This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft File: D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft (raw, json) Hash identifier: XflS+Z6GRxHmZ2N4Z4VFOqxjrrNInNnL1URpAUkXuGM= Subject key identifier: B9:99:6E:82:25:02:B5:F9:7C:E4:FE:A7:E7:25:90:2D:3E:45:B4:D1 Authority key identifier: 0F:55:4A:FE:67:27:44:74:2B:4E:35:02:7B:40:2E:86:13:C2:03:77 Certificate issuer: /CN=0f554afe672744742b4e35027b402e8613c20377 Certificate serial: 019B2BC2451CFE0D93A3E1B709B9FB948FFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1VK_mcnRHQrTjUCe0AuhhPCA3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft Manifest number: 166E Signing time: Wed 17 Dec 2025 10:01:50 +0000 Manifest this update: Wed 17 Dec 2025 10:01:50 +0000 Manifest next update: Thu 18 Dec 2025 10:01:50 +0000 Files and hashes: 1: D1VK_mcnRHQrTjUCe0AuhhPCA3c.crl (hash: 5z3stI0qhWOxit9DDNHomyQZpx+NrlvdRVR6ogCu7gA=) 2: JILzl612YbahGyGIhRmTzqH6qN0.roa (hash: KYoAnBG9y6ABJD4N2SyEiYvwxlPEdpp7VacwTGrZd0M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft rsync://rpki.ripe.net/repository/DEFAULT/D1VK_mcnRHQrTjUCe0AuhhPCA3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:c2:45:1c:fe:0d:93:a3:e1:b7:09:b9:fb:94:8f:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f554afe672744742b4e35027b402e8613c20377 Validity Not Before: Dec 17 10:01:50 2025 GMT Not After : Dec 18 10:01:50 2025 GMT Subject: CN=b9996e822502b5f97ce4fea7e725902d3e45b4d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b9:91:2d:56:3c:df:55:d5:d0:a1:ab:64:55: 5f:a2:26:1f:06:ef:82:44:55:ef:2e:75:f0:7b:30: 7f:81:93:b6:3b:3f:38:4e:2c:25:70:e6:8e:ba:3a: a7:a7:43:a1:f0:85:12:cd:be:9b:7d:00:f6:f8:c4: c7:9f:d0:f3:92:6d:78:b0:34:f6:9f:1d:19:6a:7c: 0f:7f:9f:85:ca:0e:29:16:b6:d8:4b:41:be:49:f3: 46:f2:4c:3b:32:7d:43:ef:06:6f:f2:3b:1a:fe:6e: d6:45:fc:cf:7a:8f:03:e4:a9:c1:dc:e5:d4:f2:93: e5:d7:fb:93:13:b4:64:6f:89:4b:69:b7:52:78:04: 25:3b:8f:de:ed:03:6d:90:cc:5e:12:6f:c4:8f:61: d6:a3:57:2a:ff:61:69:22:90:53:34:26:ff:40:0f: 66:7c:e7:0d:ca:26:f6:09:df:d5:a2:b7:4a:94:3f: 9e:98:d6:12:d4:4d:89:2f:2a:98:0f:6e:c3:81:eb: 90:74:51:cf:8d:8f:0f:ac:7c:45:a2:17:1d:44:20: 5d:f5:b5:38:91:f1:8e:e8:d2:ba:e7:31:14:d0:d2: 19:1b:31:b6:a5:1b:04:ea:0f:8b:29:35:cf:ca:dd: 79:c6:96:f7:64:89:5f:e2:f6:38:a5:2c:47:39:80: c9:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:99:6E:82:25:02:B5:F9:7C:E4:FE:A7:E7:25:90:2D:3E:45:B4:D1 X509v3 Authority Key Identifier: keyid:0F:55:4A:FE:67:27:44:74:2B:4E:35:02:7B:40:2E:86:13:C2:03:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1VK_mcnRHQrTjUCe0AuhhPCA3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:be:a8:c0:13:42:16:54:29:78:2e:ae:4d:0d:1f:13:4b:be: 7d:6d:d4:e9:09:d8:46:5f:d7:68:4e:98:aa:4b:d7:e7:5e:9b: 5d:a5:e1:3e:da:e8:28:7c:62:7a:c1:1c:63:1f:92:10:a4:bb: 02:56:90:e7:04:4a:a3:42:6d:6a:67:be:db:ed:2a:f0:b3:bd: 41:36:43:c4:83:9c:f6:22:95:13:31:91:4c:fb:99:fe:48:7d: 36:76:eb:85:bd:38:34:09:3a:2e:d9:b4:17:df:71:71:b1:45: bf:24:aa:ac:6b:7e:6d:7b:02:87:05:48:d6:56:6f:70:65:33: bd:34:de:7e:03:f9:03:c3:51:1b:c4:6d:8f:56:9c:75:9b:ee: eb:89:f6:83:ce:d7:ff:0c:0d:ab:db:ba:92:bb:8b:af:bb:9b: b6:ad:1e:56:98:80:2f:5e:d8:87:7a:6e:eb:3f:7e:a7:b8:26: 09:40:04:81:f0:72:90:14:bc:54:33:3b:f6:51:81:8c:d5:7c: c1:45:b2:c1:56:1b:dd:cd:9a:46:25:08:34:84:ee:2e:66:27: 04:ae:28:0c:d8:2c:28:1b:c8:2a:30:0a:3a:b0:49:6f:e9:13: b1:4e:97:5c:43:85:d4:9b:8f:31:8b:00:21:4a:48:4f:fa:6b: ff:0d:45:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrwkUc/g2To+G3Cbn7lI/+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNTU0YWZlNjcyNzQ0NzQyYjRlMzUwMjdiNDAyZTg2MTNj MjAzNzcwHhcNMjUxMjE3MTAwMTUwWhcNMjUxMjE4MTAwMTUwWjAzMTEwLwYDVQQD EyhiOTk5NmU4MjI1MDJiNWY5N2NlNGZlYTdlNzI1OTAyZDNlNDViNGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrmRLVY831XV0KGrZFVfoiYfBu+C RFXvLnXwezB/gZO2Oz84TiwlcOaOujqnp0Oh8IUSzb6bfQD2+MTHn9Dzkm14sDT2 nx0ZanwPf5+Fyg4pFrbYS0G+SfNG8kw7Mn1D7wZv8jsa/m7WRfzPeo8D5KnB3OXU 8pPl1/uTE7Rkb4lLabdSeAQlO4/e7QNtkMxeEm/Ej2HWo1cq/2FpIpBTNCb/QA9m fOcNyib2Cd/VordKlD+emNYS1E2JLyqYD27DgeuQdFHPjY8PrHxFohcdRCBd9bU4 kfGO6NK65zEU0NIZGzG2pRsE6g+LKTXPyt15xpb3ZIlf4vY4pSxHOYDJrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLmZboIlArX5fOT+p+clkC0+RbTRMB8GA1UdIwQY MBaAFA9VSv5nJ0R0K041AntALoYTwgN3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDFWS19tY25SSFFyVGpVQ2UwQXVoaFBDQTNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yYzE5MzctOWQ5Yi00MzE1LWEzYzUt YzBhZTgwYjc0MmIwLzEvRDFWS19tY25SSFFyVGpVQ2UwQXVoaFBDQTNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8yYzE5MzctOWQ5Yi00MzE1LWEzYzUtYzBhZTgwYjc0MmIw LzEvRDFWS19tY25SSFFyVGpVQ2UwQXVoaFBDQTNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP76owBNC FlQpeC6uTQ0fE0u+fW3U6QnYRl/XaE6YqkvX516bXaXhPtroKHxiesEcYx+SEKS7 AlaQ5wRKo0Jtame+2+0q8LO9QTZDxIOc9iKVEzGRTPuZ/kh9Nnbrhb04NAk6Ltm0 F99xcbFFvySqrGt+bXsChwVI1lZvcGUzvTTefgP5A8NRG8Rtj1acdZvu64n2g87X /wwNq9u6kruLr7ubtq0eVpiAL17Yh3pu6z9+p7gmCUAEgfBykBS8VDM79lGBjNV8 wUWywVYb3c2aRiUINITuLmYnBK4oDNgsKBvIKjAKOrBJb+kTsU6XXEOF1JuPMYsA IUpIT/pr/w1FKA== -----END CERTIFICATE-----Generated at Wed Dec 17 13:47:52 2025 by rpki-client