This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft File: D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft (raw, json) Hash identifier: S6JgZknB16qHHPGA5h86dmmd/5gsLdzOOgcs11DXgjE= Subject key identifier: 74:A1:28:2A:3F:F2:39:48:89:BA:E6:D3:0D:5B:06:E6:F7:FD:3A:E7 Authority key identifier: 0F:55:4A:FE:67:27:44:74:2B:4E:35:02:7B:40:2E:86:13:C2:03:77 Certificate issuer: /CN=0f554afe672744742b4e35027b402e8613c20377 Certificate serial: 019AF1D23B3AE909C1D6549B6A171CC785FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1VK_mcnRHQrTjUCe0AuhhPCA3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft Manifest number: 1650 Signing time: Sat 06 Dec 2025 04:01:17 +0000 Manifest this update: Sat 06 Dec 2025 04:01:17 +0000 Manifest next update: Sun 07 Dec 2025 04:01:17 +0000 Files and hashes: 1: D1VK_mcnRHQrTjUCe0AuhhPCA3c.crl (hash: Mj94VYellr/C+oWN95zfJa0+KDQK+LA7RcseJhmLJm8=) 2: JILzl612YbahGyGIhRmTzqH6qN0.roa (hash: KYoAnBG9y6ABJD4N2SyEiYvwxlPEdpp7VacwTGrZd0M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft rsync://rpki.ripe.net/repository/DEFAULT/D1VK_mcnRHQrTjUCe0AuhhPCA3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:3b:3a:e9:09:c1:d6:54:9b:6a:17:1c:c7:85:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f554afe672744742b4e35027b402e8613c20377 Validity Not Before: Dec 6 04:01:17 2025 GMT Not After : Dec 7 04:01:17 2025 GMT Subject: CN=74a1282a3ff2394889bae6d30d5b06e6f7fd3ae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:05:15:22:93:fb:32:84:9a:61:4d:dd:4b:ce: c7:4b:c2:61:6c:72:37:d1:3c:46:a2:b7:99:94:da: 05:9a:a2:d2:07:9f:7b:a0:ad:9a:b4:40:e5:73:d1: 9b:dd:40:df:5a:0d:13:5a:f6:68:fa:ed:08:a1:a9: a6:bd:a3:7d:49:4d:cc:3b:4a:48:b0:de:89:94:eb: d2:1f:7b:fc:9f:20:6b:29:18:1a:c0:69:02:f8:3e: db:6b:78:41:31:b4:2a:d4:47:6f:01:c4:68:17:79: a3:19:b9:4e:13:f7:d6:a0:da:b7:48:a1:1d:4a:17: e4:4e:49:62:d1:88:f5:f0:66:2a:a1:b0:47:88:d3: c9:b2:1a:1b:a1:2d:f7:5c:4a:1b:df:18:d5:88:7e: 99:c9:cb:0a:32:a5:b4:ce:b9:2e:46:9b:a4:e3:ad: 62:69:c4:5e:01:62:53:8f:9d:3f:61:ce:db:d3:4c: 17:f1:78:5f:d4:d4:3d:e9:86:2a:22:b3:b7:fb:6a: 85:a9:34:b8:83:62:47:45:cb:fd:8e:c7:35:3f:b2: 35:c0:4c:89:21:f2:36:08:6d:60:81:1d:58:26:23: a8:7b:ce:ca:cd:c1:bb:d7:41:c4:ac:aa:8f:bd:d1: eb:a2:5f:f8:b3:07:91:45:f1:9f:dd:74:d1:b7:7b: f8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:A1:28:2A:3F:F2:39:48:89:BA:E6:D3:0D:5B:06:E6:F7:FD:3A:E7 X509v3 Authority Key Identifier: