This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft File: d2ijHlyKWogiWYmhuu9KOBM4YBo.mft (raw, json) Hash identifier: em0yKIBKekQwDidjpxXiTk7HfLYTY9vKH097CvkKudc= Subject key identifier: B3:F4:23:83:C6:B2:75:4D:61:3C:5D:B0:7B:00:34:9B:BE:44:2C:BB Authority key identifier: 77:68:A3:1E:5C:8A:5A:88:22:59:89:A1:BA:EF:4A:38:13:38:60:1A Certificate issuer: /CN=7768a31e5c8a5a88225989a1baef4a381338601a Certificate serial: 019B5A514B72DC4A5E0C0E4A496E707DE586 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 11:00:35 +0000 Manifest this update: Fri 26 Dec 2025 11:00:35 +0000 Manifest next update: Sat 27 Dec 2025 11:00:35 +0000 Files and hashes: 1: 1-Q1JJEM-283CkQsyWnWZizkRRH0.roa (hash: pMkrNzbMgj6JidKdCAH0olpZAepxai3+rIJ34FZ4TEQ=) 2: d2ijHlyKWogiWYmhuu9KOBM4YBo.crl (hash: DRagFq53wfyqQpIgEWFilp3nU/O8wF41W5AOUbudvyo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.crl rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:4b:72:dc:4a:5e:0c:0e:4a:49:6e:70:7d:e5:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7768a31e5c8a5a88225989a1baef4a381338601a Validity Not Before: Dec 26 11:00:35 2025 GMT Not After : Dec 27 11:00:35 2025 GMT Subject: CN=b3f42383c6b2754d613c5db07b00349bbe442cbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:88:3a:21:1d:64:4d:da:4d:e1:84:8c:95:59: d0:84:46:13:37:89:d1:6c:79:12:d7:71:cd:19:da: 77:e0:90:e8:7d:b6:9d:ea:4c:27:85:81:e8:4d:33: 39:a3:49:b7:cf:01:44:ef:e6:56:ad:5a:5a:f7:3f: f8:43:2d:d3:bf:12:c8:e5:f9:fb:77:e0:b6:fd:13: 76:7b:38:d8:55:ee:b6:c2:1c:15:fd:a6:22:50:01: 26:25:e7:55:c8:f5:a9:18:6b:77:8c:9f:a4:ee:2e: 29:e5:d0:64:a5:7f:3b:fe:ed:e9:57:c1:73:0c:9d: cb:07:96:0e:39:13:bb:72:fe:ae:5b:56:d5:6d:e8: 90:ba:5f:ae:e5:7e:fa:a9:42:41:e0:22:01:f1:7c: e9:84:34:1f:63:a1:5f:e0:07:4f:08:f7:f3:3a:79: ac:bd:9f:97:84:2b:fe:4e:15:11:af:8a:5d:9e:70: ec:9a:b6:be:09:e8:e2:e4:47:f6:d9:71:f6:76:6e: ce:7a:3a:7c:9f:0b:b8:44:95:94:6f:04:84:2a:8f: eb:07:fa:83:e0:c7:00:59:46:ae:92:40:b8:a8:6d: 1f:e1:43:9c:47:73:5a:77:62:c4:55:a3:fa:4c:e0: 34:9c:a7:00:c0:b2:db:e3:c6:da:7d:4f:75:61:ac: 4d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F4:23:83:C6:B2:75:4D:61:3C:5D:B0:7B:00:34:9B:BE:44:2C:BB X509v3 Authority Key Identifier: keyid:77:68:A3:1E:5C:8A:5A:88:22:59:89:A1:BA:EF:4A:38:13:38:60:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:64:ad:3c:c1:74:a6:7d:f4:e9:f4:95:78:73:00:09:3f:14: 