This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft File: D81k6vJZSCLz-aLrzRnbm3-nDZo.mft (raw, json) Hash identifier: /0LfXUOoU3OZg8wkigaVl2lEsGbAFl/vJtC4b74RTwc= Subject key identifier: 98:B0:28:20:68:B4:50:52:3D:C7:5A:70:AC:06:4B:9C:7F:03:EF:16 Authority key identifier: 0F:CD:64:EA:F2:59:48:22:F3:F9:A2:EB:CD:19:DB:9B:7F:A7:0D:9A Certificate issuer: /CN=0fcd64eaf2594822f3f9a2ebcd19db9b7fa70d9a Certificate serial: 019B4C966BA8139B563A56E4BC1258E1B602 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft Manifest number: 0398 Signing time: Tue 23 Dec 2025 19:01:24 +0000 Manifest this update: Tue 23 Dec 2025 19:01:24 +0000 Manifest next update: Wed 24 Dec 2025 19:01:24 +0000 Files and hashes: 1: D81k6vJZSCLz-aLrzRnbm3-nDZo.crl (hash: c1565zPPezQ6d0crxxy07t6ElPrZcZge1VqQacCNFr4=) 2: tCQKTUl91gUF9YCakBjVvOmahA8.roa (hash: +o4wlq7VWOUaSft8SFBzstGqOiur0Xr8ur6qt9Ob1Nc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:96:6b:a8:13:9b:56:3a:56:e4:bc:12:58:e1:b6:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fcd64eaf2594822f3f9a2ebcd19db9b7fa70d9a Validity Not Before: Dec 23 19:01:24 2025 GMT Not After : Dec 24 19:01:24 2025 GMT Subject: CN=98b0282068b450523dc75a70ac064b9c7f03ef16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a1:93:1e:ba:99:1b:c2:0f:21:97:16:06:b6: 75:e7:6a:b8:c0:c8:ea:80:1d:4c:57:5c:98:e4:61: 8e:38:be:e1:c2:86:e0:31:ad:93:76:30:ff:22:26: f7:3c:34:fc:3c:ce:a3:ed:38:52:14:4c:fd:82:e5: 9f:4c:b8:3f:ff:c1:57:51:19:be:cc:2f:e6:e1:ab: e5:fd:89:1f:d2:ea:a5:8e:11:4a:46:3b:15:5c:8a: 4a:3f:86:9b:84:fc:d4:1b:bf:dc:b2:00:d7:1d:89: 23:9d:29:22:da:92:03:d3:d7:13:46:80:18:0a:e8: c2:06:93:5e:2a:c0:f2:af:f0:f4:f2:40:e7:de:09: 08:1a:15:21:ca:55:3c:6b:b0:c4:24:7a:4b:f4:21: 2b:9d:e0:b2:27:d4:b0:2c:ce:f6:3b:05:4a:80:d3: 18:29:c2:3a:99:c4:1d:60:bb:65:c5:81:53:47:b8: 1b:fb:30:e0:79:51:21:2e:ff:a8:90:83:f2:32:9e: 31:8d:f3:86:14:86:79:e4:1b:19:83:9d:30:8d:49: 1f:f3:1d:7d:e4:9a:27:9d:ca:c6:1c:af:d7:49:19: 13:a8:3f:e2:33:07:c6:1e:da:cc:0c:14:ba:f9:78: af:5b:96:10:b5:b2:e6:ad:87:4a:88:83:af:54:7c: 27:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:B0:28:20:68:B4:50:52:3D:C7:5A:70:AC:06:4B:9C:7F:03:EF:16 X509v3 Authority Key Identifier: keyid:0F:CD:64:EA:F2:59:48:22:F3:F9:A2:EB:CD:19:DB:9B:7F:A7:0D:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:a8:bf:66:7a:01:5c:1a:e8:11:64:0d:b3:5b:ff:26:a9:47: 