This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f8fa5d-9f93-4f3a-b5e3-875fe490a874/1/d-Sz2VlinaKIrNim3gA-zgyTTbE.mft File: d-Sz2VlinaKIrNim3gA-zgyTTbE.mft (raw, json) Hash identifier: K7lgkV6KF6ULxpZ6fbJxWfst8Bp4w0NpTz9ea2pbeng= Subject key identifier: B3:9D:E4:0F:79:67:DE:51:BF:F1:CA:1E:2B:FD:93:3F:8E:50:F3:2E Authority key identifier: 77:E4:B3:D9:59:62:9D:A2:88:AC:D8:A6:DE:00:3E:CE:0C:93:4D:B1 Certificate issuer: /CN=77e4b3d959629da288acd8a6de003ece0c934db1 Certificate serial: 019AF2AD560718C912B45F0228DF0D97D9AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-Sz2VlinaKIrNim3gA-zgyTTbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f8fa5d-9f93-4f3a-b5e3-875fe490a874/1/d-Sz2VlinaKIrNim3gA-zgyTTbE.mft Manifest number: 05FD Signing time: Sat 06 Dec 2025 08:00:37 +0000 Manifest this update: Sat 06 Dec 2025 08:00:37 +0000 Manifest next update: Sun 07 Dec 2025 08:00:37 +0000 Files and hashes: 1: d-Sz2VlinaKIrNim3gA-zgyTTbE.crl (hash: F4qEl7GDbr7fw7zyGP7XRCl688tGNkB167upzP/FKdM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f8fa5d-9f93-4f3a-b5e3-875fe490a874/1/d-Sz2VlinaKIrNim3gA-zgyTTbE.crl rsync://rpki.ripe.net/repository/DEFAULT/43/f8fa5d-9f93-4f3a-b5e3-875fe490a874/1/d-Sz2VlinaKIrNim3gA-zgyTTbE.mft rsync://rpki.ripe.net/repository/DEFAULT/d-Sz2VlinaKIrNim3gA-zgyTTbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:56:07:18:c9:12:b4:5f:02:28:df:0d:97:d9:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77e4b3d959629da288acd8a6de003ece0c934db1 Validity Not Before: Dec 6 08:00:37 2025 GMT Not After : Dec 7 08:00:37 2025 GMT Subject: CN=b39de40f7967de51bff1ca1e2bfd933f8e50f32e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e8:d9:d8:b5:d1:61:0f:f2:d9:db:f5:c5:df: af:6e:55:d6:db:aa:b2:5b:a0:a6:62:f0:80:5b:d6: 1d:04:eb:fa:da:dc:14:a3:45:9c:c3:97:48:23:51: 70:04:74:17:42:6f:fd:ff:b4:2a:d4:d9:dc:12:c8: d8:c4:37:f7:f9:c4:09:50:f8:d4:d8:53:aa:83:e9: 67:25:bf:21:b4:98:68:76:2b:d9:b7:7d:71:d4:5a: 94:a0:94:d5:4c:3f:d0:0c:7c:b1:12:1d:65:1c:bb: de:75:35:56:fe:f4:75:1f:e8:27:ba:14:15:d5:0d: 6b:64:61:95:7a:a1:f4:34:34:a4:0c:9c:33:9a:7c: 4e:45:75:6f:63:04:e5:54:8f:52:63:02:b5:29:b0: de:25:75:84:d9:ce:a3:46:8f:32:6d:b7:ec:15:f6: 91:d8:43:65:45:91:7c:d8:dc:81:7c:b4:58:17:5d: aa:3c:ec:b1:16:8d:b6:56:66:5d:00:ba:b8:59:3f: c9:d5:e3:f3:a7:0c:fe:86:68:89:88:b8:66:d0:68: 53:c3:d0:a0:4c:91:9d:96:b9:6b:66:86:e6:54:e8: bc:af:ef:4b:c4:96:37:9f:04:47:99:a9:4f:39:14: 15:35:2d:70:b6:35:64:c5:91:42:3e:74:6e:6d:0c: 27:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:9D:E4:0F:79:67:DE:51:BF:F1:CA:1E:2B:FD:93:3F:8E:50:F3:2E X509v3 Authority Key Identifier: