This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft File: d2ijHlyKWogiWYmhuu9KOBM4YBo.mft (raw, json) Hash identifier: GuluWzYhK+kzBmWxE9tp4Ec5djfTmWDISd7WCJH9dms= Subject key identifier: 4E:9E:9E:C9:49:59:58:43:BD:AD:43:A8:D5:DD:68:51:50:82:E1:D1 Authority key identifier: 77:68:A3:1E:5C:8A:5A:88:22:59:89:A1:BA:EF:4A:38:13:38:60:1A Certificate issuer: /CN=7768a31e5c8a5a88225989a1baef4a381338601a Certificate serial: 019B35A06C921B1F46F95FD0D6DD90585DE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft Manifest number: 1785 Signing time: Fri 19 Dec 2025 08:01:04 +0000 Manifest this update: Fri 19 Dec 2025 08:01:04 +0000 Manifest next update: Sat 20 Dec 2025 08:01:04 +0000 Files and hashes: 1: 1-Q1JJEM-283CkQsyWnWZizkRRH0.roa (hash: pMkrNzbMgj6JidKdCAH0olpZAepxai3+rIJ34FZ4TEQ=) 2: d2ijHlyKWogiWYmhuu9KOBM4YBo.crl (hash: NL59CbnxB4B+ZwAzs6aHDiduNM5Ce4a7ChSdX4Rcq4w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.crl rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:6c:92:1b:1f:46:f9:5f:d0:d6:dd:90:58:5d:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7768a31e5c8a5a88225989a1baef4a381338601a Validity Not Before: Dec 19 08:01:04 2025 GMT Not After : Dec 20 08:01:04 2025 GMT Subject: CN=4e9e9ec949595843bdad43a8d5dd68515082e1d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:99:a6:8a:db:dc:17:39:32:42:d3:e0:25:69: 4e:38:fc:17:95:dd:94:fd:f8:34:cd:db:3b:ce:41: e1:d0:3b:da:3d:4c:03:22:67:26:e3:17:ab:55:1e: 35:90:e0:46:04:ae:9a:29:68:24:e2:ba:28:4b:76: 4e:57:dc:ae:b9:27:22:fb:be:ef:62:70:e4:84:3c: b5:b1:df:7e:82:5c:7a:1f:b1:b5:11:46:8f:7b:26: 06:f8:d4:8b:35:7f:57:92:11:f0:5d:5a:2e:84:92: a3:ac:40:e7:63:4d:48:96:58:d0:b1:28:58:8d:41: d6:08:49:0c:b7:5a:f0:b1:8d:f3:f5:16:61:f3:6b: 4a:ab:e5:55:33:87:d4:52:58:5b:79:8f:58:a8:8f: a7:9b:86:34:17:ff:d5:b6:d9:5f:39:ea:22:0c:11: 95:0f:eb:3c:7a:fc:52:c4:6b:b5:9b:88:c9:57:df: 23:df:a9:b8:a9:90:8b:4f:d8:3f:f5:ee:4c:1c:77: 59:be:aa:4f:2c:16:e5:ed:4f:3f:66:ff:5c:14:92: 55:49:30:0c:85:7a:be:c2:59:9d:a4:8c:8f:0d:31: 8a:88:ba:26:1a:cc:5c:78:20:25:25:61:bb:f8:42: e7:3b:85:97:d0:5a:ce:4c:9e:c6:37:ad:46:b7:a6: 04:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:9E:9E:C9:49:59:58:43:BD:AD:43:A8:D5:DD:68:51:50:82:E1:D1 X509v3 Authority Key Identifier: keyid:77:68:A3:1E:5C:8A:5A:88:22:59:89:A1:BA:EF:4A:38:13:38:60:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:74:7a:e4:25:74:b1:ae:1e:f0:54:a9:6d:2d:8b:ab:fc:7c: 