This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/5e3249-bebf-4070-9fcd-1b1fc79d0551/1/diI4ozxVDMXfAkTz_G49vZHkw54.mft File: diI4ozxVDMXfAkTz_G49vZHkw54.mft (raw, json) Hash identifier: XdMuNNgQpp1MqJqfnmYAipXu4TvPCj5V+/1HyGmwmX8= Subject key identifier: 68:ED:97:50:29:B0:2F:F1:D5:33:98:1D:5F:3D:DA:21:41:16:1D:05 Authority key identifier: 76:22:38:A3:3C:55:0C:C5:DF:02:44:F3:FC:6E:3D:BD:91:E4:C3:9E Certificate issuer: /CN=762238a33c550cc5df0244f3fc6e3dbd91e4c39e Certificate serial: 019B48EFCE8BD4F8F808BB34660EDA0D3C36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/diI4ozxVDMXfAkTz_G49vZHkw54.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/5e3249-bebf-4070-9fcd-1b1fc79d0551/1/diI4ozxVDMXfAkTz_G49vZHkw54.mft Manifest number: 0BF9 Signing time: Tue 23 Dec 2025 02:00:34 +0000 Manifest this update: Tue 23 Dec 2025 02:00:34 +0000 Manifest next update: Wed 24 Dec 2025 02:00:34 +0000 Files and hashes: 1: diI4ozxVDMXfAkTz_G49vZHkw54.crl (hash: xsaDAB6zW34xNg/AQii+HVN+Ay1YP9Prk+OQmoN9hPo=) 2: wJoEv1cTcMs89DVqbv88rXmkjBs.roa (hash: dwNiZrwk++xFBCbnEtCywNysmHqCMLzFmgUxU3OD8L4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/5e3249-bebf-4070-9fcd-1b1fc79d0551/1/diI4ozxVDMXfAkTz_G49vZHkw54.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/5e3249-bebf-4070-9fcd-1b1fc79d0551/1/diI4ozxVDMXfAkTz_G49vZHkw54.mft rsync://rpki.ripe.net/repository/DEFAULT/diI4ozxVDMXfAkTz_G49vZHkw54.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:ef:ce:8b:d4:f8:f8:08:bb:34:66:0e:da:0d:3c:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=762238a33c550cc5df0244f3fc6e3dbd91e4c39e Validity Not Before: Dec 23 02:00:34 2025 GMT Not After : Dec 24 02:00:34 2025 GMT Subject: CN=68ed975029b02ff1d533981d5f3dda2141161d05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:dd:2b:8d:74:10:bb:1b:92:49:76:f3:36:86: c5:37:31:38:3d:6c:5f:12:11:6f:91:6b:ab:e8:f4: 0c:c2:a3:19:8c:da:0e:d7:81:2b:e7:d4:fc:88:7a: c5:09:78:61:04:b8:0d:c6:b1:d7:3e:f9:6f:1c:ec: 02:64:f3:fd:35:e4:8f:92:45:48:ae:35:8e:68:44: 2d:be:be:6d:53:17:8c:e2:c2:13:76:8f:06:3b:eb: 1d:53:1c:6a:12:bc:d3:b7:4d:4e:0a:c9:e7:68:0f: d2:51:fc:56:74:1e:cf:74:97:9c:e8:87:f7:9c:4d: f3:b7:85:9f:d7:af:d7:28:86:a5:6d:72:cd:b2:e7: 20:7d:ee:fe:84:d9:ee:d9:2e:45:1c:a1:c5:a4:cb: d1:1c:e2:07:1d:d4:6f:6e:65:f4:f6:17:3c:fb:e6: 53:48:6c:90:bb:84:db:36:69:cf:89:75:de:f1:49: 33:cb:81:3a:a1:41:02:f0:f1:6f:92:3b:30:01:bd: c5:3d:1e:d2:e2:97:c0:58:d2:c1:3b:0d:40:f1:bd: a4:28:0d:d3:9e:f0:c7:cc:e1:d8:15:53:bc:7b:d0: 83:f1:87:89:25:dc:d5:ae:13:d3:70:ed:12:b9:fc: af:ee:6f:0e:6f:58:a9:54:e5:8d:c6:57:6d:09:82: 72:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:ED:97:50:29:B0:2F:F1:D5:33:98:1D:5F:3D:DA:21:41:16:1D:05 X509v3 Authority Key Identifier: keyid:76:22:38:A3:3C:55:0C:C5:DF:02:44:F3:FC:6E:3D:BD:91:E4:C3:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diI4ozxVDMXfAkTz_G49vZHkw54.