19:2c:30:45:36:97:83:05:99:dd:55:6f:4d:bd:56:b8:33:26: e0:1c:98:eb:4b:6c:52:04:7d:0c:2a:96:95:69:81:1e:96:a3: be:c4:85:85:cd:cc:ab:f1:ed:d4:21:dd:33:21:45:d1:8c:3f: ce:59:49:bd:73:14:4a:a8:a7:a7:d2:2c:6d:b2:b3:0e:a7:d6: 05:04:2f:cd:73:a1:68:0e:7e:e5:46:e4:67:c8:1a:6c:91:c6: 57:10:c9:61:ea:fa:af:21:32:08:76:ac:29:e2:d3:64:cb:60: 78:65:69:3e:15:ee:e0:73:ae:ac:c5:f3:0a:d7:67:c3:26:46: e4:77:ba:e8:6b:34:52:b3:17:78:41:b9:b0:a0:b9:69:b5:d3: bd:dc:90:cb:0e:47:a7:2c:60:90:7c:a1:9c:e8:47:28:d6:7b: 60:74:b9:60:7a:19:4e:12:ee:48:c0:68:5d:c9:30:7b:bc:36: c3:0d:90:74:4a:ee:11:d5:ce:0f:61:bb:f2:0a:5a:c4:33:ae: 73:32:12:09:97:4f:88:9f:3a:44:a9:e6:7a:c7:ae:d0:e2:6f: 5d:0c:3b:69:50:07:3a:f6:6e:25:c6:2b:16:f3:e9:b8:88:2c: bc:a5:9a:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUUty3EpeDA5KSW5wfeWGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3NjhhMzFlNWM4YTVhODgyMjU5ODlhMWJhZWY0YTM4MTMz ODYwMWEwHhcNMjUxMjI2MTEwMDM1WhcNMjUxMjI3MTEwMDM1WjAzMTEwLwYDVQQD EyhiM2Y0MjM4M2M2YjI3NTRkNjEzYzVkYjA3YjAwMzQ5YmJlNDQyY2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIg6IR1kTdpN4YSMlVnQhEYTN4nR bHkS13HNGdp34JDofbad6kwnhYHoTTM5o0m3zwFE7+ZWrVpa9z/4Qy3TvxLI5fn7 d+C2/RN2ezjYVe62whwV/aYiUAEmJedVyPWpGGt3jJ+k7i4p5dBkpX87/u3pV8Fz DJ3LB5YOORO7cv6uW1bVbeiQul+u5X76qUJB4CIB8XzphDQfY6Ff4AdPCPfzOnms vZ+XhCv+ThURr4pdnnDsmra+Ceji5Ef22XH2dm7Oejp8nwu4RJWUbwSEKo/rB/qD 4McAWUaukkC4qG0f4UOcR3Nad2LEVaP6TOA0nKcAwLLb48bafU91YaxNZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLP0I4PGsnVNYTxdsHsANJu+RCy7MB8GA1UdIwQY MBaAFHdoox5cilqIIlmJobrvSjgTOGAaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDJpakhseUtXb2dpV1ltaHV1OUtPQk00WUJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9lMzA1MGUtOTk5NC00Yjk2LWJjNzkt NzY2ZWFkN2U2NTEzLzEvZDJpakhseUtXb2dpV1ltaHV1OUtPQk00WUJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9lMzA1MGUtOTk5NC00Yjk2LWJjNzktNzY2ZWFkN2U2NTEz LzEvZDJpakhseUtXb2dpV1ltaHV1OUtPQk00WUJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARWStPMF0 pn306fSVeHMACT8UGSwwRTaXgwWZ3VVvTb1WuDMm4ByY60tsUgR9DCqWlWmBHpaj vsSFhc3Mq/Ht1CHdMyFF0Yw/zllJvXMUSqinp9IsbbKzDqfWBQQvzXOhaA5+5Ubk Z8gabJHGVxDJYer6ryEyCHasKeLTZMtgeGVpPhXu4HOurMXzCtdnwyZG5He66Gs0 UrMXeEG5sKC5abXTvdyQyw5HpyxgkHyhnOhHKNZ7YHS5YHoZThLuSMBoXckwe7w2 ww2QdEruEdXOD2G78gpaxDOuczISCZdPiJ86RKnmeseu0OJvXQw7aVAHOvZuJcYr FvPpuIgsvKWagg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:06 2025 by rpki-client