This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft File: CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft (raw, json) Hash identifier: uB1SZEOj3ei9cMbWBpC2uEjMGufa5yAeQQnBwyEk3wg= Subject key identifier: 80:A6:5D:DB:16:C3:58:FF:98:98:E7:C4:D9:64:5F:BC:0D:08:95:C3 Authority key identifier: 09:D9:43:F9:D5:C7:5B:1F:50:56:4F:2D:1D:D0:51:17:88:EB:0A:FC Certificate issuer: /CN=09d943f9d5c75b1f50564f2d1dd0511788eb0afc Certificate serial: 019B5A5208F6C61BDCAD1C9F826BDAE709BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdlD-dXHWx9QVk8tHdBRF4jrCvw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft Manifest number: 016F Signing time: Fri 26 Dec 2025 11:01:24 +0000 Manifest this update: Fri 26 Dec 2025 11:01:24 +0000 Manifest next update: Sat 27 Dec 2025 11:01:24 +0000 Files and hashes: 1: CdlD-dXHWx9QVk8tHdBRF4jrCvw.crl (hash: 1u0GrpQM5zPVtuvjVXJyjRe4MxJreKaLyfxD4z6QrBo=) 2: mIMZrEW18-_5KGhaxhfyAse2jaU.roa (hash: 6Qvzu2ngRsyEUpj0qpA3Dkp0CWaU4iSnWXbsJngfWw4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft rsync://rpki.ripe.net/repository/DEFAULT/CdlD-dXHWx9QVk8tHdBRF4jrCvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:52:08:f6:c6:1b:dc:ad:1c:9f:82:6b:da:e7:09:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09d943f9d5c75b1f50564f2d1dd0511788eb0afc Validity Not Before: Dec 26 11:01:24 2025 GMT Not After : Dec 27 11:01:24 2025 GMT Subject: CN=80a65ddb16c358ff9898e7c4d9645fbc0d0895c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:07:b1:27:04:77:26:5f:6d:a4:af:7c:b2:cf: 4b:3a:1d:8d:c9:5b:cc:e9:bf:f1:48:b0:71:54:7a: c5:ea:73:87:4b:ee:e1:8d:ab:4b:12:b6:c7:27:54: 7c:72:2c:40:39:2a:d3:bb:70:fc:be:47:5d:33:e8: f7:64:4d:86:79:77:da:fd:ac:9a:75:1f:ce:eb:0f: 11:ec:c8:8c:72:7c:44:37:8c:14:fe:72:6d:2c:12: b5:fe:bd:62:83:ba:5f:9e:ba:48:26:79:f7:d5:93: 66:43:76:8d:1c:86:b2:8e:0c:14:94:39:75:31:99: 43:2a:08:a2:63:9a:8b:03:5f:1f:dd:12:c2:9d:6a: 2b:26:e9:16:df:17:df:3e:7c:a1:8e:ac:0b:4e:1a: f3:ae:4e:42:44:3e:1c:26:ca:15:7c:cc:68:ec:56: 34:9a:d0:7f:20:22:b8:33:da:0a:f7:03:82:68:5c: e0:a0:5b:71:13:14:89:cc:ea:4c:0d:7b:b1:b7:ac: 72:c5:f0:2a:d1:d9:c1:b6:6d:81:28:ec:fb:d1:73: 1a:a3:bc:3c:8b:05:d0:10:ee:1e:29:0f:11:10:e4: 31:38:94:74:57:1c:99:da:d7:5e:9d:64:e0:64:c3: 7b:fb:c3:46:1c:8f:c0:03:8d:f4:e4:66:9e:09:72: c1:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:A6:5D:DB:16:C3:58:FF:98:98:E7:C4:D9:64:5F:BC:0D:08:95:C3 X509v3 Authority Key Identifier: keyid:09:D9:43:F9:D5:C7:5B:1F:50:56:4F:2D:1D:D0:51:17:88:EB:0A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdlD-dXHWx9QVk8tHdBRF4jrCvw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:af:dc:33:c5:01:50:c5:70:f0:34:b4:4e:53:92:46:07:b1: cb:99:13:67:25:05:9c:f1:d1:59:e1:2d:96:ab:1e:da:8b:65: 75:77:df:b9:19:8f:62:5d:c5:d2:29:c1:55:4b:4b:b1:d8:1d: 4f:bb:dd:c9:57:5a:6d:8f:02:cd:b2:14:a9:b3:5b:a1:34:68: 61:7c:f4:71:dc:40:7e:d7:05:63:c8:24:4b:42:83:45:6d:e9: b9:1c:f3:f0:f5:45:d0:45:f2:22:23:90:87:b1:d2:7e:cd:02: 2e:13:60:b5:8b:20:bd:3c:89:0f:11:b0:f6:cd:4d:37:10:2c: 47:4c:95:9d:b2:a8:b8:f0:3a:c2:f1:af:cd:b4:28:53:ba:3c: 9c:9c:12:30:f8:5a:63:54:6e:08:48:36:14:be:45:8f:d3:4f: 20:08:88:b5:9e:59:07:13:41:ea:d4:4f:b4:3f:fa:92:3f:d3: b2:79:ba:27:6a:e6:4c:58:06:07:15:b8:c8:50:69:e6:05:65: 3e:bc:80:c6:d4:cc:f3:06:5a:64:8c:f0:28:28:52:62:8c:b7: 58:83:9e:8c:cb:d9:26:f5:5c:45:0e:b5:08:05:12:60:4f:2a: bc:c8:de:9e:ec:5a:a8:50:74:ea:fb:c4:51:8d:4b:a2:e2:df: 3f:8c:df:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUgj2xhvcrRyfgmva5wm6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZDk0M2Y5ZDVjNzViMWY1MDU2NGYyZDFkZDA1MTE3ODhl YjBhZmMwHhcNMjUxMjI2MTEwMTI0WhcNMjUxMjI3MTEwMTI0WjAzMTEwLwYDVQQD Eyg4MGE2NWRkYjE2YzM1OGZmOTg5OGU3YzRkOTY0NWZiYzBkMDg5NWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gexJwR3Jl9tpK98ss9LOh2NyVvM 6b/xSLBxVHrF6nOHS+7hjatLErbHJ1R8cixAOSrTu3D8vkddM+j3ZE2GeXfa/aya dR/O6w8R7MiMcnxEN4wU/nJtLBK1/r1ig7pfnrpIJnn31ZNmQ3aNHIayjgwUlDl1 MZlDKgiiY5qLA18f3RLCnWorJukW3xffPnyhjqwLThrzrk5CRD4cJsoVfMxo7FY0 mtB/ICK4M9oK9wOCaFzgoFtxExSJzOpMDXuxt6xyxfAq0dnBtm2BKOz70XMao7w8 iwXQEO4eKQ8REOQxOJR0VxyZ2tdenWTgZMN7+8NGHI/AA4305GaeCXLB5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFICmXdsWw1j/mJjnxNlkX7wNCJXDMB8GA1UdIwQY MBaAFAnZQ/nVx1sfUFZPLR3QUReI6wr8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2RsRC1kWEhXeDlRVms4dEhkQlJGNGpyQ3Z3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi82MmMwMDItYjk0Yy00MjNiLWI0ZWIt ZTc5MmNjMmZkMDdlLzEvQ2RsRC1kWEhXeDlRVms4dEhkQlJGNGpyQ3Z3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi82MmMwMDItYjk0Yy00MjNiLWI0ZWItZTc5MmNjMmZkMDdl LzEvQ2RsRC1kWEhXeDlRVms4dEhkQlJGNGpyQ3Z3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ6/cM8UB UMVw8DS0TlOSRgexy5kTZyUFnPHRWeEtlqse2otldXffuRmPYl3F0inBVUtLsdgd T7vdyVdabY8CzbIUqbNboTRoYXz0cdxAftcFY8gkS0KDRW3puRzz8PVF0EXyIiOQ h7HSfs0CLhNgtYsgvTyJDxGw9s1NNxAsR0yVnbKouPA6wvGvzbQoU7o8nJwSMPha Y1RuCEg2FL5Fj9NPIAiItZ5ZBxNB6tRPtD/6kj/Tsnm6J2rmTFgGBxW4yFBp5gVl PryAxtTM8wZaZIzwKChSYoy3WIOejMvZJvVcRQ61CAUSYE8qvMjenuxaqFB06vvE UY1LouLfP4zfrA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:59 2025 by rpki-client