This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft File: 1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft (raw, json) Hash identifier: HYY3sc0ngt9wIMY1fNG8XcX2zzQSo13FhgKWbPYGCio= Subject key identifier: 91:A9:4D:C2:9A:DF:3E:28:CD:D0:D0:F6:3D:12:06:9A:7D:3C:A3:58 Authority key identifier: D5:D0:BF:1A:D7:FC:36:9D:8F:BF:43:E6:2D:E9:7A:4F:AC:FE:F6:B5 Certificate issuer: /CN=d5d0bf1ad7fc369d8fbf43e62de97a4facfef6b5 Certificate serial: 019B394619FD8C14070E5224CC18C830C8FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft Manifest number: 0CCC Signing time: Sat 20 Dec 2025 01:00:53 +0000 Manifest this update: Sat 20 Dec 2025 01:00:53 +0000 Manifest next update: Sun 21 Dec 2025 01:00:53 +0000 Files and hashes: 1: 1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl (hash: rDq/pq5mjk4j9a/IPfOg8I5bioZbsC8LI+rpfKrafMA=) 2: mhdzxHyga_rpAnhJvnJWGrarNFw.roa (hash: l1WjIafW1o8IpUq72+h/DmsurJ/Xd4bFO/qecSh/CbU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:46:19:fd:8c:14:07:0e:52:24:cc:18:c8:30:c8:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5d0bf1ad7fc369d8fbf43e62de97a4facfef6b5 Validity Not Before: Dec 20 01:00:53 2025 GMT Not After : Dec 21 01:00:53 2025 GMT Subject: CN=91a94dc29adf3e28cdd0d0f63d12069a7d3ca358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:93:bb:86:1a:6e:b6:44:3e:2e:db:54:95:d4: 40:69:4d:9a:51:73:45:25:97:62:fd:ab:fe:ca:59: 2d:03:ba:3e:b7:15:28:ea:bb:eb:fe:89:27:ae:33: dd:8b:96:8e:77:a8:b4:82:db:db:37:18:4e:b1:7a: b0:fc:2f:26:13:70:c0:b1:86:96:8f:5f:8d:6a:67: 80:94:32:5e:5f:6a:70:0b:79:5a:21:c0:08:16:4d: f1:2c:0b:83:29:55:0f:f8:61:58:5b:a0:88:f8:de: 97:c7:97:68:76:51:c2:e3:53:a5:51:cc:23:b1:60: 4e:cf:91:92:d3:a7:7f:58:86:22:fc:02:98:22:92: 66:a9:6e:3d:29:24:0d:e4:76:74:b6:9e:19:eb:31: 87:4c:1f:70:0e:1f:86:69:ba:a3:ee:f1:1e:ce:08: e2:c6:1c:c3:23:3e:9e:68:d6:1a:6e:50:b5:19:e8: 38:66:a3:7a:19:0b:42:3a:ee:bf:30:f6:09:7c:ef: 58:29:40:4b:4f:5b:9d:d0:06:cd:dd:ae:61:85:4f: 5f:bd:78:4b:c1:e2:90:83:20:c3:5c:50:b6:bb:8f: 63:62:b3:56:22:b2:a5:b0:80:d9:36:ac:0e:ad:f0: 0a:5d:72:4c:5c:4a:3a:a5:0c:41:b5:97:ba:3e:b1: 34:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:A9:4D:C2:9A:DF:3E:28:CD:D0:D0:F6:3D:12:06:9A:7D:3C:A3:58 X509v3 Authority Key Identifier: keyid:D5:D0:BF:1A:D7:FC:36:9D:8F:BF:43:E6:2D:E9:7A:4F:AC:FE:F6:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:78:9e:bf:ce:6f:c1:91:f6:36:04:ff:bf:88:9f:12:2b:93: 