This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft File: dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft (raw, json) Hash identifier: 5vjXzAv1LF0Y10uVr5cSbbwIfH5s1IQ0iA9cWAvh98U= Subject key identifier: CF:D0:D3:0D:C0:1C:B8:4B:4E:BF:1D:F0:A4:E5:0A:40:39:AF:16:FB Authority key identifier: 74:22:F9:85:CB:34:A0:3C:7C:55:81:64:2C:6D:6E:B4:32:C8:3E:94 Certificate issuer: /CN=7422f985cb34a03c7c5581642c6d6eb432c83e94 Certificate serial: 019B35327F580BA1EDA941D8F960BCB00D2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCL5hcs0oDx8VYFkLG1utDLIPpQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft Manifest number: 0F5B Signing time: Fri 19 Dec 2025 06:01:00 +0000 Manifest this update: Fri 19 Dec 2025 06:01:00 +0000 Manifest next update: Sat 20 Dec 2025 06:01:00 +0000 Files and hashes: 1: dCL5hcs0oDx8VYFkLG1utDLIPpQ.crl (hash: bUjzJKoGHJ8McMdB91R142bVIkRpktYplgezBVcrB/E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.crl rsync://rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft rsync://rpki.ripe.net/repository/DEFAULT/dCL5hcs0oDx8VYFkLG1utDLIPpQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:7f:58:0b:a1:ed:a9:41:d8:f9:60:bc:b0:0d:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7422f985cb34a03c7c5581642c6d6eb432c83e94 Validity Not Before: Dec 19 06:01:00 2025 GMT Not After : Dec 20 06:01:00 2025 GMT Subject: CN=cfd0d30dc01cb84b4ebf1df0a4e50a4039af16fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3c:3d:1d:17:38:e2:51:62:37:cd:43:f1:e1: b7:2f:07:49:a4:6b:b0:a6:5f:d4:f5:bf:04:42:2b: df:cb:c7:5d:b0:29:16:b2:63:58:54:18:46:d2:6a: f8:27:da:3c:de:00:15:29:b0:d1:85:cc:98:e1:38: ad:2f:da:a7:80:93:61:fa:cd:63:be:c2:2c:94:95: cc:d3:ca:f1:fe:e0:8b:1c:bf:38:12:cf:7c:17:24: dd:1b:09:00:eb:88:a1:22:ab:64:cd:11:43:77:d5: e1:24:36:dd:fe:33:3e:f8:aa:2b:d9:74:5f:5d:26: 0f:38:a0:ba:dc:c4:d2:7e:3a:78:66:9d:2c:2e:9c: 49:06:56:1b:ce:b9:1c:83:a2:60:d2:c5:ee:49:e4: cc:38:e8:33:dd:56:1b:94:d6:3b:d2:ab:22:d2:29: 64:83:f1:71:4d:9c:71:db:0b:5d:2f:0f:9e:89:94: 2e:f7:ce:49:f6:c5:d4:6c:40:76:d2:2c:57:89:f4: cb:cb:ab:2f:8a:4e:24:c5:3e:57:1a:43:90:48:00: 24:10:fa:3d:b1:91:8b:92:23:38:1e:fe:3b:fc:8e: 26:33:b4:8a:e9:18:d9:40:8c:37:c0:4b:d1:fa:66: 01:c3:76:56:62:8b:c5:91:d0:1e:bf:f6:a2:06:53: 6f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D0:D3:0D:C0:1C:B8:4B:4E:BF:1D:F0:A4:E5:0A:40:39:AF:16:FB X509v3 Authority Key Identifier: keyid:74:22:F9:85:CB:34:A0:3C:7C:55:81:64:2C:6D:6E:B4:32:C8:3E:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCL5hcs0oDx8VYFkLG1utDLIPpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:bd:e4:5d:43:4c:83:73:9d:53:e4:eb:95:06:af:c5:40:75: 