This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.mft File: dlIO_x7h4o493PuJ58tvfYmnfJw.mft (raw, json) Hash identifier: AnkAUCEpEd9zG4fnZH/aLDC7HpsYs/zE5nsrjgtCwyM= Subject key identifier: 7E:20:9E:79:CB:1C:32:08:FF:A4:0E:96:47:FC:05:BD:A8:F1:E1:42 Authority key identifier: 76:52:0E:FF:1E:E1:E2:8E:3D:DC:FB:89:E7:CB:6F:7D:89:A7:7C:9C Certificate issuer: /CN=76520eff1ee1e28e3ddcfb89e7cb6f7d89a77c9c Certificate serial: 019AF16450D3623E7DE7E73463B3AC3DAE10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlIO_x7h4o493PuJ58tvfYmnfJw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.mft Manifest number: 02ED Signing time: Sat 06 Dec 2025 02:01:14 +0000 Manifest this update: Sat 06 Dec 2025 02:01:14 +0000 Manifest next update: Sun 07 Dec 2025 02:01:14 +0000 Files and hashes: 1: dlIO_x7h4o493PuJ58tvfYmnfJw.crl (hash: TVkklmugLk9otMiIcTU9fgWDGF6ZhH7YzC1YKqHXmzg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.mft rsync://rpki.ripe.net/repository/DEFAULT/dlIO_x7h4o493PuJ58tvfYmnfJw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:50:d3:62:3e:7d:e7:e7:34:63:b3:ac:3d:ae:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76520eff1ee1e28e3ddcfb89e7cb6f7d89a77c9c Validity Not Before: Dec 6 02:01:14 2025 GMT Not After : Dec 7 02:01:14 2025 GMT Subject: CN=7e209e79cb1c3208ffa40e9647fc05bda8f1e142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5e:68:68:45:8e:36:b3:10:30:20:90:80:fb: 0f:90:cb:6f:e4:ea:6a:71:ef:77:c7:fc:e2:96:3a: d6:4b:d5:49:2f:04:d5:99:62:ae:70:fc:47:d1:35: bc:82:db:87:11:d7:96:97:c5:ae:96:ad:1b:ad:94: 0a:31:ed:0e:6e:e8:1a:e9:2b:d2:e9:f1:e5:09:9a: 60:be:53:67:be:16:68:f1:fe:0b:b3:4d:4a:97:7b: 23:45:cb:30:9c:e3:84:8e:8d:e9:54:f7:8d:bc:1a: 40:0a:e4:8e:79:3a:c4:e6:1e:03:f8:5d:a1:35:95: 83:58:a4:63:b2:c1:08:80:08:07:30:58:e0:91:b0: 5e:ea:e4:4b:28:d0:93:56:cc:f9:c6:89:8b:ea:6e: 00:91:aa:7d:8f:c2:ca:07:d9:da:49:b5:55:ee:50: a8:1c:c7:d5:d8:6d:eb:10:36:42:69:be:d3:50:74: ad:52:c2:82:0e:25:20:19:9e:f5:1f:40:79:84:ee: f0:28:f8:e8:28:9a:0d:4b:fd:86:fb:e2:11:a1:7b: 1d:0d:52:9e:0f:7a:96:f7:c6:53:d1:f9:9c:67:c1: 5b:38:8c:44:22:d3:fb:06:63:35:68:af:17:0b:4a: 50:2d:3f:86:3d:eb:58:f4:6f:ad:64:de:98:b5:9a: f0:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:20:9E:79:CB:1C:32:08:FF:A4:0E:96:47:FC:05:BD:A8:F1:E1:42 X509v3 Authority Key Identifier: keyid:76:52:0E:FF:1E:E1:E2:8E:3D:DC:FB:89:E7:CB:6F:7D:89:A7:7C:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlIO_x7h4o493PuJ58tvfYmnfJw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:e9:6b:63:d6:09:3d:89:32:09:d2:79:2f:b2:a4:a6:84:10: 