This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.mft File: dj16VTWlJJ6Xp1BkZpOZqTxGzI4.mft (raw, json) Hash identifier: YY6KLfTXIngvhDNpFHqwE3GrOFtgH4EG5W2YlNGNbqI= Subject key identifier: 6C:35:B2:D1:08:42:82:A7:9D:41:BC:F3:36:2F:41:2F:3B:48:42:57 Authority key identifier: 76:3D:7A:55:35:A5:24:9E:97:A7:50:64:66:93:99:A9:3C:46:CC:8E Certificate issuer: /CN=763d7a5535a5249e97a75064669399a93c46cc8e Certificate serial: 019B4882DCA0D930B9AE62B11E4E9A412BF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.mft Manifest number: 0BC9 Signing time: Tue 23 Dec 2025 00:01:34 +0000 Manifest this update: Tue 23 Dec 2025 00:01:34 +0000 Manifest next update: Wed 24 Dec 2025 00:01:34 +0000 Files and hashes: 1: dj16VTWlJJ6Xp1BkZpOZqTxGzI4.crl (hash: Vmr66zqgPvfxCNNavdW3bcLWUpKHH1jyGTu6EnFADOM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.mft rsync://rpki.ripe.net/repository/DEFAULT/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:82:dc:a0:d9:30:b9:ae:62:b1:1e:4e:9a:41:2b:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=763d7a5535a5249e97a75064669399a93c46cc8e Validity Not Before: Dec 23 00:01:34 2025 GMT Not After : Dec 24 00:01:34 2025 GMT Subject: CN=6c35b2d1084282a79d41bcf3362f412f3b484257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:17:15:79:fa:56:a4:32:d6:71:5f:6a:6f:a7: a8:d6:f5:23:03:88:40:73:ce:59:9f:98:24:22:e8: 46:9c:a7:40:c3:e5:b5:6e:35:03:91:b1:b0:81:b2: 31:af:51:f9:ab:a9:48:b7:d7:77:22:93:ad:9e:67: 83:a8:2a:35:df:e2:82:e5:53:0c:e7:64:53:fe:9d: 9b:01:80:3e:4e:7f:cc:63:2e:b3:35:48:10:d6:a4: 9e:bc:30:31:38:91:d4:42:5e:8f:47:1d:2f:2d:51: 08:79:f4:8b:c7:87:4d:ec:4b:2d:20:0c:fb:8f:fb: 5f:36:46:68:11:a4:b2:eb:3b:9d:96:b0:a4:c2:e3: 11:2e:02:f3:91:41:08:b1:d4:06:dc:cc:8f:c5:a3: da:8f:2b:db:94:5a:c2:90:ca:f7:1f:59:60:c4:f4: 7a:dd:db:be:6f:25:c2:f2:98:91:9c:e8:e5:43:f8: b8:33:e8:2f:a0:ab:38:a2:78:50:84:36:b3:15:70: b6:d3:06:db:f6:11:39:e3:7f:59:4c:68:86:38:06: ad:2a:d6:a8:a1:be:24:e5:d9:85:79:8d:e0:96:f7: 7c:e8:bb:15:9f:3d:d9:95:07:20:ec:c1:bb:fd:fc: 41:c9:c0:6b:14:53:69:cf:08:94:4e:48:92:48:59: fd:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:35:B2:D1:08:42:82:A7:9D:41:BC:F3:36:2F:41:2F:3B:48:42:57 X509v3 Authority Key Identifier: keyid:76:3D:7A:55:35:A5:24:9E:97:A7:50:64:66:93:99:A9:3C:46:CC:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:94:ae:89:47:b7:1d:5a:9b:d8:91:30:33:cf:81:77:dd:f5: 