This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft File: D81k6vJZSCLz-aLrzRnbm3-nDZo.mft (raw, json) Hash identifier: ZlKV/jlOo05pR+9/nuJrnW9FYrWaQNKTAaJW5XrrE0A= Subject key identifier: 03:1A:1A:03:93:58:4C:D8:75:38:45:66:6A:96:5F:15:C1:C2:8B:C7 Authority key identifier: 0F:CD:64:EA:F2:59:48:22:F3:F9:A2:EB:CD:19:DB:9B:7F:A7:0D:9A Certificate issuer: /CN=0fcd64eaf2594822f3f9a2ebcd19db9b7fa70d9a Certificate serial: 019B27E4921E06A1FA6BE1F68AD87A86F41F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft Manifest number: 0385 Signing time: Tue 16 Dec 2025 16:00:49 +0000 Manifest this update: Tue 16 Dec 2025 16:00:49 +0000 Manifest next update: Wed 17 Dec 2025 16:00:49 +0000 Files and hashes: 1: D81k6vJZSCLz-aLrzRnbm3-nDZo.crl (hash: 8EiKMH9u+726NWcKatqLfYEl9wLEXiSXaggrOjLfGgk=) 2: tCQKTUl91gUF9YCakBjVvOmahA8.roa (hash: +o4wlq7VWOUaSft8SFBzstGqOiur0Xr8ur6qt9Ob1Nc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:e4:92:1e:06:a1:fa:6b:e1:f6:8a:d8:7a:86:f4:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fcd64eaf2594822f3f9a2ebcd19db9b7fa70d9a Validity Not Before: Dec 16 16:00:49 2025 GMT Not After : Dec 17 16:00:49 2025 GMT Subject: CN=031a1a0393584cd8753845666a965f15c1c28bc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0c:e2:63:eb:69:b1:3b:1b:1e:2b:69:b6:80: 7e:ed:69:4c:ae:a2:7e:ab:fc:d9:b8:fa:0f:33:7d: 3b:4e:e7:97:3c:4d:5b:fa:b2:87:c0:ef:80:1b:d9: 0e:f8:4a:96:a3:8f:f8:23:b6:00:2a:9f:ca:a1:1a: 1d:54:da:3e:ff:49:b4:a0:31:6a:26:96:ad:d0:ed: f5:1c:32:d7:19:47:74:99:a3:f2:76:44:ce:13:cd: 6a:9d:d1:97:f8:02:6f:51:ab:3b:99:24:d5:14:c1: 33:b2:fc:58:e1:54:27:25:f7:7c:a2:f5:e4:ca:d1: 17:27:b5:1c:99:05:09:b2:cc:1c:57:7b:7e:6c:48: 56:9e:f7:db:f2:5e:c6:24:60:a3:df:10:93:4c:d1: 99:3a:97:45:87:44:e1:f6:5a:a8:04:fc:76:17:d6: 69:35:fd:0b:df:60:54:26:77:60:b3:2a:4c:16:bc: 74:77:36:b5:41:9a:42:04:90:73:01:10:b3:cb:95: 5f:60:09:fc:3c:da:8f:3c:e3:a1:6b:01:45:8e:c5: e6:cf:92:e6:0b:cf:a8:e4:93:f4:b3:8e:0f:98:20: 9e:db:ae:36:76:a4:4c:94:15:a4:d0:fb:58:48:aa: fd:4b:3d:5c:87:76:78:43:b1:83:97:c8:b1:41:a7: ab:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:1A:1A:03:93:58:4C:D8:75:38:45:66:6A:96:5F:15:C1:C2:8B:C7 X509v3 Authority Key Identifier: keyid:0F:CD:64:EA:F2:59:48:22:F3:F9:A2:EB:CD:19:DB:9B:7F:A7:0D:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:4e:2f:8e:21:f5:63:78:b6:06:a9:bf:76:23:4e:1b:09:b4: 