This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.mft File: dM1ajbKkgrSTFrdXO4pPh09uuxU.mft (raw, json) Hash identifier: rBrIPZVyjnkZISJv58pTxTtYCPsBwUh7OFYD2qovjtI= Subject key identifier: F3:5D:B7:54:A1:38:4F:D0:A3:51:31:DB:CC:B7:3C:78:09:25:24:17 Authority key identifier: 74:CD:5A:8D:B2:A4:82:B4:93:16:B7:57:3B:8A:4F:87:4F:6E:BB:15 Certificate issuer: /CN=74cd5a8db2a482b49316b7573b8a4f874f6ebb15 Certificate serial: 019B217508839D9C0025D87908798F839F93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dM1ajbKkgrSTFrdXO4pPh09uuxU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.mft Manifest number: 1778 Signing time: Mon 15 Dec 2025 10:01:16 +0000 Manifest this update: Mon 15 Dec 2025 10:01:16 +0000 Manifest next update: Tue 16 Dec 2025 10:01:16 +0000 Files and hashes: 1: dM1ajbKkgrSTFrdXO4pPh09uuxU.crl (hash: i2HWrCbtbiL3dSaMwJ+Eo2GfQyilKspt7lB9J8ej1k0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.mft rsync://rpki.ripe.net/repository/DEFAULT/dM1ajbKkgrSTFrdXO4pPh09uuxU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:75:08:83:9d:9c:00:25:d8:79:08:79:8f:83:9f:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74cd5a8db2a482b49316b7573b8a4f874f6ebb15 Validity Not Before: Dec 15 10:01:16 2025 GMT Not After : Dec 16 10:01:16 2025 GMT Subject: CN=f35db754a1384fd0a35131dbccb73c7809252417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5d:67:90:57:f8:7c:39:a1:ce:c5:47:bb:3d: d9:1d:7a:e7:54:8e:e6:d5:94:30:e5:3c:21:68:46: 6c:57:c5:2e:cf:97:bc:19:8e:4a:f6:9a:ac:b5:bf: 9c:01:0c:77:fd:91:4a:ce:82:5a:29:bc:14:bd:bf: 9a:54:aa:ff:b4:ac:e7:7d:27:cd:68:20:f5:12:81: f2:61:a3:98:af:75:ca:04:ce:38:d9:57:27:2d:7e: 57:57:5c:f8:16:86:d8:cb:89:23:54:71:9f:bd:f0: 62:09:79:a3:3c:19:b2:e3:38:28:90:70:fd:bf:7d: 89:af:16:d0:bd:e9:b2:dc:87:43:45:be:d8:8d:c0: 9b:53:2a:d4:65:10:f9:d2:a8:2f:a4:94:fd:78:58: b4:48:6a:dd:84:40:e9:ff:68:e9:a6:a1:a4:cf:e0: 87:fa:2e:e3:c1:ef:26:3c:e7:bc:e4:39:29:84:3a: 12:90:e1:37:1f:4d:3d:50:bd:86:35:3b:7f:da:d8: 8e:01:41:2d:eb:73:c6:8e:0c:f9:e8:40:ca:ff:b6: f2:11:0f:f2:56:db:8e:7b:29:70:9e:c9:bc:b2:3d: fd:9d:e6:fa:0e:86:dd:97:56:7d:f2:83:b3:82:f9: 70:0f:65:f9:d5:ad:17:bd:c7:85:f8:60:30:4c:af: 49:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:5D:B7:54:A1:38:4F:D0:A3:51:31:DB:CC:B7:3C:78:09:25:24:17 X509v3 Authority Key Identifier: keyid:74:CD:5A:8D:B2:A4:82:B4:93:16:B7:57:3B:8A:4F:87:4F:6E:BB:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dM1ajbKkgrSTFrdXO4pPh09uuxU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/974816-f2e7-4f8a-86c9-f6f2c5850b51/1/dM1ajbKkgrSTFrdXO4pPh09uuxU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:c3:83:87:44:8a:c7:7b:0f:02:05:52:5b:47:fb:26:ae:11: 