This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft File: d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft (raw, json) Hash identifier: ECrznLoyQoeft7zWtK7wgQJ7NbQCnsQKQ0NhqT7Tft0= Subject key identifier: 76:35:1E:38:D0:24:CB:D5:4B:19:CD:4F:28:0C:16:93:E6:24:2E:4A Authority key identifier: 77:65:64:FC:20:6C:4B:C5:DB:58:F7:EF:BB:B1:E8:F8:84:99:E2:33 Certificate issuer: /CN=776564fc206c4bc5db58f7efbbb1e8f88499e233 Certificate serial: 019B44386F2D423E4957D88EE96AD515738D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft Manifest number: 178F Signing time: Mon 22 Dec 2025 04:01:47 +0000 Manifest this update: Mon 22 Dec 2025 04:01:47 +0000 Manifest next update: Tue 23 Dec 2025 04:01:47 +0000 Files and hashes: 1: TsaeWiaMsP1j_z_xMCDhi5soRx0.roa (hash: cFv4JeYxc6KlGhF0oX6eBMNahY8RJkA5Wg3CLEjEyhU=) 2: d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl (hash: zrtVpYze9lpoSoGnPjRwwdIU1kNTWJnuBMc5oW2r8UM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:6f:2d:42:3e:49:57:d8:8e:e9:6a:d5:15:73:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=776564fc206c4bc5db58f7efbbb1e8f88499e233 Validity Not Before: Dec 22 04:01:47 2025 GMT Not After : Dec 23 04:01:47 2025 GMT Subject: CN=76351e38d024cbd54b19cd4f280c1693e6242e4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6d:4d:b5:57:7a:94:3c:f3:a4:41:27:8c:b2: fa:07:6e:c0:1f:26:ab:63:db:7c:3b:e5:a4:fd:91: 3e:03:9f:61:04:f6:e9:ac:ab:8f:f9:9b:93:07:32: 2b:99:d5:77:31:50:56:0a:4f:2e:11:48:99:da:af: 45:0a:f5:93:71:5a:cf:82:b4:df:08:79:87:d2:f4: 51:a6:30:13:cd:b3:7b:2c:55:d1:c8:a1:e1:91:43: 3f:28:20:29:38:0e:c8:89:77:6c:4f:54:ef:c5:d6: 91:f4:be:62:78:e8:7c:64:5c:21:26:f2:cd:c3:13: 0d:7c:11:7b:e6:df:3d:3c:5c:a5:2b:02:f0:ad:58: 10:17:11:f9:f9:bc:0e:6c:0a:99:03:1c:2c:e2:f6: 2a:69:88:fd:80:aa:98:49:25:4c:2e:fa:b3:f1:89: 35:e5:01:b6:4d:f3:63:33:5d:56:50:1f:b4:fb:8b: e0:ad:30:d2:7a:a6:6f:7a:e9:89:5d:b9:32:56:a7: c5:70:b6:13:82:5f:c1:56:0d:cb:87:a6:e2:b6:0e: 43:2e:b2:af:af:c0:af:d3:bf:73:b0:88:5f:d5:49: bd:d5:5a:b8:0c:01:8a:a8:42:36:a9:d6:8f:26:0d: 28:5f:a8:e5:cd:8c:c0:33:7e:63:21:c4:8b:3c:5b: 67:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:35:1E:38:D0:24:CB:D5:4B:19:CD:4F:28:0C:16:93:E6:24:2E:4A X509v3 Authority Key Identifier: keyid:77:65:64:FC:20:6C:4B:C5:DB:58:F7:EF:BB:B1:E8:F8:84:99:E2:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:8c:3d:ad:a6:cb:d1:69:f5:17:81:76:86:df:24:d4:25:f3: 