This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft File: D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft (raw, json) Hash identifier: Hm9YI39nreQuxqRS1g1+cWK+GQG+3PCSWt4/kOCT+qA= Subject key identifier: 7D:36:67:34:0E:69:C5:00:6F:B9:22:B7:95:C6:24:16:10:B3:22:AE Authority key identifier: 0F:79:76:05:20:B7:C1:5C:2E:42:60:30:82:72:B8:49:F8:8E:D6:77 Certificate issuer: /CN=0f79760520b7c15c2e4260308272b849f88ed677 Certificate serial: 019B3CB5485A8E5E26DD75DF85157BCAB53F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D3l2BSC3wVwuQmAwgnK4SfiO1nc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 17:01:12 +0000 Manifest this update: Sat 20 Dec 2025 17:01:12 +0000 Manifest next update: Sun 21 Dec 2025 17:01:12 +0000 Files and hashes: 1: D3l2BSC3wVwuQmAwgnK4SfiO1nc.crl (hash: typz13hPsT6zAOyG1ukerV3lTW/qhTOopouWIQ57Y3M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft rsync://rpki.ripe.net/repository/DEFAULT/D3l2BSC3wVwuQmAwgnK4SfiO1nc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:48:5a:8e:5e:26:dd:75:df:85:15:7b:ca:b5:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f79760520b7c15c2e4260308272b849f88ed677 Validity Not Before: Dec 20 17:01:12 2025 GMT Not After : Dec 21 17:01:12 2025 GMT Subject: CN=7d3667340e69c5006fb922b795c6241610b322ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:56:8c:4c:36:30:2d:fe:ff:62:90:3d:cc:ae: 33:85:6d:87:2d:93:b3:f2:e1:5b:ca:f5:c1:24:05: 31:88:71:82:3b:17:b1:1d:dd:c5:7c:47:33:6e:a2: 86:0a:20:55:2a:49:46:6e:9c:81:2e:9c:48:8e:97: 91:d0:05:d7:1a:0a:68:02:5a:da:20:67:d5:d7:a6: 63:ee:26:f3:e7:09:e4:25:85:a1:bb:66:6c:44:27: 22:e0:ea:ec:c3:85:df:95:c2:ee:c4:66:6c:d4:55: db:81:5f:7e:11:71:0a:7c:67:f3:fd:2c:56:86:14: 4a:e1:98:64:dc:e5:92:84:f7:a4:9f:6f:9b:6c:71: 28:70:74:4b:78:81:ef:94:d1:08:e7:45:de:2a:d7: c1:52:c2:04:f6:e1:71:bd:53:52:02:08:8a:a0:5e: 04:87:60:ea:8b:bf:aa:30:49:cb:e9:5a:48:8b:07: 1d:f1:8d:a6:17:c3:ea:ba:b2:70:e9:ec:96:9f:7b: c9:2e:91:7c:d0:17:47:a3:81:9e:9d:4a:a0:ee:87: 15:42:e8:6c:37:29:80:2c:32:20:9f:e6:4d:91:e1: 75:25:55:2b:37:0b:87:3f:3d:49:88:5f:19:d2:d2: 98:33:83:49:40:51:bf:69:1e:57:1f:61:24:2b:5e: 69:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:36:67:34:0E:69:C5:00:6F:B9:22:B7:95:C6:24:16:10:B3:22:AE X509v3 Authority Key Identifier: keyid:0F:79:76:05:20:B7:C1:5C:2E:42:60:30:82:72:B8:49:F8:8E:D6:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D3l2BSC3wVwuQmAwgnK4SfiO1nc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f8474b-5aeb-4058-9f4e-0042425bab1a/1/D3l2BSC3wVwuQmAwgnK4SfiO1nc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:d4:8f:25:32:d7:31:40:6b:54:8f:1b:e7:77:7e:ac:35:60: dd:d1:69:30:69:7c:d3:2a:cf:0c:bf:36:79:ef:d8:4f:3b:ae: 8b:58:6e:5d:0e:39:75:9a:3a:fd:31:63:fc:29:87:5c:9d:da: da:9e:d7:37:a1:e2:50:44:35:33:db:f9:be:d3:f2:02:fd:86: 90:65:7d:cc:82:e5:35:99:41:d0:5a:e5:27:aa:56:cc:73:10: 27:8d:66:d5:25:79:fd:9e:20:01:91:e1:4d:7a:4a:06:e8:c0: 80:06:ec:42:e0:b2:0a:2b:3c:2e:77:ec:19:6f:da:07:58:1d: 18:73:75:0f:a4:9e:c9:03:81:2b:48:d8:72:78:d9:28:6e:a0: 35:1d:b1:7b:1c:1b:41:c4:a2:d8:3c:83:cc:6a:cc:5e:1f:25: c0:fe:1a:d4:0f:e2:37:8e:70:36:40:7e:86:b5:11:2e:f2:20: 93:33:0f:fe:fd:de:d2:36:cc:39:98:89:33:b3:ad:95:a1:21: da:b3:d4:14:e2:1e:f9:72:dd:f6:06:6c:ae:d8:b0:f9:9d:92: f4:72:0f:eb:e2:25:f1:e6:f8:3b:1a:8e:bf:16:40:27:a2:ca: b9:11:19:c2:de:69:05:81:70:10:39:0a:c0:88:4c:cf:4f:d3: b6:50:3d:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tUhajl4m3XXfhRV7yrU/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNzk3NjA1MjBiN2MxNWMyZTQyNjAzMDgyNzJiODQ5Zjg4 ZWQ2NzcwHhcNMjUxMjIwMTcwMTEyWhcNMjUxMjIxMTcwMTEyWjAzMTEwLwYDVQQD Eyg3ZDM2NjczNDBlNjljNTAwNmZiOTIyYjc5NWM2MjQxNjEwYjMyMmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVaMTDYwLf7/YpA9zK4zhW2HLZOz 8uFbyvXBJAUxiHGCOxexHd3FfEczbqKGCiBVKklGbpyBLpxIjpeR0AXXGgpoAlra IGfV16Zj7ibz5wnkJYWhu2ZsRCci4Orsw4XflcLuxGZs1FXbgV9+EXEKfGfz/SxW hhRK4Zhk3OWShPekn2+bbHEocHRLeIHvlNEI50XeKtfBUsIE9uFxvVNSAgiKoF4E h2Dqi7+qMEnL6VpIiwcd8Y2mF8PqurJw6eyWn3vJLpF80BdHo4GenUqg7ocVQuhs NymALDIgn+ZNkeF1JVUrNwuHPz1JiF8Z0tKYM4NJQFG/aR5XH2EkK15p7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH02ZzQOacUAb7kit5XGJBYQsyKuMB8GA1UdIwQY MBaAFA95dgUgt8FcLkJgMIJyuEn4jtZ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDNsMkJTQzN3Vnd1UW1Bd2duSzRTZmlPMW5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mODQ3NGItNWFlYi00MDU4LTlmNGUt MDA0MjQyNWJhYjFhLzEvRDNsMkJTQzN3Vnd1UW1Bd2duSzRTZmlPMW5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9mODQ3NGItNWFlYi00MDU4LTlmNGUtMDA0MjQyNWJhYjFh LzEvRDNsMkJTQzN3Vnd1UW1Bd2duSzRTZmlPMW5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiNSPJTLX MUBrVI8b53d+rDVg3dFpMGl80yrPDL82ee/YTzuui1huXQ45dZo6/TFj/CmHXJ3a 2p7XN6HiUEQ1M9v5vtPyAv2GkGV9zILlNZlB0FrlJ6pWzHMQJ41m1SV5/Z4gAZHh TXpKBujAgAbsQuCyCis8LnfsGW/aB1gdGHN1D6SeyQOBK0jYcnjZKG6gNR2xexwb QcSi2DyDzGrMXh8lwP4a1A/iN45wNkB+hrURLvIgkzMP/v3e0jbMOZiJM7OtlaEh 2rPUFOIe+XLd9gZsrtiw+Z2S9HIP6+Il8eb4OxqOvxZAJ6LKuREZwt5pBYFwEDkK wIhMz0/TtlA9YQ== -----END CERTIFICATE-----Generated at Sun Dec 21 00:32:22 2025 by rpki-client