keyid:0F:55:4A:FE:67:27:44:74:2B:4E:35:02:7B:40:2E:86:13:C2:03:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1VK_mcnRHQrTjUCe0AuhhPCA3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:58:f2:01:4f:a1:ca:15:fa:b9:d2:74:49:6b:92:dc:e6:c9: 54:ee:7c:f4:c0:89:08:66:72:97:3d:50:d3:15:0c:ca:28:2c: cf:06:0e:e5:06:9e:bb:82:41:a0:81:fe:df:23:f0:3c:6d:95: 4c:7c:3b:9d:e4:c0:8e:ab:ea:4d:07:ce:a2:ec:6b:15:97:1f: a1:60:df:2d:4e:55:27:1f:4e:8c:cf:20:67:c3:13:e9:71:06: 25:6f:2f:8f:9f:a4:5f:f4:ea:7e:79:e3:e6:34:85:c1:5d:b2: ac:d2:e8:6d:6e:e8:dc:e8:2f:15:00:f2:17:75:fa:63:f5:6b: 88:d4:a2:08:4f:9a:70:3c:2d:82:34:12:66:c7:a8:6b:ff:c9: 7a:45:ed:86:5b:be:77:21:ef:f2:b8:10:02:aa:6d:59:78:bf: 09:ba:15:34:b2:64:dc:fd:c6:f2:69:2d:f3:d2:91:6a:d5:d0: ab:2a:fc:ff:63:5e:49:49:7c:e7:52:39:9f:2f:79:8c:00:da: bc:e4:3d:99:1e:80:32:27:e9:9e:51:6a:d7:20:7b:de:47:88: 4c:dc:e4:0d:85:69:1c:01:bb:41:f0:70:c8:7c:dc:58:c0:cf: de:a8:9b:f0:e3:35:f6:77:10:ac:49:d3:33:49:03:25:e1:27: ba:41:a9:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0js66QnB1lSbahccx4X7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNTU0YWZlNjcyNzQ0NzQyYjRlMzUwMjdiNDAyZTg2MTNj MjAzNzcwHhcNMjUxMjA2MDQwMTE3WhcNMjUxMjA3MDQwMTE3WjAzMTEwLwYDVQQD Eyg3NGExMjgyYTNmZjIzOTQ4ODliYWU2ZDMwZDViMDZlNmY3ZmQzYWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wUVIpP7MoSaYU3dS87HS8JhbHI3 0TxGoreZlNoFmqLSB597oK2atEDlc9Gb3UDfWg0TWvZo+u0IoammvaN9SU3MO0pI sN6JlOvSH3v8nyBrKRgawGkC+D7ba3hBMbQq1EdvAcRoF3mjGblOE/fWoNq3SKEd ShfkTkli0Yj18GYqobBHiNPJshoboS33XEob3xjViH6ZycsKMqW0zrkuRpuk461i acReAWJTj50/Yc7b00wX8Xhf1NQ96YYqIrO3+2qFqTS4g2JHRcv9jsc1P7I1wEyJ IfI2CG1ggR1YJiOoe87KzcG710HErKqPvdHrol/4sweRRfGf3XTRt3v4iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHShKCo/8jlIibrm0w1bBub3/TrnMB8GA1UdIwQY MBaAFA9VSv5nJ0R0K041AntALoYTwgN3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDFWS19tY25SSFFyVGpVQ2UwQXVoaFBDQTNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yYzE5MzctOWQ5Yi00MzE1LWEzYzUt YzBhZTgwYjc0MmIwLzEvRDFWS19tY25SSFFyVGpVQ2UwQXVoaFBDQTNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8yYzE5MzctOWQ5Yi00MzE1LWEzYzUtYzBhZTgwYjc0MmIw LzEvRDFWS19tY25SSFFyVGpVQ2UwQXVoaFBDQTNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfVjyAU+h yhX6udJ0SWuS3ObJVO589MCJCGZylz1Q0xUMyigszwYO5Qaeu4JBoIH+3yPwPG2V THw7neTAjqvqTQfOouxrFZcfoWDfLU5VJx9OjM8gZ8MT6XEGJW8vj5+kX/Tqfnnj 5jSFwV2yrNLobW7o3OgvFQDyF3X6Y/VriNSiCE+acDwtgjQSZseoa//JekXthlu+ dyHv8rgQAqptWXi/CboVNLJk3P3G8mkt89KRatXQqyr8/2NeSUl851I5ny95jADa vOQ9mR6AMifpnlFq1yB73keITNzkDYVpHAG7QfBwyHzcWMDP3qib8OM19ncQrEnT M0kDJeEnukGpsg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:05 2025 by rpki-client