFiTI6CoFeI0CyOsqE/eInJ99DPWuF tgZCxH5Ehgpcj8MDh+3oD8MUSJRh/QftJqGVGlWlj2piZuyrZQQwVfJv3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE1zq2If0V9lB+u2lpeE3XxJJmJDMB8GA1UdIwQY MBaAFA/NZOryWUgi8/mi680Z25t/pw2aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDgxazZ2SlpTQ0x6LWFMcnpSbmJtMy1uRFpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8wZTY1NDItM2FiZS00NWExLWE4Mzgt MWEzN2YxMDc2NTU3LzEvRDgxazZ2SlpTQ0x6LWFMcnpSbmJtMy1uRFpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi8wZTY1NDItM2FiZS00NWExLWE4MzgtMWEzN2YxMDc2NTU3 LzEvRDgxazZ2SlpTQ0x6LWFMcnpSbmJtMy1uRFpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk1VflksC RanFQiC/+XCjRXmPiCkTSgA48/8XOrNGCLF21f0VNyBQhj3cnz7zMhu6InhNxbIn oqHAyWAsPZtO0fTOxzfV0ej9aU9lW24kKx40o/Amc9pw3HhzcrxkcsO0j2RjkgAx zfv9+H+mXncaIOji5XvydsMbQQBELIaw0D6CPaO1crCqbdfGM3WKxIJwyMO5BIoY +u+dtrW2ZZCJmgD0bHk9drDu5O7J6ECg64I1qSncP/OL/ntLrWhS7ohUt5qzfbA3 AIV8Pb3fVKLQdU03Aj7+F585ONTidt/b7gPv7etNQ+1g3rWUP18Ego95nZrt0JDg 0ahoPnRfEmVBnQ== -----END CERTIFICATE-----Generated at Sat Dec 20 23:37:38 2025 by rpki-client