This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft File: D2vaHb-nfHTacoBe7lQY0_DMU50.mft (raw, json) Hash identifier: tQN/j5eFEJY/JExOhvXbWdX83jZKCGerXKV2QoG7KLU= Subject key identifier: 38:B8:E6:73:3F:B4:CF:BD:A4:39:2A:66:54:D6:81:2F:64:96:6F:E6 Authority key identifier: 0F:6B:DA:1D:BF:A7:7C:74:DA:72:80:5E:EE:54:18:D3:F0:CC:53:9D Certificate issuer: /CN=0f6bda1dbfa77c74da72805eee5418d3f0cc539d Certificate serial: 019B2E546DD7A90058E2D6B84F0DC0707BD8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft Manifest number: 14A4 Signing time: Wed 17 Dec 2025 22:00:43 +0000 Manifest this update: Wed 17 Dec 2025 22:00:43 +0000 Manifest next update: Thu 18 Dec 2025 22:00:43 +0000 Files and hashes: 1: D2vaHb-nfHTacoBe7lQY0_DMU50.crl (hash: nVZMxVoPPdcNlrTrY1I3KI6pDd/lPRPOxKI0DQqbY0A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 22:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:54:6d:d7:a9:00:58:e2:d6:b8:4f:0d:c0:70:7b:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f6bda1dbfa77c74da72805eee5418d3f0cc539d Validity Not Before: Dec 17 22:00:43 2025 GMT Not After : Dec 18 22:00:43 2025 GMT Subject: CN=38b8e6733fb4cfbda4392a6654d6812f64966fe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:25:23:30:e2:ca:66:36:94:15:99:0f:35:23: 9c:70:58:66:38:85:f2:0a:1c:55:61:ff:2e:20:d4: 08:d9:aa:1b:48:92:a7:1b:6a:eb:0e:b8:88:27:ba: 3f:77:03:ac:b5:4d:0f:b6:3f:f1:fa:9b:84:ea:42: a7:b5:b9:bd:bd:49:bf:85:cf:33:2a:1c:e8:4b:01: 67:d8:19:6e:19:60:79:97:30:e5:34:97:de:ac:77: 41:07:54:d4:ad:0e:b9:bf:00:eb:28:6d:ff:78:2e: 2a:17:85:a4:3d:87:f3:3c:7e:28:6b:19:ec:25:12: 64:e2:5e:7a:c9:a1:c3:c0:66:3a:94:53:f3:f9:a0: 46:fc:53:44:47:59:fa:22:aa:a4:9e:e2:f9:fb:20: 35:d4:cd:0c:df:94:5e:59:fc:4f:9c:5b:d6:9d:ab: 8f:27:43:39:b3:d5:37:e0:7f:82:6e:0b:98:b0:31: 85:c9:58:dd:43:20:70:3e:e7:69:28:b1:86:7a:00: 20:f6:1f:13:93:4f:20:49:79:03:0d:a5:b7:fb:a5: d4:42:63:05:2a:f1:28:2d:49:06:51:7b:c7:6b:8d: c2:cf:c0:41:48:c1:52:c3:88:65:7e:c6:ae:02:74: 25:1d:6e:fb:95:22:86:d7:dc:95:dc:84:fd:47:c4: b6:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:B8:E6:73:3F:B4:CF:BD:A4:39:2A:66:54:D6:81:2F:64:96:6F:E6 X509v3 Authority Key Identifier: keyid:0F:6B:DA:1D:BF:A7:7C:74:DA:72:80:5E:EE:54:18:D3:F0:CC:53:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2vaHb-nfHTacoBe7lQY0_DMU50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ffac24-7ac5-45a6-a946-e0812df1221f/1/D2vaHb-nfHTacoBe7lQY0_DMU50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:fa:db:5f:8f:13:74:c5:c9:1f:ec:65:b6:9b:5f:92:66:ea: 