This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.mft File: D2Vwk_MmVHvyWpmFyBzxQDFAo6g.mft (raw, json) Hash identifier: +Lv//2h54SCBwhgWDdk/dQsRQXGeRLUvBr4zhdFhDxU= Subject key identifier: 8C:2C:76:C7:E2:F6:D5:B8:2C:7A:65:B2:42:5C:C8:06:09:11:73:8B Authority key identifier: 0F:65:70:93:F3:26:54:7B:F2:5A:99:85:C8:1C:F1:40:31:40:A3:A8 Certificate issuer: /CN=0f657093f326547bf25a9985c81cf1403140a3a8 Certificate serial: 019B1201E1D165A5078836FBB2D8896DE4AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.mft Manifest number: 1776 Signing time: Fri 12 Dec 2025 10:01:11 +0000 Manifest this update: Fri 12 Dec 2025 10:01:11 +0000 Manifest next update: Sat 13 Dec 2025 10:01:11 +0000 Files and hashes: 1: D2Vwk_MmVHvyWpmFyBzxQDFAo6g.crl (hash: SKh+KVGFBwgsLgzL8RPFTMs3QSshJDd5EwWQ8TPbKAU=) 2: w9q_FLnEYi6mMGLHNxrzvfLgYJ4.roa (hash: tRbBa7QkfAKJaQVPfhVVFf8/W8ntAnk0VCwj65NPw8Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.mft rsync://rpki.ripe.net/repository/DEFAULT/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 10:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:01:e1:d1:65:a5:07:88:36:fb:b2:d8:89:6d:e4:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f657093f326547bf25a9985c81cf1403140a3a8 Validity Not Before: Dec 12 10:01:11 2025 GMT Not After : Dec 13 10:01:11 2025 GMT Subject: CN=8c2c76c7e2f6d5b82c7a65b2425cc8060911738b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:12:34:e8:e3:07:78:24:47:0f:5d:f9:ef:3d: cd:bd:91:96:9f:f6:f8:02:ce:a6:8b:16:37:ee:3f: 3b:7a:84:35:ac:d7:24:af:eb:9b:11:9b:da:e4:34: bf:32:33:81:66:9e:46:8d:e5:0e:f2:9d:a2:86:dc: a6:46:07:bd:75:b1:88:44:cb:6a:da:04:70:17:ee: 00:3e:7e:3e:cc:3c:40:ef:72:f6:3a:90:09:14:48: 4a:58:0c:dc:5f:c0:2b:8f:fd:ac:28:a2:d2:fb:eb: 3a:31:4a:16:ca:04:b6:13:f5:1d:1d:df:c2:9f:bb: 7d:ba:c5:b1:fa:85:b5:78:32:9e:70:18:d5:dc:dc: ca:ba:fb:3f:9f:5c:47:b7:09:01:e1:5b:0e:86:14: d9:7d:26:84:06:6d:88:c2:e4:41:12:80:24:6c:c1: 18:0d:9b:4d:d8:c9:87:64:4c:78:49:82:ab:17:54: 16:40:b3:a2:8e:3c:79:19:96:55:e1:c6:5d:bd:14: 9d:cf:99:c9:e7:52:2b:c8:8f:8b:ed:a1:0b:18:59: 5e:79:ab:09:d9:cb:06:83:e6:c4:ea:2d:c7:11:cb: b3:7b:fa:96:7c:32:4b:81:84:c4:bf:4f:39:f3:72: d9:c4:d4:69:62:e0:6d:4b:8b:76:24:44:71:85:4e: 2d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:2C:76:C7:E2:F6:D5:B8:2C:7A:65:B2:42:5C:C8:06:09:11:73:8B X509v3 Authority Key Identifier: keyid:0F:65:70:93:F3:26:54:7B:F2:5A:99:85:C8:1C:F1:40:31:40:A3:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/181ad6-4764-4881-8962-0aff69faf68a/1/D2Vwk_MmVHvyWpmFyBzxQDFAo6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:7c:a1:58:91:9d:fd:62:8d:86:fa:77:b2:e5:09:2b:48:c3: af:c5:fa:c8:84:05:c8:ec:3c:45:bc:c3:c2:ec:ed:82:4d:27: bc:11:52:20:8e:a0:50:01:a4:38:69:c8:f5:59:9b:b0:17:a5: 79:b9:94:9d:8c:42:56:a3:1a:aa:ab:6d:ea:5f:cb:80:9d:d9: a8:44:1c:77:a4:1d:f6:a0:8f:cf:88:89:b0:6a:f6:be:2e:7d: 9b:ab:cb:8f:77:4f:69:9e:8a:5b:1a:ef:a7:ed:1e:ec:9d:0c: a4:70:6c:5a:cb:1b:3e:13:d3:f9:76:2c:17:53:5c:9f:9a:00: d1:cf:a0:c7:cf:83:e6:b5:6b:20:69:5b:e5:a3:b8:4b:76:97: 43:ad:bd:55:41:4c:c2:dd:c9:4e:30:e9:c4:ea:32:f5:2c:52: 87:16:b9:d9:a5:bd:06:fb:0b:43:39:d2:89:20:1c:67:79:f6: e8:6b:d9:6e:ec:97:cb:10:c2:d2:c0:08:d0:e5:fa:70:8a:2f: f9:7e:e5:25:b8:54:82:a0:6c:32:3a:f2:1d:91:5a:d8:d7:f0: 1d:b4:34:0d:90:84:99:62:08:98:34:e6:3b:1d:85:a0:68:a9: ac:6a:0f:8d:e0:45:b5:07:bb:8c:08:45:6a:c0:cb:d8:c6:f9: 7f:a2:68:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSAeHRZaUHiDb7stiJbeStMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNjU3MDkzZjMyNjU0N2JmMjVhOTk4NWM4MWNmMTQwMzE0 MGEzYTgwHhcNMjUxMjEyMTAwMTExWhcNMjUxMjEzMTAwMTExWjAzMTEwLwYDVQQD Eyg4YzJjNzZjN2UyZjZkNWI4MmM3YTY1YjI0MjVjYzgwNjA5MTE3MzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRI06OMHeCRHD1357z3NvZGWn/b4 As6mixY37j87eoQ1rNckr+ubEZva5DS/MjOBZp5GjeUO8p2ihtymRge9dbGIRMtq 2gRwF+4APn4+zDxA73L2OpAJFEhKWAzcX8Arj/2sKKLS++s6MUoWygS2E/UdHd/C n7t9usWx+oW1eDKecBjV3NzKuvs/n1xHtwkB4VsOhhTZfSaEBm2IwuRBEoAkbMEY DZtN2MmHZEx4SYKrF1QWQLOijjx5GZZV4cZdvRSdz5nJ51IryI+L7aELGFleeasJ 2csGg+bE6i3HEcuze/qWfDJLgYTEv08583LZxNRpYuBtS4t2JERxhU4tmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIwsdsfi9tW4LHplskJcyAYJEXOLMB8GA1UdIwQY MBaAFA9lcJPzJlR78lqZhcgc8UAxQKOoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDJWd2tfTW1WSHZ5V3BtRnlCenhRREZBbzZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8xODFhZDYtNDc2NC00ODgxLTg5NjIt MGFmZjY5ZmFmNjhhLzEvRDJWd2tfTW1WSHZ5V3BtRnlCenhRREZBbzZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS8xODFhZDYtNDc2NC00ODgxLTg5NjItMGFmZjY5ZmFmNjhh LzEvRDJWd2tfTW1WSHZ5V3BtRnlCenhRREZBbzZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo3yhWJGd /WKNhvp3suUJK0jDr8X6yIQFyOw8RbzDwuztgk0nvBFSII6gUAGkOGnI9VmbsBel ebmUnYxCVqMaqqtt6l/LgJ3ZqEQcd6Qd9qCPz4iJsGr2vi59m6vLj3dPaZ6KWxrv p+0e7J0MpHBsWssbPhPT+XYsF1Ncn5oA0c+gx8+D5rVrIGlb5aO4S3aXQ629VUFM wt3JTjDpxOoy9SxShxa52aW9BvsLQznSiSAcZ3n26GvZbuyXyxDC0sAI0OX6cIov +X7lJbhUgqBsMjryHZFa2NfwHbQ0DZCEmWIImDTmOx2FoGiprGoPjeBFtQe7jAhF asDL2Mb5f6Jovw== -----END CERTIFICATE-----Generated at Fri Dec 12 19:52:54 2025 by rpki-client