This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft File: d92irQmMangU-yWLRpsNhM4kxKc.mft (raw, json) Hash identifier: e+Cp9lLzME0AwXCEBJ3vbLSHvaJxhj81g16peCPYUK0= Subject key identifier: BA:78:08:EF:3A:D1:74:6B:F0:1C:AB:9B:4F:40:8C:E9:8D:7D:29:90 Authority key identifier: 77:DD:A2:AD:09:8C:6A:78:14:FB:25:8B:46:9B:0D:84:CE:24:C4:A7 Certificate issuer: /CN=77dda2ad098c6a7814fb258b469b0d84ce24c4a7 Certificate serial: 019B5E9C0B222B1FE3302BB928BD65FEBBF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft Manifest number: 1799 Signing time: Sat 27 Dec 2025 07:00:43 +0000 Manifest this update: Sat 27 Dec 2025 07:00:43 +0000 Manifest next update: Sun 28 Dec 2025 07:00:43 +0000 Files and hashes: 1: auoQhH7aBJnI1g3L4GojEkAsQQY.roa (hash: gWIiP5OtZwTCpaoFewi8x05lW349LkZSfT6+AFOcha0=) 2: d92irQmMangU-yWLRpsNhM4kxKc.crl (hash: jW895Z5GlZazwktTOt6Qi/4MvAd3TFZPsignBBSzenQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.crl rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 07:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5e:9c:0b:22:2b:1f:e3:30:2b:b9:28:bd:65:fe:bb:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77dda2ad098c6a7814fb258b469b0d84ce24c4a7 Validity Not Before: Dec 27 07:00:43 2025 GMT Not After : Dec 28 07:00:43 2025 GMT Subject: CN=ba7808ef3ad1746bf01cab9b4f408ce98d7d2990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:31:e5:7d:4f:cf:5a:fe:3c:37:6b:a0:9a:fc: b9:5b:b5:59:b2:f3:aa:a1:bc:0c:1a:3e:f0:4e:14: cd:28:1d:a4:a0:76:83:be:6e:3e:79:82:c8:80:7c: d1:3a:02:a1:58:f5:5e:b4:15:90:5e:f4:16:89:73: 56:11:13:30:21:a7:81:b1:2a:c9:a4:f9:36:f7:e8: 26:3e:0d:b4:77:28:2e:d1:16:04:df:23:c2:a9:1d: 6f:94:ec:4b:7e:eb:26:64:c4:76:f1:e7:41:f6:02: 28:82:9e:0e:09:61:c5:07:69:f9:34:17:78:f7:d3: 81:3d:fe:4d:13:65:be:a2:ca:e8:19:c5:35:3f:9b: 7f:49:b1:c2:b9:9e:e7:95:f4:7e:6d:b6:f9:25:2f: d0:d3:9d:9b:64:38:b2:dc:fa:c7:09:e3:e0:f5:f9: 88:b4:4b:70:32:1b:ef:c1:a6:4d:b8:9c:8f:28:66: 29:72:59:f0:f6:9b:1a:ef:38:88:68:8b:cc:b5:79: 49:c9:a8:80:ff:02:92:d6:c7:40:91:39:56:6c:54: 09:ed:08:35:b9:a6:79:32:d1:c3:e6:e5:3f:1f:52: 91:a1:4b:26:99:13:fd:5f:eb:58:31:61:b1:6d:74: 86:d8:b0:46:f7:51:c6:78:f1:7f:eb:93:aa:01:3d: 56:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:78:08:EF:3A:D1:74:6B:F0:1C:AB:9B:4F:40:8C:E9:8D:7D:29:90 X509v3 Authority Key Identifier: keyid:77:DD:A2:AD:09:8C:6A:78:14:FB:25:8B:46:9B:0D:84:CE:24:C4:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:85:5d:e0:6b:1a:e5:57:92:d3:b3:29:f6:c7:06:71:6f:35: 