This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft File: _dlCLeliA-XYc-CZVZGjppDdPZI.mft (raw, json) Hash identifier: Juw/qlVp706qACB9t/xCZOwQ5CFPWUNxZugs84l/QPk= Subject key identifier: 5D:09:42:21:1B:1B:EC:43:F3:F9:C5:09:50:8E:98:DB:07:A9:28:35 Authority key identifier: FD:D9:42:2D:E9:62:03:E5:D8:73:E0:99:55:91:A3:A6:90:DD:3D:92 Certificate issuer: /CN=fdd9422de96203e5d873e0995591a3a690dd3d92 Certificate serial: 019B11258D6B5C76F398CF8B09E555871900 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft Manifest number: 1773 Signing time: Fri 12 Dec 2025 06:00:32 +0000 Manifest this update: Fri 12 Dec 2025 06:00:32 +0000 Manifest next update: Sat 13 Dec 2025 06:00:32 +0000 Files and hashes: 1: _dlCLeliA-XYc-CZVZGjppDdPZI.crl (hash: EGL78fBEZhDdy0G+mXMHz24BRY+/Vv7w71P8phmTUEs=) 2: sKY5eWcuMLtnQDCwYINlgWrJYiU.roa (hash: CtU3txyv7ojbqzOBjkBrsZCPvN9srqKePBnH0g0kSFY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 06:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:25:8d:6b:5c:76:f3:98:cf:8b:09:e5:55:87:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd9422de96203e5d873e0995591a3a690dd3d92 Validity Not Before: Dec 12 06:00:32 2025 GMT Not After : Dec 13 06:00:32 2025 GMT Subject: CN=5d0942211b1bec43f3f9c509508e98db07a92835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:65:92:16:6b:4a:a3:d7:41:22:f1:e0:c8:1b: 0b:ab:e8:ad:a9:29:16:43:85:90:45:bf:db:9f:e0: 01:d3:24:1b:ac:1d:11:fd:95:8a:32:c3:d3:18:b5: 0b:bd:60:bc:6a:69:85:cc:99:2f:b2:ed:32:55:17: b7:0c:95:bb:7f:9b:b9:04:1e:9a:c6:dd:33:0e:ab: 14:0d:fe:44:f4:b4:57:61:43:1a:7b:8a:1c:7e:71: 5c:10:d4:b1:d9:c4:e2:e0:2c:7b:54:34:07:da:a1: 0d:95:e7:b5:10:6e:e2:cd:74:16:b4:70:3b:7b:ac: 68:f9:35:32:43:6f:0d:d1:d3:cc:1a:4a:90:00:11: 23:67:93:73:5e:6f:46:57:6f:5e:ca:22:5b:c1:64: 73:80:91:5d:68:b0:a0:bb:40:5a:42:28:3e:01:ee: ba:b5:45:27:66:e1:36:8d:80:0b:c4:07:c9:71:9c: c2:9b:a0:57:92:a9:9d:7d:c7:60:96:12:d1:ae:eb: 88:4c:5b:ce:cb:c4:e7:9d:c7:32:c2:0d:69:91:cc: a6:13:6a:b9:c5:c2:e1:1c:69:07:ab:12:88:5b:5c: d4:45:8e:1a:e9:f7:e7:98:e0:d2:eb:d8:3a:b5:9d: 32:1d:a4:75:99:58:42:79:c9:87:29:02:69:ef:9a: 81:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:09:42:21:1B:1B:EC:43:F3:F9:C5:09:50:8E:98:DB:07:A9:28:35 X509v3 Authority Key Identifier: keyid:FD:D9:42:2D:E9:62:03:E5:D8:73:E0:99:55:91:A3:A6:90:DD:3D:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:3b:fe:e1:44:79:e7:18:72:c3:fc:94:e7:50:aa:86:22:00: fa:b9:6b:01:1d:08:19:0b:96:52:b3:2a:b0:8b:e8:3c:24:ff: f6:0e:c8:53:7d:28:cf:2e:d0:5b:15:c1:9f:15:f7:74:51:5c: 12:0a:40:8a:cf:ca:f2:5f:63:a3:59:3a:6f:68:46:6e:4e:5e: 82:9d:f2:d9:62:a3:ef:7b:ae:ff:46:46:0b:16:ae:86:b5:00: a1:12:d8:c2:ff:37:07:95:a1:59:eb:d6:69:43:17:38:c6:b5: eb:e1:58:f3:58:e2:3d:2e:b5:bf:16:86:53:a9:32:1a:36:e7: 04:7f:e1:5c:b4:bc:ce:bb:07:e0:e7:4a:68:db:f8:41:48:ff: 1a:bc:d6:e8:2d:a6:45:b5:03:13:8e:47:c4:c3:28:b0:54:aa: 62:23:9e:33:df:54:43:d4:a4:25:87:85:ed:6f:e6:91:af:a3: 44:35:08:23:f3:83:79:0d:7b:fa:c3:16:30:49:0c:f5:ef:2d: 73:0f:31:dd:fc:65:e5:e2:2b:52:93:f3:fe:5c:b2:57:5b:73: 96:63:f9:12:a0:ea:83:62:e3:b2:68:bd:77:9b:5e:02:79:86: 11:60:c0:d8:7f:b0:30:ec:71:b9:bc:a3:a5:24:2e:8a:8e:66: 07:c5:2a:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRJY1rXHbzmM+LCeVVhxkAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZDk0MjJkZTk2MjAzZTVkODczZTA5OTU1OTFhM2E2OTBk ZDNkOTIwHhcNMjUxMjEyMDYwMDMyWhcNMjUxMjEzMDYwMDMyWjAzMTEwLwYDVQQD Eyg1ZDA5NDIyMTFiMWJlYzQzZjNmOWM1MDk1MDhlOThkYjA3YTkyODM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2WSFmtKo9dBIvHgyBsLq+itqSkW Q4WQRb/bn+AB0yQbrB0R/ZWKMsPTGLULvWC8ammFzJkvsu0yVRe3DJW7f5u5BB6a xt0zDqsUDf5E9LRXYUMae4ocfnFcENSx2cTi4Cx7VDQH2qENlee1EG7izXQWtHA7 e6xo+TUyQ28N0dPMGkqQABEjZ5NzXm9GV29eyiJbwWRzgJFdaLCgu0BaQig+Ae66 tUUnZuE2jYALxAfJcZzCm6BXkqmdfcdglhLRruuITFvOy8Tnnccywg1pkcymE2q5 xcLhHGkHqxKIW1zURY4a6ffnmODS69g6tZ0yHaR1mVhCecmHKQJp75qBpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF0JQiEbG+xD8/nFCVCOmNsHqSg1MB8GA1UdIwQY MBaAFP3ZQi3pYgPl2HPgmVWRo6aQ3T2SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2RsQ0xlbGlBLVhZYy1DWlZaR2pwcERkUFpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9hY2YyZTYtYzhkZC00OGM0LTgzODkt YTE4NTUwYTY5ZjY2LzEvX2RsQ0xlbGlBLVhZYy1DWlZaR2pwcERkUFpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi9hY2YyZTYtYzhkZC00OGM0LTgzODktYTE4NTUwYTY5ZjY2 LzEvX2RsQ0xlbGlBLVhZYy1DWlZaR2pwcERkUFpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYTv+4UR5 5xhyw/yU51CqhiIA+rlrAR0IGQuWUrMqsIvoPCT/9g7IU30ozy7QWxXBnxX3dFFc EgpAis/K8l9jo1k6b2hGbk5egp3y2WKj73uu/0ZGCxauhrUAoRLYwv83B5WhWevW aUMXOMa16+FY81jiPS61vxaGU6kyGjbnBH/hXLS8zrsH4OdKaNv4QUj/GrzW6C2m RbUDE45HxMMosFSqYiOeM99UQ9SkJYeF7W/mka+jRDUII/ODeQ17+sMWMEkM9e8t cw8x3fxl5eIrUpPz/lyyV1tzlmP5EqDqg2Ljsmi9d5teAnmGEWDA2H+wMOxxubyj pSQuio5mB8Uq1A== -----END CERTIFICATE-----Generated at Fri Dec 12 13:18:06 2025 by rpki-client