This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft File: D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft (raw, json) Hash identifier: DRIksgP7GpM1lqc2XMlrEoTbqGnOmfxZu7D1gd+e0sQ= Subject key identifier: FE:1D:29:20:37:FA:C1:4A:A2:15:37:DB:D2:5B:CF:A6:6D:0B:D4:8A Authority key identifier: 0F:79:76:05:20:B7:C1:5C:2E:42:60:30:82:72:B8:49:F8:8E:D6:77 Certificate issuer: /CN=0f79760520b7c15c2e4260308272b849f88ed677 Certificate serial: 019B70D97A9C93B491B31E24CB15D4903382 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3l2BSC3wVwuQmAwgnK4SfiO1nc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft Manifest number: 17A2 Signing time: Tue 30 Dec 2025 20:00:59 +0000 Manifest this update: Tue 30 Dec 2025 20:00:59 +0000 Manifest next update: Wed 31 Dec 2025 20:00:59 +0000 Files and hashes: 1: D3l2BSC3wVwuQmAwgnK4SfiO1nc.crl (hash: BHaQ7P1v7Qi6IF8tLcd5plaxNGD+ppTM7bkooGj0bck=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft rsync://rpki.ripe.net/repository/DEFAULT/D3l2BSC3wVwuQmAwgnK4SfiO1nc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 20:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:d9:7a:9c:93:b4:91:b3:1e:24:cb:15:d4:90:33:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f79760520b7c15c2e4260308272b849f88ed677 Validity Not Before: Dec 30 20:00:59 2025 GMT Not After : Dec 31 20:00:59 2025 GMT Subject: CN=fe1d292037fac14aa21537dbd25bcfa66d0bd48a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2d:5c:1d:70:97:e0:dd:84:26:1d:97:1d:1e: b3:de:2f:22:6e:7f:35:06:69:e8:b2:4a:49:0f:e8: 73:67:3e:e2:4b:a9:df:71:78:1e:b9:37:c0:8c:ea: 71:21:39:ed:8a:f2:fe:fa:94:d3:31:e0:96:71:a9: 87:d9:5d:5e:a1:73:90:3c:ec:83:9b:84:c5:3c:29: 21:b2:a9:5a:90:49:e2:04:c0:25:62:3e:d7:6f:a4: 82:08:33:e7:2c:61:73:74:6e:91:45:dc:5a:d5:7a: 77:b6:00:fa:18:f2:c9:07:1e:84:ed:00:e3:be:41: 60:ff:c9:0c:5b:62:9f:00:55:f7:49:15:fc:31:c7: a4:9b:e2:3a:85:12:7c:57:16:2c:3a:d0:ad:86:c1: aa:43:96:6d:f7:f1:5f:68:ab:c7:be:fa:95:b1:a3: 08:19:36:4f:82:c7:fb:b9:30:84:93:42:27:47:99: 88:96:ce:64:1a:ec:0d:b8:fc:ba:7d:98:41:cc:7b: ec:25:55:3c:b9:15:1a:0d:7b:78:1a:b8:70:2d:1d: cd:f7:99:1a:67:cb:56:8a:62:45:4a:17:fa:08:31: f0:e8:c0:4a:2a:88:0b:4e:b0:bf:fd:75:fd:71:bf: 7d:f6:08:fa:18:e8:dd:44:5a:ef:57:55:3d:bd:c1: f0:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:1D:29:20:37:FA:C1:4A:A2:15:37:DB:D2:5B:CF:A6:6D:0B:D4:8A X509v3 Authority Key Identifier: keyid:0F:79:76:05:20:B7:C1:5C:2E:42:60:30:82:72:B8:49:F8:8E:D6:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3l2BSC3wVwuQmAwgnK4SfiO1nc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:55:19:f8:ad:70:24:8c:65:14:dc:1d:6f:42:c8:62:4f:ca: 