24:e5:ca:eb:ca:05:d0:40:07:29:21:06:08:c5:9d:5d:24:10: 71:5f:ef:4d:4b:64:71:aa:e5:98:75:e3:e5:ca:d7:8b:10:ff: 30:6c:9c:84:9b:df:4c:6a:c6:ea:a2:c2:05:b3:33:82:9e:4b: 75:38:11:b4:31:68:cd:0b:d4:51:01:8a:5b:65:d6:13:2d:84: 00:75:4d:cd:cc:70:b0:3b:1d:1a:ec:ed:2a:c8:13:52:bf:74: b8:22:ff:1d:9b:f2:5c:25:a8:ec:e5:9a:28:44:bb:89:ae:cd: 7d:45:d2:ef:b7:3b:ff:1d:8d:d8:6b:5e:7c:72:bb:e1:6a:a2: 72:5f:05:b5:ac:be:fa:5b:08:f4:1e:48:38:4d:32:9e:79:26: 48:d4:ad:c0:aa:8f:54:29:75:8d:eb:cf:09:a1:84:3d:0d:7c: d1:06:83:c8:75:dd:e0:13:e7:fe:92:03:f5:af:fc:32:ed:67: 29:94:62:3b:e7:4b:9c:9c:b5:a1:e1:c9:a3:6c:cc:70:ec:38: e3:97:0c:00:3e:23:fe:32:e8:73:12:44:92:3e:9d:a4:2d:11: 72:75:d7:36:33:74:2f:01:78:bc:4b:f3:d9:58:7e:8d:14:a9: 26:d1:08:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIgtyg2TC5rmKxHk6aQSv1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2M2Q3YTU1MzVhNTI0OWU5N2E3NTA2NDY2OTM5OWE5M2M0 NmNjOGUwHhcNMjUxMjIzMDAwMTM0WhcNMjUxMjI0MDAwMTM0WjAzMTEwLwYDVQQD Eyg2YzM1YjJkMTA4NDI4MmE3OWQ0MWJjZjMzNjJmNDEyZjNiNDg0MjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBcVefpWpDLWcV9qb6eo1vUjA4hA c85Zn5gkIuhGnKdAw+W1bjUDkbGwgbIxr1H5q6lIt9d3IpOtnmeDqCo13+KC5VMM 52RT/p2bAYA+Tn/MYy6zNUgQ1qSevDAxOJHUQl6PRx0vLVEIefSLx4dN7EstIAz7 j/tfNkZoEaSy6zudlrCkwuMRLgLzkUEIsdQG3MyPxaPajyvblFrCkMr3H1lgxPR6 3du+byXC8piRnOjlQ/i4M+gvoKs4onhQhDazFXC20wbb9hE5439ZTGiGOAatKtao ob4k5dmFeY3glvd86LsVnz3ZlQcg7MG7/fxBycBrFFNpzwiUTkiSSFn9YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGw1stEIQoKnnUG88zYvQS87SEJXMB8GA1UdIwQY MBaAFHY9elU1pSSel6dQZGaTmak8RsyOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGoxNlZUV2xKSjZYcDFCa1pwT1pxVHhHekk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC84NTBiMGItYjMwNi00ZDdmLWIxOTgt ODgyMmJkMzg2ODQwLzEvZGoxNlZUV2xKSjZYcDFCa1pwT1pxVHhHekk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC84NTBiMGItYjMwNi00ZDdmLWIxOTgtODgyMmJkMzg2ODQw LzEvZGoxNlZUV2xKSjZYcDFCa1pwT1pxVHhHekk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcpSuiUe3 HVqb2JEwM8+Bd931JOXK68oF0EAHKSEGCMWdXSQQcV/vTUtkcarlmHXj5crXixD/ MGychJvfTGrG6qLCBbMzgp5LdTgRtDFozQvUUQGKW2XWEy2EAHVNzcxwsDsdGuzt KsgTUr90uCL/HZvyXCWo7OWaKES7ia7NfUXS77c7/x2N2GtefHK74Wqicl8Ftay+ +lsI9B5IOE0ynnkmSNStwKqPVCl1jevPCaGEPQ180QaDyHXd4BPn/pID9a/8Mu1n KZRiO+dLnJy1oeHJo2zMcOw445cMAD4j/jLocxJEkj6dpC0RcnXXNjN0LwF4vEvz 2Vh+jRSpJtEIDA== -----END CERTIFICATE-----Generated at Tue Dec 23 03:19:34 2025 by rpki-client