This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft File: dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft (raw, json) Hash identifier: udZlVgc5zsCLW+b0eIV8p04MvDfsm2wsVleDoC+B7T8= Subject key identifier: BF:73:AE:BB:9A:5B:F3:27:27:E0:67:0E:8B:4D:5B:EA:49:E6:BE:3E Authority key identifier: 74:B0:83:65:02:95:18:9F:00:9A:A7:4C:12:CB:C6:1E:E2:3F:A7:53 Certificate issuer: /CN=74b083650295189f009aa74c12cbc61ee23fa753 Certificate serial: 019B32D625DC845052D886C4A4B9D4677CB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft Manifest number: 1781 Signing time: Thu 18 Dec 2025 19:00:53 +0000 Manifest this update: Thu 18 Dec 2025 19:00:53 +0000 Manifest next update: Fri 19 Dec 2025 19:00:53 +0000 Files and hashes: 1: dLCDZQKVGJ8AmqdMEsvGHuI_p1M.crl (hash: a/63ZXGdgphFAXu1nJJGNFRCOPdNLUGfu0W4/Tr0J4Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.crl rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft rsync://rpki.ripe.net/repository/DEFAULT/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:25:dc:84:50:52:d8:86:c4:a4:b9:d4:67:7c:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74b083650295189f009aa74c12cbc61ee23fa753 Validity Not Before: Dec 18 19:00:53 2025 GMT Not After : Dec 19 19:00:53 2025 GMT Subject: CN=bf73aebb9a5bf32727e0670e8b4d5bea49e6be3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6c:0c:dd:16:6a:39:44:1d:5d:9e:93:7f:2e: 67:7d:97:67:1f:ac:e3:d4:55:56:3f:20:30:a0:5b: ca:d1:e9:93:c6:1e:67:64:93:93:a0:6e:e2:a8:0b: 13:97:fd:db:ab:48:ab:aa:9b:8c:8c:b1:90:8e:94: 90:81:91:e1:3d:b8:b5:d4:f6:73:59:bd:24:ec:86: fc:79:d0:8b:d3:c2:1d:62:01:50:b8:8b:14:59:53: cb:bf:d0:d2:08:5f:07:0e:c8:88:a3:de:65:d6:d7: 82:71:0b:6c:fa:48:55:84:81:1e:21:e2:9a:df:08: 20:b5:20:83:b1:e3:5d:cf:25:f6:bf:66:68:f6:a0: 97:d4:44:55:a8:ff:d9:7a:2f:f0:8a:ee:73:76:fd: 6f:f3:41:80:64:67:01:3c:99:10:e4:b0:4a:ba:87: 67:89:c6:7b:b5:6d:ec:df:4d:5c:e0:6f:6a:fc:e2: 4b:28:10:6b:0f:71:28:ea:6d:b6:6f:9b:cb:e7:59: b7:42:67:1b:bb:31:a1:f3:af:ca:df:a1:91:48:28: d9:c6:c8:98:31:b1:08:d6:1b:d2:42:d3:8b:97:7b: 76:72:25:b5:9d:e2:03:36:d5:31:98:5d:23:25:8b: c2:3c:35:43:5e:03:8a:ef:f9:aa:7b:24:05:e3:35: 48:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:73:AE:BB:9A:5B:F3:27:27:E0:67:0E:8B:4D:5B:EA:49:E6:BE:3E X509v3 Authority Key Identifier: keyid:74:B0:83:65:02:95:18:9F:00:9A:A7:4C:12:CB:C6:1E:E2:3F:A7:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d531a8-02ae-4b0b-8f44-5287698aff3c/1/dLCDZQKVGJ8AmqdMEsvGHuI_p1M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:07:d8:ce:a2:70:f9:ab:f7:e5:8c:97:31:2e:a8:79:81:75: 