This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft File: fM2Lj3l51soXEsHVCkDU5VXJThM.mft (raw, json) Hash identifier: S2y2bRVAz2NhR0J0vfOTdFJBGosJhzOeo1SsGi+BWOc= Subject key identifier: D0:17:59:B6:81:AD:EF:90:24:3C:54:3B:F0:17:51:64:8E:F8:CF:D1 Authority key identifier: 7C:CD:8B:8F:79:79:D6:CA:17:12:C1:D5:0A:40:D4:E5:55:C9:4E:13 Certificate issuer: /CN=7ccd8b8f7979d6ca1712c1d50a40d4e555c94e13 Certificate serial: 019B59E45BC52E5E4E5E164EB6AA6E782747 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft Manifest number: 0B2A Signing time: Fri 26 Dec 2025 09:01:36 +0000 Manifest this update: Fri 26 Dec 2025 09:01:36 +0000 Manifest next update: Sat 27 Dec 2025 09:01:36 +0000 Files and hashes: 1: fM2Lj3l51soXEsHVCkDU5VXJThM.crl (hash: eYHrk0Pu/s/XeEjFv64/+9rO/xMEmx7DCD85QsqA7aE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.crl rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:5b:c5:2e:5e:4e:5e:16:4e:b6:aa:6e:78:27:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ccd8b8f7979d6ca1712c1d50a40d4e555c94e13 Validity Not Before: Dec 26 09:01:36 2025 GMT Not After : Dec 27 09:01:36 2025 GMT Subject: CN=d01759b681adef90243c543bf01751648ef8cfd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c2:08:50:58:17:a4:dc:1f:7d:9a:6b:9e:73: 92:44:9f:db:90:dc:5b:08:fc:c7:34:54:75:26:69: ed:7d:0d:4c:2d:22:9a:ae:61:af:df:d1:cc:72:31: 2c:af:94:27:83:95:2c:47:9e:65:fb:94:28:93:f9: 0e:8f:20:f0:6b:15:9e:d6:9f:e5:ef:f3:39:df:01: ac:a4:5d:52:4b:3d:62:0d:72:6d:c6:6b:a0:40:21: 4a:42:6e:3c:ad:63:5a:69:c4:02:d1:95:07:56:71: 29:46:06:ee:f3:5c:57:58:91:2f:cc:d6:ad:00:63: bc:23:aa:c9:d2:a3:ef:49:ac:56:07:4f:7a:41:4d: e2:e9:1d:b8:05:98:b9:34:22:f0:1c:c7:43:67:2f: 24:fe:4c:ef:e3:a8:e5:26:cb:90:7b:ee:46:ff:28: 54:31:cf:c4:6d:f7:0d:04:1e:fd:4c:29:d6:32:7b: 09:4e:44:01:c0:00:de:0f:c3:bf:bd:00:5b:12:75: de:3a:ca:14:89:ee:79:f8:9e:59:fd:06:a4:1c:3f: 18:e2:18:c4:8b:86:ee:18:ad:23:bc:96:7f:a2:06: cc:3f:d1:a9:39:af:a1:4a:fe:d6:57:7c:e5:4d:e1: 03:bd:61:5c:77:e2:7d:5b:3e:51:ae:59:a4:64:c2: ce:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:17:59:B6:81:AD:EF:90:24:3C:54:3B:F0:17:51:64:8E:F8:CF:D1 X509v3 Authority Key Identifier: keyid:7C:CD:8B:8F:79:79:D6:CA:17:12:C1:D5:0A:40:D4:E5:55:C9:4E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:95:f9:83:fb:68:20:c0:24:49:a0:09:b0:98:d0:e9:73:01: 6b:9a:10:dd:a8:d2:e2:8d:54:84:85:ef:0f:1c:9e:18:da:ee: 