This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft File: 24gOLcNLroD0K7HjhFf-GXqH1LM.mft (raw, json) Hash identifier: 03Xo6n3n9b3eaa1HpvEXbswz2MAHw83GaaVXqI7OhEg= Subject key identifier: 7F:33:AE:17:4C:12:74:06:21:DF:DE:30:06:4E:64:1D:DB:16:D2:A9 Authority key identifier: DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3 Certificate issuer: /CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3 Certificate serial: 019B255140ED7DF7B52EB98713960094DAF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft Manifest number: 16AC Signing time: Tue 16 Dec 2025 04:00:40 +0000 Manifest this update: Tue 16 Dec 2025 04:00:40 +0000 Manifest next update: Wed 17 Dec 2025 04:00:40 +0000 Files and hashes: 1: 24gOLcNLroD0K7HjhFf-GXqH1LM.crl (hash: I/11UK1ic+p5r3kPKofKhzyc5FPc14YZzqnD9L5wJ2c=) 2: 4PwJxAwKax5Reljdgs0YL3qX31Q.roa (hash: UYp5AvhZKwwfeYa3iRTnePJRJNovfCx7buPjdCyUR7I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:51:40:ed:7d:f7:b5:2e:b9:87:13:96:00:94:da:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3 Validity Not Before: Dec 16 04:00:40 2025 GMT Not After : Dec 17 04:00:40 2025 GMT Subject: CN=7f33ae174c12740621dfde30064e641ddb16d2a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c4:61:16:f1:a6:59:ed:47:4f:ba:00:61:4d: e3:bf:11:87:98:56:ae:1e:a0:d3:06:0b:ca:98:e2: 7d:1b:ab:bb:e1:72:a8:06:b8:1e:48:6a:30:37:31: 93:7f:f9:60:9a:a6:4d:7b:fc:cb:93:1b:25:d3:86: 3b:30:6d:ee:e4:20:d2:53:72:ec:39:83:2f:a2:4b: 88:2e:49:e8:20:24:ae:40:6b:dd:dd:30:fc:45:8a: bc:a1:98:d7:6d:c5:63:b3:b4:56:b6:d1:db:82:a2: a5:e1:4f:61:f8:9f:cc:32:7b:e3:86:61:3e:cc:d7: a5:8c:26:cf:13:62:cb:ce:c4:0e:70:0e:66:7f:df: bd:9d:7b:77:de:59:a8:ff:6a:af:7d:eb:98:cd:a7: 07:98:80:cf:81:ee:cd:98:d4:39:c1:60:b2:15:03: 64:a2:9a:5f:0c:e2:b3:fe:a8:e7:1b:48:ca:68:87: 44:ba:9b:2b:92:8d:cc:8d:6d:fe:7e:d5:82:7a:5d: 5a:b9:b8:85:36:07:d6:07:94:b9:ca:3c:02:9a:61: 0f:97:1c:2a:5b:23:f1:02:9d:ec:22:49:88:93:d6: 9b:3e:8e:41:7a:38:0a:87:2c:86:fb:26:88:b5:a7: 87:c5:0f:7b:b0:8a:97:bd:93:87:52:9c:0f:63:5d: 56:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:33:AE:17:4C:12:74:06:21:DF:DE:30:06:4E:64:1D:DB:16:D2:A9 X509v3 Authority Key Identifier: keyid:DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:ea:bf:f6:30:de:7a:44:13:1f:5c:78:82:a4:e9:a3:d1:bd: 13:34:d0:36:49:7d:aa:0a:5a:6d:34:1e:b0:a7:35:65:57:9b: 