This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft File: RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft (raw, json) Hash identifier: w8UC3f0O5Vxa4f1DcMhARGjc3juiOVZa1Ok6DM8DIxU= Subject key identifier: 3B:7E:F0:17:7F:41:9D:65:61:84:70:B4:0E:FA:39:FA:F7:37:F9:FD Authority key identifier: 44:32:F6:1B:BD:3F:D1:1D:7F:AC:BB:15:43:A7:51:A6:5A:3F:64:C3 Certificate issuer: /CN=4432f61bbd3fd11d7facbb1543a751a65a3f64c3 Certificate serial: 019B10B823F6D581D001447E9E1BDBF6810E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft Manifest number: 1770 Signing time: Fri 12 Dec 2025 04:01:01 +0000 Manifest this update: Fri 12 Dec 2025 04:01:01 +0000 Manifest next update: Sat 13 Dec 2025 04:01:01 +0000 Files and hashes: 1: 7pJi6mSeC7Mrh9AG1jBKFX0rR-0.roa (hash: b11wVnyFk1XxJZbXy67FWmoxGHyh6LyfdFAUoV7JdAI=) 2: RDL2G70_0R1_rLsVQ6dRplo_ZMM.crl (hash: eNvQ5YyYav0VQXoxU2RnaZEilwUWriXc+P16AJsblQ8=) 3: vgV_HmZnBn6siqRpblhJDHolxhY.roa (hash: CU3IQ42U8bx3rzB6RefYOwaftXWSsseBjQQDCbcW70Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 04:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:b8:23:f6:d5:81:d0:01:44:7e:9e:1b:db:f6:81:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4432f61bbd3fd11d7facbb1543a751a65a3f64c3 Validity Not Before: Dec 12 04:01:01 2025 GMT Not After : Dec 13 04:01:01 2025 GMT Subject: CN=3b7ef0177f419d65618470b40efa39faf737f9fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:41:46:30:4e:e3:22:79:6f:a3:3d:57:36:6c: 30:e2:78:ac:10:60:24:61:0a:a2:7e:cb:c3:7b:69: 8c:40:5c:e5:1f:35:4f:71:11:89:8a:9a:e0:26:f5: da:42:e1:9e:9a:35:0b:f6:b4:60:3c:3c:11:1f:aa: d0:78:2f:d2:1d:d3:86:57:1b:1b:1b:75:fb:94:4f: 55:e2:f9:44:cc:a9:58:63:ba:ec:e3:17:6f:4e:fb: f4:e9:94:63:59:c0:7d:81:e0:fb:30:16:0b:5b:72: 9f:90:23:13:26:f6:9c:51:95:22:ef:0f:a6:7a:a5: 32:84:da:15:56:3f:be:d7:b7:fa:6a:42:b8:3c:30: d3:6e:3a:07:2c:0f:54:57:fb:3a:af:d6:e6:36:c8: bc:55:04:32:63:23:de:37:eb:8c:7e:d1:b1:a1:5a: a3:cd:e7:ba:08:d2:d9:55:46:6d:66:21:bc:00:c8: 50:bc:ee:b6:de:ff:ea:f5:c1:4f:45:cd:97:5e:57: 4a:00:a9:44:b2:88:a7:a5:68:fa:eb:2b:61:34:f9: e7:16:e3:32:1a:c1:6a:9f:44:db:11:48:4d:11:36: 40:0d:4e:d6:95:23:93:97:da:5c:d4:96:c9:23:f9: ed:f4:07:10:a5:b2:bb:6f:47:ea:5d:d7:06:5b:e5: 5b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:7E:F0:17:7F:41:9D:65:61:84:70:B4:0E:FA:39:FA:F7:37:F9:FD X509v3 Authority Key Identifier: keyid:44:32:F6:1B:BD:3F:D1:1D:7F:AC:BB:15:43:A7:51:A6:5A:3F:64:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:6f:5a:5d:fa:d7:a7:f1:20:b7:27:b1:4d:cc:e1:16:55:b8: 