This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft File: RDtnudTJnHJeNX2BdPt-AkoVAuI.mft (raw, json) Hash identifier: In4o2Ywh8QsEGe4j7aOYclC9n1HBS0jcETKohN2qObU= Subject key identifier: 3B:CA:E3:F4:E2:08:A0:34:93:98:80:79:A7:7A:D7:DF:20:83:F9:EF Authority key identifier: 44:3B:67:B9:D4:C9:9C:72:5E:35:7D:81:74:FB:7E:02:4A:15:02:E2 Certificate issuer: /CN=443b67b9d4c99c725e357d8174fb7e024a1502e2 Certificate serial: 019B6CC584B128996A17BD0C7F77D588694E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft Manifest number: 082C Signing time: Tue 30 Dec 2025 01:00:42 +0000 Manifest this update: Tue 30 Dec 2025 01:00:42 +0000 Manifest next update: Wed 31 Dec 2025 01:00:42 +0000 Files and hashes: 1: RDtnudTJnHJeNX2BdPt-AkoVAuI.crl (hash: sueAH6HfF0MFCUMdda23kyi03Nr4VnwaaaczpFIBKFc=) 2: ys9tkINh9OH6_Tn4SwpKbQKk59U.roa (hash: HKpYNrP2A2wFiOa+MzSBN+sOxWHoc3QcnpQXA9RSqDI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.crl rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 23:52:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:c5:84:b1:28:99:6a:17:bd:0c:7f:77:d5:88:69:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=443b67b9d4c99c725e357d8174fb7e024a1502e2 Validity Not Before: Dec 30 01:00:42 2025 GMT Not After : Dec 31 01:00:42 2025 GMT Subject: CN=3bcae3f4e208a03493988079a77ad7df2083f9ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ad:2a:5d:cc:fa:a6:ad:80:ed:ff:eb:f6:4c: 09:c5:a9:4d:29:92:dd:e4:7c:01:d6:ce:49:4e:f6: b8:67:02:1a:6a:f1:23:84:74:d1:a2:5a:b1:53:e5: 77:23:69:bc:f3:f0:cd:d4:8e:5a:2b:12:aa:51:1f: 6e:55:bf:54:c7:29:dd:f4:e0:74:7c:0f:34:0f:5a: 65:ce:20:36:c4:ff:a7:e5:a2:e8:13:68:3a:93:39: 7f:b9:f0:5f:70:ea:79:d4:16:3d:55:69:f9:ef:91: ce:69:a3:87:38:73:2c:c0:06:38:1c:98:24:16:25: ed:36:99:ba:d5:e6:a7:52:05:27:4b:ff:f3:d9:33: 86:cb:66:6d:04:24:c7:70:e7:7d:73:8a:dd:82:15: be:51:e1:f0:23:5d:9c:71:43:bf:75:c3:83:26:27: 10:90:4b:fc:ee:9f:d0:32:1e:e5:5b:1d:a8:38:1a: 82:e5:34:3c:f6:09:77:d7:86:7b:05:d6:45:b4:2a: 26:0a:cd:8f:2e:0a:d7:d5:ba:3e:54:9f:a4:ff:dd: 56:7f:d7:9b:5d:fe:de:80:6f:00:c7:4d:61:91:70: 1f:0d:08:6a:10:84:2c:a0:9e:c9:54:b5:34:12:51: 17:f3:1a:e9:18:69:78:5a:a6:6e:0f:3b:26:92:d6: dc:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:CA:E3:F4:E2:08:A0:34:93:98:80:79:A7:7A:D7:DF:20:83:F9:EF X509v3 Authority Key Identifier: keyid:44:3B:67:B9:D4:C9:9C:72:5E:35:7D:81:74:FB:7E:02:4A:15:02:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:2c:f2:d1:6b:75:60:02:e5:8a:a9:f4:8f:e3:7c:35:18:e5: a7:08:52:0c:fd:3c:92:89:80:08:fd:92:a4:b4:d4:2c:98:e9: d7:f7:30:4a:5c:d8:11:96:67:82:9e:f6:fc:0c:ac:30:e5:31: b1:29:6b:e0:d6:ad:26:0e:18:80:74:4f:a9:8a:5d:89:41:23: 61:e9:c2:d4:4c:f4:73:e5:a9:ea:ed:f4:f6:21:b9:6d:16:ff: 67:c6:cc:c5:52:aa:21:96:60:78:90:bb:c7:fd:71:c1:ae:d0: 44:ba:37:fa:b5:df:4a:0f:c5:fd:28:15:94:2a:62:37:bb:e6: 47:ee:b2:78:9e:17:38:09:eb:93:0d:cc:5b:09:66:d5:e0:af: 18:77:a8:bf:e7:ed:db:35:6b:a5:49:2a:91:4b:37:0a:63:30: 4f:71:3b:c8:9f:ab:0e:01:9a:2b:ed:7d:19:38:98:3d:5f:33: fb:3e:65:cb:43:18:23:cf:e6:0d:4a:8e:d1:5b:4a:69:e3:2d: bf:12:f7:ee:fb:b4:54:65:a0:f4:2a:2f:74:56:cf:7d:33:2f: e6:d0:74:40:a0:16:88:aa:30:3b:fc:01:d7:9d:2d:28:a8:d8: b2:20:55:53:cf:47:fc:a7:eb:5e:d1:0f:0e:89:ae:83:c1:00: 1a:2e:14:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsxYSxKJlqF70Mf3fViGlOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0M2I2N2I5ZDRjOTljNzI1ZTM1N2Q4MTc0ZmI3ZTAyNGEx NTAyZTIwHhcNMjUxMjMwMDEwMDQyWhcNMjUxMjMxMDEwMDQyWjAzMTEwLwYDVQQD EygzYmNhZTNmNGUyMDhhMDM0OTM5ODgwNzlhNzdhZDdkZjIwODNmOWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArK0qXcz6pq2A7f/r9kwJxalNKZLd 5HwB1s5JTva4ZwIaavEjhHTRolqxU+V3I2m88/DN1I5aKxKqUR9uVb9Uxynd9OB0 fA80D1plziA2xP+n5aLoE2g6kzl/ufBfcOp51BY9VWn575HOaaOHOHMswAY4HJgk FiXtNpm61eanUgUnS//z2TOGy2ZtBCTHcOd9c4rdghW+UeHwI12ccUO/dcODJicQ kEv87p/QMh7lWx2oOBqC5TQ89gl314Z7BdZFtComCs2PLgrX1bo+VJ+k/91Wf9eb Xf7egG8Ax01hkXAfDQhqEIQsoJ7JVLU0ElEX8xrpGGl4WqZuDzsmktbcvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDvK4/TiCKA0k5iAead6198gg/nvMB8GA1UdIwQY MBaAFEQ7Z7nUyZxyXjV9gXT7fgJKFQLiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkR0bnVkVEpuSEplTlgyQmRQdC1Ba29WQXVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9lZWRlMzgtOTJhMi00NjJkLWIyNTIt YzgzYjVmYzI2NTQ1LzEvUkR0bnVkVEpuSEplTlgyQmRQdC1Ba29WQXVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9lZWRlMzgtOTJhMi00NjJkLWIyNTItYzgzYjVmYzI2NTQ1 LzEvUkR0bnVkVEpuSEplTlgyQmRQdC1Ba29WQXVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUyzy0Wt1 YALliqn0j+N8NRjlpwhSDP08komACP2SpLTULJjp1/cwSlzYEZZngp72/AysMOUx sSlr4NatJg4YgHRPqYpdiUEjYenC1Ez0c+Wp6u309iG5bRb/Z8bMxVKqIZZgeJC7 x/1xwa7QRLo3+rXfSg/F/SgVlCpiN7vmR+6yeJ4XOAnrkw3MWwlm1eCvGHeov+ft 2zVrpUkqkUs3CmMwT3E7yJ+rDgGaK+19GTiYPV8z+z5ly0MYI8/mDUqO0VtKaeMt vxL37vu0VGWg9CovdFbPfTMv5tB0QKAWiKowO/wB150tKKjYsiBVU89H/KfrXtEP Domug8EAGi4UfQ== -----END CERTIFICATE-----Generated at Tue Dec 30 04:54:45 2025 by rpki-client