81:4d:d0:c0:0d:1f:01:3e:4e:ab:9a:46:7c:52:93:f3:e1:3e: 22:ff:61:55:17:0e:95:c3:93:15:09:49:77:ac:e2:66:86:1e: 7a:0d:ca:a7:cc:bc:7c:69:fa:30:5d:c5:43:53:fa:b5:0a:18: 37:d2:38:f0:9f:09:23:28:66:82:3f:79:67:19:61:23:f7:4a: 94:1f:0c:05:b9:9b:d9:3e:fd:05:f8:46:ae:f2:fe:51:eb:a4: 01:3c:ae:22:dd:3e:c3:26:07:e0:21:1a:72:24:f1:e0:77:89: 29:0a:05:c4:e7:41:bb:fe:13:80:b8:7a:12:47:35:32:59:52: f2:f9:d8:33:dd:5d:0c:4c:ca:b7:9b:60:88:cf:d2:97:a2:5c: 48:55:5f:82:13:6c:a7:09:86:b0:46:4d:4a:c5:99:37:83:8b: 3e:87:d6:b1:93:c9:fe:5f:d2:be:6d:2b:47:9d:c6:4a:de:01: 46:59:5b:ed:18:f3:64:1b:ab:59:b4:aa:4b:f2:36:5a:25:a4: f0:22:80:a9:8f:e7:ac:b6:18:bf:ac:0f:aa:87:64:12:ba:fa: 8f:3f:01:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUUDtffe1LrmHE5YAlNrzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiODgwZTJkYzM0YmFlODBmNDJiYjFlMzg0NTdmZTE5N2E4 N2Q0YjMwHhcNMjUxMjE2MDQwMDQwWhcNMjUxMjE3MDQwMDQwWjAzMTEwLwYDVQQD Eyg3ZjMzYWUxNzRjMTI3NDA2MjFkZmRlMzAwNjRlNjQxZGRiMTZkMmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsRhFvGmWe1HT7oAYU3jvxGHmFau HqDTBgvKmOJ9G6u74XKoBrgeSGowNzGTf/lgmqZNe/zLkxsl04Y7MG3u5CDSU3Ls OYMvokuILknoICSuQGvd3TD8RYq8oZjXbcVjs7RWttHbgqKl4U9h+J/MMnvjhmE+ zNeljCbPE2LLzsQOcA5mf9+9nXt33lmo/2qvfeuYzacHmIDPge7NmNQ5wWCyFQNk oppfDOKz/qjnG0jKaIdEupsrko3MjW3+ftWCel1aubiFNgfWB5S5yjwCmmEPlxwq WyPxAp3sIkmIk9abPo5BejgKhyyG+yaItaeHxQ97sIqXvZOHUpwPY11WTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH8zrhdMEnQGId/eMAZOZB3bFtKpMB8GA1UdIwQY MBaAFNuIDi3DS66A9Cux44RX/hl6h9SzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjRnT0xjTkxyb0QwSzdIamhGZi1HWHFIMUxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80MWE1MWQtNDI2OS00MWEwLTkyZGYt NGQyOWE1ZTI5ODVkLzEvMjRnT0xjTkxyb0QwSzdIamhGZi1HWHFIMUxNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS80MWE1MWQtNDI2OS00MWEwLTkyZGYtNGQyOWE1ZTI5ODVk LzEvMjRnT0xjTkxyb0QwSzdIamhGZi1HWHFIMUxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeeq/9jDe ekQTH1x4gqTpo9G9EzTQNkl9qgpabTQesKc1ZVebgU3QwA0fAT5Oq5pGfFKT8+E+ Iv9hVRcOlcOTFQlJd6ziZoYeeg3Kp8y8fGn6MF3FQ1P6tQoYN9I48J8JIyhmgj95 ZxlhI/dKlB8MBbmb2T79BfhGrvL+UeukATyuIt0+wyYH4CEaciTx4HeJKQoFxOdB u/4TgLh6Ekc1MllS8vnYM91dDEzKt5tgiM/Sl6JcSFVfghNspwmGsEZNSsWZN4OL PofWsZPJ/l/Svm0rR53GSt4BRllb7RjzZBurWbSqS/I2WiWk8CKAqY/nrLYYv6wP qodkErr6jz8B4Q== -----END CERTIFICATE-----Generated at Tue Dec 16 06:36:34 2025 by rpki-client