7e:eb:9d:e8:44:71:2c:b4:46:38:e5:9d:5e:e1:4c:9e:b4:a3: b2:d1:b3:f2:21:26:92:37:28:96:cf:6d:97:45:18:04:7e:7b: da:a8:17:da:0f:4a:aa:21:74:d8:df:b8:8c:fb:96:6f:e9:fe: 4f:ce:8e:eb:cc:5f:18:5a:75:a9:64:39:db:70:14:e4:1b:68: 9f:29:89:b1:45:76:24:7e:38:22:9b:b4:e2:c1:63:e5:1f:58: 80:c6:6b:67:f8:d9:8e:2a:62:e9:f1:1c:0b:9f:2f:36:a3:b2: 2d:c6:26:02:9c:0c:4a:50:6a:66:a2:f3:4a:2a:82:51:b6:23: 01:55:e1:d5:82:27:b3:72:3d:c8:50:df:74:8e:0d:b5:8c:b4: c0:7b:84:89:e9:69:c7:6d:ba:af:a3:8a:57:29:af:58:21:f4: b3:bd:1c:e6:20:f7:3d:50:c6:f4:34:48:dc:98:f3:85:e1:b3: b4:71:a5:ac:9d:b9:ac:a4:53:a5:0f:b4:6d:07:6b:ea:6e:e7: 9f:04:78:4e:79:cf:f2:87:82:09:d9:98:1a:08:5b:4b:f4:87: 03:e5:df:e1:dc:c7:f8:3b:32:d6:df:00:a5:a6:5b:24:56:8d: 10:dd:8b:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oGySGx9G+V/Q1t2QWF3oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3NjhhMzFlNWM4YTVhODgyMjU5ODlhMWJhZWY0YTM4MTMz ODYwMWEwHhcNMjUxMjE5MDgwMTA0WhcNMjUxMjIwMDgwMTA0WjAzMTEwLwYDVQQD Eyg0ZTllOWVjOTQ5NTk1ODQzYmRhZDQzYThkNWRkNjg1MTUwODJlMWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJmmitvcFzkyQtPgJWlOOPwXld2U /fg0zds7zkHh0DvaPUwDImcm4xerVR41kOBGBK6aKWgk4rooS3ZOV9yuuSci+77v YnDkhDy1sd9+glx6H7G1EUaPeyYG+NSLNX9XkhHwXVouhJKjrEDnY01IlljQsShY jUHWCEkMt1rwsY3z9RZh82tKq+VVM4fUUlhbeY9YqI+nm4Y0F//VttlfOeoiDBGV D+s8evxSxGu1m4jJV98j36m4qZCLT9g/9e5MHHdZvqpPLBbl7U8/Zv9cFJJVSTAM hXq+wlmdpIyPDTGKiLomGsxceCAlJWG7+ELnO4WX0FrOTJ7GN61Gt6YE7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE6enslJWVhDva1DqNXdaFFQguHRMB8GA1UdIwQY MBaAFHdoox5cilqIIlmJobrvSjgTOGAaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDJpakhseUtXb2dpV1ltaHV1OUtPQk00WUJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9lMzA1MGUtOTk5NC00Yjk2LWJjNzkt NzY2ZWFkN2U2NTEzLzEvZDJpakhseUtXb2dpV1ltaHV1OUtPQk00WUJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9lMzA1MGUtOTk5NC00Yjk2LWJjNzktNzY2ZWFkN2U2NTEz LzEvZDJpakhseUtXb2dpV1ltaHV1OUtPQk00WUJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZHR65CV0 sa4e8FSpbS2Lq/x8fuud6ERxLLRGOOWdXuFMnrSjstGz8iEmkjcols9tl0UYBH57 2qgX2g9KqiF02N+4jPuWb+n+T86O68xfGFp1qWQ523AU5BtonymJsUV2JH44Ipu0 4sFj5R9YgMZrZ/jZjipi6fEcC58vNqOyLcYmApwMSlBqZqLzSiqCUbYjAVXh1YIn s3I9yFDfdI4NtYy0wHuEielpx226r6OKVymvWCH0s70c5iD3PVDG9DRI3JjzheGz tHGlrJ25rKRTpQ+0bQdr6m7nnwR4TnnP8oeCCdmYGghbS/SHA+Xf4dzH+Dsy1t8A paZbJFaNEN2LCQ== -----END CERTIFICATE-----Generated at Fri Dec 19 15:07:27 2025 by rpki-client