47:61:46:9b:09:42:df:10:c6:90:77:1c:fa:20:35:b1:c3:47: 7b:75:e5:3f:0c:2f:1e:27:00:7a:33:5d:7f:83:1f:75:62:39: 10:f9:32:da:25:c9:fc:b6:96:eb:ee:fb:3d:d8:23:a3:b5:53: 3c:f7:4b:ed:26:a2:97:0d:c6:35:d5:a9:93:5b:ad:da:54:68: da:fc:78:a8:42:aa:29:f4:1e:27:bb:9b:c0:45:f4:39:35:c4: 0b:3b:9d:09:dc:11:fb:84:87:c6:fa:ed:a5:ff:45:51:40:38: 42:55:2e:fc:9d:4e:59:4e:24:0f:22:77:df:54:c5:6a:be:41: ca:34:b0:4b:51:ba:d4:35:11:b2:62:c6:4c:59:18:87:ac:23: 82:11:8c:eb:db:08:92:b9:69:4f:06:38:f4:d7:55:94:c8:c4: 9f:10:f6:8d:ba:33:ae:14:6e:ab:a9:ca:39:41:d7:ad:f8:dd: 60:0a:a7:91:1f:e9:63:77:66:a3:22:3e:19:6b:7a:41:30:4e: c1:77:9c:69:27:b3:f4:9c:9e:66:e1:c6:2e:5d:80:21:66:58: e7:d7:2e:2a:3e:ab:a2:83:b8:e6:5d:28:e8:e7:7c:52:cc:8a: 42:2a:55:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMlmuoE5tWOlbkvBJY4bYCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmY2Q2NGVhZjI1OTQ4MjJmM2Y5YTJlYmNkMTlkYjliN2Zh NzBkOWEwHhcNMjUxMjIzMTkwMTI0WhcNMjUxMjI0MTkwMTI0WjAzMTEwLwYDVQQD Eyg5OGIwMjgyMDY4YjQ1MDUyM2RjNzVhNzBhYzA2NGI5YzdmMDNlZjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6GTHrqZG8IPIZcWBrZ152q4wMjq gB1MV1yY5GGOOL7hwobgMa2TdjD/Iib3PDT8PM6j7ThSFEz9guWfTLg//8FXURm+ zC/m4avl/Ykf0uqljhFKRjsVXIpKP4abhPzUG7/csgDXHYkjnSki2pID09cTRoAY CujCBpNeKsDyr/D08kDn3gkIGhUhylU8a7DEJHpL9CErneCyJ9SwLM72OwVKgNMY KcI6mcQdYLtlxYFTR7gb+zDgeVEhLv+okIPyMp4xjfOGFIZ55BsZg50wjUkf8x19 5JonncrGHK/XSRkTqD/iMwfGHtrMDBS6+XivW5YQtbLmrYdKiIOvVHwnmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJiwKCBotFBSPcdacKwGS5x/A+8WMB8GA1UdIwQY MBaAFA/NZOryWUgi8/mi680Z25t/pw2aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDgxazZ2SlpTQ0x6LWFMcnpSbmJtMy1uRFpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8wZTY1NDItM2FiZS00NWExLWE4Mzgt MWEzN2YxMDc2NTU3LzEvRDgxazZ2SlpTQ0x6LWFMcnpSbmJtMy1uRFpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi8wZTY1NDItM2FiZS00NWExLWE4MzgtMWEzN2YxMDc2NTU3 LzEvRDgxazZ2SlpTQ0x6LWFMcnpSbmJtMy1uRFpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsKi/ZnoB XBroEWQNs1v/JqlHR2FGmwlC3xDGkHcc+iA1scNHe3XlPwwvHicAejNdf4MfdWI5 EPky2iXJ/LaW6+77Pdgjo7VTPPdL7Sailw3GNdWpk1ut2lRo2vx4qEKqKfQeJ7ub wEX0OTXECzudCdwR+4SHxvrtpf9FUUA4QlUu/J1OWU4kDyJ331TFar5ByjSwS1G6 1DURsmLGTFkYh6wjghGM69sIkrlpTwY49NdVlMjEnxD2jbozrhRuq6nKOUHXrfjd YAqnkR/pY3dmoyI+GWt6QTBOwXecaSez9JyeZuHGLl2AIWZY59cuKj6rooO45l0o 6Od8UsyKQipV2w== -----END CERTIFICATE-----Generated at Wed Dec 24 03:30:25 2025 by rpki-client