This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft File: d1szbD5Il6UrOcOtquzOxr9wzn0.mft (raw, json) Hash identifier: 1zz1IFZHY49+2gfbXVQu0vdzZh3Av6/UvvNhmXOBZ1c= Subject key identifier: 81:6C:C3:53:FD:DA:C4:24:A0:D6:D8:F9:D3:15:D7:60:C0:76:F4:57 Authority key identifier: 77:5B:33:6C:3E:48:97:A5:2B:39:C3:AD:AA:EC:CE:C6:BF:70:CE:7D Certificate issuer: /CN=775b336c3e4897a52b39c3adaaeccec6bf70ce7d Certificate serial: 019B42EEB602E3AAC70D6422B284C7586623 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d1szbD5Il6UrOcOtquzOxr9wzn0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft Manifest number: 16AF Signing time: Sun 21 Dec 2025 22:01:38 +0000 Manifest this update: Sun 21 Dec 2025 22:01:38 +0000 Manifest next update: Mon 22 Dec 2025 22:01:38 +0000 Files and hashes: 1: 1-jRnyFGmEx1CVoLDNNDO26bccvY.roa (hash: 23QvIcsUor9KhcMI2prwonWuUHDRgDZgiqunE4RPe6c=) 2: d1szbD5Il6UrOcOtquzOxr9wzn0.crl (hash: lw0lm5pP/HuGvZV5dwpj56p+AJxX3+AkqWotjN5azB4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.crl rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft rsync://rpki.ripe.net/repository/DEFAULT/d1szbD5Il6UrOcOtquzOxr9wzn0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:b6:02:e3:aa:c7:0d:64:22:b2:84:c7:58:66:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=775b336c3e4897a52b39c3adaaeccec6bf70ce7d Validity Not Before: Dec 21 22:01:38 2025 GMT Not After : Dec 22 22:01:38 2025 GMT Subject: CN=816cc353fddac424a0d6d8f9d315d760c076f457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ad:f8:c0:e5:83:d6:13:31:ec:d1:84:90:23: 02:8a:db:5f:3c:c2:d2:69:02:d0:da:6a:80:80:15: 1e:ca:eb:b3:17:6f:97:2a:f7:39:f7:97:e2:ba:aa: 0b:0f:0c:40:6d:5a:55:6a:62:b6:6d:38:d0:6e:28: 78:91:dd:40:8f:a8:12:db:d2:5e:1a:5b:11:f3:58: 37:04:9c:58:b8:65:cf:f4:78:4b:4b:9c:47:9c:3e: 68:d9:d2:a7:31:0a:9b:20:e8:c1:06:ed:79:1e:b7: 6f:a8:e6:9b:f3:36:96:4b:d2:f8:af:ae:2d:02:db: 13:38:2d:68:f8:f5:16:37:af:96:51:3d:cc:6f:8b: 92:3e:b3:d2:e6:cd:83:2c:53:a3:01:0f:76:e6:8e: 30:cb:96:3f:07:59:a8:15:d3:42:d3:7b:dc:d9:50: 16:c9:d2:3a:c9:e9:2c:c5:04:c6:64:37:c9:bb:34: 2c:8d:0e:5f:56:3e:1f:50:28:90:e6:97:c2:05:6a: 8d:a3:1b:03:c5:ed:e3:46:c6:d5:22:b3:a8:28:bf: 76:9a:ac:05:85:3a:31:9d:ca:d5:d8:dc:5b:d0:98: 8f:5a:53:1a:89:51:75:ea:23:49:c7:6e:88:d1:f4: 70:ff:ad:8e:3a:70:80:3b:c8:e1:df:30:4e:3a:ef: 6e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:6C:C3:53:FD:DA:C4:24:A0:D6:D8:F9:D3:15:D7:60:C0:76:F4:57 X509v3 Authority Key Identifier: keyid:77:5B:33:6C:3E:48:97:A5:2B:39:C3:AD:AA:EC:CE:C6:BF:70:CE:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1szbD5Il6UrOcOtquzOxr9wzn0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:77:60:be:3b:b4:10:e6:a0:75:d9:56:a4:44:02:1f:f1:c2: a2:4b:98:31:95:d5:21:7d:04:d0:6a:87:d5:8e:55:13:39:ae: 7e:48:6b:2c:03:ff:28:47:0d:5b:df:33:38:c5:df:6a:2b:b0: 58:c3:3d:1e:12:b4:dc:d9:d1:d9:1b:8c:6c:eb:42:c8:08:23: f9:da:df:49:57:d7:ca:2f:e6:db:84:b1:fb:2a:b4:7d:de:25: 0a:23:f5:ba:88:2b:5b:93:3f:e4:2e:51:57:5c:b5:33:f7:82: 0a:d9:96:32:bb:0b:49:52:b2:5a:b9:3c:08:b4:6f:a7:0d:e1: b2:a1:e6:8c:06:54:d6:96:02:be:2b:99:73:89:97:6d:f4:ac: 9d:d8:d1:c5:6c:fb:83:a5:e0:ac:98:73:71:1b:7c:99:1c:1f: da:04:f8:51:68:0a:d2:6e:e8:c7:77:00:23:15:12:cd:36:31: 76:a3:6d:a7:5b:1d:04:56:b9:70:28:ce:cf:ab:56:64:db:39: b3:b8:b2:b7:d5:95:b1:c3:c3:b0:05:ce:38:3e:e6:4c:8e:bb: 14:26:80:95:c3:bf:14:31:74:8d:75:f3:c0:cb:70:64:bb:1a: 74:aa:14:10:12:2d:6b:d9:c0:9b:95:11:56:95:54:b8:75:e6: 98:da:34:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7rYC46rHDWQisoTHWGYjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3NWIzMzZjM2U0ODk3YTUyYjM5YzNhZGFhZWNjZWM2YmY3 MGNlN2QwHhcNMjUxMjIxMjIwMTM4WhcNMjUxMjIyMjIwMTM4WjAzMTEwLwYDVQQD Eyg4MTZjYzM1M2ZkZGFjNDI0YTBkNmQ4ZjlkMzE1ZDc2MGMwNzZmNDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm634wOWD1hMx7NGEkCMCittfPMLS aQLQ2mqAgBUeyuuzF2+XKvc595fiuqoLDwxAbVpVamK2bTjQbih4kd1Aj6gS29Je GlsR81g3BJxYuGXP9HhLS5xHnD5o2dKnMQqbIOjBBu15HrdvqOab8zaWS9L4r64t AtsTOC1o+PUWN6+WUT3Mb4uSPrPS5s2DLFOjAQ925o4wy5Y/B1moFdNC03vc2VAW ydI6yeksxQTGZDfJuzQsjQ5fVj4fUCiQ5pfCBWqNoxsDxe3jRsbVIrOoKL92mqwF hToxncrV2Nxb0JiPWlMaiVF16iNJx26I0fRw/62OOnCAO8jh3zBOOu9u0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIFsw1P92sQkoNbY+dMV12DAdvRXMB8GA1UdIwQY MBaAFHdbM2w+SJelKznDrarszsa/cM59MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDFzemJENUlsNlVyT2NPdHF1ek94cjl3em4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8wMDQ3NmEtOGFjNy00NTZjLWI5M2Qt M2RjMTQxNzBkNjJhLzEvZDFzemJENUlsNlVyT2NPdHF1ek94cjl3em4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8wMDQ3NmEtOGFjNy00NTZjLWI5M2QtM2RjMTQxNzBkNjJh LzEvZDFzemJENUlsNlVyT2NPdHF1ek94cjl3em4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeXdgvju0 EOagddlWpEQCH/HCokuYMZXVIX0E0GqH1Y5VEzmufkhrLAP/KEcNW98zOMXfaiuw WMM9HhK03NnR2RuMbOtCyAgj+drfSVfXyi/m24Sx+yq0fd4lCiP1uogrW5M/5C5R V1y1M/eCCtmWMrsLSVKyWrk8CLRvpw3hsqHmjAZU1pYCviuZc4mXbfSsndjRxWz7 g6XgrJhzcRt8mRwf2gT4UWgK0m7ox3cAIxUSzTYxdqNtp1sdBFa5cCjOz6tWZNs5 s7iyt9WVscPDsAXOOD7mTI67FCaAlcO/FDF0jXXzwMtwZLsadKoUEBIta9nAm5UR VpVUuHXmmNo00g== -----END CERTIFICATE-----Generated at Mon Dec 22 02:16:33 2025 by rpki-client