This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft File: diY1mUnOzyQYxaLbIayrhd2Rk9g.mft (raw, json) Hash identifier: F97E+p5HCnUjB5AzEPGZOspB/2SYaUFJmDgT3XOWLuE= Subject key identifier: BA:C6:77:BC:47:52:9A:DF:4B:C1:60:F5:C5:62:C7:3A:3C:F2:40:CD Authority key identifier: 76:26:35:99:49:CE:CF:24:18:C5:A2:DB:21:AC:AB:85:DD:91:93:D8 Certificate issuer: /CN=7626359949cecf2418c5a2db21acab85dd9193d8 Certificate serial: 019B2DB0BEDC3DF5328960B71E27FA0BAB06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft Manifest number: 1781 Signing time: Wed 17 Dec 2025 19:01:56 +0000 Manifest this update: Wed 17 Dec 2025 19:01:56 +0000 Manifest next update: Thu 18 Dec 2025 19:01:56 +0000 Files and hashes: 1: 808eb-9aLu41roSMSaHO8r-sCJ0.roa (hash: rCM5eGiyr6wuq7y0i6XZdzgH6YJOrFxOSIfhu9ZqAu0=) 2: diY1mUnOzyQYxaLbIayrhd2Rk9g.crl (hash: EZ15oYi3hD/Asyu3hnoSIf3S9W5zCKloWQZONAPcQho=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.crl rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:b0:be:dc:3d:f5:32:89:60:b7:1e:27:fa:0b:ab:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7626359949cecf2418c5a2db21acab85dd9193d8 Validity Not Before: Dec 17 19:01:56 2025 GMT Not After : Dec 18 19:01:56 2025 GMT Subject: CN=bac677bc47529adf4bc160f5c562c73a3cf240cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a8:17:80:11:11:4f:8f:c1:41:8e:04:45:f1: e2:92:26:18:9a:0d:70:38:c3:af:5a:6a:3b:0d:0b: 05:8f:26:aa:be:99:45:3c:e3:7f:98:24:20:5d:b5: 39:b9:51:bd:73:57:0f:2e:57:d4:df:ba:52:e3:48: c1:58:cb:a4:ff:17:2f:b2:ec:ca:68:2e:f4:fa:d1: 9f:e5:5a:41:e2:de:95:18:42:9d:da:63:cb:74:ab: df:3d:92:7e:b6:73:f3:91:99:6d:69:4e:13:e4:e3: ff:10:e9:cd:9d:1f:a7:bc:31:cc:d1:be:a9:eb:0f: 3d:57:be:aa:3b:c2:54:79:93:9b:d9:fa:43:93:f0: 7f:15:be:7a:0c:4e:cf:19:91:88:20:61:c2:b5:1d: 66:2f:0c:cf:5a:f0:d9:54:da:5c:25:72:1e:e7:17: 93:7f:68:a7:f1:a4:2f:cf:d0:92:28:c6:17:95:52: a7:6b:2e:3c:a4:db:b6:71:8c:a0:ac:a3:34:6a:76: 87:05:88:b5:14:62:75:0d:85:d6:d9:50:15:32:ef: 0a:ee:b4:1f:dd:5a:b8:31:39:e1:d7:e2:0c:22:a5: 1e:0b:d3:b4:1d:a3:c6:fe:a4:db:4c:37:36:c4:73: e9:3a:d3:fb:81:79:37:04:9a:58:31:2f:0f:56:ee: 13:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:C6:77:BC:47:52:9A:DF:4B:C1:60:F5:C5:62:C7:3A:3C:F2:40:CD X509v3 Authority Key Identifier: keyid:76:26:35:99:49:CE:CF:24:18:C5:A2:DB:21:AC:AB:85:DD:91:93:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:b3:8a:11:d2:cc:5f:7a:2e:a4:fb:de:96:da:fd:5c:11:86: 