2b:cc:d1:14:1a:c4:a0:c5:08:07:c0:ce:5f:79:ee:c0:75:f1: 7d:bf:2b:94:e3:ac:90:59:3d:00:5e:57:58:21:65:f2:85:a7: 1f:35:b8:da:2d:33:31:9d:16:05:61:3b:3e:77:67:e1:9e:6f: 56:2e:12:2a:23:10:ec:18:44:ba:ef:bc:b1:1e:a3:b9:9d:66: 0c:7f:80:cd:d7:56:ee:09:56:60:0f:dc:85:b0:e2:f3:30:4a: 30:55:cb:a1:ed:3e:2e:b9:1f:62:cb:b9:33:74:24:66:fc:3a: ac:a8:e7:3b:37:f0:2c:57:e3:4a:31:5e:d0:3e:6d:43:62:82: 5c:c3:e2:16:1e:22:e5:b8:60:35:3d:8a:83:68:da:6b:ff:55: 9d:26:5b:63:1f:35:af:23:e1:69:c1:36:e6:c1:47:04:48:0c: b0:50:05:c1:1f:23:9f:37:86:81:ea:71:95:06:b5:5e:21:c1: cb:36:f7:eb:d2:98:5b:bc:30:e8:f4:47:5a:c8:df:0d:3b:7d: 2b:8d:09:7c:35:82:6b:69:d9:e1:91:96:85:8c:9c:67:ed:19: 27:4c:0b:f4:65:c0:de:ba:a6:5b:18:eb:ac:c2:9a:a3:b1:39: ab:6b:ce:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsn5JIeBqH6a+H2ith6hvQfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmY2Q2NGVhZjI1OTQ4MjJmM2Y5YTJlYmNkMTlkYjliN2Zh NzBkOWEwHhcNMjUxMjE2MTYwMDQ5WhcNMjUxMjE3MTYwMDQ5WjAzMTEwLwYDVQQD EygwMzFhMWEwMzkzNTg0Y2Q4NzUzODQ1NjY2YTk2NWYxNWMxYzI4YmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwziY+tpsTsbHitptoB+7WlMrqJ+ q/zZuPoPM307TueXPE1b+rKHwO+AG9kO+EqWo4/4I7YAKp/KoRodVNo+/0m0oDFq Jpat0O31HDLXGUd0maPydkTOE81qndGX+AJvUas7mSTVFMEzsvxY4VQnJfd8ovXk ytEXJ7UcmQUJsswcV3t+bEhWnvfb8l7GJGCj3xCTTNGZOpdFh0Th9lqoBPx2F9Zp Nf0L32BUJndgsypMFrx0dza1QZpCBJBzARCzy5VfYAn8PNqPPOOhawFFjsXmz5Lm C8+o5JP0s44PmCCe2642dqRMlBWk0PtYSKr9Sz1ch3Z4Q7GDl8ixQaerbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAMaGgOTWEzYdThFZmqWXxXBwovHMB8GA1UdIwQY MBaAFA/NZOryWUgi8/mi680Z25t/pw2aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDgxazZ2SlpTQ0x6LWFMcnpSbmJtMy1uRFpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8wZTY1NDItM2FiZS00NWExLWE4Mzgt MWEzN2YxMDc2NTU3LzEvRDgxazZ2SlpTQ0x6LWFMcnpSbmJtMy1uRFpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi8wZTY1NDItM2FiZS00NWExLWE4MzgtMWEzN2YxMDc2NTU3 LzEvRDgxazZ2SlpTQ0x6LWFMcnpSbmJtMy1uRFpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuk4vjiH1 Y3i2Bqm/diNOGwm0K8zRFBrEoMUIB8DOX3nuwHXxfb8rlOOskFk9AF5XWCFl8oWn HzW42i0zMZ0WBWE7Pndn4Z5vVi4SKiMQ7BhEuu+8sR6juZ1mDH+AzddW7glWYA/c hbDi8zBKMFXLoe0+LrkfYsu5M3QkZvw6rKjnOzfwLFfjSjFe0D5tQ2KCXMPiFh4i 5bhgNT2Kg2jaa/9VnSZbYx81ryPhacE25sFHBEgMsFAFwR8jnzeGgepxlQa1XiHB yzb369KYW7ww6PRHWsjfDTt9K40JfDWCa2nZ4ZGWhYycZ+0ZJ0wL9GXA3rqmWxjr rMKao7E5q2vOQQ== -----END CERTIFICATE-----Generated at Tue Dec 16 20:03:03 2025 by rpki-client