5e:71:20:31:8a:24:26:90:26:43:c1:08:b8:a4:5b:62:80:9b: 1d:96:35:01:9a:c6:5a:a1:a9:fc:32:72:bf:25:1f:b5:6e:cc: 5a:39:55:27:19:8d:2d:7e:4d:52:60:a2:07:a3:f7:47:ef:29: 17:e3:29:a8:0e:6d:3c:08:d8:22:9a:6a:82:5f:5a:51:cc:e3: 8d:46:68:bd:47:a4:71:fc:41:8b:22:dd:a9:2d:47:7f:4d:ff: 2e:0b:89:b9:93:84:6b:a2:71:8a:e2:36:e6:53:bd:a9:92:cc: ce:69:69:e9:7c:9d:5b:e4:ee:7a:8b:b3:19:4f:6e:e0:6c:dc: 81:9a:1a:54:0b:cc:af:81:ad:e1:64:cb:59:0f:61:b8:c4:9d: 01:b6:ef:c6:de:4b:bb:2b:06:11:73:ba:b0:2c:dc:be:04:ed: ac:ff:18:c6:72:22:de:aa:e5:0b:2d:43:60:21:fa:c5:06:a8: be:0e:0a:3c:95:97:30:ae:fb:2d:a7:4c:ce:8e:af:7b:11:2d: cd:c7:61:ca:da:2b:24:30:c5:27:3a:09:6f:0f:b0:63:1b:f6: b6:6d:57:27:14:89:3c:b9:df:7a:bd:27:32:70:96:b4:98:90: 4d:94:98:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtw2Xqck7SRsx4kyxXUkDOCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNzk3NjA1MjBiN2MxNWMyZTQyNjAzMDgyNzJiODQ5Zjg4 ZWQ2NzcwHhcNMjUxMjMwMjAwMDU5WhcNMjUxMjMxMjAwMDU5WjAzMTEwLwYDVQQD EyhmZTFkMjkyMDM3ZmFjMTRhYTIxNTM3ZGJkMjViY2ZhNjZkMGJkNDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmi1cHXCX4N2EJh2XHR6z3i8ibn81 BmnoskpJD+hzZz7iS6nfcXgeuTfAjOpxITntivL++pTTMeCWcamH2V1eoXOQPOyD m4TFPCkhsqlakEniBMAlYj7Xb6SCCDPnLGFzdG6RRdxa1Xp3tgD6GPLJBx6E7QDj vkFg/8kMW2KfAFX3SRX8Mcekm+I6hRJ8VxYsOtCthsGqQ5Zt9/FfaKvHvvqVsaMI GTZPgsf7uTCEk0InR5mIls5kGuwNuPy6fZhBzHvsJVU8uRUaDXt4GrhwLR3N95ka Z8tWimJFShf6CDHw6MBKKogLTrC//XX9cb999gj6GOjdRFrvV1U9vcHwkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP4dKSA3+sFKohU329Jbz6ZtC9SKMB8GA1UdIwQY MBaAFA95dgUgt8FcLkJgMIJyuEn4jtZ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDNsMkJTQzN3Vnd1UW1Bd2duSzRTZmlPMW5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mODQ3NGItNWFlYi00MDU4LTlmNGUt MDA0MjQyNWJhYjFhLzEvRDNsMkJTQzN3Vnd1UW1Bd2duSzRTZmlPMW5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9mODQ3NGItNWFlYi00MDU4LTlmNGUtMDA0MjQyNWJhYjFh LzEvRDNsMkJTQzN3Vnd1UW1Bd2duSzRTZmlPMW5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzlUZ+K1w JIxlFNwdb0LIYk/KXnEgMYokJpAmQ8EIuKRbYoCbHZY1AZrGWqGp/DJyvyUftW7M WjlVJxmNLX5NUmCiB6P3R+8pF+MpqA5tPAjYIppqgl9aUczjjUZovUekcfxBiyLd qS1Hf03/LguJuZOEa6JxiuI25lO9qZLMzmlp6XydW+TueouzGU9u4GzcgZoaVAvM r4Gt4WTLWQ9huMSdAbbvxt5LuysGEXO6sCzcvgTtrP8YxnIi3qrlCy1DYCH6xQao vg4KPJWXMK77LadMzo6vexEtzcdhytorJDDFJzoJbw+wYxv2tm1XJxSJPLnfer0n MnCWtJiQTZSYHg== -----END CERTIFICATE-----Generated at Wed Dec 31 02:23:54 2025 by rpki-client