This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft File: dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft (raw, json) Hash identifier: pZWxOdKOuiO5H7xuqzwMf09ZlxPrFTtjIi+/G9wjSyM= Subject key identifier: 35:C0:C6:9B:AE:2F:99:85:BB:5E:E8:34:42:07:BB:85:39:BF:FE:83 Authority key identifier: 76:5E:A3:40:0A:37:48:C3:B6:C6:12:68:D4:92:F8:BF:0A:90:82:39 Certificate issuer: /CN=765ea3400a3748c3b6c61268d492f8bf0a908239 Certificate serial: 019B476FB37AB3C4192377DFFA72DEF65421 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft Manifest number: 1312 Signing time: Mon 22 Dec 2025 19:01:01 +0000 Manifest this update: Mon 22 Dec 2025 19:01:01 +0000 Manifest next update: Tue 23 Dec 2025 19:01:01 +0000 Files and hashes: 1: 8mTPFQW3wW-m-Njwc5f28bH9rKw.roa (hash: ycM5ko9FIfkWlLnDoZpXM6ToY3euiLPcPeAx4DLhqfU=) 2: dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl (hash: pFJjQXXJIb+u4wUcGJ0nZ5vmYO8Eo6HneM4Q/aSC2LU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:6f:b3:7a:b3:c4:19:23:77:df:fa:72:de:f6:54:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=765ea3400a3748c3b6c61268d492f8bf0a908239 Validity Not Before: Dec 22 19:01:01 2025 GMT Not After : Dec 23 19:01:01 2025 GMT Subject: CN=35c0c69bae2f9985bb5ee8344207bb8539bffe83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:dd:16:d7:63:aa:77:51:31:b9:8c:99:de:8e: 11:5b:19:8b:52:bb:2e:a5:44:d2:b7:a7:37:12:88: 71:8c:18:0e:5d:22:99:fc:7e:57:ae:79:fe:fd:eb: 56:63:51:46:24:f9:79:b9:5d:c7:44:1b:56:68:c0: 94:95:e9:91:e7:c9:5b:11:0b:3e:c1:a1:5d:9a:14: 5f:c4:e5:58:6d:be:8c:75:3f:36:f6:58:1e:ae:af: 5a:1a:d7:40:00:99:54:d5:eb:5a:2a:b2:65:1e:73: a9:cd:86:74:a5:48:ad:72:d0:dc:31:57:4e:50:8e: 2a:b5:74:9a:7f:14:53:44:a9:c9:c6:e6:1c:e0:9e: d1:08:33:de:4a:68:e7:f0:27:26:70:76:89:6c:77: dc:ed:6b:76:9d:7a:d7:d2:f2:b6:71:6d:46:26:51: 70:f0:d9:77:87:5d:08:dc:61:7a:f5:8d:b4:34:4d: 42:10:48:62:01:18:e9:eb:fa:5c:68:75:4f:cd:ea: 84:97:86:86:ac:82:3e:15:22:18:15:74:29:42:aa: b3:f9:fd:7c:d9:36:d6:37:1e:82:01:9f:c4:e5:c4: ad:47:4a:c9:e2:ec:32:74:34:37:e7:ef:f1:8e:ec: 98:52:7b:28:d7:b7:78:fe:76:95:b1:fd:dc:b6:cb: 0b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C0:C6:9B:AE:2F:99:85:BB:5E:E8:34:42:07:BB:85:39:BF:FE:83 X509v3 Authority Key Identifier: keyid:76:5E:A3:40:0A:37:48:C3:B6:C6:12:68:D4:92:F8:BF:0A:90:82:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:2c:84:f8:03:88:a4:dc:d7:ad:c1:e1:0f:7e:eb:9b:22:57: