This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.mft File: d7tRRrULW8gaNXR6K75lKqC3Fnw.mft (raw, json) Hash identifier: U+XVu65xreyLmDJfF2DfUSCOwXCUJAHr1d/h9YEgBpk= Subject key identifier: D6:2F:C3:FC:D6:8C:85:EE:50:0C:61:FE:F1:C0:DE:86:56:49:00:6B Authority key identifier: 77:BB:51:46:B5:0B:5B:C8:1A:35:74:7A:2B:BE:65:2A:A0:B7:16:7C Certificate issuer: /CN=77bb5146b50b5bc81a35747a2bbe652aa0b7167c Certificate serial: 019B33B1D697B9F7FF77D410C575F18979FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7tRRrULW8gaNXR6K75lKqC3Fnw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.mft Manifest number: 1428 Signing time: Thu 18 Dec 2025 23:00:51 +0000 Manifest this update: Thu 18 Dec 2025 23:00:51 +0000 Manifest next update: Fri 19 Dec 2025 23:00:51 +0000 Files and hashes: 1: d7tRRrULW8gaNXR6K75lKqC3Fnw.crl (hash: E+fniuUjd4w+HI1chRaCC3UN4KRR23Z6KB90VSujdmo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.crl rsync://rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.mft rsync://rpki.ripe.net/repository/DEFAULT/d7tRRrULW8gaNXR6K75lKqC3Fnw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 23:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b1:d6:97:b9:f7:ff:77:d4:10:c5:75:f1:89:79:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77bb5146b50b5bc81a35747a2bbe652aa0b7167c Validity Not Before: Dec 18 23:00:51 2025 GMT Not After : Dec 19 23:00:51 2025 GMT Subject: CN=d62fc3fcd68c85ee500c61fef1c0de865649006b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:db:58:38:fb:82:e2:e6:dd:a1:70:a9:87:46: bc:2e:6a:30:85:b1:9a:02:0b:88:00:be:9c:8f:dd: 60:10:0b:90:74:9a:a2:36:b0:93:55:33:be:02:1d: fa:cc:a3:b8:af:c2:a4:d1:06:3b:1f:bc:8d:1c:d3: f5:23:49:16:7f:0d:d8:8b:3c:4d:bc:64:98:00:66: a8:63:61:a9:85:eb:af:f5:17:68:46:d0:70:49:83: a8:1d:77:bc:d7:02:e3:46:b8:da:69:0d:5f:c9:81: 93:17:3f:bc:a5:68:1b:ce:d3:24:1f:74:f7:7f:e6: 4b:3c:b7:13:99:2e:a7:59:ab:b0:53:96:89:a6:51: 62:82:86:f6:89:dc:81:13:a3:9f:e5:88:c5:3f:77: 6b:9a:13:a3:9e:d6:e1:27:ba:da:64:06:a2:cc:76: 7c:e9:f7:e7:ee:58:1d:3f:1c:38:22:78:82:c4:c9: 96:08:27:28:1c:0a:59:1f:44:38:0e:62:73:9c:28: dd:5e:e4:45:76:3c:01:15:30:47:7d:1f:13:4e:aa: 03:9c:41:cc:fc:e0:27:f0:25:cf:39:10:be:a5:b9: 6e:ac:5c:d6:84:6a:51:f0:20:e4:10:17:6e:ed:f1: cb:24:36:45:d6:b8:68:c4:02:b9:37:59:69:96:5c: c1:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:2F:C3:FC:D6:8C:85:EE:50:0C:61:FE:F1:C0:DE:86:56:49:00:6B X509v3 Authority Key Identifier: keyid:77:BB:51:46:B5:0B:5B:C8:1A:35:74:7A:2B:BE:65:2A:A0:B7:16:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7tRRrULW8gaNXR6K75lKqC3Fnw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6199d4-3261-4e0a-ab46-f087e4f85e50/1/d7tRRrULW8gaNXR6K75lKqC3Fnw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:01:14:64:fd:44:da:4d:42:a4:3a:d2:f2:71:7a:6f:30:20: 28:5d:8d:71:d7:0b:a9:f5:55:fd:86:c1:18:d0:5f:3d:cc:b0: 24:3f:8a:85:3a:57:dc:cd:56:61:7f:02:92:18:4a:20:de:45: 76:ef:25:db:ad:fb:9c:79:73:54:1b:85:e1:cc:a3:8d:54:ac: 07:66:db:df:06:77:5c:b7:7e:31:56:3d:65:46:4c:e8:f0:65: 07:1d:ea:8d:f2:b0:97:ed:fe:fc:38:ce:5e:b8:0b:d3:ee:b9: 54:a3:3b:bf:c8:89:78:80:9c:7e:85:cf:87:37:00:11:3a:c2: 64:bc:28:e7:10:75:12:44:57:c1:95:75:6c:de:ac:4d:7a:2b: 7e:0f:b6:23:7a:7c:07:07:12:74:cf:36:37:97:03:d1:cd:a2: 7c:60:f5:7b:4d:87:f2:74:9f:d4:ec:6d:84:71:5b:bc:ad:69: 7d:aa:32:40:b8:43:bc:8c:cf:2a:57:b3:6b:31:ac:e8:f2:5b: 06:85:22:c6:59:26:89:38:c2:48:65:85:9b:70:9a:75:66:23: c3:76:6a:b8:9b:06:ed:d0:13:d5:6e:ba:1a:f3:c5:0b:ae:1a: 6f:78:47:2a:5b:f3:6c:a6:9a:38:10:4b:1b:05:f6:9a:39:d2: f5:83:ce:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsdaXuff/d9QQxXXxiXn8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YmI1MTQ2YjUwYjViYzgxYTM1NzQ3YTJiYmU2NTJhYTBi NzE2N2MwHhcNMjUxMjE4MjMwMDUxWhcNMjUxMjE5MjMwMDUxWjAzMTEwLwYDVQQD EyhkNjJmYzNmY2Q2OGM4NWVlNTAwYzYxZmVmMWMwZGU4NjU2NDkwMDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3dtYOPuC4ubdoXCph0a8LmowhbGa AguIAL6cj91gEAuQdJqiNrCTVTO+Ah36zKO4r8Kk0QY7H7yNHNP1I0kWfw3YizxN vGSYAGaoY2Gpheuv9RdoRtBwSYOoHXe81wLjRrjaaQ1fyYGTFz+8pWgbztMkH3T3 f+ZLPLcTmS6nWauwU5aJplFigob2idyBE6Of5YjFP3drmhOjntbhJ7raZAaizHZ8 6ffn7lgdPxw4IniCxMmWCCcoHApZH0Q4DmJznCjdXuRFdjwBFTBHfR8TTqoDnEHM /OAn8CXPORC+pblurFzWhGpR8CDkEBdu7fHLJDZF1rhoxAK5N1lpllzBqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNYvw/zWjIXuUAxh/vHA3oZWSQBrMB8GA1UdIwQY MBaAFHe7UUa1C1vIGjV0eiu+ZSqgtxZ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDd0UlJyVUxXOGdhTlhSNks3NWxLcUMzRm53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi82MTk5ZDQtMzI2MS00ZTBhLWFiNDYt ZjA4N2U0Zjg1ZTUwLzEvZDd0UlJyVUxXOGdhTlhSNks3NWxLcUMzRm53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi82MTk5ZDQtMzI2MS00ZTBhLWFiNDYtZjA4N2U0Zjg1ZTUw LzEvZDd0UlJyVUxXOGdhTlhSNks3NWxLcUMzRm53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoAEUZP1E 2k1CpDrS8nF6bzAgKF2NcdcLqfVV/YbBGNBfPcywJD+KhTpX3M1WYX8CkhhKIN5F du8l2637nHlzVBuF4cyjjVSsB2bb3wZ3XLd+MVY9ZUZM6PBlBx3qjfKwl+3+/DjO XrgL0+65VKM7v8iJeICcfoXPhzcAETrCZLwo5xB1EkRXwZV1bN6sTXorfg+2I3p8 BwcSdM82N5cD0c2ifGD1e02H8nSf1OxthHFbvK1pfaoyQLhDvIzPKlezazGs6PJb BoUixlkmiTjCSGWFm3CadWYjw3ZquJsG7dAT1W66GvPFC64ab3hHKlvzbKaaOBBL GwX2mjnS9YPO0g== -----END CERTIFICATE-----Generated at Fri Dec 19 09:15:46 2025 by rpki-client