This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft File: _dlCLeliA-XYc-CZVZGjppDdPZI.mft (raw, json) Hash identifier: l4YAYVDETqtPwxUYZyjSsEv7xQzYr0OAvB91UdMckjc= Subject key identifier: 7F:39:96:0C:D2:B8:C0:CE:11:C3:AE:2A:A1:81:F0:C7:4F:11:0F:83 Authority key identifier: FD:D9:42:2D:E9:62:03:E5:D8:73:E0:99:55:91:A3:A6:90:DD:3D:92 Certificate issuer: /CN=fdd9422de96203e5d873e0995591a3a690dd3d92 Certificate serial: 019AF23F66688D11EB10ADF32FA2EA2E4862 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 06:00:32 +0000 Manifest this update: Sat 06 Dec 2025 06:00:32 +0000 Manifest next update: Sun 07 Dec 2025 06:00:32 +0000 Files and hashes: 1: _dlCLeliA-XYc-CZVZGjppDdPZI.crl (hash: z5MpT+f8I/mKWwKJtWaO0FZVHMRTbbzkEokwakDZfco=) 2: sKY5eWcuMLtnQDCwYINlgWrJYiU.roa (hash: CtU3txyv7ojbqzOBjkBrsZCPvN9srqKePBnH0g0kSFY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:66:68:8d:11:eb:10:ad:f3:2f:a2:ea:2e:48:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd9422de96203e5d873e0995591a3a690dd3d92 Validity Not Before: Dec 6 06:00:32 2025 GMT Not After : Dec 7 06:00:32 2025 GMT Subject: CN=7f39960cd2b8c0ce11c3ae2aa181f0c74f110f83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fa:30:be:7e:18:0b:18:c8:3d:ff:21:0a:fa: 85:45:1b:bd:30:cb:34:10:c8:69:fe:14:13:0c:ed: 81:57:d5:fa:f0:62:7c:5b:5c:07:6e:f9:f4:e8:7b: db:77:d0:d4:04:9d:3d:27:16:f7:b6:6b:c2:e4:77: 0b:b3:f0:75:92:20:4f:f8:a1:50:0c:82:85:b0:af: cf:bf:2d:6d:e7:61:ee:9f:86:df:c1:a8:31:ca:3b: e2:9d:21:06:97:19:64:b2:de:b1:05:26:6c:e7:67: b8:f1:78:4e:6b:c7:1b:cd:ad:1d:e9:bb:ac:47:48: 43:68:11:7b:7c:58:9f:5f:74:c1:eb:e5:07:8b:ed: 77:df:22:bc:e0:fd:6b:bb:da:e5:d9:a4:09:bd:2f: 8f:70:ca:63:d4:39:ed:6b:bd:52:e4:42:77:29:c5: 36:0b:9c:17:55:b7:76:e2:2e:5f:b6:9e:90:2f:08: 7b:13:20:19:1f:61:76:c0:4d:0e:36:32:75:41:a8: 62:39:af:98:77:1b:b3:fb:93:9a:41:76:5b:16:13: 26:1e:04:2c:d9:d1:a0:ec:76:aa:da:0a:4f:64:60: d4:81:47:54:84:c3:c4:09:74:72:f9:28:dc:1d:c0: 1f:bf:3d:04:c3:ac:b4:57:26:55:2f:a1:68:e5:c2: ba:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:39:96:0C:D2:B8:C0:CE:11:C3:AE:2A:A1:81:F0:C7:4F:11:0F:83 X509v3 Authority Key Identifier: keyid:FD:D9:42:2D:E9:62:03:E5:D8:73:E0:99:55:91:A3:A6:90:DD:3D:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:1a:28:5c:6d:4f:33:ad:3d:01:35:f4:9d:c4:5f:2b:d8:1b: ca:ba:f5:fd:06:89:19:07:a3:d0:1b:9a:4f:b7:00:a3:3b:a2: 