81:72:7c:34:2e:bc:48:30:08:34:d5:54:b6:9c:52:65:32:14: 4e:7c:f4:32:88:a8:de:4e:17:fa:99:9e:49:38:b8:14:5f:ec: e7:9e:ad:2e:24:c5:df:30:ff:03:f2:6a:31:71:73:ad:e2:4d: 8b:14:49:f5:17:1b:d6:a1:43:d2:d6:7d:6f:eb:51:a5:69:e4: 88:44:3c:86:53:60:55:d0:7c:8f:41:54:51:1a:32:20:6f:a9: cd:80:d8:8c:43:bc:50:67:be:77:e9:68:6b:21:32:c5:79:5a: b6:30:3b:2e:0f:a2:bc:5f:69:c9:ec:98:50:9a:02:de:cb:b5: 7b:22:e7:11:e5:a2:d6:2c:06:a4:9e:bb:29:44:f5:ad:c6:a2: 7b:70:e2:51:18:f6:a4:1f:74:28:7a:45:02:37:d3:64:de:fa: 46:9f:68:cc:2e:81:52:bc:e5:d4:a5:05:39:99:ad:6b:fc:d2: 82:bf:32:75:33:c9:ee:35:bd:6f:88:64:16:04:23:34:71:c7: 7c:00:0b:cb:22:56:83:8c:02:ce:d7:02:42:2e:b0:df:2d:d8: 02:a9:f8:2f:2a:c2:74:6a:0b:24:f2:df:31:13:9c:19:65:6a: fd:c2:14:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5Rhn9jBQHDlIkzBjIMMj8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZDBiZjFhZDdmYzM2OWQ4ZmJmNDNlNjJkZTk3YTRmYWNm ZWY2YjUwHhcNMjUxMjIwMDEwMDUzWhcNMjUxMjIxMDEwMDUzWjAzMTEwLwYDVQQD Eyg5MWE5NGRjMjlhZGYzZTI4Y2RkMGQwZjYzZDEyMDY5YTdkM2NhMzU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopO7hhputkQ+LttUldRAaU2aUXNF JZdi/av+ylktA7o+txUo6rvr/oknrjPdi5aOd6i0gtvbNxhOsXqw/C8mE3DAsYaW j1+NameAlDJeX2pwC3laIcAIFk3xLAuDKVUP+GFYW6CI+N6Xx5dodlHC41OlUcwj sWBOz5GS06d/WIYi/AKYIpJmqW49KSQN5HZ0tp4Z6zGHTB9wDh+Gabqj7vEezgji xhzDIz6eaNYablC1Geg4ZqN6GQtCOu6/MPYJfO9YKUBLT1ud0AbN3a5hhU9fvXhL weKQgyDDXFC2u49jYrNWIrKlsIDZNqwOrfAKXXJMXEo6pQxBtZe6PrE0EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJGpTcKa3z4ozdDQ9j0SBpp9PKNYMB8GA1UdIwQY MBaAFNXQvxrX/Dadj79D5i3pek+s/va1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWRDX0d0ZjhOcDJQdjBQbUxlbDZUNnotOXJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi81NTM5ZTQtZDEwZC00OWM1LWJkY2Ut ZWI3ZTljMGQzNzQ3LzEvMWRDX0d0ZjhOcDJQdjBQbUxlbDZUNnotOXJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi81NTM5ZTQtZDEwZC00OWM1LWJkY2UtZWI3ZTljMGQzNzQ3 LzEvMWRDX0d0ZjhOcDJQdjBQbUxlbDZUNnotOXJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASXiev85v wZH2NgT/v4ifEiuTgXJ8NC68SDAINNVUtpxSZTIUTnz0Moio3k4X+pmeSTi4FF/s 556tLiTF3zD/A/JqMXFzreJNixRJ9Rcb1qFD0tZ9b+tRpWnkiEQ8hlNgVdB8j0FU URoyIG+pzYDYjEO8UGe+d+loayEyxXlatjA7Lg+ivF9pyeyYUJoC3su1eyLnEeWi 1iwGpJ67KUT1rcaie3DiURj2pB90KHpFAjfTZN76Rp9ozC6BUrzl1KUFOZmta/zS gr8ydTPJ7jW9b4hkFgQjNHHHfAALyyJWg4wCztcCQi6w3y3YAqn4LyrCdGoLJPLf MROcGWVq/cIUbQ== -----END CERTIFICATE-----Generated at Sat Dec 20 07:29:39 2025 by rpki-client