91:ef:60:e9:50:58:67:f7:66:b4:87:c6:35:08:a8:30:43:54: 2e:9c:5d:3c:cd:45:df:44:d2:82:99:39:aa:ec:49:f1:d2:8a: f5:55:b1:a9:36:db:31:04:6d:a6:f2:6e:74:87:0f:f8:c0:bb: d8:44:ae:83:a1:fb:e1:da:40:c8:05:7d:47:14:16:6f:68:3d: db:2d:83:54:6a:a4:81:2f:6e:8f:8c:17:37:bb:94:30:44:d5: 5d:b1:db:19:c5:82:e6:5d:a0:0b:9e:a4:03:9d:ed:17:62:73: de:e5:cd:24:7f:89:33:8d:91:d8:be:38:b4:09:99:1a:4a:1a: 5b:34:c5:47:17:2c:d9:b1:4a:7d:45:10:a6:68:cd:6e:8f:f7: 2a:01:60:e8:2d:4d:0d:b1:9d:ce:de:f2:97:dc:e9:b6:ac:dd: 32:50:07:22:45:b2:4d:4f:f9:48:bf:68:4a:c6:9e:db:5c:00: bc:a2:d6:53:63:1a:49:cc:49:3e:48:aa:58:db:73:16:e2:13: c4:e3:63:a2:9c:89:6c:7f:58:a8:28:68:bf:a2:93:05:04:c1: c4:80:c6:dd:55:ce:0e:78:ab:b2:df:9e:62:10:ef:22:74:8a: 36:84:fc:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstsL7cPfUyiWC3Hif6C6sGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2MjYzNTk5NDljZWNmMjQxOGM1YTJkYjIxYWNhYjg1ZGQ5 MTkzZDgwHhcNMjUxMjE3MTkwMTU2WhcNMjUxMjE4MTkwMTU2WjAzMTEwLwYDVQQD EyhiYWM2NzdiYzQ3NTI5YWRmNGJjMTYwZjVjNTYyYzczYTNjZjI0MGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6gXgBERT4/BQY4ERfHikiYYmg1w OMOvWmo7DQsFjyaqvplFPON/mCQgXbU5uVG9c1cPLlfU37pS40jBWMuk/xcvsuzK aC70+tGf5VpB4t6VGEKd2mPLdKvfPZJ+tnPzkZltaU4T5OP/EOnNnR+nvDHM0b6p 6w89V76qO8JUeZOb2fpDk/B/Fb56DE7PGZGIIGHCtR1mLwzPWvDZVNpcJXIe5xeT f2in8aQvz9CSKMYXlVKnay48pNu2cYygrKM0anaHBYi1FGJ1DYXW2VAVMu8K7rQf 3Vq4MTnh1+IMIqUeC9O0HaPG/qTbTDc2xHPpOtP7gXk3BJpYMS8PVu4TvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLrGd7xHUprfS8Fg9cVixzo88kDNMB8GA1UdIwQY MBaAFHYmNZlJzs8kGMWi2yGsq4XdkZPYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGlZMW1Vbk96eVFZeGFMYklheXJoZDJSazlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9jM2MxM2UtOGY2MS00ZGZlLTk1MmMt YzgwNDA4M2U3ZDQ5LzEvZGlZMW1Vbk96eVFZeGFMYklheXJoZDJSazlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9jM2MxM2UtOGY2MS00ZGZlLTk1MmMtYzgwNDA4M2U3ZDQ5 LzEvZGlZMW1Vbk96eVFZeGFMYklheXJoZDJSazlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY7OKEdLM X3oupPveltr9XBGGke9g6VBYZ/dmtIfGNQioMENULpxdPM1F30TSgpk5quxJ8dKK 9VWxqTbbMQRtpvJudIcP+MC72ESug6H74dpAyAV9RxQWb2g92y2DVGqkgS9uj4wX N7uUMETVXbHbGcWC5l2gC56kA53tF2Jz3uXNJH+JM42R2L44tAmZGkoaWzTFRxcs 2bFKfUUQpmjNbo/3KgFg6C1NDbGdzt7yl9zptqzdMlAHIkWyTU/5SL9oSsae21wA vKLWU2MaScxJPkiqWNtzFuITxONjopyJbH9YqChov6KTBQTBxIDG3VXODnirst+e YhDvInSKNoT8fw== -----END CERTIFICATE-----Generated at Wed Dec 17 20:49:39 2025 by rpki-client