00:8e:d9:5f:a5:e7:08:d8:20:1f:df:60:7e:40:f0:d8:0b:0b: 4f:56:4e:82:0b:0f:b2:b3:57:dd:fd:25:90:b7:67:a5:98:0e: 98:1b:77:71:7a:b1:9d:8e:27:f5:9d:6e:c0:47:df:70:ee:78: 3b:db:69:d9:cd:92:fc:dd:82:39:b4:18:18:76:f2:3e:38:3a: 79:14:48:dc:97:a5:13:91:b1:c3:70:be:3f:da:d0:56:94:b1: cd:6a:9b:39:cf:70:dd:2a:ac:66:4f:fe:cb:8d:e9:44:a3:0b: 8a:27:08:a8:1e:ea:ac:84:7f:bb:68:ae:ec:05:c8:8c:a1:ed: 18:4a:e8:3b:e7:54:61:2f:f1:2b:bc:f2:f9:9e:b9:38:ec:52: 67:36:b3:29:09:1a:d1:76:b5:b1:94:e3:40:62:e0:ae:90:66: b0:83:90:95:42:19:d9:a9:e2:23:f5:69:0b:ee:03:7f:48:3b: c7:8e:bb:43:2a:2b:cc:b8:60:f3:8f:a4:b4:48:81:a0:49:1d: fa:d3:1f:e8:56:b8:c7:51:9d:13:84:78:b2:5b:25:02:75:19: 6f:00:f0:e2:45:04:42:6b:0d:1b:38:ac:10:bf:be:55:92:a9: fd:9e:c0:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtenAsiKx/jMCu5KL1l/rv4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3ZGRhMmFkMDk4YzZhNzgxNGZiMjU4YjQ2OWIwZDg0Y2Uy NGM0YTcwHhcNMjUxMjI3MDcwMDQzWhcNMjUxMjI4MDcwMDQzWjAzMTEwLwYDVQQD EyhiYTc4MDhlZjNhZDE3NDZiZjAxY2FiOWI0ZjQwOGNlOThkN2QyOTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTHlfU/PWv48N2ugmvy5W7VZsvOq obwMGj7wThTNKB2koHaDvm4+eYLIgHzROgKhWPVetBWQXvQWiXNWERMwIaeBsSrJ pPk29+gmPg20dygu0RYE3yPCqR1vlOxLfusmZMR28edB9gIogp4OCWHFB2n5NBd4 99OBPf5NE2W+osroGcU1P5t/SbHCuZ7nlfR+bbb5JS/Q052bZDiy3PrHCePg9fmI tEtwMhvvwaZNuJyPKGYpclnw9psa7ziIaIvMtXlJyaiA/wKS1sdAkTlWbFQJ7Qg1 uaZ5MtHD5uU/H1KRoUsmmRP9X+tYMWGxbXSG2LBG91HGePF/65OqAT1W5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLp4CO860XRr8Byrm09AjOmNfSmQMB8GA1UdIwQY MBaAFHfdoq0JjGp4FPsli0abDYTOJMSnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDkyaXJRbU1hbmdVLXlXTFJwc05oTTRreEtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC84ODU0NTctNzBmMi00NDEwLWJlN2Mt ODE0NzZkYmFiMTQ0LzEvZDkyaXJRbU1hbmdVLXlXTFJwc05oTTRreEtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC84ODU0NTctNzBmMi00NDEwLWJlN2MtODE0NzZkYmFiMTQ0 LzEvZDkyaXJRbU1hbmdVLXlXTFJwc05oTTRreEtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb4Vd4Gsa 5VeS07Mp9scGcW81AI7ZX6XnCNggH99gfkDw2AsLT1ZOggsPsrNX3f0lkLdnpZgO mBt3cXqxnY4n9Z1uwEffcO54O9tp2c2S/N2CObQYGHbyPjg6eRRI3JelE5Gxw3C+ P9rQVpSxzWqbOc9w3SqsZk/+y43pRKMLiicIqB7qrIR/u2iu7AXIjKHtGEroO+dU YS/xK7zy+Z65OOxSZzazKQka0Xa1sZTjQGLgrpBmsIOQlUIZ2aniI/VpC+4Df0g7 x467QyorzLhg84+ktEiBoEkd+tMf6Fa4x1GdE4R4slslAnUZbwDw4kUEQmsNGzis EL++VZKp/Z7Afw== -----END CERTIFICATE-----Generated at Sat Dec 27 15:59:14 2025 by rpki-client