This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft File: dUE1hHAyFWSttCp213OuPK57vVY.mft (raw, json) Hash identifier: QqfZ1h6AHDlqFNtQCCsCfjU5upH3KcAF4m6n8nrGKVM= Subject key identifier: 54:C7:10:57:D3:86:C4:89:9A:47:E4:94:B4:94:D8:42:3F:67:42:40 Authority key identifier: 75:41:35:84:70:32:15:64:AD:B4:2A:76:D7:73:AE:3C:AE:7B:BD:56 Certificate issuer: /CN=7541358470321564adb42a76d773ae3cae7bbd56 Certificate serial: 019B5976F105F54A0EB0B1570490CFB5DC29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft Manifest number: 05E2 Signing time: Fri 26 Dec 2025 07:02:05 +0000 Manifest this update: Fri 26 Dec 2025 07:02:05 +0000 Manifest next update: Sat 27 Dec 2025 07:02:05 +0000 Files and hashes: 1: dUE1hHAyFWSttCp213OuPK57vVY.crl (hash: NCxnQsSbVfrigg1UqR1w1lJBNoKEXJe3xlCe9UPDu/Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:f1:05:f5:4a:0e:b0:b1:57:04:90:cf:b5:dc:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7541358470321564adb42a76d773ae3cae7bbd56 Validity Not Before: Dec 26 07:02:05 2025 GMT Not After : Dec 27 07:02:05 2025 GMT Subject: CN=54c71057d386c4899a47e494b494d8423f674240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d0:56:00:11:e6:a5:95:4c:33:71:cc:1f:65: eb:a2:cb:db:b3:3f:bf:c1:50:d4:39:e2:3f:c8:8e: f7:2b:57:37:3a:1c:79:ad:03:de:6b:d1:c9:56:d9: 1e:f0:8c:66:19:a8:e9:3a:cc:d3:c6:3a:57:d7:6b: bd:d6:de:12:5d:1f:b2:15:41:d9:a0:b1:d4:66:71: bd:81:f0:ea:07:0a:4e:d5:98:67:a4:d4:e9:19:bc: ae:c1:3b:c0:fe:cf:17:dc:f3:14:24:43:a5:a4:9f: 60:17:b2:ff:ff:0d:bc:3b:8a:1c:58:9e:47:61:81: 73:31:7f:f4:cc:83:22:e1:4c:14:e0:20:77:a5:ae: 2e:15:c6:dc:86:54:b6:ac:48:15:36:c3:0d:c0:44: 10:4e:d2:fc:d9:51:f1:20:cd:75:d5:94:d7:2a:f5: 76:df:70:c2:60:48:e9:65:eb:eb:4c:5a:27:3a:55: 18:e7:ba:41:40:b4:83:34:53:d4:ec:5c:cc:e2:0c: 3d:3b:92:64:0d:29:d7:9c:25:60:68:2a:d8:28:5c: 30:ca:99:85:93:c4:d6:5f:ef:66:84:43:ac:28:e1: 4b:80:03:09:1a:3a:46:cb:cf:c8:6b:41:62:f7:cb: fd:a2:3e:68:be:2d:2e:2a:1b:82:43:1e:33:04:7c: 55:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:C7:10:57:D3:86:C4:89:9A:47:E4:94:B4:94:D8:42:3F:67:42:40 X509v3 Authority Key Identifier: keyid:75:41:35:84:70:32:15:64:AD:B4:2A:76:D7:73:AE:3C:AE:7B:BD:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:c9:79:e7:fc:5b:5a:88:d3:35:88:88:29:44:8b:23:70:2b: 8b:63:ce:7a:b0:e8:d1:ca:46:89:ab:a1:89:e0:8c:6e:b3:b9: b8:b9:42:ee:28:b7:a5:7b:aa:ff:35:fd:fb:99:61:21:bb:91: 77:e1:65:a0:77:33:92:cd:3b:75:41:29:1e:55:c2:8d:2c:8f: a6:53:a5:2b:7a:fc:44:59:e6:cd:c3:bb:4b:bb:61:75:f9:ba: ea:ff:88:ca:f6:11:02:58:88:19:12:40:27:fe:93:6c:3b:3c: 9f:94:6d:e9:5e:30:66:05:b8:79:bc:f8:af:82:2e:31:ba:ea: 1a:72:f5:e8:00:92:5b:1d:42:2a:06:b3:13:c3:c4:30:f5:6e: a9:2f:3b:17:4a:94:10:77:a1:62:12:b7:e8:25:be:26:28:7b: b0:b9:48:c8:61:87:80:1f:f8:81:94:0f:2a:57:cf:09:df:43: 78:c5:ca:70:b4:7c:ce:ce:fe:e0:f4:c9:50:ff:9e:6e:26:2d: 55:d6:70:68:10:d1:fa:9d:1f:ef:ee:55:fd:d1:71:27:f6:0f: fb:86:1b:56:2a:a3:77:5b:43:a6:e1:d9:22:00:5d:bd:d1:4f: e0:27:35:93:fa:20:45:06:00:c5:e8:a8:f9:e4:3a:cb:95:a9: ab:dd:5d:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdvEF9UoOsLFXBJDPtdwpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1NDEzNTg0NzAzMjE1NjRhZGI0MmE3NmQ3NzNhZTNjYWU3 YmJkNTYwHhcNMjUxMjI2MDcwMjA1WhcNMjUxMjI3MDcwMjA1WjAzMTEwLwYDVQQD Eyg1NGM3MTA1N2QzODZjNDg5OWE0N2U0OTRiNDk0ZDg0MjNmNjc0MjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9BWABHmpZVMM3HMH2Xrosvbsz+/ wVDUOeI/yI73K1c3Ohx5rQPea9HJVtke8IxmGajpOszTxjpX12u91t4SXR+yFUHZ oLHUZnG9gfDqBwpO1ZhnpNTpGbyuwTvA/s8X3PMUJEOlpJ9gF7L//w28O4ocWJ5H YYFzMX/0zIMi4UwU4CB3pa4uFcbchlS2rEgVNsMNwEQQTtL82VHxIM111ZTXKvV2 33DCYEjpZevrTFonOlUY57pBQLSDNFPU7FzM4gw9O5JkDSnXnCVgaCrYKFwwypmF k8TWX+9mhEOsKOFLgAMJGjpGy8/Ia0Fi98v9oj5ovi0uKhuCQx4zBHxViQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFTHEFfThsSJmkfklLSU2EI/Z0JAMB8GA1UdIwQY MBaAFHVBNYRwMhVkrbQqdtdzrjyue71WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFVFMWhIQXlGV1N0dENwMjEzT3VQSzU3dlZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9jMTYwNDMtYTNkZS00YWIzLTllNTYt ODI2NWE5NmU0MjBkLzEvZFVFMWhIQXlGV1N0dENwMjEzT3VQSzU3dlZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9jMTYwNDMtYTNkZS00YWIzLTllNTYtODI2NWE5NmU0MjBk LzEvZFVFMWhIQXlGV1N0dENwMjEzT3VQSzU3dlZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaMl55/xb WojTNYiIKUSLI3Ari2POerDo0cpGiauhieCMbrO5uLlC7ii3pXuq/zX9+5lhIbuR d+FloHczks07dUEpHlXCjSyPplOlK3r8RFnmzcO7S7thdfm66v+IyvYRAliIGRJA J/6TbDs8n5Rt6V4wZgW4ebz4r4IuMbrqGnL16ACSWx1CKgazE8PEMPVuqS87F0qU EHehYhK36CW+Jih7sLlIyGGHgB/4gZQPKlfPCd9DeMXKcLR8zs7+4PTJUP+ebiYt VdZwaBDR+p0f7+5V/dFxJ/YP+4YbViqjd1tDpuHZIgBdvdFP4Cc1k/ogRQYAxeio +eQ6y5Wpq91d+g== -----END CERTIFICATE-----Generated at Fri Dec 26 15:57:04 2025 by rpki-client