This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.mft File: D2Vwk_MmVHvyWpmFyBzxQDFAo6g.mft (raw, json) Hash identifier: +61NWeqxPD2KBOpzNMc5oal8R12iTc8wXMMZOISIUtA= Subject key identifier: 6C:79:04:86:87:B2:13:19:E1:6D:00:84:EB:27:59:FF:ED:07:76:9D Authority key identifier: 0F:65:70:93:F3:26:54:7B:F2:5A:99:85:C8:1C:F1:40:31:40:A3:A8 Certificate issuer: /CN=0f657093f326547bf25a9985c81cf1403140a3a8 Certificate serial: 019B3E6DA8DFD86F3822ACADF309C269DFBF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 01:02:12 +0000 Manifest this update: Sun 21 Dec 2025 01:02:12 +0000 Manifest next update: Mon 22 Dec 2025 01:02:12 +0000 Files and hashes: 1: D2Vwk_MmVHvyWpmFyBzxQDFAo6g.crl (hash: Li/Eg07pK8Gw9dhcxbMO8ISzHcz3M0KF2scgctrNxgs=) 2: w9q_FLnEYi6mMGLHNxrzvfLgYJ4.roa (hash: tRbBa7QkfAKJaQVPfhVVFf8/W8ntAnk0VCwj65NPw8Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.mft rsync://rpki.ripe.net/repository/DEFAULT/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:a8:df:d8:6f:38:22:ac:ad:f3:09:c2:69:df:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f657093f326547bf25a9985c81cf1403140a3a8 Validity Not Before: Dec 21 01:02:12 2025 GMT Not After : Dec 22 01:02:12 2025 GMT Subject: CN=6c79048687b21319e16d0084eb2759ffed07769d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8c:82:66:80:38:2f:98:9b:38:d3:aa:a4:1d: c8:31:d2:a2:72:a1:3b:06:c6:1e:e5:1c:3a:54:28: 1f:96:1b:00:2d:a3:2c:a8:30:17:92:d7:46:6b:63: 9e:6a:e8:02:97:b7:1e:da:57:52:83:ec:45:6c:8d: eb:bc:8d:69:48:9b:04:bb:dd:a1:b6:f3:0f:6e:55: c6:8c:1b:07:42:22:cd:5b:77:1f:c2:24:62:dd:8d: 25:89:49:40:c2:08:82:bc:2f:82:b5:c5:63:d2:97: 04:99:4b:44:22:a1:77:93:fb:6c:98:49:78:53:ee: f7:03:aa:56:db:80:7f:03:2e:96:b4:47:e5:b6:8d: 9d:f4:87:dd:5c:6b:8a:dd:e4:7b:fe:c3:92:b9:b7: 9d:cc:90:ed:33:f0:cf:6a:d4:e4:aa:21:dd:8a:47: 36:a6:aa:9b:7b:ab:75:de:ec:fa:60:b5:c8:8d:b0: d0:97:4a:ad:e4:ec:f2:ab:49:16:fd:52:78:67:fe: bc:ea:f2:8f:cf:fa:52:e8:8b:e2:98:d4:a7:02:e4: f0:f6:f8:d2:69:24:92:0f:9a:8c:00:f4:a6:43:c4: 25:ee:8a:d5:43:a7:2b:5f:cf:77:e9:05:f3:3e:3f: e2:5e:a4:db:96:8d:dc:ff:10:fe:fb:09:22:53:fd: cc:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:79:04:86:87:B2:13:19:E1:6D:00:84:EB:27:59:FF:ED:07:76:9D X509v3 Authority Key Identifier: keyid:0F:65:70:93:F3:26:54:7B:F2:5A:99:85:C8:1C:F1:40:31:40:A3:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:10:0f:27:af:8c:69:56:fc:d4:9c:47:5d:ea:39:9a:8e:9d: ac:57:8f:46:ca:03:07:bb:28:a6:7c:78:2d:01:b6:e5:fc:ee: 46:f8:e2:14:5f:96:03:f5:db:74:9e:08:6c:84:05:9e:1e:c0: aa:10:f1:ea:fa:80:88:85:3d:4a:62:c7:d6:5c:a2:d6:a4:65: 9a:0e:10:c5:25:f2:48:b0:db:95:35:e8:1d:e9:02:71:3b:fb: 8f:65:fb:77:9a:65:a9:fe:ce:fe:f7:b5:af:95:d2:a1:c9:8e: 4b:a0:12:57:70:40:73:a0:6b:f8:54:17:e2:2a:0a:22:b4:e4: 5f:08:cc:be:ec:7e:b8:39:2d:06:30:09:f0:73:af:14:50:0b: be:10:65:68:d5:3a:5a:46:9a:e5:e8:e3:76:e0:3e:bd:28:cc: 72:a3:5c:43:48:70:d4:15:0e:6b:93:4e:ca:f6:43:4d:ae:b2: 03:1b:b9:72:57:ff:ed:a9:74:4a:c4:95:77:6e:e9:46:a9:41: f2:fd:12:21:5e:e2:c0:1e:9c:06:d8:54:e1:a4:81:fa:11:c7: 32:71:d8:e3:64:42:36:84:cb:0c:1d:d9:86:ea:a5:f3:86:d6: b9:ca:09:d3:a8:f0:7b:b0:f4:6c:bc:b8:c0:de:a1:7b:75:90: e8:06:e7:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bajf2G84Iqyt8wnCad+/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNjU3MDkzZjMyNjU0N2JmMjVhOTk4NWM4MWNmMTQwMzE0 MGEzYTgwHhcNMjUxMjIxMDEwMjEyWhcNMjUxMjIyMDEwMjEyWjAzMTEwLwYDVQQD Eyg2Yzc5MDQ4Njg3YjIxMzE5ZTE2ZDAwODRlYjI3NTlmZmVkMDc3NjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoyCZoA4L5ibONOqpB3IMdKicqE7 BsYe5Rw6VCgflhsALaMsqDAXktdGa2OeaugCl7ce2ldSg+xFbI3rvI1pSJsEu92h tvMPblXGjBsHQiLNW3cfwiRi3Y0liUlAwgiCvC+CtcVj0pcEmUtEIqF3k/tsmEl4 U+73A6pW24B/Ay6WtEflto2d9IfdXGuK3eR7/sOSubedzJDtM/DPatTkqiHdikc2 pqqbe6t13uz6YLXIjbDQl0qt5Ozyq0kW/VJ4Z/686vKPz/pS6IvimNSnAuTw9vjS aSSSD5qMAPSmQ8Ql7orVQ6crX8936QXzPj/iXqTblo3c/xD++wkiU/3MvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGx5BIaHshMZ4W0AhOsnWf/tB3adMB8GA1UdIwQY MBaAFA9lcJPzJlR78lqZhcgc8UAxQKOoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDJWd2tfTW1WSHZ5V3BtRnlCenhRREZBbzZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8xODFhZDYtNDc2NC00ODgxLTg5NjIt MGFmZjY5ZmFmNjhhLzEvRDJWd2tfTW1WSHZ5V3BtRnlCenhRREZBbzZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS8xODFhZDYtNDc2NC00ODgxLTg5NjItMGFmZjY5ZmFmNjhh LzEvRDJWd2tfTW1WSHZ5V3BtRnlCenhRREZBbzZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPRAPJ6+M aVb81JxHXeo5mo6drFePRsoDB7sopnx4LQG25fzuRvjiFF+WA/XbdJ4IbIQFnh7A qhDx6vqAiIU9SmLH1lyi1qRlmg4QxSXySLDblTXoHekCcTv7j2X7d5plqf7O/ve1 r5XSocmOS6ASV3BAc6Br+FQX4ioKIrTkXwjMvux+uDktBjAJ8HOvFFALvhBlaNU6 Wkaa5ejjduA+vSjMcqNcQ0hw1BUOa5NOyvZDTa6yAxu5clf/7al0SsSVd27pRqlB 8v0SIV7iwB6cBthU4aSB+hHHMnHY42RCNoTLDB3Zhuql84bWucoJ06jwe7D0bLy4 wN6he3WQ6AbnvQ== -----END CERTIFICATE-----Generated at Sun Dec 21 09:02:16 2025 by rpki-client