This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft File: d92irQmMangU-yWLRpsNhM4kxKc.mft (raw, json) Hash identifier: FqS//BbqJOOTwDFIsLIJDbeXhr51+lu5pLxl3Y6Flu0= Subject key identifier: 78:65:BF:E0:25:E1:39:35:80:39:F8:41:5E:1C:63:E9:07:F3:6A:A5 Authority key identifier: 77:DD:A2:AD:09:8C:6A:78:14:FB:25:8B:46:9B:0D:84:CE:24:C4:A7 Certificate issuer: /CN=77dda2ad098c6a7814fb258b469b0d84ce24c4a7 Certificate serial: 019B3DC75F033981DA6BBC9F55DBAEEDF9FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 22:00:34 +0000 Manifest this update: Sat 20 Dec 2025 22:00:34 +0000 Manifest next update: Sun 21 Dec 2025 22:00:34 +0000 Files and hashes: 1: auoQhH7aBJnI1g3L4GojEkAsQQY.roa (hash: gWIiP5OtZwTCpaoFewi8x05lW349LkZSfT6+AFOcha0=) 2: d92irQmMangU-yWLRpsNhM4kxKc.crl (hash: nMl0ZKhl6pJSztso4xey5wS+NEeK5xKAd/OyTVe+sBg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.crl rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:5f:03:39:81:da:6b:bc:9f:55:db:ae:ed:f9:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77dda2ad098c6a7814fb258b469b0d84ce24c4a7 Validity Not Before: Dec 20 22:00:34 2025 GMT Not After : Dec 21 22:00:34 2025 GMT Subject: CN=7865bfe025e139358039f8415e1c63e907f36aa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:69:df:52:be:1c:14:22:47:07:ac:61:45:fb: 81:0f:f7:48:b7:24:4e:55:b6:c5:28:95:8b:2f:47: 64:21:e2:ba:63:c1:0b:a2:bd:da:2f:30:4d:48:fc: 7d:7e:57:4d:da:e5:11:db:79:a7:da:b3:16:27:08: 2d:aa:1e:5d:4e:f2:bc:58:7c:93:ba:a1:b8:21:f7: 31:ea:0c:67:ec:d1:f4:42:02:af:43:71:31:f6:c5: 27:02:df:c4:39:4e:0f:e4:5a:e4:d7:4f:0e:a6:68: 2d:6c:76:20:f2:73:d1:22:77:7d:cc:d2:eb:e7:d9: 7d:6f:fe:27:53:17:b0:cd:54:4a:b8:af:d9:ed:16: fd:4c:a8:ea:1c:06:9e:2e:19:81:e1:85:9b:06:05: 0a:f5:6c:91:44:87:44:70:27:60:9e:7a:6a:e9:e5: 1c:eb:75:7c:83:c1:72:21:3a:a8:ee:bf:47:69:2f: 35:6d:fa:cd:93:64:10:77:02:74:0a:16:a6:d7:63: 49:61:d7:a0:63:a4:a1:bc:c3:20:b5:20:0c:96:2b: f9:e7:4f:ea:0b:b3:76:2c:fb:11:e6:38:96:7f:dc: 67:76:ae:e4:98:a1:4c:7c:44:96:e4:8d:39:3e:17: 73:17:73:30:0c:ec:f9:e1:bc:24:27:8d:58:e0:31: eb:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:65:BF:E0:25:E1:39:35:80:39:F8:41:5E:1C:63:E9:07:F3:6A:A5 X509v3 Authority Key Identifier: keyid:77:DD:A2:AD:09:8C:6A:78:14:FB:25:8B:46:9B:0D:84:CE:24:C4:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:b5:4e:8f:05:e1:e5:cd:ff:94:6d:5f:b0:cb:2a:26:75:25: d1:b2:0a:3e:2e:1d:a0:0b:48:a9:f8:72:41:42:ee:d0:db:ab: e1:3b:44:c2:d8:66:d1:ed:2b:9e:16:12:fa:dc:46:22:f7:c8: f9:d1:3d:27:19:90:df:84:da:be:7c:0c:13:e7:54:b1:e7:76: 7f:9b:8d:52:14:f9:6c:b7:6e:fc:cf:6a:fc:03:8c:36:cc:c1: cd:55:cc:ce:25:0b:3c:5b:db:ce:47:45:fd:6f:b6:14:aa:6f: f2:6d:cf:5c:8a:6a:e4:43:af:89:39:bc:ac:c7:60:30:5d:90: 7a:92:24:ab:21:c9:d7:15:86:5f:00:ce:a2:2c:2a:0f:d3:38: 04:22:54:65:5a:5a:fb:9d:8f:c1:47:8a:a1:4b:db:f6:71:93: f3:35:f5:7a:57:85:ff:c3:fc:4b:33:ab:13:e4:1e:4e:db:29: b5:7b:ad:0c:cf:b9:ba:84:10:12:aa:02:d2:f1:72:6e:be:bd: 3a:14:d3:e4:15:b4:7c:64:b4:43:ce:d7:03:d0:a0:4f:8d:28: 84:de:76:7b:03:22:ee:7f:02:24:ed:b7:fb:03:17:86:34:c1: fd:63:41:0d:39:c9:54:3c:90:01:a9:5c:5b:fb:65:b7:47:a4: 09:02:89:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x18DOYHaa7yfVduu7fn7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3ZGRhMmFkMDk4YzZhNzgxNGZiMjU4YjQ2OWIwZDg0Y2Uy NGM0YTcwHhcNMjUxMjIwMjIwMDM0WhcNMjUxMjIxMjIwMDM0WjAzMTEwLwYDVQQD Eyg3ODY1YmZlMDI1ZTEzOTM1ODAzOWY4NDE1ZTFjNjNlOTA3ZjM2YWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2nfUr4cFCJHB6xhRfuBD/dItyRO VbbFKJWLL0dkIeK6Y8ELor3aLzBNSPx9fldN2uUR23mn2rMWJwgtqh5dTvK8WHyT uqG4Ifcx6gxn7NH0QgKvQ3Ex9sUnAt/EOU4P5Frk108OpmgtbHYg8nPRInd9zNLr 59l9b/4nUxewzVRKuK/Z7Rb9TKjqHAaeLhmB4YWbBgUK9WyRRIdEcCdgnnpq6eUc 63V8g8FyITqo7r9HaS81bfrNk2QQdwJ0Cham12NJYdegY6ShvMMgtSAMliv550/q C7N2LPsR5jiWf9xndq7kmKFMfESW5I05PhdzF3MwDOz54bwkJ41Y4DHrkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHhlv+Al4Tk1gDn4QV4cY+kH82qlMB8GA1UdIwQY MBaAFHfdoq0JjGp4FPsli0abDYTOJMSnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDkyaXJRbU1hbmdVLXlXTFJwc05oTTRreEtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC84ODU0NTctNzBmMi00NDEwLWJlN2Mt ODE0NzZkYmFiMTQ0LzEvZDkyaXJRbU1hbmdVLXlXTFJwc05oTTRreEtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC84ODU0NTctNzBmMi00NDEwLWJlN2MtODE0NzZkYmFiMTQ0 LzEvZDkyaXJRbU1hbmdVLXlXTFJwc05oTTRreEtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyrVOjwXh 5c3/lG1fsMsqJnUl0bIKPi4doAtIqfhyQULu0Nur4TtEwthm0e0rnhYS+txGIvfI +dE9JxmQ34TavnwME+dUsed2f5uNUhT5bLdu/M9q/AOMNszBzVXMziULPFvbzkdF /W+2FKpv8m3PXIpq5EOviTm8rMdgMF2QepIkqyHJ1xWGXwDOoiwqD9M4BCJUZVpa +52PwUeKoUvb9nGT8zX1eleF/8P8SzOrE+QeTtsptXutDM+5uoQQEqoC0vFybr69 OhTT5BW0fGS0Q87XA9CgT40ohN52ewMi7n8CJO23+wMXhjTB/WNBDTnJVDyQAalc W/tlt0ekCQKJIg== -----END CERTIFICATE-----Generated at Sun Dec 21 04:57:38 2025 by rpki-client