This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft File: Da7a5Z2cmvUe9UivsMlkOM73IRw.mft (raw, json) Hash identifier: u2RynTEpNhb68Teo99VLfT2T+54iKKrF41zkecM+bYU= Subject key identifier: 63:3A:7F:17:7E:1D:CA:7D:A1:36:69:1A:F0:FA:20:D8:1C:A9:6C:F3 Authority key identifier: 0D:AE:DA:E5:9D:9C:9A:F5:1E:F5:48:AF:B0:C9:64:38:CE:F7:21:1C Certificate issuer: /CN=0daedae59d9c9af51ef548afb0c96438cef7211c Certificate serial: 019B698DAEC3F8F49D17929893FB083D1FBC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Da7a5Z2cmvUe9UivsMlkOM73IRw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft Manifest number: 179C Signing time: Mon 29 Dec 2025 10:00:51 +0000 Manifest this update: Mon 29 Dec 2025 10:00:51 +0000 Manifest next update: Tue 30 Dec 2025 10:00:51 +0000 Files and hashes: 1: Da7a5Z2cmvUe9UivsMlkOM73IRw.crl (hash: /Nlm4KyUSWdKe+cpEeBL9Ixtt6ZfoWNXXCvxSCT/Di8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft rsync://rpki.ripe.net/repository/DEFAULT/Da7a5Z2cmvUe9UivsMlkOM73IRw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 10:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:8d:ae:c3:f8:f4:9d:17:92:98:93:fb:08:3d:1f:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0daedae59d9c9af51ef548afb0c96438cef7211c Validity Not Before: Dec 29 10:00:51 2025 GMT Not After : Dec 30 10:00:51 2025 GMT Subject: CN=633a7f177e1dca7da136691af0fa20d81ca96cf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:af:6a:cb:c3:d7:8b:c4:96:24:58:d7:18:6c: a4:ce:28:06:30:fa:c0:b4:95:ed:cc:51:89:e9:19: 2b:b7:e6:78:d7:d2:44:98:89:bf:27:dd:4d:20:c1: c8:b3:0d:cc:9f:69:51:b6:29:d5:27:4b:3b:e2:3f: 2a:22:97:2c:4d:bb:cb:c3:cd:23:18:59:83:86:7c: df:07:cb:31:85:fa:8f:3d:f2:66:d2:16:0a:5a:be: 87:84:3d:3c:f3:ec:aa:59:05:1d:e3:a9:ed:33:45: 72:15:46:19:03:5a:09:93:e9:b5:92:d1:e9:b3:7b: 9a:8b:30:93:48:2b:1d:95:c1:2e:42:da:1e:e2:d3: 18:aa:b2:c0:e2:ce:44:3f:f0:21:18:8f:76:c1:00: a9:66:68:1b:f1:01:31:eb:b4:64:53:f3:9d:d8:4a: 34:99:7e:9b:a9:e9:dd:26:86:99:7b:2e:69:24:91: 04:98:ab:b4:51:de:2d:e0:d6:90:2b:ef:d6:4b:9b: 77:e5:bf:83:6e:21:57:91:92:e6:70:cb:72:9d:af: c1:46:16:c0:fb:21:fd:7a:c5:6e:f9:70:85:6f:1a: 20:f9:d8:b5:dc:79:cb:80:8c:6a:eb:d1:28:50:70: 27:47:db:f3:f7:b6:b3:d1:d1:1f:48:35:67:81:dc: af:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:3A:7F:17:7E:1D:CA:7D:A1:36:69:1A:F0:FA:20:D8:1C:A9:6C:F3 X509v3 Authority Key Identifier: keyid:0D:AE:DA:E5:9D:9C:9A:F5:1E:F5:48:AF:B0:C9:64:38:CE:F7:21:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Da7a5Z2cmvUe9UivsMlkOM73IRw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:e1:7d:4c:da:0f:1c:95:eb:32:4b:05:69:6c:0f:77:ee:66: 