This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft File: 24P1T0UTHZIHwhWgmKKmvNb_BQs.mft (raw, json) Hash identifier: tDioa725OLNZZB4dmKAaKACP1AxGsOYIgl25hlE1Agg= Subject key identifier: A7:08:D0:F8:07:D9:48:82:74:30:50:6D:CA:10:04:44:4C:C8:43:BF Authority key identifier: DB:83:F5:4F:45:13:1D:92:07:C2:15:A0:98:A2:A6:BC:D6:FF:05:0B Certificate issuer: /CN=db83f54f45131d9207c215a098a2a6bcd6ff050b Certificate serial: 019B318CC21B78505B8E4F717D7C6E647C24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft Manifest number: 0E7C Signing time: Thu 18 Dec 2025 13:01:06 +0000 Manifest this update: Thu 18 Dec 2025 13:01:06 +0000 Manifest next update: Fri 19 Dec 2025 13:01:06 +0000 Files and hashes: 1: 24P1T0UTHZIHwhWgmKKmvNb_BQs.crl (hash: rcqTgGPmKi0L1hTj47vG0mL3KjDylsaZHyAzLhz9vTM=) 2: Qfno-jAugdwOIbQTtdk6Qt14vp0.roa (hash: K+5ZvY56wsKUyUpWT9EX8Ty0xGLLwMy0SXranx21Z8w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:8c:c2:1b:78:50:5b:8e:4f:71:7d:7c:6e:64:7c:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db83f54f45131d9207c215a098a2a6bcd6ff050b Validity Not Before: Dec 18 13:01:06 2025 GMT Not After : Dec 19 13:01:06 2025 GMT Subject: CN=a708d0f807d948827430506dca1004444cc843bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:76:69:55:a8:b9:84:af:8c:df:21:93:ee:23: e3:c7:1a:b8:18:e1:8a:64:f1:76:03:d9:c3:54:bb: 7e:bd:67:e3:6f:17:f8:26:2a:64:38:24:30:f4:92: f9:9d:54:32:ec:ef:bf:cd:d8:d6:58:eb:fc:90:56: 55:65:94:28:e4:10:a0:49:51:dc:28:c0:d2:08:af: 61:52:af:1f:9f:fb:db:55:cc:58:29:1c:c0:48:95: b8:c9:44:61:43:67:5d:7e:99:b7:08:f0:6e:5f:2d: 8c:f7:42:16:30:da:f9:ef:09:79:8e:69:99:84:3f: f2:1d:f9:0f:eb:4d:58:a6:f8:df:82:97:35:b5:3f: eb:3a:b7:10:08:cb:7b:94:3a:25:8d:0e:f8:35:67: 15:a8:c7:c2:ec:45:95:ef:45:44:02:4a:f9:f4:ad: f0:6a:8e:1a:33:b0:c3:85:6a:6a:f4:79:be:3c:2e: a9:74:53:7b:d2:1c:21:fc:ef:d6:51:50:c6:74:17: bd:c8:d0:95:84:e6:3f:9d:b6:00:a4:1d:ca:51:3f: 23:5a:5e:c1:91:17:98:9d:2d:ec:43:84:f1:47:2e: e8:a6:14:96:80:16:e4:e7:ba:6c:99:09:3a:9c:5e: ac:37:a4:6f:5f:6e:91:3c:9c:51:07:a3:f1:d0:49: 56:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:08:D0:F8:07:D9:48:82:74:30:50:6D:CA:10:04:44:4C:C8:43:BF X509v3 Authority Key Identifier: keyid:DB:83:F5:4F:45:13:1D:92:07:C2:15:A0:98:A2:A6:BC:D6:FF:05:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:b2:10:31:74:96:a9:0c:0a:59:00:10:83:4a:1f:93:44:01: f2:79:0c:90:eb:32:7d:0e:e0:df:77:2c:ac:c9:3c:d5:3a:cf: 5c:4d:7b:36:bf:13:79:44:f1:83:76:e9:d8:c2:d2:01:a4:8e: 7f:26:9f:c4:4c:34:0a:a3:44:b3:af:db:0e:40:e9:78:22:b7: 8e:59:7d:cd:53:bd:68:53:ee:aa:e7:73:94:d3:93:44:1a:56: 69:69:fe:72:0b:32:6f:5e:d8:14:62:48:9a:05:18:36:72:c1: 8b:62:bd:7d:13:82:3c:2d:f8:4f:f7:e6:91:fe:7a:6c:1e:f5: a9:8a:98:0d:b8:7e:5d:67:d2:ac:da:d0:4b:de:c4:00:57:2a: 9a:1f:58:9f:27:5e:f9:7e:28:f3:e7:f0:7c:c7:a7:07:2a:f5: 8d:9a:cc:c1:f4:94:7b:1a:f6:1b:3e:6d:00:7b:9a:cf:d9:8c: f3:70:65:87:3c:cc:50:ce:61:16:cf:e3:a0:ed:ed:a7:d6:f1: 31:4f:c1:f7:13:f2:8c:a9:cf:92:3f:63:29:0c:20:ac:3f:fd: 10:f5:04:1c:e5:21:86:b7:d4:8d:75:26:8f:88:a7:56:ce:7b: 44:2a:11:a6:b1:f2:96:df:e1:46:9d:8d:28:e5:67:1e:03:64: 72:5c:78:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxjMIbeFBbjk9xfXxuZHwkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiODNmNTRmNDUxMzFkOTIwN2MyMTVhMDk4YTJhNmJjZDZm ZjA1MGIwHhcNMjUxMjE4MTMwMTA2WhcNMjUxMjE5MTMwMTA2WjAzMTEwLwYDVQQD EyhhNzA4ZDBmODA3ZDk0ODgyNzQzMDUwNmRjYTEwMDQ0NDRjYzg0M2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnZpVai5hK+M3yGT7iPjxxq4GOGK ZPF2A9nDVLt+vWfjbxf4JipkOCQw9JL5nVQy7O+/zdjWWOv8kFZVZZQo5BCgSVHc KMDSCK9hUq8fn/vbVcxYKRzASJW4yURhQ2ddfpm3CPBuXy2M90IWMNr57wl5jmmZ hD/yHfkP601Ypvjfgpc1tT/rOrcQCMt7lDoljQ74NWcVqMfC7EWV70VEAkr59K3w ao4aM7DDhWpq9Hm+PC6pdFN70hwh/O/WUVDGdBe9yNCVhOY/nbYApB3KUT8jWl7B kReYnS3sQ4TxRy7ophSWgBbk57psmQk6nF6sN6RvX26RPJxRB6Px0ElWHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKcI0PgH2UiCdDBQbcoQBERMyEO/MB8GA1UdIwQY MBaAFNuD9U9FEx2SB8IVoJiiprzW/wULMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjRQMVQwVVRIWklId2hXZ21LS212TmJfQlFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9lNTBjNzAtMGE3MC00NWFjLTlhZDQt MzI2NzY0YTY4Y2ZiLzEvMjRQMVQwVVRIWklId2hXZ21LS212TmJfQlFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9lNTBjNzAtMGE3MC00NWFjLTlhZDQtMzI2NzY0YTY4Y2Zi LzEvMjRQMVQwVVRIWklId2hXZ21LS212TmJfQlFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcrIQMXSW qQwKWQAQg0ofk0QB8nkMkOsyfQ7g33csrMk81TrPXE17Nr8TeUTxg3bp2MLSAaSO fyafxEw0CqNEs6/bDkDpeCK3jll9zVO9aFPuqudzlNOTRBpWaWn+cgsyb17YFGJI mgUYNnLBi2K9fROCPC34T/fmkf56bB71qYqYDbh+XWfSrNrQS97EAFcqmh9Ynyde +X4o8+fwfMenByr1jZrMwfSUexr2Gz5tAHuaz9mM83BlhzzMUM5hFs/joO3tp9bx MU/B9xPyjKnPkj9jKQwgrD/9EPUEHOUhhrfUjXUmj4inVs57RCoRprHylt/hRp2N KOVnHgNkclx4yA== -----END CERTIFICATE-----Generated at Thu Dec 18 14:20:17 2025 by rpki-client