38:64:cf:c8:36:7b:88:96:81:71:80:f7:4b:61:1b:8c:a7:a4: 48:c0:75:b4:63:e0:4f:7f:50:49:3a:fe:ca:e3:07:32:a2:cc: ef:ba:0c:66:9d:8c:5c:6a:c8:27:33:5a:e3:76:31:6f:eb:1c: 6e:f0:83:9c:93:11:04:c2:a8:da:39:81:fc:11:f2:78:e3:8e: cb:f2:f9:53:a0:60:ce:00:9e:d7:46:db:99:14:a5:13:17:c0: dd:3b:56:8a:f2:07:0e:7f:00:79:e2:40:c3:bb:9e:a8:f6:8d: 4d:d4:e4:b5:54:01:a0:d4:56:63:a0:38:6a:da:a8:12:c0:8f: 7c:2c:2a:af:fd:51:31:b4:96:b3:29:fa:3d:87:27:70:4d:4e: 73:1f:92:3e:20:82:fe:2d:cc:cb:44:d5:8a:80:28:65:5b:a9: 36:fc:e3:3e:db:81:3e:65:ec:d9:06:a5:9e:9c:fd:ee:92:1d: 89:52:88:55:9f:5c:36:a9:aa:b1:0a:ff:5a:9c:06:15:14:f0: 11:3d:3c:11:a7:74:a8:e7:e0:89:88:db:e7:bb:8c:ce:24:70: 13:62:5b:9b:3e:4e:6d:75:dd:29:9f:a1:dc:4d:8e:37:76:de: af:85:a0:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1iXchFBS2IbEpLnUZ3y2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0YjA4MzY1MDI5NTE4OWYwMDlhYTc0YzEyY2JjNjFlZTIz ZmE3NTMwHhcNMjUxMjE4MTkwMDUzWhcNMjUxMjE5MTkwMDUzWjAzMTEwLwYDVQQD EyhiZjczYWViYjlhNWJmMzI3MjdlMDY3MGU4YjRkNWJlYTQ5ZTZiZTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2wM3RZqOUQdXZ6Tfy5nfZdnH6zj 1FVWPyAwoFvK0emTxh5nZJOToG7iqAsTl/3bq0irqpuMjLGQjpSQgZHhPbi11PZz Wb0k7Ib8edCL08IdYgFQuIsUWVPLv9DSCF8HDsiIo95l1teCcQts+khVhIEeIeKa 3wggtSCDseNdzyX2v2Zo9qCX1ERVqP/Zei/wiu5zdv1v80GAZGcBPJkQ5LBKuodn icZ7tW3s301c4G9q/OJLKBBrD3Eo6m22b5vL51m3QmcbuzGh86/K36GRSCjZxsiY MbEI1hvSQtOLl3t2ciW1neIDNtUxmF0jJYvCPDVDXgOK7/mqeyQF4zVI4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL9zrruaW/MnJ+BnDotNW+pJ5r4+MB8GA1UdIwQY MBaAFHSwg2UClRifAJqnTBLLxh7iP6dTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZExDRFpRS1ZHSjhBbXFkTUVzdkdIdUlfcDFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9kNTMxYTgtMDJhZS00YjBiLThmNDQt NTI4NzY5OGFmZjNjLzEvZExDRFpRS1ZHSjhBbXFkTUVzdkdIdUlfcDFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9kNTMxYTgtMDJhZS00YjBiLThmNDQtNTI4NzY5OGFmZjNj LzEvZExDRFpRS1ZHSjhBbXFkTUVzdkdIdUlfcDFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAegfYzqJw +av35YyXMS6oeYF1OGTPyDZ7iJaBcYD3S2EbjKekSMB1tGPgT39QSTr+yuMHMqLM 77oMZp2MXGrIJzNa43Yxb+scbvCDnJMRBMKo2jmB/BHyeOOOy/L5U6BgzgCe10bb mRSlExfA3TtWivIHDn8AeeJAw7ueqPaNTdTktVQBoNRWY6A4atqoEsCPfCwqr/1R MbSWsyn6PYcncE1Ocx+SPiCC/i3My0TVioAoZVupNvzjPtuBPmXs2Qalnpz97pId iVKIVZ9cNqmqsQr/WpwGFRTwET08Ead0qOfgiYjb57uMziRwE2Jbmz5ObXXdKZ+h 3E2ON3ber4WgWQ== -----END CERTIFICATE-----Generated at Thu Dec 18 23:11:04 2025 by rpki-client