This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c596d9-9d9a-4081-a2f0-5446d86bcfc6/1/d-L_RonUITUPdqNzvBGT5FG4HvU.mft File: d-L_RonUITUPdqNzvBGT5FG4HvU.mft (raw, json) Hash identifier: EEnEyQ9szWVA9K1cQ7o1ZyzBQVh0bjhy0kYgd5uZ550= Subject key identifier: 1D:A6:0D:C1:78:1A:80:3F:BA:A9:8B:AD:39:A5:0E:A7:C5:52:A8:60 Authority key identifier: 77:E2:FF:46:89:D4:21:35:0F:76:A3:73:BC:11:93:E4:51:B8:1E:F5 Certificate issuer: /CN=77e2ff4689d421350f76a373bc1193e451b81ef5 Certificate serial: 019B5A5157C5F9748317ED0A23F278B60B50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-L_RonUITUPdqNzvBGT5FG4HvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c596d9-9d9a-4081-a2f0-5446d86bcfc6/1/d-L_RonUITUPdqNzvBGT5FG4HvU.mft Manifest number: 017F Signing time: Fri 26 Dec 2025 11:00:38 +0000 Manifest this update: Fri 26 Dec 2025 11:00:38 +0000 Manifest next update: Sat 27 Dec 2025 11:00:38 +0000 Files and hashes: 1: _jCuY0H7p6bIiBFSZYJo7QRa2GM.roa (hash: TpMghtYoXA8sj9zv0aUbBiasB0uWw4MufaB/nWeBcDs=) 2: d-L_RonUITUPdqNzvBGT5FG4HvU.crl (hash: LKJ1zgYiVoSqgOIcHN6gmBVnwQVSRFgcOlyiLFy3PhQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/c596d9-9d9a-4081-a2f0-5446d86bcfc6/1/d-L_RonUITUPdqNzvBGT5FG4HvU.crl rsync://rpki.ripe.net/repository/DEFAULT/de/c596d9-9d9a-4081-a2f0-5446d86bcfc6/1/d-L_RonUITUPdqNzvBGT5FG4HvU.mft rsync://rpki.ripe.net/repository/DEFAULT/d-L_RonUITUPdqNzvBGT5FG4HvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:57:c5:f9:74:83:17:ed:0a:23:f2:78:b6:0b:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77e2ff4689d421350f76a373bc1193e451b81ef5 Validity Not Before: Dec 26 11:00:38 2025 GMT Not After : Dec 27 11:00:38 2025 GMT Subject: CN=1da60dc1781a803fbaa98bad39a50ea7c552a860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ce:db:88:81:82:57:85:8b:f1:20:25:3e:dd: 60:ae:20:c4:e0:09:4a:e0:60:3d:57:10:c8:b7:8c: 2c:58:0f:d3:04:8a:9d:af:f5:84:12:d3:22:44:29: 63:b8:08:cb:83:02:f4:75:2b:1f:6b:60:04:74:72: a0:1f:8d:a9:18:84:a0:29:f7:00:4f:dc:24:5f:07: 01:a1:b7:e7:db:b5:0c:36:0c:62:0b:13:69:f6:8c: 92:ee:13:5a:44:ec:5c:62:46:32:96:f8:10:84:5b: f3:c9:e2:ad:ba:21:ac:4f:41:b5:ca:85:bc:d4:89: b0:d5:e7:17:4c:e9:6a:11:60:51:9f:99:0c:02:14: ee:b8:87:09:dd:50:50:e0:00:1a:a8:40:a9:da:9f: e4:b3:48:d1:7f:70:98:9d:95:69:af:5c:1e:ef:a6: 98:88:c5:57:00:5a:02:4d:d1:7e:2a:a3:86:fc:fb: 6d:1f:a7:91:d7:63:13:17:28:1b:1f:93:ac:ca:ea: 4e:03:d4:72:4a:08:87:49:7e:69:99:5a:87:f0:6e: 67:f7:dd:4c:cb:fb:12:6d:b0:f9:ad:97:b9:0d:db: ba:e6:f0:8d:69:e0:b7:b7:27:1b:22:a8:9a:c3:f5: ae:08:9e:d3:f3:c1:a3:59:76:41:df:59:d5:3f:5c: af:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:A6:0D:C1:78:1A:80:3F:BA:A9:8B:AD:39:A5:0E:A7:C5:52:A8:60 X509v3 Authority Key Identifier: keyid:77:E2:FF:46:89:D4:21:35:0F:76:A3:73:BC:11:93:E4:51:B8:1E:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-L_RonUITUPdqNzvBGT5FG4HvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c596d9-9d9a-4081-a2f0-5446d86bcfc6/1/d-L_RonUITUPdqNzvBGT5FG4HvU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c596d9-9d9a-4081-a2f0-5446d86bcfc6/1/d-L_RonUITUPdqNzvBGT5FG4HvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:86:ca:51:52:66:6f:ba:56:77:14:c9:34:85:72:e5:47:31: 56:35:44:03:84:d5:6e:9d:73:93:15:cb:5f:2d:eb:69:30:16: d4:ad:12:01:d6:b9:76:70:94:bc:ae:82:7c:59:fa:01:f9:85: 96:39:61:45:ad:52:90:d1:72:fa:21:06:ca:64:19:4d:f7:34: 49:b3:63:7a:d7:55:a1:a9:67:22:f4:bd:2f:0e:44:d2:33:bd: 72:47:2a:83:46:72:f4:db:aa:57:62:93:45:14:1e:b0:75:af: b6:ee:e0:cb:cd:51:7b:32:d7:51:fa:06:a1:de:77:b5:35:b3: 15:d0:ad:e5:69:28:14:19:09:2b:82:f0:f2:a4:be:68:17:b7: 75:b7:ec:a2:d5:ca:88:18:27:ad:70:98:62:67:2f:34:66:d7: ec:c5:01:99:ec:a5:95:5c:e5:f8:b8:f9:06:7c:a2:9a:cc:a4: 9b:5d:42:04:d9:d3:4c:86:d7:57:b8:25:24:21:18:d8:97:b9: fc:47:d1:07:d0:9a:7a:3a:16:80:5a:74:df:8d:80:74:26:bd: 15:56:7a:e8:42:7c:7c:a0:b4:51:90:83:4d:93:88:77:9a:3c: 6f:00:1e:bd:64:b8:07:b7:10:8d:78:1a:ff:bc:88:85:5f:4b: ff:dd:f6:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUVfF+XSDF+0KI/J4tgtQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3ZTJmZjQ2ODlkNDIxMzUwZjc2YTM3M2JjMTE5M2U0NTFi ODFlZjUwHhcNMjUxMjI2MTEwMDM4WhcNMjUxMjI3MTEwMDM4WjAzMTEwLwYDVQQD EygxZGE2MGRjMTc4MWE4MDNmYmFhOThiYWQzOWE1MGVhN2M1NTJhODYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAus7biIGCV4WL8SAlPt1griDE4AlK 4GA9VxDIt4wsWA/TBIqdr/WEEtMiRCljuAjLgwL0dSsfa2AEdHKgH42pGISgKfcA T9wkXwcBobfn27UMNgxiCxNp9oyS7hNaROxcYkYylvgQhFvzyeKtuiGsT0G1yoW8 1Imw1ecXTOlqEWBRn5kMAhTuuIcJ3VBQ4AAaqECp2p/ks0jRf3CYnZVpr1we76aY iMVXAFoCTdF+KqOG/PttH6eR12MTFygbH5OsyupOA9RySgiHSX5pmVqH8G5n991M y/sSbbD5rZe5Ddu65vCNaeC3tycbIqiaw/WuCJ7T88GjWXZB31nVP1yvEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB2mDcF4GoA/uqmLrTmlDqfFUqhgMB8GA1UdIwQY MBaAFHfi/0aJ1CE1D3ajc7wRk+RRuB71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZC1MX1JvblVJVFVQZHFOenZCR1Q1Rkc0SHZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9jNTk2ZDktOWQ5YS00MDgxLWEyZjAt NTQ0NmQ4NmJjZmM2LzEvZC1MX1JvblVJVFVQZHFOenZCR1Q1Rkc0SHZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9jNTk2ZDktOWQ5YS00MDgxLWEyZjAtNTQ0NmQ4NmJjZmM2 LzEvZC1MX1JvblVJVFVQZHFOenZCR1Q1Rkc0SHZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApYbKUVJm b7pWdxTJNIVy5UcxVjVEA4TVbp1zkxXLXy3raTAW1K0SAda5dnCUvK6CfFn6AfmF ljlhRa1SkNFy+iEGymQZTfc0SbNjetdVoalnIvS9Lw5E0jO9ckcqg0Zy9NuqV2KT RRQesHWvtu7gy81RezLXUfoGod53tTWzFdCt5WkoFBkJK4Lw8qS+aBe3dbfsotXK iBgnrXCYYmcvNGbX7MUBmeyllVzl+Lj5Bnyimsykm11CBNnTTIbXV7glJCEY2Je5 /EfRB9CaejoWgFp0342AdCa9FVZ66EJ8fKC0UZCDTZOId5o8bwAevWS4B7cQjXga /7yIhV9L/932rg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:46 2025 by rpki-client