This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft File: dLA_BQyflGvisljcSWDsCQhfwVc.mft (raw, json) Hash identifier: bTuLlbHnzd87/KZ7z2tvlRKkxHgieVjj7+Cjm4Bmqkg= Subject key identifier: 6C:E3:3D:59:D0:1C:46:BF:5C:9F:11:5E:FB:A8:66:92:28:D8:5E:7E Authority key identifier: 74:B0:3F:05:0C:9F:94:6B:E2:B2:58:DC:49:60:EC:09:08:5F:C1:57 Certificate issuer: /CN=74b03f050c9f946be2b258dc4960ec09085fc157 Certificate serial: 019AF1646244FD1EE01CCA3CCC2E7EEC775F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLA_BQyflGvisljcSWDsCQhfwVc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft Manifest number: 0577 Signing time: Sat 06 Dec 2025 02:01:18 +0000 Manifest this update: Sat 06 Dec 2025 02:01:18 +0000 Manifest next update: Sun 07 Dec 2025 02:01:18 +0000 Files and hashes: 1: 7ky7nj7F_jVbzl2sZpXMbb-mdKw.roa (hash: LY2VlTHDrXTzgp1AOuCkmRPYOmnqACU3YmdlJ3mfogY=) 2: dLA_BQyflGvisljcSWDsCQhfwVc.crl (hash: qMwbswS3n1TypwTW4XjnlDsXtb3l68EuGBRoX/XuYxg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft rsync://rpki.ripe.net/repository/DEFAULT/dLA_BQyflGvisljcSWDsCQhfwVc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:62:44:fd:1e:e0:1c:ca:3c:cc:2e:7e:ec:77:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74b03f050c9f946be2b258dc4960ec09085fc157 Validity Not Before: Dec 6 02:01:18 2025 GMT Not After : Dec 7 02:01:18 2025 GMT Subject: CN=6ce33d59d01c46bf5c9f115efba8669228d85e7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6d:1a:ec:5d:34:9b:6b:ee:0a:0f:1c:ed:ab: c9:d6:86:20:bf:be:04:27:6c:e9:de:f4:ad:13:86: c7:43:56:f0:83:79:92:ee:45:78:2a:27:fd:e1:2d: cd:b7:c8:f6:2f:dd:a8:25:d3:9e:0b:2c:2e:9f:c5: 5b:96:37:86:2a:18:a2:bc:c6:21:2e:7e:3c:54:5d: fa:79:7b:f5:77:fb:6e:88:70:fd:ba:53:c4:19:c3: 57:ed:45:df:56:d3:99:84:d1:84:82:8d:f6:bf:08: ee:ca:6e:32:af:e1:4e:2f:d8:df:e9:3d:c8:56:c2: b7:5b:83:56:15:04:09:57:e1:e4:da:57:c2:43:5a: 79:24:ba:7d:be:a9:ce:3b:d6:42:76:ca:a9:76:29: b2:c2:ac:de:5c:d2:46:5b:76:fc:b6:b7:a1:24:48: ae:ba:69:7b:87:bd:7e:2f:31:d7:c5:3a:28:77:bb: 93:f6:f3:63:8e:01:ee:50:c7:50:dc:68:d6:1c:f3: b3:1d:0f:a5:f0:4d:7b:56:4a:d0:02:d7:39:b0:5f: 78:cc:f8:57:b2:30:95:16:32:fd:77:1d:f2:8f:8a: 4b:a6:ac:c7:2f:49:56:65:a3:36:f7:f3:f7:70:c8: 0e:1a:81:53:46:cb:1a:ff:cc:85:2e:7f:d9:ff:ea: cf:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:E3:3D:59:D0:1C:46:BF:5C:9F:11:5E:FB:A8:66:92:28:D8:5E:7E X509v3 Authority Key Identifier: keyid:74:B0:3F:05:0C:9F:94:6B:E2:B2:58:DC:49:60:EC:09:08:5F:C1:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLA_BQyflGvisljcSWDsCQhfwVc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c75753-17c2-4324-8264-37c72a7ac8d1/1/dLA_BQyflGvisljcSWDsCQhfwVc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:ee:3b:81:ce:95:d4:87:2c:27:5a:3b:25:26:e9:fd:43:44: 