8a:b6:66:04:23:f8:b4:57:38:7a:36:14:4c:25:9c:61:1a:ac: b6:2a:85:ed:ff:74:d3:36:59:ed:d7:62:04:33:cc:09:88:81: 49:bc:3b:c6:21:3f:cf:6c:0d:71:08:96:05:2a:4a:41:cf:1c: 0a:e7:e6:7e:05:8c:07:2b:cd:4a:9b:45:f6:05:34:b6:9c:92: f5:00:47:de:02:69:8b:c6:86:b9:32:94:a8:ea:83:ce:86:0e: 9c:93:40:8e:4e:43:c4:05:57:cc:20:ec:0f:e2:b8:4a:c0:c3: 1c:50:86:3e:f9:31:c1:11:c5:85:cb:54:a7:c3:1d:77:59:db: 65:24:0d:4c:4d:ce:67:39:0d:d0:fa:f7:66:46:94:5b:54:a4: ad:86:c2:a1:f7:74:3b:5e:a4:db:56:5b:a6:b8:4e:e0:b3:c2: 82:60:d1:f4:ae:bb:e2:a8:80:bf:f0:e9:05:03:09:71:83:d7: 69:6b:a5:65:cf:61:fc:32:8b:31:62:6f:a4:71:e5:2c:0d:71: a6:64:3a:d0:c5:cb:5c:71:d3:27:54:9b:25:4c:16:59:5d:26: 67:7a:84:c6:76:10:07:41:7f:bb:03:19:8d:7a:a3:0a:a7:67: c8:d5:4b:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQuCP21YHQAUR+nhvb9oEOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0MzJmNjFiYmQzZmQxMWQ3ZmFjYmIxNTQzYTc1MWE2NWEz ZjY0YzMwHhcNMjUxMjEyMDQwMTAxWhcNMjUxMjEzMDQwMTAxWjAzMTEwLwYDVQQD EygzYjdlZjAxNzdmNDE5ZDY1NjE4NDcwYjQwZWZhMzlmYWY3MzdmOWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukFGME7jInlvoz1XNmww4nisEGAk YQqifsvDe2mMQFzlHzVPcRGJiprgJvXaQuGemjUL9rRgPDwRH6rQeC/SHdOGVxsb G3X7lE9V4vlEzKlYY7rs4xdvTvv06ZRjWcB9geD7MBYLW3KfkCMTJvacUZUi7w+m eqUyhNoVVj++17f6akK4PDDTbjoHLA9UV/s6r9bmNsi8VQQyYyPeN+uMftGxoVqj zee6CNLZVUZtZiG8AMhQvO623v/q9cFPRc2XXldKAKlEsoinpWj66ythNPnnFuMy GsFqn0TbEUhNETZADU7WlSOTl9pc1JbJI/nt9AcQpbK7b0fqXdcGW+Vb+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDt+8Bd/QZ1lYYRwtA76Ofr3N/n9MB8GA1UdIwQY MBaAFEQy9hu9P9Edf6y7FUOnUaZaP2TDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkRMMkc3MF8wUjFfckxzVlE2ZFJwbG9fWk1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82NjRlYjEtZjIyMC00ODA0LThjNWEt OTI3ODg0MGM0OTcwLzEvUkRMMkc3MF8wUjFfckxzVlE2ZFJwbG9fWk1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82NjRlYjEtZjIyMC00ODA0LThjNWEtOTI3ODg0MGM0OTcw LzEvUkRMMkc3MF8wUjFfckxzVlE2ZFJwbG9fWk1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnm9aXfrX p/EgtyexTczhFlW4irZmBCP4tFc4ejYUTCWcYRqstiqF7f900zZZ7ddiBDPMCYiB Sbw7xiE/z2wNcQiWBSpKQc8cCufmfgWMByvNSptF9gU0tpyS9QBH3gJpi8aGuTKU qOqDzoYOnJNAjk5DxAVXzCDsD+K4SsDDHFCGPvkxwRHFhctUp8Mdd1nbZSQNTE3O ZzkN0Pr3ZkaUW1SkrYbCofd0O16k21ZbprhO4LPCgmDR9K674qiAv/DpBQMJcYPX aWulZc9h/DKLMWJvpHHlLA1xpmQ60MXLXHHTJ1SbJUwWWV0mZ3qExnYQB0F/uwMZ jXqjCqdnyNVL+g== -----END CERTIFICATE-----Generated at Fri Dec 12 13:57:48 2025 by rpki-client