This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.mft File: D2Vwk_MmVHvyWpmFyBzxQDFAo6g.mft (raw, json) Hash identifier: XpWIwWB56+VwuEvIM0lDRJG2P773W47WeyKZC8wrzwA= Subject key identifier: 07:FA:E3:F9:D5:5C:43:EC:55:38:A2:E7:16:EA:5E:32:49:D0:92:1A Authority key identifier: 0F:65:70:93:F3:26:54:7B:F2:5A:99:85:C8:1C:F1:40:31:40:A3:A8 Certificate issuer: /CN=0f657093f326547bf25a9985c81cf1403140a3a8 Certificate serial: 019AF50A0A6C7827CD2D698D123581245367 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 19:01:07 +0000 Manifest this update: Sat 06 Dec 2025 19:01:07 +0000 Manifest next update: Sun 07 Dec 2025 19:01:07 +0000 Files and hashes: 1: D2Vwk_MmVHvyWpmFyBzxQDFAo6g.crl (hash: bXIZkERBGUJwQ65Dgqrk5KSMGaXiBbXm99j/M1TTemE=) 2: w9q_FLnEYi6mMGLHNxrzvfLgYJ4.roa (hash: tRbBa7QkfAKJaQVPfhVVFf8/W8ntAnk0VCwj65NPw8Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.mft rsync://rpki.ripe.net/repository/DEFAULT/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:0a:6c:78:27:cd:2d:69:8d:12:35:81:24:53:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f657093f326547bf25a9985c81cf1403140a3a8 Validity Not Before: Dec 6 19:01:07 2025 GMT Not After : Dec 7 19:01:07 2025 GMT Subject: CN=07fae3f9d55c43ec5538a2e716ea5e3249d0921a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:87:93:1d:99:f6:5f:dc:79:37:0b:5c:c3:a0: 9e:8e:ff:f5:54:dd:69:c3:63:0d:2e:8d:c2:d5:86: 09:78:e6:a2:9d:e1:ab:64:a9:1c:0f:bb:b8:99:62: f9:d0:29:42:c4:3b:82:76:43:6f:fb:58:98:75:04: 10:1f:2d:e9:da:9f:a7:8d:76:7c:c5:44:a4:12:8a: 35:9b:28:23:d7:0d:bb:93:e1:dd:87:fa:20:46:2e: 43:05:24:fb:df:6e:bd:90:bd:60:9a:31:8a:d2:23: 77:b7:93:80:73:ab:91:8b:ce:45:9a:5e:52:53:01: 9c:96:b7:01:70:2b:db:e5:cb:06:65:49:f9:dc:ec: b3:c3:56:ac:a0:b0:90:91:b5:b0:e9:9e:d3:2a:73: fc:bb:67:c1:dd:f1:bd:2f:f6:7d:ab:5e:27:42:88: 2b:1b:7e:b6:f2:ea:36:b0:8d:f7:10:5b:ad:0c:ed: f7:3e:1d:6a:82:e9:4d:40:16:af:9a:6f:e1:43:8a: 60:1b:0d:27:48:aa:ff:28:10:cf:1d:63:1d:87:36: 6d:b1:db:b7:f7:da:10:72:c5:fc:ac:01:72:4e:9f: 4d:37:bc:c3:de:09:3d:19:cf:c7:14:f8:f1:c0:ca: 12:86:71:70:6b:56:e6:bf:5f:ae:e0:32:15:85:12: 44:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:FA:E3:F9:D5:5C:43:EC:55:38:A2:E7:16:EA:5E:32:49:D0:92:1A X509v3 Authority Key Identifier: keyid:0F:65:70:93:F3:26:54:7B:F2:5A:99:85:C8:1C:F1:40:31:40:A3:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:05:63:68:c9:6f:24:a7:c7:cc:e4:4b:60:3c:2f:64:8f:9e: 