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5e3249-bebf-4070-9fcd-1b1fc79d0551/1/diI4ozxVDMXfAkTz_G49vZHkw54.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5e3249-bebf-4070-9fcd-1b1fc79d0551/1/diI4ozxVDMXfAkTz_G49vZHkw54.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:35:22:06:da:86:f2:0f:88:7f:95:81:c8:4c:be:d8:44:2d: 7b:73:4b:b5:8e:17:09:22:ca:e3:ee:6e:43:81:8c:5c:d4:b3: 1d:03:53:4d:81:64:ad:f4:31:e4:b7:0f:e4:b9:f0:6d:c9:6f: 01:ff:3e:bb:a2:4c:e4:b8:e5:5e:47:9a:aa:1c:e2:d0:04:ce: 00:51:f1:91:5a:03:9c:c5:49:0e:cb:19:12:cf:2c:ff:e7:99: 3f:4c:9f:3d:63:4b:74:66:53:f7:3f:2b:07:e5:c2:44:7a:ef: af:23:da:a5:36:66:79:e2:19:cc:68:14:9e:ee:1a:6d:42:62: 00:f9:10:4e:6f:25:58:f2:5c:27:d6:ee:89:c2:72:4a:60:b5: 69:61:80:e1:d0:34:5b:72:ce:51:97:26:29:e3:2b:65:e1:75: 19:92:7b:90:25:88:0f:99:63:79:eb:af:8e:96:87:3c:66:ad: f2:80:cc:83:1e:c0:67:df:73:2f:c3:a2:5b:a5:9f:cd:79:f4: 74:5c:f9:7f:d6:ae:63:77:db:a5:78:42:a4:62:4e:c0:ab:f0: e6:e2:73:e1:5b:b3:df:ea:1a:9f:73:26:e3:5b:93:1d:33:60: ed:5e:67:a1:7a:26:90:07:fe:2c:ca:c7:33:54:c3:2f:15:16: fd:1b:a6:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtI786L1Pj4CLs0Zg7aDTw2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2MjIzOGEzM2M1NTBjYzVkZjAyNDRmM2ZjNmUzZGJkOTFl NGMzOWUwHhcNMjUxMjIzMDIwMDM0WhcNMjUxMjI0MDIwMDM0WjAzMTEwLwYDVQQD Eyg2OGVkOTc1MDI5YjAyZmYxZDUzMzk4MWQ1ZjNkZGEyMTQxMTYxZDA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2d0rjXQQuxuSSXbzNobFNzE4PWxf EhFvkWur6PQMwqMZjNoO14Er59T8iHrFCXhhBLgNxrHXPvlvHOwCZPP9NeSPkkVI rjWOaEQtvr5tUxeM4sITdo8GO+sdUxxqErzTt01OCsnnaA/SUfxWdB7PdJec6If3 nE3zt4Wf16/XKIalbXLNsucgfe7+hNnu2S5FHKHFpMvRHOIHHdRvbmX09hc8++ZT SGyQu4TbNmnPiXXe8Ukzy4E6oUEC8PFvkjswAb3FPR7S4pfAWNLBOw1A8b2kKA3T nvDHzOHYFVO8e9CD8YeJJdzVrhPTcO0Sufyv7m8Ob1ipVOWNxldtCYJy8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGjtl1ApsC/x1TOYHV892iFBFh0FMB8GA1UdIwQY MBaAFHYiOKM8VQzF3wJE8/xuPb2R5MOeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGlJNG96eFZETVhmQWtUel9HNDl2WkhrdzU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS81ZTMyNDktYmViZi00MDcwLTlmY2Qt MWIxZmM3OWQwNTUxLzEvZGlJNG96eFZETVhmQWtUel9HNDl2WkhrdzU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS81ZTMyNDktYmViZi00MDcwLTlmY2QtMWIxZmM3OWQwNTUx LzEvZGlJNG96eFZETVhmQWtUel9HNDl2WkhrdzU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGjUiBtqG 8g+If5WByEy+2EQte3NLtY4XCSLK4+5uQ4GMXNSzHQNTTYFkrfQx5LcP5Lnwbclv Af8+u6JM5LjlXkeaqhzi0ATOAFHxkVoDnMVJDssZEs8s/+eZP0yfPWNLdGZT9z8r B+XCRHrvryPapTZmeeIZzGgUnu4abUJiAPkQTm8lWPJcJ9buicJySmC1aWGA4dA0 W3LOUZcmKeMrZeF1GZJ7kCWID5ljeeuvjpaHPGat8oDMgx7AZ99zL8OiW6WfzXn0 dFz5f9auY3fbpXhCpGJOwKvw5uJz4Vuz3+oan3Mm41uTHTNg7V5noXomkAf+LMrH M1TDLxUW/RumdQ== -----END CERTIFICATE-----Generated at Tue Dec 23 06:46:35 2025 by rpki-client