This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft File: dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft (raw, json) Hash identifier: LqDNGHE563mpuW/WWLqYMJ+kEFDaifRvbfcG6oYv6FA= Subject key identifier: 52:5C:0B:69:71:F1:F1:E4:65:7B:9F:95:D8:F8:B7:C9:06:54:1B:4D Authority key identifier: 76:51:76:2D:E3:D3:F1:9C:ED:D4:38:B0:3C:F2:39:86:CE:91:72:7F Certificate issuer: /CN=7651762de3d3f19cedd438b03cf23986ce91727f Certificate serial: 019AF389FB306B5156A167E92FB00DF5085E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 12:01:37 +0000 Manifest this update: Sat 06 Dec 2025 12:01:37 +0000 Manifest next update: Sun 07 Dec 2025 12:01:37 +0000 Files and hashes: 1: 00qMnebnoQ1q-0QpuHNtB2jC8kw.roa (hash: eM8vkjcd9zZftIcrd2HQLTAzDHkkoGlg8veiHLYFAc4=) 2: dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl (hash: jRzGNj4Dp6VR2LZh6+0qb4rjvs8xeY4bIjzq0r3BZns=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:fb:30:6b:51:56:a1:67:e9:2f:b0:0d:f5:08:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7651762de3d3f19cedd438b03cf23986ce91727f Validity Not Before: Dec 6 12:01:37 2025 GMT Not After : Dec 7 12:01:37 2025 GMT Subject: CN=525c0b6971f1f1e4657b9f95d8f8b7c906541b4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bb:c9:6f:79:4a:72:8b:38:42:23:90:b8:64: 93:d9:fb:74:c0:b6:9a:62:2a:0a:2d:ab:5d:bf:dd: 88:85:f5:a4:9e:66:ad:e6:52:6c:38:60:29:58:51: 27:dd:b2:fc:ea:cc:72:b2:47:da:ff:6b:a7:78:0f: 9e:b5:63:d9:ba:a7:67:39:ee:5a:ab:6d:9d:64:20: 64:ac:bd:b2:02:78:bb:a9:c0:3b:08:98:bb:98:25: fb:5f:fd:68:c3:d4:19:ad:b4:a1:77:8a:86:78:09: 6a:98:2b:24:09:e6:4b:99:20:72:3b:ac:46:fa:fd: da:14:99:3a:9f:13:44:b2:b0:93:ae:8b:da:62:cc: fd:e0:96:5f:9c:85:ed:1a:cc:80:f1:72:8e:2f:af: 57:93:c7:5c:26:68:74:b6:ed:e7:c2:70:1f:de:76: 05:1f:8d:d9:0d:35:b9:e7:c3:30:4b:7c:ec:1c:04: 1f:aa:c3:48:6c:fa:28:59:22:69:c2:45:5c:8d:8b: bf:c4:db:da:9f:b2:11:49:46:fc:ff:cd:9b:f0:3e: eb:26:49:2d:51:d5:17:ae:3e:ea:b8:30:f3:8f:ca: c5:25:87:d1:94:65:a1:fa:74:30:5d:66:c6:a9:d1: 19:57:80:9d:97:74:6e:7b:d0:18:28:71:3a:bf:10: a2:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:5C:0B:69:71:F1:F1:E4:65:7B:9F:95:D8:F8:B7:C9:06:54:1B:4D X509v3 Authority Key Identifier: keyid:76:51:76:2D:E3:D3:F1:9C:ED:D4:38:B0:3C:F2:39:86:CE:91:72:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:1a:ca:11:10:4f:09:a9:f1:e6:bf:c0:0a:7c:a5:06:be:cc: 