This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.mft File: DloI_DRpD1LbDCt-R-jlOIMUWpg.mft (raw, json) Hash identifier: GtO+9cZesD9O//6k0VzIqPwPugOpZaB6XhmcSBKJHQ8= Subject key identifier: 9F:37:8C:8A:40:C9:72:46:E5:72:07:FE:64:82:E1:19:CE:A7:C0:DB Authority key identifier: 0E:5A:08:FC:34:69:0F:52:DB:0C:2B:7E:47:E8:E5:38:83:14:5A:98 Certificate issuer: /CN=0e5a08fc34690f52db0c2b7e47e8e53883145a98 Certificate serial: 019B2C9D15F5A41766A29AECB7790E705F46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DloI_DRpD1LbDCt-R-jlOIMUWpg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.mft Manifest number: 0290 Signing time: Wed 17 Dec 2025 14:00:50 +0000 Manifest this update: Wed 17 Dec 2025 14:00:50 +0000 Manifest next update: Thu 18 Dec 2025 14:00:50 +0000 Files and hashes: 1: DloI_DRpD1LbDCt-R-jlOIMUWpg.crl (hash: Fy2ZEQ3p9893mMpNpFm/aGAgtdytzBCkeBJJyfc8oPs=) 2: xjqb8HoLRLAR-p4-R3Sb4dWDULU.roa (hash: 1mq/X/AhDxzJxbocaN5soLh/qNxvhHjRbgctopoVrKg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.crl rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.mft rsync://rpki.ripe.net/repository/DEFAULT/DloI_DRpD1LbDCt-R-jlOIMUWpg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:9d:15:f5:a4:17:66:a2:9a:ec:b7:79:0e:70:5f:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e5a08fc34690f52db0c2b7e47e8e53883145a98 Validity Not Before: Dec 17 14:00:50 2025 GMT Not After : Dec 18 14:00:50 2025 GMT Subject: CN=9f378c8a40c97246e57207fe6482e119cea7c0db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:6d:36:6c:cf:51:98:f3:99:2f:bf:ec:4a:7f: 15:5b:ad:17:a9:dc:ad:0d:5f:e2:ca:a7:60:07:a3: b3:92:fa:22:31:21:c7:ce:d0:d6:bf:3e:c6:ba:11: c7:6b:df:48:f7:4f:ae:9b:a5:56:1a:7c:6e:e3:b0: 05:20:bf:c5:43:e0:b5:50:aa:40:98:a3:ee:4f:77: ee:45:26:58:d7:91:cf:0f:c1:f7:e7:60:24:bf:9a: 8e:bd:be:02:cf:48:77:ab:7d:38:2e:1b:07:26:cf: 5a:7e:e1:d4:69:90:55:94:7e:a4:a1:8f:3e:eb:da: 6f:19:52:2f:5d:85:ba:c5:c2:40:28:a4:94:f8:a2: 39:7d:89:cb:ae:ac:71:c2:e2:af:9a:a7:05:3a:12: e1:07:89:14:b3:74:f6:8d:f1:4f:39:88:cb:6a:40: 66:15:07:13:c2:b4:32:de:4f:11:e4:9e:4f:fc:0b: 7b:fd:62:9f:3a:54:54:40:3a:7d:01:35:79:d1:af: 4f:03:a3:9f:ca:b3:90:2b:e1:d6:bc:d7:11:05:83: 4f:6b:f3:3a:56:f2:b7:52:3b:c0:ec:8a:ce:08:d6: 15:21:a6:09:e7:2a:85:25:5d:45:3d:44:58:c8:83: 74:a1:c9:09:fb:af:3e:9c:81:98:32:a6:b7:d3:a4: 24:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:37:8C:8A:40:C9:72:46:E5:72:07:FE:64:82:E1:19:CE:A7:C0:DB X509v3 Authority Key Identifier: keyid:0E:5A:08:FC:34:69:0F:52:DB:0C:2B:7E:47:E8:E5:38:83:14:5A:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DloI_DRpD1LbDCt-R-jlOIMUWpg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:98:11:5e:2d:54:92:19:70:ce:b7:d8:38:8b:d9:19:0b:f4: 83:46:d7:b9:b2:4f:19:f1:05:c4:6c:a8:d1:a8:cc:1b:1f:7e: f9:c3:97:7d:b1:3e:f2:99:25:a5:55:6e:ef:77:c2:89:76:01: 35:8e:a4:ed:80:60:ea:95:bd:c2:10:fd:e2:32:41:0e:ac:7b: 24:af:05:20:e2:e7:1f:3c:3d:af:18:a0:9f:d1:ab:8a:7d:ce: 54:df:c3:2e:d3:9f:f1:a9:c0:98:c3:90:9e:24:82:71:e8:c5: 18:b3:ac:d1:52:5b:d9:29:24:ac:c6:17:d0:18:17:c7:47:49: d9:8c:58:22:81:85:7a:99:f1:bc:14:72:0d:12:37:f8:d2:30: d6:be:74:4a:e5:f1:65:62:88:a2:80:f9:2b:34:38:0f:8f:86: a0:2d:5f:e4:f9:64:d7:33:74:0d:cd:fd:78:f6:02:de:ae:6c: 83:f6:c2:a0:fd:1d:85:87:45:f4:12:68:2a:d3:50:19:19:f7: 73:ca:62:03:63:0a:53:38:6b:ff:88:75:e2:ed:46:d9:c8:99: f0:55:d6:ee:ea:fe:98:f3:56:eb:68:43:16:d9:49:4b:fd:d8: 91:1a:cb:64:d2:9b:d2:a0:7e:77:79:d8:17:fd:e6:61:d1:47: 53:89:e5:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssnRX1pBdmoprst3kOcF9GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNWEwOGZjMzQ2OTBmNTJkYjBjMmI3ZTQ3ZThlNTM4ODMx NDVhOTgwHhcNMjUxMjE3MTQwMDUwWhcNMjUxMjE4MTQwMDUwWjAzMTEwLwYDVQQD Eyg5ZjM3OGM4YTQwYzk3MjQ2ZTU3MjA3ZmU2NDgyZTExOWNlYTdjMGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1G02bM9RmPOZL7/sSn8VW60Xqdyt DV/iyqdgB6OzkvoiMSHHztDWvz7GuhHHa99I90+um6VWGnxu47AFIL/FQ+C1UKpA mKPuT3fuRSZY15HPD8H352Akv5qOvb4Cz0h3q304LhsHJs9afuHUaZBVlH6koY8+ 69pvGVIvXYW6xcJAKKSU+KI5fYnLrqxxwuKvmqcFOhLhB4kUs3T2jfFPOYjLakBm FQcTwrQy3k8R5J5P/At7/WKfOlRUQDp9ATV50a9PA6OfyrOQK+HWvNcRBYNPa/M6 VvK3UjvA7IrOCNYVIaYJ5yqFJV1FPURYyIN0ockJ+68+nIGYMqa306QkXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ83jIpAyXJG5XIH/mSC4RnOp8DbMB8GA1UdIwQY MBaAFA5aCPw0aQ9S2wwrfkfo5TiDFFqYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGxvSV9EUnBEMUxiREN0LVItamxPSU1VV3BnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMTc4NDktN2NjZi00ODE1LWJjNjkt YTc3ZjBiMzIxNDRlLzEvRGxvSV9EUnBEMUxiREN0LVItamxPSU1VV3BnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8wMTc4NDktN2NjZi00ODE1LWJjNjktYTc3ZjBiMzIxNDRl LzEvRGxvSV9EUnBEMUxiREN0LVItamxPSU1VV3BnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjZgRXi1U khlwzrfYOIvZGQv0g0bXubJPGfEFxGyo0ajMGx9++cOXfbE+8pklpVVu73fCiXYB NY6k7YBg6pW9whD94jJBDqx7JK8FIOLnHzw9rxign9Grin3OVN/DLtOf8anAmMOQ niSCcejFGLOs0VJb2SkkrMYX0BgXx0dJ2YxYIoGFepnxvBRyDRI3+NIw1r50SuXx ZWKIooD5KzQ4D4+GoC1f5Plk1zN0Dc39ePYC3q5sg/bCoP0dhYdF9BJoKtNQGRn3 c8piA2MKUzhr/4h14u1G2ciZ8FXW7ur+mPNW62hDFtlJS/3YkRrLZNKb0qB+d3nY F/3mYdFHU4nlzA== -----END CERTIFICATE-----Generated at Wed Dec 17 18:39:05 2025 by rpki-client