92:24:57:8e:cb:b3:6b:27:8d:08:72:98:05:26:f0:6e:48:6c: ee:68:35:12:c6:54:ac:23:65:e2:01:08:92:e7:07:35:5d:ce: 94:08:57:db:67:b1:eb:a4:56:73:c7:dd:f6:03:56:50:4c:f3: 19:bb:49:69:51:52:41:48:54:8f:8b:96:4f:93:e0:d2:c3:c7: 76:6d:2d:ea:80:55:05:31:19:0f:de:e6:fb:82:6c:9f:c1:65: 51:78:9e:ad:cd:f3:bd:80:c8:c2:a3:82:14:7e:bb:a5:da:a1: 21:8a:95:0d:e3:67:b7:ba:99:c0:89:26:44:32:4b:9a:21:29: a7:47:2c:b4:37:8b:e8:a9:10:45:6b:e2:87:ba:43:9a:39:f9: 17:9a:89:49:78:50:19:7a:15:ff:77:b5:88:c3:3b:0a:c4:50: ee:35:d2:38:4f:89:bb:d1:79:3c:4a:ce:3b:9a:92:04:50:a9: 89:44:60:5c:c2:d6:2b:d9:6a:ae:99:f4:dd:37:e2:09:7a:16: b9:85:9e:ff:81:d7:47:45:fc:7c:f9:d5:3a:c8:7e:a2:16:bf: 51:20:be:9a:a6:b3:23:1a:3a:d3:14:6a:cd:fe:1b:4e:82:18: 39:5b:b8:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1Mn9YC6HtqUHY+WC8sA0qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0MjJmOTg1Y2IzNGEwM2M3YzU1ODE2NDJjNmQ2ZWI0MzJj ODNlOTQwHhcNMjUxMjE5MDYwMTAwWhcNMjUxMjIwMDYwMTAwWjAzMTEwLwYDVQQD EyhjZmQwZDMwZGMwMWNiODRiNGViZjFkZjBhNGU1MGE0MDM5YWYxNmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzw9HRc44lFiN81D8eG3LwdJpGuw pl/U9b8EQivfy8ddsCkWsmNYVBhG0mr4J9o83gAVKbDRhcyY4TitL9qngJNh+s1j vsIslJXM08rx/uCLHL84Es98FyTdGwkA64ihIqtkzRFDd9XhJDbd/jM++Kor2XRf XSYPOKC63MTSfjp4Zp0sLpxJBlYbzrkcg6Jg0sXuSeTMOOgz3VYblNY70qsi0ilk g/FxTZxx2wtdLw+eiZQu985J9sXUbEB20ixXifTLy6svik4kxT5XGkOQSAAkEPo9 sZGLkiM4Hv47/I4mM7SK6RjZQIw3wEvR+mYBw3ZWYovFkdAev/aiBlNvGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM/Q0w3AHLhLTr8d8KTlCkA5rxb7MB8GA1UdIwQY MBaAFHQi+YXLNKA8fFWBZCxtbrQyyD6UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZENMNWhjczBvRHg4VllGa0xHMXV0RExJUHBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9jNDllYzItMzdkYS00MWE5LTk2ZmIt NTE0MWZhMzkwODBhLzEvZENMNWhjczBvRHg4VllGa0xHMXV0RExJUHBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9jNDllYzItMzdkYS00MWE5LTk2ZmItNTE0MWZhMzkwODBh LzEvZENMNWhjczBvRHg4VllGa0xHMXV0RExJUHBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi73kXUNM g3OdU+TrlQavxUB1kiRXjsuzayeNCHKYBSbwbkhs7mg1EsZUrCNl4gEIkucHNV3O lAhX22ex66RWc8fd9gNWUEzzGbtJaVFSQUhUj4uWT5Pg0sPHdm0t6oBVBTEZD97m +4Jsn8FlUXierc3zvYDIwqOCFH67pdqhIYqVDeNnt7qZwIkmRDJLmiEpp0cstDeL 6KkQRWvih7pDmjn5F5qJSXhQGXoV/3e1iMM7CsRQ7jXSOE+Ju9F5PErOO5qSBFCp iURgXMLWK9lqrpn03TfiCXoWuYWe/4HXR0X8fPnVOsh+oha/USC+mqazIxo60xRq zf4bToIYOVu4vQ== -----END CERTIFICATE-----Generated at Fri Dec 19 10:37:30 2025 by rpki-client