keyid:77:E4:B3:D9:59:62:9D:A2:88:AC:D8:A6:DE:00:3E:CE:0C:93:4D:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-Sz2VlinaKIrNim3gA-zgyTTbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f8fa5d-9f93-4f3a-b5e3-875fe490a874/1/d-Sz2VlinaKIrNim3gA-zgyTTbE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f8fa5d-9f93-4f3a-b5e3-875fe490a874/1/d-Sz2VlinaKIrNim3gA-zgyTTbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:b3:1f:39:9e:06:cd:11:62:7c:a8:62:e6:e6:cf:95:7e:7c: 48:cd:ff:ae:43:e4:bd:0e:8d:5b:ea:52:a4:e9:4d:aa:d2:d1: f7:cb:c0:b7:f6:46:7e:b8:c9:13:8e:f4:f5:64:01:9d:ac:29: 38:ed:ff:d4:c8:6a:bf:04:51:9e:c3:f5:f7:5d:71:63:9e:f3: 2f:4b:6c:af:82:57:c4:94:5e:b3:70:d4:9c:2d:11:8b:a3:9d: 18:d1:32:69:ad:07:f8:7e:44:98:d9:6e:37:63:2f:a9:85:dc: 5b:fd:22:5a:05:39:eb:4a:72:0b:e2:ca:d6:24:a6:00:1a:41: 97:f7:24:af:52:5d:44:87:52:9c:84:e7:8f:d8:79:9f:12:6b: 20:35:5d:cc:38:76:57:ff:03:08:e8:4a:87:cb:c9:df:0a:c3: f8:94:1b:a1:d7:a6:1e:a6:3f:0b:96:3a:10:96:d4:c1:d6:9a: c2:97:60:57:63:70:6f:af:f2:15:6c:9e:d3:28:5b:1d:ef:8b: 15:c9:ee:8e:78:c7:5f:c8:0e:d5:b6:a8:d8:6b:22:1c:b1:79: 1c:6b:64:54:bb:1a:3a:3d:1a:a6:ea:7d:77:32:95:0d:75:b9: e6:6c:18:9e:f7:e8:8f:4b:fd:46:d5:53:a0:bf:b7:ea:27:b7: 6a:1e:9c:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrVYHGMkStF8CKN8Nl9mtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3ZTRiM2Q5NTk2MjlkYTI4OGFjZDhhNmRlMDAzZWNlMGM5 MzRkYjEwHhcNMjUxMjA2MDgwMDM3WhcNMjUxMjA3MDgwMDM3WjAzMTEwLwYDVQQD EyhiMzlkZTQwZjc5NjdkZTUxYmZmMWNhMWUyYmZkOTMzZjhlNTBmMzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OjZ2LXRYQ/y2dv1xd+vblXW26qy W6CmYvCAW9YdBOv62twUo0Wcw5dII1FwBHQXQm/9/7Qq1NncEsjYxDf3+cQJUPjU 2FOqg+lnJb8htJhodivZt31x1FqUoJTVTD/QDHyxEh1lHLvedTVW/vR1H+gnuhQV 1Q1rZGGVeqH0NDSkDJwzmnxORXVvYwTlVI9SYwK1KbDeJXWE2c6jRo8ybbfsFfaR 2ENlRZF82NyBfLRYF12qPOyxFo22VmZdALq4WT/J1ePzpwz+hmiJiLhm0GhTw9Cg TJGdlrlrZobmVOi8r+9LxJY3nwRHmalPORQVNS1wtjVkxZFCPnRubQwnVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLOd5A95Z95Rv/HKHiv9kz+OUPMuMB8GA1UdIwQY MBaAFHfks9lZYp2iiKzYpt4APs4Mk02xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZC1TejJWbGluYUtJck5pbTNnQS16Z3lUVGJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9mOGZhNWQtOWY5My00ZjNhLWI1ZTMt ODc1ZmU0OTBhODc0LzEvZC1TejJWbGluYUtJck5pbTNnQS16Z3lUVGJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9mOGZhNWQtOWY5My00ZjNhLWI1ZTMtODc1ZmU0OTBhODc0 LzEvZC1TejJWbGluYUtJck5pbTNnQS16Z3lUVGJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXrMfOZ4G zRFifKhi5ubPlX58SM3/rkPkvQ6NW+pSpOlNqtLR98vAt/ZGfrjJE4709WQBnawp OO3/1MhqvwRRnsP1911xY57zL0tsr4JXxJRes3DUnC0Ri6OdGNEyaa0H+H5EmNlu N2MvqYXcW/0iWgU560pyC+LK1iSmABpBl/ckr1JdRIdSnITnj9h5nxJrIDVdzDh2 V/8DCOhKh8vJ3wrD+JQbodemHqY/C5Y6EJbUwdaawpdgV2Nwb6/yFWye0yhbHe+L FcnujnjHX8gO1bao2GsiHLF5HGtkVLsaOj0apup9dzKVDXW55mwYnvfoj0v9RtVT oL+36ie3ah6cvQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:13:15 2025 by rpki-client