8b:b8:43:e3:da:09:94:43:fe:50:3b:6a:d9:ec:03:09:02:52: c0:0f:9c:a9:ea:44:0d:0f:01:a0:17:aa:9f:a8:08:d2:68:33: cb:c0:37:59:cd:b2:d7:d4:3c:11:91:4b:a9:c7:1f:83:22:0f: 6a:fc:9e:cf:93:9d:a2:ef:1b:c9:8b:a4:d2:1a:c4:92:0b:04: d2:71:f0:8b:6c:93:3f:38:33:bc:a1:f1:85:d6:6b:8f:ed:97: 9a:85:e9:c7:13:9d:1b:0b:fc:56:32:80:3a:d4:35:13:bd:1b: 49:52:32:1b:74:2f:be:23:12:3d:d2:62:45:af:9b:04:02:bb: 2f:06:78:5a:80:3b:5f:9c:85:6a:1b:ae:e3:8c:b7:9a:fd:77: 4e:8f:d7:90:26:62:07:06:6a:c9:ee:62:5c:b6:e9:6d:fc:eb: 7a:5c:2c:3e:7e:87:51:42:e8:47:66:e8:8d:6b:5f:05:7f:26: 46:bf:d3:76:a6:fd:ef:b6:d0:27:e4:50:35:70:3a:8a:f0:dc: 50:97:52:01:76:e3:14:26:de:23:2c:fd:42:7a:6a:a1:66:b9: 6d:66:6d:98:8e:a9:8b:5c:59:f8:ad:98:39:7c:f7:5d:fa:78: f4:40:c8:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtpja7D+PSdF5KYk/sIPR+8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYWVkYWU1OWQ5YzlhZjUxZWY1NDhhZmIwYzk2NDM4Y2Vm NzIxMWMwHhcNMjUxMjI5MTAwMDUxWhcNMjUxMjMwMTAwMDUxWjAzMTEwLwYDVQQD Eyg2MzNhN2YxNzdlMWRjYTdkYTEzNjY5MWFmMGZhMjBkODFjYTk2Y2YzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4a9qy8PXi8SWJFjXGGykzigGMPrA tJXtzFGJ6Rkrt+Z419JEmIm/J91NIMHIsw3Mn2lRtinVJ0s74j8qIpcsTbvLw80j GFmDhnzfB8sxhfqPPfJm0hYKWr6HhD088+yqWQUd46ntM0VyFUYZA1oJk+m1ktHp s3uaizCTSCsdlcEuQtoe4tMYqrLA4s5EP/AhGI92wQCpZmgb8QEx67RkU/Od2Eo0 mX6bqendJoaZey5pJJEEmKu0Ud4t4NaQK+/WS5t35b+DbiFXkZLmcMtyna/BRhbA +yH9esVu+XCFbxog+di13HnLgIxq69EoUHAnR9vz97az0dEfSDVngdyvQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGM6fxd+Hcp9oTZpGvD6INgcqWzzMB8GA1UdIwQY MBaAFA2u2uWdnJr1HvVIr7DJZDjO9yEcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGE3YTVaMmNtdlVlOVVpdnNNbGtPTTczSVJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kMjlkM2YtMTY5Ni00ZWQ0LTk2ZDIt ZTdlYjgxN2VkZTMwLzEvRGE3YTVaMmNtdlVlOVVpdnNNbGtPTTczSVJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9kMjlkM2YtMTY5Ni00ZWQ0LTk2ZDItZTdlYjgxN2VkZTMw LzEvRGE3YTVaMmNtdlVlOVVpdnNNbGtPTTczSVJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAceF9TNoP HJXrMksFaWwPd+5mi7hD49oJlEP+UDtq2ewDCQJSwA+cqepEDQ8BoBeqn6gI0mgz y8A3Wc2y19Q8EZFLqccfgyIPavyez5Odou8byYuk0hrEkgsE0nHwi2yTPzgzvKHx hdZrj+2XmoXpxxOdGwv8VjKAOtQ1E70bSVIyG3QvviMSPdJiRa+bBAK7LwZ4WoA7 X5yFahuu44y3mv13To/XkCZiBwZqye5iXLbpbfzrelwsPn6HUULoR2bojWtfBX8m Rr/Tdqb977bQJ+RQNXA6ivDcUJdSAXbjFCbeIyz9QnpqoWa5bWZtmI6pi1xZ+K2Y OXz3Xfp49EDIbA== -----END CERTIFICATE-----Generated at Mon Dec 29 14:53:07 2025 by rpki-client