09:37:01:63:5d:d8:12:f3:15:af:ee:d6:7e:1c:aa:6c:5e:b2: 80:25:36:05:71:bb:33:0b:ce:20:70:13:a4:cd:09:6e:4a:5d: 77:80:6f:ce:89:47:0c:91:83:b5:3d:11:0d:6d:67:d1:47:f9: 26:ae:51:ae:2b:c9:b0:a5:5f:89:db:be:69:e5:ca:d3:53:fe: 06:a3:3a:a3:8b:dc:ab:21:ba:be:7f:0e:8e:2a:b7:e0:92:ad: aa:bc:58:f8:34:c3:7f:8a:58:d1:e4:0b:f4:fd:d4:05:e6:80: 0d:7f:ca:83:9f:8d:f4:74:5a:3a:4d:82:14:cf:36:60:07:03: 68:81:05:38:8c:1d:0b:7a:ed:f1:d4:e3:8c:cc:81:93:f5:72: 88:fe:12:76:41:07:b2:6f:f1:c4:78:f8:d1:f3:d0:36:dc:2a: 04:39:dd:a6:6f:ab:df:9b:62:22:d5:17:70:91:2f:db:6c:78: 50:4f:b9:d8:fa:ce:77:0d:97:9f:b2:2b:0b:35:34:5c:5e:d2: 52:ba:7a:07:ee:27:93:3a:17:5a:ad:47:34:50:4e:b1:a3:d0: 76:bf:e3:64:f0:3c:49:3b:3f:b1:63:d5:a1:9a:34:05:85:95: 77:c0:e1:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CgpseCfNLWmNEjWBJFNnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNjU3MDkzZjMyNjU0N2JmMjVhOTk4NWM4MWNmMTQwMzE0 MGEzYTgwHhcNMjUxMjA2MTkwMTA3WhcNMjUxMjA3MTkwMTA3WjAzMTEwLwYDVQQD EygwN2ZhZTNmOWQ1NWM0M2VjNTUzOGEyZTcxNmVhNWUzMjQ5ZDA5MjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoeTHZn2X9x5Nwtcw6Cejv/1VN1p w2MNLo3C1YYJeOaineGrZKkcD7u4mWL50ClCxDuCdkNv+1iYdQQQHy3p2p+njXZ8 xUSkEoo1mygj1w27k+Hdh/ogRi5DBST73269kL1gmjGK0iN3t5OAc6uRi85Fml5S UwGclrcBcCvb5csGZUn53Oyzw1asoLCQkbWw6Z7TKnP8u2fB3fG9L/Z9q14nQogr G3628uo2sI33EFutDO33Ph1qgulNQBavmm/hQ4pgGw0nSKr/KBDPHWMdhzZtsdu3 99oQcsX8rAFyTp9NN7zD3gk9Gc/HFPjxwMoShnFwa1bmv1+u4DIVhRJEhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAf64/nVXEPsVTii5xbqXjJJ0JIaMB8GA1UdIwQY MBaAFA9lcJPzJlR78lqZhcgc8UAxQKOoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDJWd2tfTW1WSHZ5V3BtRnlCenhRREZBbzZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8xODFhZDYtNDc2NC00ODgxLTg5NjIt MGFmZjY5ZmFmNjhhLzEvRDJWd2tfTW1WSHZ5V3BtRnlCenhRREZBbzZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS8xODFhZDYtNDc2NC00ODgxLTg5NjItMGFmZjY5ZmFmNjhh LzEvRDJWd2tfTW1WSHZ5V3BtRnlCenhRREZBbzZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZwVjaMlv JKfHzORLYDwvZI+eCTcBY13YEvMVr+7WfhyqbF6ygCU2BXG7MwvOIHATpM0Jbkpd d4BvzolHDJGDtT0RDW1n0Uf5Jq5RrivJsKVfidu+aeXK01P+BqM6o4vcqyG6vn8O jiq34JKtqrxY+DTDf4pY0eQL9P3UBeaADX/Kg5+N9HRaOk2CFM82YAcDaIEFOIwd C3rt8dTjjMyBk/VyiP4SdkEHsm/xxHj40fPQNtwqBDndpm+r35tiItUXcJEv22x4 UE+52PrOdw2Xn7IrCzU0XF7SUrp6B+4nkzoXWq1HNFBOsaPQdr/jZPA8STs/sWPV oZo0BYWVd8Dhrw== -----END CERTIFICATE-----Generated at Sat Dec 6 22:24:46 2025 by rpki-client