This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft File: dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft (raw, json) Hash identifier: eA7zrOIDnRvFbabTjvBEtglQONDwZIBzzUBP4OKBwO8= Subject key identifier: 24:D2:62:8E:86:CF:28:28:F4:03:56:C1:EF:9A:16:84:A0:0C:07:49 Authority key identifier: 75:18:C2:27:3A:D7:43:64:64:9B:CB:2E:2D:34:FB:70:7F:5D:5B:94 Certificate issuer: /CN=7518c2273ad74364649bcb2e2d34fb707f5d5b94 Certificate serial: 019B59E46E8BD996F87214C8E980276A6CF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft Manifest number: 05AB Signing time: Fri 26 Dec 2025 09:01:41 +0000 Manifest this update: Fri 26 Dec 2025 09:01:41 +0000 Manifest next update: Sat 27 Dec 2025 09:01:41 +0000 Files and hashes: 1: dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl (hash: 5EQ4w4iZr5Hal7qRC0xeHg10ToebXDHv+xwxxmg1644=) 2: lEeX1Eg0Z-W1kOpICD-OcFxqe18.roa (hash: oHYZvay6jraEH9M8mxk8k8IOPDuHNAZIsTWqM0koag4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:6e:8b:d9:96:f8:72:14:c8:e9:80:27:6a:6c:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7518c2273ad74364649bcb2e2d34fb707f5d5b94 Validity Not Before: Dec 26 09:01:41 2025 GMT Not After : Dec 27 09:01:41 2025 GMT Subject: CN=24d2628e86cf2828f40356c1ef9a1684a00c0749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:26:77:1e:7c:f4:da:43:da:d7:a4:8e:2f:5f: 26:05:89:97:9f:30:e7:c6:86:a3:75:20:53:40:ea: b5:3d:1b:a5:17:65:62:1d:61:02:5d:40:0b:25:0c: 01:ac:c7:43:bc:e5:ea:21:f8:03:10:79:60:6a:17: 92:24:77:0b:a4:f6:a0:33:90:6f:fd:e3:05:9e:d7: 20:e2:66:f5:a7:11:a8:30:db:17:84:02:b6:3a:80: 3b:a4:41:d7:2a:8c:94:f4:87:4f:ff:45:e8:96:57: 49:14:97:ba:a4:7d:da:ea:69:cf:e8:1f:e0:6d:4b: d8:48:0e:e3:fb:ba:d1:f0:10:d9:34:91:31:e6:65: 2e:65:d2:3d:89:41:a2:a3:f5:35:a6:5e:31:d7:da: 4d:eb:76:62:4b:8e:be:3d:be:ee:74:f1:bc:9b:81: c3:52:23:b2:a2:26:47:01:e5:25:f9:d8:03:56:72: c1:42:c2:88:94:7c:d2:46:9d:98:10:ea:1d:25:3a: bb:01:db:8b:ba:e2:1a:98:32:35:81:76:c6:cb:d5: 78:2a:df:d8:f0:11:47:9b:77:69:5c:3a:44:b1:2e: 24:73:21:e1:5e:eb:e8:9f:18:fb:e6:93:3f:21:d5: 20:d3:27:69:70:b0:ae:fc:7c:46:89:17:b0:0e:89: e6:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:D2:62:8E:86:CF:28:28:F4:03:56:C1:EF:9A:16:84:A0:0C:07:49 X509v3 Authority Key Identifier: keyid:75:18:C2:27:3A:D7:43:64:64:9B:CB:2E:2D:34:FB:70:7F:5D:5B:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:60:ab:99:97:d3:06:50:cf:41:fe:94:cf:f9:61:09:31:5d: dc:e9:2b:34:e9:de:a1:16:3c:af:e2:87:53:60:c2:d8:bd:3f: e2:d2:a0:55:d5:c3:0a:70:59:43:85:4d:76:18:58:e8:56:89: 9a:f8:fa:57:60:fb:76:88:80:66:7c:d4:22:04:fd:eb:31:93: af:18:8b:6a:58:5b:6a:b1:1c:7a:e1:34:64:e0:72:69:ea:ef: 9e:23:b6:42:74:fd:5b:34:ff:38:f6:87:ca:04:c5:3f:cc:56: 53:b0:6c:a3:d4:dc:df:b6:8b:5d:f0:6a:58:92:30:a2:07:fa: ce:e8:5d:0a:2e:a2:82:53:07:37:c1:3b:86:d5:d7:be:88:40: 9d:96:ca:c0:60:e8:83:a8:79:76:fd:24:e7:ec:e0:62:5b:ec: 8e:f4:69:03:11:9c:52:6b:1e:70:f8:21:ea:0c:1e:09:c4:72: 19:c7:a2:e2:44:ff:34:fb:ac:5d:b0:04:ee:56:f2:69:05:7a: 12:e7:5e:85:49:23:d7:a9:66:73:6c:a5:9e:83:77:9a:40:fa: 1b:04:c9:23:0e:a5:f0:a5:7c:cc:40:78:ce:c6:6f:cf:5a:72: 56:00:e2:b3:30:07:c9:6f:e9:71:4a:b3:98:2e:97:1c:58:9a: 1b:c1:a9:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5G6L2Zb4chTI6YAnamz2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MThjMjI3M2FkNzQzNjQ2NDliY2IyZTJkMzRmYjcwN2Y1 ZDViOTQwHhcNMjUxMjI2MDkwMTQxWhcNMjUxMjI3MDkwMTQxWjAzMTEwLwYDVQQD EygyNGQyNjI4ZTg2Y2YyODI4ZjQwMzU2YzFlZjlhMTY4NGEwMGMwNzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyZ3Hnz02kPa16SOL18mBYmXnzDn xoajdSBTQOq1PRulF2ViHWECXUALJQwBrMdDvOXqIfgDEHlgaheSJHcLpPagM5Bv /eMFntcg4mb1pxGoMNsXhAK2OoA7pEHXKoyU9IdP/0XolldJFJe6pH3a6mnP6B/g bUvYSA7j+7rR8BDZNJEx5mUuZdI9iUGio/U1pl4x19pN63ZiS46+Pb7udPG8m4HD UiOyoiZHAeUl+dgDVnLBQsKIlHzSRp2YEOodJTq7AduLuuIamDI1gXbGy9V4Kt/Y 8BFHm3dpXDpEsS4kcyHhXuvonxj75pM/IdUg0ydpcLCu/HxGiRewDonmYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCTSYo6Gzygo9ANWwe+aFoSgDAdJMB8GA1UdIwQY MBaAFHUYwic610NkZJvLLi00+3B/XVuUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFJqQ0p6clhRMlJrbThzdUxUVDdjSDlkVzVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy80Y2NhNDgtMzE4OS00NDkxLWFlZGUt ZDNkMzBlYmMzNmFjLzEvZFJqQ0p6clhRMlJrbThzdUxUVDdjSDlkVzVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy80Y2NhNDgtMzE4OS00NDkxLWFlZGUtZDNkMzBlYmMzNmFj LzEvZFJqQ0p6clhRMlJrbThzdUxUVDdjSDlkVzVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjmCrmZfT BlDPQf6Uz/lhCTFd3OkrNOneoRY8r+KHU2DC2L0/4tKgVdXDCnBZQ4VNdhhY6FaJ mvj6V2D7doiAZnzUIgT96zGTrxiLalhbarEceuE0ZOByaervniO2QnT9WzT/OPaH ygTFP8xWU7Bso9Tc37aLXfBqWJIwogf6zuhdCi6iglMHN8E7htXXvohAnZbKwGDo g6h5dv0k5+zgYlvsjvRpAxGcUmsecPgh6gweCcRyGcei4kT/NPusXbAE7lbyaQV6 EudehUkj16lmc2ylnoN3mkD6GwTJIw6l8KV8zEB4zsZvz1pyVgDiszAHyW/pcUqz mC6XHFiaG8Gpcg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:45 2025 by rpki-client