This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft File: 169EtH8IvQvo_AX5sMFaWrxiA6o.mft (raw, json) Hash identifier: OMnAJBkRziHTq4rM6vPoN9k74vkez9WytRDY5WZ/eYY= Subject key identifier: F5:5D:CC:85:E0:0C:D8:5F:F5:D4:BD:6E:99:4B:C0:DE:D4:50:0D:3E Authority key identifier: D7:AF:44:B4:7F:08:BD:0B:E8:FC:05:F9:B0:C1:5A:5A:BC:62:03:AA Certificate issuer: /CN=d7af44b47f08bd0be8fc05f9b0c15a5abc6203aa Certificate serial: 019B318C998FD9BEDFC089F25E66E7CC2C2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/169EtH8IvQvo_AX5sMFaWrxiA6o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft Manifest number: 0D2B Signing time: Thu 18 Dec 2025 13:00:56 +0000 Manifest this update: Thu 18 Dec 2025 13:00:56 +0000 Manifest next update: Fri 19 Dec 2025 13:00:56 +0000 Files and hashes: 1: 169EtH8IvQvo_AX5sMFaWrxiA6o.crl (hash: AocG874LTxgBnyC0tq+zQHn+4DBUCHeMWnTZIESvLlQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft rsync://rpki.ripe.net/repository/DEFAULT/169EtH8IvQvo_AX5sMFaWrxiA6o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:8c:99:8f:d9:be:df:c0:89:f2:5e:66:e7:cc:2c:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7af44b47f08bd0be8fc05f9b0c15a5abc6203aa Validity Not Before: Dec 18 13:00:56 2025 GMT Not After : Dec 19 13:00:56 2025 GMT Subject: CN=f55dcc85e00cd85ff5d4bd6e994bc0ded4500d3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:57:a7:0d:19:1d:6f:3c:f9:95:8c:18:05:9f: f3:e5:f9:38:28:d3:3b:a5:42:8f:fb:0a:7a:88:a0: 97:ff:c6:51:2b:94:44:57:04:db:73:23:ed:47:29: dd:d0:fe:a7:2e:8c:e4:cd:ec:19:ef:8e:21:46:5c: 86:12:c0:89:fb:36:46:3a:1c:0f:02:7e:6d:7f:52: 7f:56:a2:ca:d9:06:46:1d:ea:c1:bb:a5:f1:92:4b: 90:33:84:5e:6b:d7:8d:52:d4:e0:2e:03:fd:cf:7d: 7c:cd:d7:f3:c4:41:5f:a6:6d:79:50:b1:23:72:84: a9:7b:9c:19:11:9d:56:0f:fe:57:dc:be:1b:1e:d4: 7b:03:d4:ef:6d:6b:d6:3c:ad:c4:8d:aa:45:aa:fb: b8:72:b4:27:29:56:b8:b4:1b:1d:f5:64:27:1e:c8: a1:16:a1:3c:73:13:40:1e:d3:67:11:63:32:81:f4: 81:99:e1:cf:13:db:81:6a:12:41:df:88:7d:51:fc: fb:61:26:b1:9e:75:00:a4:b6:a4:06:00:e3:bb:1d: 68:0a:be:3e:6d:a2:1e:f7:86:1d:2f:e8:fc:20:81: 8f:18:f3:91:24:b1:2f:fb:54:0a:e9:6d:86:a7:3c: c9:a7:b7:9b:68:e7:c4:95:62:b3:a8:0c:f7:bb:63: 7d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:5D:CC:85:E0:0C:D8:5F:F5:D4:BD:6E:99:4B:C0:DE:D4:50:0D:3E X509v3 Authority Key Identifier: keyid:D7:AF:44:B4:7F:08:BD:0B:E8:FC:05:F9:B0:C1:5A:5A:BC:62:03:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/169EtH8IvQvo_AX5sMFaWrxiA6o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:55:15:38:c5:3d:91:b0:f0:e4:81:09:e0:28:1e:21:68:33: 