92:34:77:6f:b5:54:99:4e:54:02:24:fb:44:ec:c0:8e:ee:ee: b3:79:db:29:2b:8f:f0:be:ed:46:e4:3e:95:d1:b2:96:5b:d3: de:2f:40:a2:b4:d8:e8:9d:26:fa:e4:16:74:99:b3:96:12:b0: 8e:0c:af:71:e0:03:b1:4f:0f:4d:b0:ba:ff:7a:ea:d6:34:ad: 2a:06:02:e7:e9:40:90:e4:58:16:34:8a:12:e0:cd:49:38:25: d3:88:50:23:34:c6:0c:a1:0b:11:b0:f2:5a:33:f7:0d:34:25: 16:bc:27:25:73:91:18:2a:ac:90:31:1a:06:dc:25:37:b7:83: aa:ab:0c:96:6e:18:bb:34:35:3b:7f:d7:ca:02:e4:11:12:75: 3f:c4:39:9a:2f:25:fd:f2:97:de:73:1e:ea:86:bd:4b:39:1b: df:a8:91:d0:c3:45:b5:22:df:a3:78:29:0b:46:dc:3e:1e:80: aa:b5:83:90:52:2d:73:19:8f:97:3f:f5:57:e3:ee:6c:da:e6: 3c:29:ae:1e:f0:4a:fb:45:3d:4d:f1:1b:f8:74:76:4e:30:3a: dc:e2:5e:47:6e:1c:36:27:33:7f:57:c9:a9:74:e9:d5:77:cb: 90:ea:cf:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZGJE/R7gHMo8zC5+7HdfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0YjAzZjA1MGM5Zjk0NmJlMmIyNThkYzQ5NjBlYzA5MDg1 ZmMxNTcwHhcNMjUxMjA2MDIwMTE4WhcNMjUxMjA3MDIwMTE4WjAzMTEwLwYDVQQD Eyg2Y2UzM2Q1OWQwMWM0NmJmNWM5ZjExNWVmYmE4NjY5MjI4ZDg1ZTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw20a7F00m2vuCg8c7avJ1oYgv74E J2zp3vStE4bHQ1bwg3mS7kV4Kif94S3Nt8j2L92oJdOeCywun8VbljeGKhiivMYh Ln48VF36eXv1d/tuiHD9ulPEGcNX7UXfVtOZhNGEgo32vwjuym4yr+FOL9jf6T3I VsK3W4NWFQQJV+Hk2lfCQ1p5JLp9vqnOO9ZCdsqpdimywqzeXNJGW3b8trehJEiu uml7h71+LzHXxTood7uT9vNjjgHuUMdQ3GjWHPOzHQ+l8E17VkrQAtc5sF94zPhX sjCVFjL9dx3yj4pLpqzHL0lWZaM29/P3cMgOGoFTRssa/8yFLn/Z/+rPaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGzjPVnQHEa/XJ8RXvuoZpIo2F5+MB8GA1UdIwQY MBaAFHSwPwUMn5Rr4rJY3Elg7AkIX8FXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZExBX0JReWZsR3Zpc2xqY1NXRHNDUWhmd1ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9jNzU3NTMtMTdjMi00MzI0LTgyNjQt MzdjNzJhN2FjOGQxLzEvZExBX0JReWZsR3Zpc2xqY1NXRHNDUWhmd1ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9jNzU3NTMtMTdjMi00MzI0LTgyNjQtMzdjNzJhN2FjOGQx LzEvZExBX0JReWZsR3Zpc2xqY1NXRHNDUWhmd1ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHu47gc6V 1IcsJ1o7JSbp/UNEkjR3b7VUmU5UAiT7ROzAju7us3nbKSuP8L7tRuQ+ldGyllvT 3i9AorTY6J0m+uQWdJmzlhKwjgyvceADsU8PTbC6/3rq1jStKgYC5+lAkORYFjSK EuDNSTgl04hQIzTGDKELEbDyWjP3DTQlFrwnJXORGCqskDEaBtwlN7eDqqsMlm4Y uzQ1O3/XygLkERJ1P8Q5mi8l/fKX3nMe6oa9Szkb36iR0MNFtSLfo3gpC0bcPh6A qrWDkFItcxmPlz/1V+PubNrmPCmuHvBK+0U9TfEb+HR2TjA63OJeR24cNiczf1fJ qXTp1XfLkOrP8g== -----END CERTIFICATE-----Generated at Sat Dec 6 12:07:29 2025 by rpki-client