73:31:8b:38:a6:f7:f5:29:a5:40:aa:2e:63:4a:1b:ab:d3:7f: 6b:fc:a1:49:3d:3b:5f:76:25:73:86:3b:52:9e:e6:0e:02:09: 5e:9b:29:4c:61:b8:30:c8:72:d8:fb:9f:ea:88:5e:50:8c:f5: ed:fd:0a:e6:f7:f3:ac:a6:9e:b8:25:25:71:50:08:50:b3:78: 9a:53:3f:9d:be:be:e0:ce:61:4f:5b:c9:df:37:72:34:cb:08: aa:d7:a4:de:e6:fc:ef:fe:5f:b4:da:ef:ba:3b:94:c5:72:17: 28:da:7b:7a:a4:ca:04:57:ce:1f:3b:dc:78:f6:1a:43:cc:2d: f3:61:18:ae:2c:61:6f:9b:f7:24:62:e0:e9:f5:ec:90:7e:84: 11:dc:36:b2:ae:b5:2b:a0:7a:58:cb:f8:cf:f9:93:be:90:58: b8:30:b6:07:a7:57:5d:7e:23:ec:d4:36:01:f9:71:ae:58:e4: 92:97:3b:7d:d0:57:be:21:34:77:00:80:b1:2e:32:93:61:e2: 12:e2:11:af:d5:3b:53:bb:f0:f4:0e:49:8b:1f:e9:12:91:4a: 13:6b:e8:d5:9b:b2:e9:c9:36:ae:f3:a6:48:9d:88:91:8d:7d: 06:24:30:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdQiDnZwAJdh5CHmPg5+TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0Y2Q1YThkYjJhNDgyYjQ5MzE2Yjc1NzNiOGE0Zjg3NGY2 ZWJiMTUwHhcNMjUxMjE1MTAwMTE2WhcNMjUxMjE2MTAwMTE2WjAzMTEwLwYDVQQD EyhmMzVkYjc1NGExMzg0ZmQwYTM1MTMxZGJjY2I3M2M3ODA5MjUyNDE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2l1nkFf4fDmhzsVHuz3ZHXrnVI7m 1ZQw5TwhaEZsV8Uuz5e8GY5K9pqstb+cAQx3/ZFKzoJaKbwUvb+aVKr/tKznfSfN aCD1EoHyYaOYr3XKBM442VcnLX5XV1z4FobYy4kjVHGfvfBiCXmjPBmy4zgokHD9 v32JrxbQvemy3IdDRb7YjcCbUyrUZRD50qgvpJT9eFi0SGrdhEDp/2jppqGkz+CH +i7jwe8mPOe85DkphDoSkOE3H009UL2GNTt/2tiOAUEt63PGjgz56EDK/7byEQ/y VtuOeylwnsm8sj39neb6Dobdl1Z98oOzgvlwD2X51a0XvceF+GAwTK9JdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPNdt1ShOE/Qo1Ex28y3PHgJJSQXMB8GA1UdIwQY MBaAFHTNWo2ypIK0kxa3VzuKT4dPbrsVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE0xYWpiS2tnclNURnJkWE80cFBoMDl1dXhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85NzQ4MTYtZjJlNy00ZjhhLTg2Yzkt ZjZmMmM1ODUwYjUxLzEvZE0xYWpiS2tnclNURnJkWE80cFBoMDl1dXhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85NzQ4MTYtZjJlNy00ZjhhLTg2YzktZjZmMmM1ODUwYjUx LzEvZE0xYWpiS2tnclNURnJkWE80cFBoMDl1dXhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX8ODh0SK x3sPAgVSW0f7Jq4RczGLOKb39SmlQKouY0obq9N/a/yhST07X3Ylc4Y7Up7mDgIJ XpspTGG4MMhy2Puf6oheUIz17f0K5vfzrKaeuCUlcVAIULN4mlM/nb6+4M5hT1vJ 3zdyNMsIqtek3ub87/5ftNrvujuUxXIXKNp7eqTKBFfOHzvcePYaQ8wt82EYrixh b5v3JGLg6fXskH6EEdw2sq61K6B6WMv4z/mTvpBYuDC2B6dXXX4j7NQ2Aflxrljk kpc7fdBXviE0dwCAsS4yk2HiEuIRr9U7U7vw9A5Jix/pEpFKE2vo1Zuy6ck2rvOm SJ2IkY19BiQw6Q== -----END CERTIFICATE-----Generated at Mon Dec 15 15:32:34 2025 by rpki-client