34:ee:64:24:9d:df:d5:75:ca:68:d9:6b:62:77:12:1f:20:9c: 03:a6:cd:db:70:27:ce:6f:e9:54:6a:aa:40:76:25:d0:00:df: cd:b0:60:d4:87:bd:d8:b2:37:77:e1:17:de:16:34:b8:03:53: 1e:ec:60:43:de:b0:74:86:58:6d:30:3f:1b:4c:98:ec:ce:db: 4a:3e:e5:24:6f:cb:32:40:f9:49:7b:f8:0c:8b:a8:a9:d0:7f: f0:9f:f0:ef:c9:d7:72:a5:1d:69:59:fd:ed:ad:c3:58:03:34: a0:73:a4:4e:2f:6b:08:66:e6:81:b7:6b:3d:4b:96:c3:36:15: 48:27:cf:a9:10:6f:4f:23:ad:cb:66:ee:85:89:f1:c3:55:b2: 23:c6:11:e8:86:2e:9f:14:9a:85:cc:be:e7:77:64:b9:84:d3: 51:cf:c0:a2:b8:98:ce:4b:9d:f8:58:e4:d5:44:c6:51:7a:fa: 1b:94:af:27:b9:08:15:ab:7e:97:68:52:47:7a:73:8a:45:dd: b7:0e:ff:1f:41:5d:d6:d4:0e:75:c9:6b:08:86:18:19:a1:78: 40:cb:f6:89:8d:4b:7d:79:7b:21:3e:63:36:6a:aa:0a:10:0c: 40:cf:c6:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOG8tQj5JV9iO6WrVFXONMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3NjU2NGZjMjA2YzRiYzVkYjU4ZjdlZmJiYjFlOGY4ODQ5 OWUyMzMwHhcNMjUxMjIyMDQwMTQ3WhcNMjUxMjIzMDQwMTQ3WjAzMTEwLwYDVQQD Eyg3NjM1MWUzOGQwMjRjYmQ1NGIxOWNkNGYyODBjMTY5M2U2MjQyZTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtG1NtVd6lDzzpEEnjLL6B27AHyar Y9t8O+Wk/ZE+A59hBPbprKuP+ZuTBzIrmdV3MVBWCk8uEUiZ2q9FCvWTcVrPgrTf CHmH0vRRpjATzbN7LFXRyKHhkUM/KCApOA7IiXdsT1TvxdaR9L5ieOh8ZFwhJvLN wxMNfBF75t89PFylKwLwrVgQFxH5+bwObAqZAxws4vYqaYj9gKqYSSVMLvqz8Yk1 5QG2TfNjM11WUB+0+4vgrTDSeqZveumJXbkyVqfFcLYTgl/BVg3Lh6bitg5DLrKv r8Cv079zsIhf1Um91Vq4DAGKqEI2qdaPJg0oX6jlzYzAM35jIcSLPFtngQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHY1HjjQJMvVSxnNTygMFpPmJC5KMB8GA1UdIwQY MBaAFHdlZPwgbEvF21j377ux6PiEmeIzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDJWa19DQnNTOFhiV1BmdnU3SG8tSVNaNGpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi84NjE5MzctOTlmZS00YjQ4LTk5YjIt ZGQ5MDdiNzc0ZjIyLzEvZDJWa19DQnNTOFhiV1BmdnU3SG8tSVNaNGpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi84NjE5MzctOTlmZS00YjQ4LTk5YjItZGQ5MDdiNzc0ZjIy LzEvZDJWa19DQnNTOFhiV1BmdnU3SG8tSVNaNGpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJIw9rabL 0Wn1F4F2ht8k1CXzNO5kJJ3f1XXKaNlrYncSHyCcA6bN23Anzm/pVGqqQHYl0ADf zbBg1Ie92LI3d+EX3hY0uANTHuxgQ96wdIZYbTA/G0yY7M7bSj7lJG/LMkD5SXv4 DIuoqdB/8J/w78nXcqUdaVn97a3DWAM0oHOkTi9rCGbmgbdrPUuWwzYVSCfPqRBv TyOty2buhYnxw1WyI8YR6IYunxSahcy+53dkuYTTUc/AoriYzkud+Fjk1UTGUXr6 G5SvJ7kIFat+l2hSR3pzikXdtw7/H0Fd1tQOdclrCIYYGaF4QMv2iY1LfXl7IT5j NmqqChAMQM/G1w== -----END CERTIFICATE-----Generated at Mon Dec 22 08:24:47 2025 by rpki-client