fa:44:98:5c:9b:6d:e6:84:41:02:d9:a5:ea:c8:9d:11:6c:8a: 2e:16:4f:fc:8a:b9:26:c7:a2:80:64:89:fb:82:c9:b4:fc:4d: 91:2e:16:98:ef:77:d0:22:73:fb:f8:a8:0f:c1:65:d4:cb:3f: 30:78:c9:1a:65:e2:d8:3b:84:96:5b:42:cf:62:e2:a1:e7:1e: 45:fb:ac:e5:95:8f:a2:88:61:fd:4e:3c:44:ce:80:cc:9d:85: 12:ea:9e:d4:f6:09:22:b5:94:39:9e:c7:65:5e:08:67:35:9d: ae:7a:c6:d8:ae:fe:8b:a7:8a:54:f5:b9:e8:e1:15:2c:db:e6: a2:45:07:34:66:87:42:8c:b5:dc:68:7b:26:e1:55:09:2f:76: b8:3d:d2:9a:c1:da:0d:14:6f:fb:31:39:c0:8c:7c:32:45:a0: 25:a5:cc:96:2e:ab:b1:7b:99:f0:fa:ed:14:26:df:15:3f:49: ce:30:36:96:9f:a0:21:e3:bc:54:a8:3c:72:91:45:57:b1:e8: c3:9d:d2:0e:a0:22:d3:53:fe:e9:e0:45:3a:2f:59:2d:af:7b: 2c:c6:a7:53:fc:4f:75:c1:96:cf:62:54:61:da:13:f3:af:4e: 2f:65:0f:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHb7N6s8QZI3ff+nLe9lQhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NWVhMzQwMGEzNzQ4YzNiNmM2MTI2OGQ0OTJmOGJmMGE5 MDgyMzkwHhcNMjUxMjIyMTkwMTAxWhcNMjUxMjIzMTkwMTAxWjAzMTEwLwYDVQQD EygzNWMwYzY5YmFlMmY5OTg1YmI1ZWU4MzQ0MjA3YmI4NTM5YmZmZTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4N0W12Oqd1ExuYyZ3o4RWxmLUrsu pUTSt6c3EohxjBgOXSKZ/H5Xrnn+/etWY1FGJPl5uV3HRBtWaMCUlemR58lbEQs+ waFdmhRfxOVYbb6MdT829lgerq9aGtdAAJlU1etaKrJlHnOpzYZ0pUitctDcMVdO UI4qtXSafxRTRKnJxuYc4J7RCDPeSmjn8CcmcHaJbHfc7Wt2nXrX0vK2cW1GJlFw 8Nl3h10I3GF69Y20NE1CEEhiARjp6/pcaHVPzeqEl4aGrII+FSIYFXQpQqqz+f18 2TbWNx6CAZ/E5cStR0rJ4uwydDQ35+/xjuyYUnso17d4/naVsf3ctssLFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDXAxpuuL5mFu17oNEIHu4U5v/6DMB8GA1UdIwQY MBaAFHZeo0AKN0jDtsYSaNSS+L8KkII5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGw2alFBbzNTTU8yeGhKbzFKTDR2d3FRZ2prLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS83NGUxNWYtZjQ4Ny00NTU5LWJmZGQt MGZjNThlNThjYWM5LzEvZGw2alFBbzNTTU8yeGhKbzFKTDR2d3FRZ2prLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS83NGUxNWYtZjQ4Ny00NTU5LWJmZGQtMGZjNThlNThjYWM5 LzEvZGw2alFBbzNTTU8yeGhKbzFKTDR2d3FRZ2prLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjSyE+AOI pNzXrcHhD37rmyJX+kSYXJtt5oRBAtml6sidEWyKLhZP/Iq5JseigGSJ+4LJtPxN kS4WmO930CJz+/ioD8Fl1Ms/MHjJGmXi2DuElltCz2LioeceRfus5ZWPoohh/U48 RM6AzJ2FEuqe1PYJIrWUOZ7HZV4IZzWdrnrG2K7+i6eKVPW56OEVLNvmokUHNGaH Qoy13Gh7JuFVCS92uD3SmsHaDRRv+zE5wIx8MkWgJaXMli6rsXuZ8PrtFCbfFT9J zjA2lp+gIeO8VKg8cpFFV7How53SDqAi01P+6eBFOi9ZLa97LManU/xPdcGWz2JU YdoT869OL2UPYg== -----END CERTIFICATE-----Generated at Mon Dec 22 20:30:55 2025 by rpki-client