3b:72:49:f7:bb:5a:95:63:ac:a7:95:5d:29:b7:fd:25:85:57: 95:df:7a:fc:d3:fa:54:f5:e5:cc:d7:92:09:a5:31:a3:89:88: e3:b1:96:8e:49:c0:85:b3:76:e1:e2:bf:01:8b:60:19:bc:eb: d2:ad:74:79:dd:77:d4:20:58:e2:3a:c2:43:31:a5:de:cc:07: 2a:58:48:49:d7:b3:32:aa:20:17:1a:f3:3f:5d:88:67:38:7c: 03:c2:1a:03:19:12:e9:2b:d0:9a:27:71:9f:d7:03:ea:9d:d6: ee:84:5a:d3:a3:e3:c1:b7:e8:53:86:8b:50:7c:7e:bb:cc:b7: 63:69:ab:95:6b:de:ac:67:f0:57:7b:72:9f:bb:17:84:cc:53: 89:0f:19:52:48:6a:ef:49:8d:1a:08:8f:bc:0a:68:7b:43:d0: 9e:18:dd:ef:ff:ad:1e:15:c4:46:42:40:b5:5c:66:30:fe:5a: 74:22:b7:e3:f5:a1:cb:4a:10:7f:c5:97:37:21:30:19:dc:85: f0:de:b6:c9:09:73:01:55:8d:73:4a:c5:6e:68:97:de:31:83: e7:ef:c2:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5FvFLl5OXhZOtqpueCdHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjY2Q4YjhmNzk3OWQ2Y2ExNzEyYzFkNTBhNDBkNGU1NTVj OTRlMTMwHhcNMjUxMjI2MDkwMTM2WhcNMjUxMjI3MDkwMTM2WjAzMTEwLwYDVQQD EyhkMDE3NTliNjgxYWRlZjkwMjQzYzU0M2JmMDE3NTE2NDhlZjhjZmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28IIUFgXpNwffZprnnOSRJ/bkNxb CPzHNFR1JmntfQ1MLSKarmGv39HMcjEsr5Qng5UsR55l+5Qok/kOjyDwaxWe1p/l 7/M53wGspF1SSz1iDXJtxmugQCFKQm48rWNaacQC0ZUHVnEpRgbu81xXWJEvzNat AGO8I6rJ0qPvSaxWB096QU3i6R24BZi5NCLwHMdDZy8k/kzv46jlJsuQe+5G/yhU Mc/EbfcNBB79TCnWMnsJTkQBwADeD8O/vQBbEnXeOsoUie55+J5Z/QakHD8Y4hjE i4buGK0jvJZ/ogbMP9GpOa+hSv7WV3zlTeEDvWFcd+J9Wz5RrlmkZMLO9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNAXWbaBre+QJDxUO/AXUWSO+M/RMB8GA1UdIwQY MBaAFHzNi495edbKFxLB1QpA1OVVyU4TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZk0yTGozbDUxc29YRXNIVkNrRFU1VlhKVGhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS84MTE1NmMtYjgxNC00OGNmLWEwYzMt Y2FiNzg2MDc3ZTgzLzEvZk0yTGozbDUxc29YRXNIVkNrRFU1VlhKVGhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS84MTE1NmMtYjgxNC00OGNmLWEwYzMtY2FiNzg2MDc3ZTgz LzEvZk0yTGozbDUxc29YRXNIVkNrRFU1VlhKVGhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIJX5g/to IMAkSaAJsJjQ6XMBa5oQ3ajS4o1UhIXvDxyeGNruO3JJ97talWOsp5VdKbf9JYVX ld96/NP6VPXlzNeSCaUxo4mI47GWjknAhbN24eK/AYtgGbzr0q10ed131CBY4jrC QzGl3swHKlhISdezMqogFxrzP12IZzh8A8IaAxkS6SvQmidxn9cD6p3W7oRa06Pj wbfoU4aLUHx+u8y3Y2mrlWverGfwV3tyn7sXhMxTiQ8ZUkhq70mNGgiPvApoe0PQ nhjd7/+tHhXERkJAtVxmMP5adCK34/Why0oQf8WXNyEwGdyF8N62yQlzAVWNc0rF bmiX3jGD5+/CQA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:08:52 2025 by rpki-client