72:1d:1b:b9:f9:56:c3:3e:33:92:85:18:3d:93:91:a3:05:db: f4:3c:0c:25:eb:35:90:4a:d7:29:e4:52:86:a2:f4:32:b6:0f: f1:cf:73:05:27:1c:5c:de:4e:c5:e1:97:d3:e5:d1:3c:cf:04: b9:47:19:5d:8d:7f:2c:9a:f6:6d:c7:c5:69:0c:41:82:f0:26: ca:86:0b:2e:ec:8e:d6:c6:ae:51:03:6d:73:7a:cb:5a:cb:f7: ff:0f:8d:e2:8a:95:9c:13:33:b7:db:5b:18:6a:cc:e0:b3:22: 1b:bf:2b:67:b2:ae:65:f7:c2:ab:10:f0:f2:49:9d:1f:82:92: e6:0c:08:be:d5:b9:87:c7:57:41:b5:da:d7:f6:31:7b:ad:90: 92:e8:c5:bd:db:f3:4d:89:b7:ef:28:72:54:32:3b:0a:1f:71: e9:c4:93:96:b5:32:8c:d2:1c:be:ee:af:38:5b:09:18:37:f8: ac:9a:9b:45:6d:8d:20:6b:99:2c:80:f0:ea:8c:c8:ec:00:4d: 5c:0b:bd:74:d5:2d:36:af:2b:1c:68:19:27:c5:5e:6f:c8:29: 41:0d:05:fb:97:42:f3:a4:de:a1:bd:fc:5d:e2:42:a2:31:e1: dc:05:cb:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZFDTYj595+c0Y7OsPa4QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NTIwZWZmMWVlMWUyOGUzZGRjZmI4OWU3Y2I2ZjdkODlh NzdjOWMwHhcNMjUxMjA2MDIwMTE0WhcNMjUxMjA3MDIwMTE0WjAzMTEwLwYDVQQD Eyg3ZTIwOWU3OWNiMWMzMjA4ZmZhNDBlOTY0N2ZjMDViZGE4ZjFlMTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxV5oaEWONrMQMCCQgPsPkMtv5Opq ce93x/ziljrWS9VJLwTVmWKucPxH0TW8gtuHEdeWl8Wulq0brZQKMe0Obuga6SvS 6fHlCZpgvlNnvhZo8f4Ls01Kl3sjRcswnOOEjo3pVPeNvBpACuSOeTrE5h4D+F2h NZWDWKRjssEIgAgHMFjgkbBe6uRLKNCTVsz5xomL6m4Akap9j8LKB9naSbVV7lCo HMfV2G3rEDZCab7TUHStUsKCDiUgGZ71H0B5hO7wKPjoKJoNS/2G++IRoXsdDVKe D3qW98ZT0fmcZ8FbOIxEItP7BmM1aK8XC0pQLT+GPetY9G+tZN6YtZrwBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH4gnnnLHDII/6QOlkf8Bb2o8eFCMB8GA1UdIwQY MBaAFHZSDv8e4eKOPdz7iefLb32Jp3ycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGxJT194N2g0bzQ5M1B1SjU4dHZmWW1uZkp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9kZWNlNjMtZjBjMC00NjViLWFkODIt Yzg3NTFmOTU0NTI0LzEvZGxJT194N2g0bzQ5M1B1SjU4dHZmWW1uZkp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9kZWNlNjMtZjBjMC00NjViLWFkODItYzg3NTFmOTU0NTI0 LzEvZGxJT194N2g0bzQ5M1B1SjU4dHZmWW1uZkp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQOlrY9YJ PYkyCdJ5L7KkpoQQch0buflWwz4zkoUYPZORowXb9DwMJes1kErXKeRShqL0MrYP 8c9zBSccXN5OxeGX0+XRPM8EuUcZXY1/LJr2bcfFaQxBgvAmyoYLLuyO1sauUQNt c3rLWsv3/w+N4oqVnBMzt9tbGGrM4LMiG78rZ7KuZffCqxDw8kmdH4KS5gwIvtW5 h8dXQbXa1/Yxe62QkujFvdvzTYm37yhyVDI7Ch9x6cSTlrUyjNIcvu6vOFsJGDf4 rJqbRW2NIGuZLIDw6ozI7ABNXAu9dNUtNq8rHGgZJ8Veb8gpQQ0F+5dC86Teob38 XeJCojHh3AXL3w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:29 2025 by rpki-client