47:6d:3f:14:cd:c0:38:4a:a0:fe:2f:05:8b:bd:1d:15:3c:96: a4:57:fe:ae:51:3c:fe:df:a9:79:f9:95:d9:ec:56:1b:6b:1f: 75:cf:2f:60:c3:e3:a1:25:96:e5:e3:14:51:1c:69:84:45:a3: 6a:7f:bf:50:c4:a5:bb:ad:95:6e:f0:95:76:fc:f3:3f:80:00: 25:60:4c:84:eb:95:9f:ca:5c:fb:d1:f9:43:46:68:61:0b:8e: bf:8c:e0:3d:0b:83:9c:05:57:74:fd:de:a2:db:87:59:65:a5: 5e:a8:8c:d4:24:82:87:e1:38:de:98:a8:80:1b:26:51:33:e1: 2d:74:a9:74:68:af:9e:cf:a3:76:25:36:d7:45:da:59:ee:b3: 46:fa:5a:7f:8a:f2:2a:49:89:9f:c7:df:f1:58:d2:3d:fe:eb: 9d:b2:43:75:5f:23:d7:de:c8:d8:e7:e4:16:94:1c:74:e1:e1: 64:c6:35:57:62:cc:03:d6:c6:a3:52:af:93:17:b7:83:d4:91: 7a:e9:3b:dd:28:79:62:a0:06:9e:aa:0f:90:e9:0c:00:3c:62: 4b:b1:30:f7:a2:f6:0b:be:81:29:e7:98:1e:a5:9c:7c:bd:ea: 0d:19:8c:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzifswa1FWoWfpL7AN9QheMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NTE3NjJkZTNkM2YxOWNlZGQ0MzhiMDNjZjIzOTg2Y2U5 MTcyN2YwHhcNMjUxMjA2MTIwMTM3WhcNMjUxMjA3MTIwMTM3WjAzMTEwLwYDVQQD Eyg1MjVjMGI2OTcxZjFmMWU0NjU3YjlmOTVkOGY4YjdjOTA2NTQxYjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7vJb3lKcos4QiOQuGST2ft0wLaa YioKLatdv92IhfWknmat5lJsOGApWFEn3bL86sxyskfa/2uneA+etWPZuqdnOe5a q22dZCBkrL2yAni7qcA7CJi7mCX7X/1ow9QZrbShd4qGeAlqmCskCeZLmSByO6xG +v3aFJk6nxNEsrCTrovaYsz94JZfnIXtGsyA8XKOL69Xk8dcJmh0tu3nwnAf3nYF H43ZDTW558MwS3zsHAQfqsNIbPooWSJpwkVcjYu/xNvan7IRSUb8/82b8D7rJkkt UdUXrj7quDDzj8rFJYfRlGWh+nQwXWbGqdEZV4Cdl3Rue9AYKHE6vxCiDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFJcC2lx8fHkZXufldj4t8kGVBtNMB8GA1UdIwQY MBaAFHZRdi3j0/Gc7dQ4sDzyOYbOkXJ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGxGMkxlUFQ4Wnp0MURpd1BQSTVoczZSY244LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC80ZTI4MDgtZThmNC00MmE3LWE4Mjct N2FiY2U2MDBjMjE4LzEvZGxGMkxlUFQ4Wnp0MURpd1BQSTVoczZSY244Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC80ZTI4MDgtZThmNC00MmE3LWE4MjctN2FiY2U2MDBjMjE4 LzEvZGxGMkxlUFQ4Wnp0MURpd1BQSTVoczZSY244LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcRrKERBP Canx5r/ACnylBr7MR20/FM3AOEqg/i8Fi70dFTyWpFf+rlE8/t+pefmV2exWG2sf dc8vYMPjoSWW5eMUURxphEWjan+/UMSlu62VbvCVdvzzP4AAJWBMhOuVn8pc+9H5 Q0ZoYQuOv4zgPQuDnAVXdP3eotuHWWWlXqiM1CSCh+E43piogBsmUTPhLXSpdGiv ns+jdiU210XaWe6zRvpaf4ryKkmJn8ff8VjSPf7rnbJDdV8j197I2OfkFpQcdOHh ZMY1V2LMA9bGo1Kvkxe3g9SReuk73Sh5YqAGnqoPkOkMADxiS7Ew96L2C76BKeeY HqWcfL3qDRmMnA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:17:16 2025 by rpki-client