2b:37:95:50:0f:19:bc:a1:0c:d4:0a:d0:48:3c:6d:dd:0b:98: da:b0:1f:35:8c:88:f0:d1:1b:f4:17:66:75:69:3f:18:4f:e2: b2:20:20:bd:96:04:ec:3a:57:9e:bd:39:29:e1:4c:99:21:a3: 9f:cb:58:0d:82:32:ce:52:f7:50:7f:1f:d5:a8:dc:71:22:22: d2:54:4f:bd:16:17:f8:57:63:a2:72:c3:c0:e1:d0:90:c7:95: c4:43:98:cf:ef:7a:b2:2f:9a:c1:41:02:74:aa:2f:2d:87:b6: 29:e1:72:f4:17:4f:29:ff:12:31:e6:ca:39:8a:3b:0f:2c:35: 42:5d:f2:58:d5:ff:f8:e2:72:ca:0a:5e:9b:3f:62:e0:af:25: 94:4c:3e:7c:98:72:bd:7a:9a:4c:d2:73:f2:cb:0f:e0:0a:4b: b9:4e:80:c6:37:dc:81:1a:cc:ac:be:0c:02:91:8c:d5:07:f6: 52:5f:2d:82:74:57:bf:11:d8:ad:ed:b9:78:9f:38:6b:fa:84: cd:60:c8:bf:6c:50:34:16:47:ba:a8:94:24:53:2c:f0:e0:03: 9c:9b:22:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP2ZojRHrEK3zL6LqLkhiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZDk0MjJkZTk2MjAzZTVkODczZTA5OTU1OTFhM2E2OTBk ZDNkOTIwHhcNMjUxMjA2MDYwMDMyWhcNMjUxMjA3MDYwMDMyWjAzMTEwLwYDVQQD Eyg3ZjM5OTYwY2QyYjhjMGNlMTFjM2FlMmFhMTgxZjBjNzRmMTEwZjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPowvn4YCxjIPf8hCvqFRRu9MMs0 EMhp/hQTDO2BV9X68GJ8W1wHbvn06Hvbd9DUBJ09Jxb3tmvC5HcLs/B1kiBP+KFQ DIKFsK/Pvy1t52Hun4bfwagxyjvinSEGlxlkst6xBSZs52e48XhOa8cbza0d6bus R0hDaBF7fFifX3TB6+UHi+133yK84P1ru9rl2aQJvS+PcMpj1Dnta71S5EJ3KcU2 C5wXVbd24i5ftp6QLwh7EyAZH2F2wE0ONjJ1QahiOa+Ydxuz+5OaQXZbFhMmHgQs 2dGg7Haq2gpPZGDUgUdUhMPECXRy+SjcHcAfvz0Ew6y0VyZVL6Fo5cK6YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH85lgzSuMDOEcOuKqGB8MdPEQ+DMB8GA1UdIwQY MBaAFP3ZQi3pYgPl2HPgmVWRo6aQ3T2SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2RsQ0xlbGlBLVhZYy1DWlZaR2pwcERkUFpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9hY2YyZTYtYzhkZC00OGM0LTgzODkt YTE4NTUwYTY5ZjY2LzEvX2RsQ0xlbGlBLVhZYy1DWlZaR2pwcERkUFpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi9hY2YyZTYtYzhkZC00OGM0LTgzODktYTE4NTUwYTY5ZjY2 LzEvX2RsQ0xlbGlBLVhZYy1DWlZaR2pwcERkUFpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABhooXG1P M609ATX0ncRfK9gbyrr1/QaJGQej0BuaT7cAozuiKzeVUA8ZvKEM1ArQSDxt3QuY 2rAfNYyI8NEb9BdmdWk/GE/isiAgvZYE7DpXnr05KeFMmSGjn8tYDYIyzlL3UH8f 1ajccSIi0lRPvRYX+FdjonLDwOHQkMeVxEOYz+96si+awUECdKovLYe2KeFy9BdP Kf8SMebKOYo7Dyw1Ql3yWNX/+OJyygpemz9i4K8llEw+fJhyvXqaTNJz8ssP4ApL uU6AxjfcgRrMrL4MApGM1Qf2Ul8tgnRXvxHYre25eJ84a/qEzWDIv2xQNBZHuqiU JFMs8OADnJsiQw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:49:31 2025 by rpki-client