08:c4:54:ca:a4:2d:f4:e3:4d:3c:de:c8:03:67:82:16:9b:c0: ee:da:af:ab:68:75:89:82:25:49:37:80:0e:c0:0e:7e:ef:d2: 21:96:f9:0a:ff:c1:a5:4d:91:2a:d8:36:50:97:b8:4a:76:45: 91:1a:23:52:4e:24:c6:21:e4:d1:7e:7f:6c:5b:42:71:70:25: e0:1d:6c:8b:de:a2:f8:93:19:1c:31:89:7b:25:e4:a7:21:1f: 0a:a3:bc:24:c1:f7:0d:cb:8c:dd:6a:82:6d:7d:f2:c3:37:77: 9a:1a:08:59:d1:de:63:29:1b:62:4e:71:5d:00:60:e2:e1:09: ec:d2:35:88:5a:28:f1:d4:f7:b9:1f:6d:48:89:9c:d0:50:6f: 91:ee:34:0b:52:3c:d1:08:2c:b1:43:78:eb:ec:38:f3:52:2b: 5a:35:63:e1:cc:9f:62:6e:9a:28:bd:53:6f:91:80:3a:f7:33: 68:21:3f:68:d4:d2:87:c2:15:fa:9b:9b:57:5f:c3:de:43:0b: c3:ed:72:d6:04:7b:25:48:8d:18:1e:8d:42:74:f4:9d:d1:cb: b1:47:71:a2:eb:90:a4:5d:77:89:96:d5:ac:6f:35:32:3e:85: 38:68:7f:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuVG3XqQBY4ta4Tw3AcHvYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNmJkYTFkYmZhNzdjNzRkYTcyODA1ZWVlNTQxOGQzZjBj YzUzOWQwHhcNMjUxMjE3MjIwMDQzWhcNMjUxMjE4MjIwMDQzWjAzMTEwLwYDVQQD EygzOGI4ZTY3MzNmYjRjZmJkYTQzOTJhNjY1NGQ2ODEyZjY0OTY2ZmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CUjMOLKZjaUFZkPNSOccFhmOIXy ChxVYf8uINQI2aobSJKnG2rrDriIJ7o/dwOstU0Ptj/x+puE6kKntbm9vUm/hc8z KhzoSwFn2BluGWB5lzDlNJferHdBB1TUrQ65vwDrKG3/eC4qF4WkPYfzPH4oaxns JRJk4l56yaHDwGY6lFPz+aBG/FNER1n6IqqknuL5+yA11M0M35ReWfxPnFvWnauP J0M5s9U34H+CbguYsDGFyVjdQyBwPudpKLGGegAg9h8Tk08gSXkDDaW3+6XUQmMF KvEoLUkGUXvHa43Cz8BBSMFSw4hlfsauAnQlHW77lSKG19yV3IT9R8S2NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDi45nM/tM+9pDkqZlTWgS9klm/mMB8GA1UdIwQY MBaAFA9r2h2/p3x02nKAXu5UGNPwzFOdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDJ2YUhiLW5mSFRhY29CZTdsUVkwX0RNVTUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9mZmFjMjQtN2FjNS00NWE2LWE5NDYt ZTA4MTJkZjEyMjFmLzEvRDJ2YUhiLW5mSFRhY29CZTdsUVkwX0RNVTUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9mZmFjMjQtN2FjNS00NWE2LWE5NDYtZTA4MTJkZjEyMjFm LzEvRDJ2YUhiLW5mSFRhY29CZTdsUVkwX0RNVTUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXvrbX48T dMXJH+xltptfkmbqCMRUyqQt9ONNPN7IA2eCFpvA7tqvq2h1iYIlSTeADsAOfu/S IZb5Cv/BpU2RKtg2UJe4SnZFkRojUk4kxiHk0X5/bFtCcXAl4B1si96i+JMZHDGJ eyXkpyEfCqO8JMH3DcuM3WqCbX3ywzd3mhoIWdHeYykbYk5xXQBg4uEJ7NI1iFoo 8dT3uR9tSImc0FBvke40C1I80QgssUN46+w481IrWjVj4cyfYm6aKL1Tb5GAOvcz aCE/aNTSh8IV+pubV1/D3kMLw+1y1gR7JUiNGB6NQnT0ndHLsUdxouuQpF13iZbV rG81Mj6FOGh/9w== -----END CERTIFICATE-----Generated at Thu Dec 18 07:12:21 2025 by rpki-client