60:04:5a:35:22:65:71:08:c9:b6:5f:6d:e4:70:f7:95:fa:21: c4:36:fb:09:52:4e:c6:69:ba:20:86:c9:bf:06:b3:68:9c:fa: 79:0b:ba:7f:2a:ef:7a:7d:73:53:a7:d6:de:16:06:57:e9:e0: 77:ad:13:07:a0:a2:c7:54:91:f3:ff:fb:50:97:31:1e:43:f0: be:a2:f8:d9:1c:5f:b8:fe:89:ee:da:e2:6d:02:e4:6c:a1:b9: f0:39:3c:4a:0b:71:91:bf:38:a3:2e:ad:0d:f2:d9:a5:8f:10: 8d:70:76:44:9c:b3:fe:ed:7b:53:93:c0:92:ff:78:2c:9e:c2: 1a:19:0c:f7:a4:46:84:15:5a:e0:fe:85:1d:97:fb:66:83:36: ed:71:06:28:a4:ab:c3:7e:05:a7:0e:10:7c:9d:a7:27:e9:64: 78:1d:77:b8:80:8a:ed:46:0d:04:1c:38:7e:c4:ba:4c:86:de: 8d:d0:5c:94:c8:d6:ac:91:9f:3f:0e:df:00:37:50:f7:4f:d7: 20:db:27:d2:a8:f8:23:93:c0:f4:b8:b2:78:03:c3:11:d3:9d: f1:8f:a7:b4:b6:de:f4:f4:41:44:5c:18:d7:50:d2:42:7b:1e: f2:a0:2a:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxjJmP2b7fwInyXmbnzCwuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3YWY0NGI0N2YwOGJkMGJlOGZjMDVmOWIwYzE1YTVhYmM2 MjAzYWEwHhcNMjUxMjE4MTMwMDU2WhcNMjUxMjE5MTMwMDU2WjAzMTEwLwYDVQQD EyhmNTVkY2M4NWUwMGNkODVmZjVkNGJkNmU5OTRiYzBkZWQ0NTAwZDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1enDRkdbzz5lYwYBZ/z5fk4KNM7 pUKP+wp6iKCX/8ZRK5REVwTbcyPtRynd0P6nLozkzewZ744hRlyGEsCJ+zZGOhwP An5tf1J/VqLK2QZGHerBu6XxkkuQM4Rea9eNUtTgLgP9z318zdfzxEFfpm15ULEj coSpe5wZEZ1WD/5X3L4bHtR7A9TvbWvWPK3EjapFqvu4crQnKVa4tBsd9WQnHsih FqE8cxNAHtNnEWMygfSBmeHPE9uBahJB34h9Ufz7YSaxnnUApLakBgDjux1oCr4+ baIe94YdL+j8IIGPGPORJLEv+1QK6W2GpzzJp7ebaOfElWKzqAz3u2N9awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPVdzIXgDNhf9dS9bplLwN7UUA0+MB8GA1UdIwQY MBaAFNevRLR/CL0L6PwF+bDBWlq8YgOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTY5RXRIOEl2UXZvX0FYNXNNRmFXcnhpQTZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9mYmJiNTMtNWRhMi00NGY2LThjOWYt MTliMDI2OWQxMDNjLzEvMTY5RXRIOEl2UXZvX0FYNXNNRmFXcnhpQTZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9mYmJiNTMtNWRhMi00NGY2LThjOWYtMTliMDI2OWQxMDNj LzEvMTY5RXRIOEl2UXZvX0FYNXNNRmFXcnhpQTZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZVUVOMU9 kbDw5IEJ4CgeIWgzYARaNSJlcQjJtl9t5HD3lfohxDb7CVJOxmm6IIbJvwazaJz6 eQu6fyrven1zU6fW3hYGV+ngd60TB6Cix1SR8//7UJcxHkPwvqL42RxfuP6J7tri bQLkbKG58Dk8Sgtxkb84oy6tDfLZpY8QjXB2RJyz/u17U5PAkv94LJ7CGhkM96RG hBVa4P6FHZf7ZoM27XEGKKSrw34Fpw4QfJ2nJ+lkeB13uICK7UYNBBw4fsS6TIbe jdBclMjWrJGfPw7fADdQ90/XINsn0qj4I5PA9LiyeAPDEdOd8Y+ntLbe9PRBRFwY 11DSQnse8qAqHA== -----END CERTIFICATE-----Generated at Thu Dec 18 18:34:57 2025 by rpki-client