This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.mft File: al1BD0JdNedNRW9_h7ro7ZKzyCk.mft (raw, json) Hash identifier: NCF+N0z5U316P6mKQCZhOCyWoGBEKprOgGWiSoXAuII= Subject key identifier: 25:34:9A:89:6C:14:F3:43:A2:60:C6:05:07:4C:8F:E7:DA:0D:B0:06 Authority key identifier: 6A:5D:41:0F:42:5D:35:E7:4D:45:6F:7F:87:BA:E8:ED:92:B3:C8:29 Certificate issuer: /CN=6a5d410f425d35e74d456f7f87bae8ed92b3c829 Certificate serial: 019B3AC6C4E2FA3C621176E3C4D12426B274 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/al1BD0JdNedNRW9_h7ro7ZKzyCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.mft Manifest number: 1719 Signing time: Sat 20 Dec 2025 08:01:03 +0000 Manifest this update: Sat 20 Dec 2025 08:01:03 +0000 Manifest next update: Sun 21 Dec 2025 08:01:03 +0000 Files and hashes: 1: YRcPB026UNAbaic7bC0XnagQJ_8.roa (hash: F5LbuOIZKUKKLsIhj9ecbNiDMJqNxgANq1yR2w3iRxE=) 2: al1BD0JdNedNRW9_h7ro7ZKzyCk.crl (hash: FWqN0SK0uqjoKa/6z1bIJwZDjbUapLydYVfIj8d4tsM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.crl rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.mft rsync://rpki.ripe.net/repository/DEFAULT/al1BD0JdNedNRW9_h7ro7ZKzyCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:c4:e2:fa:3c:62:11:76:e3:c4:d1:24:26:b2:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a5d410f425d35e74d456f7f87bae8ed92b3c829 Validity Not Before: Dec 20 08:01:03 2025 GMT Not After : Dec 21 08:01:03 2025 GMT Subject: CN=25349a896c14f343a260c605074c8fe7da0db006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e1:9e:6c:ca:a5:d0:e4:24:47:fc:46:e0:fc: 90:2c:71:70:02:f8:c2:ea:39:46:44:e9:c6:4f:59: ce:2a:54:d7:c5:54:9d:28:58:39:e8:4c:af:7f:33: a0:59:90:b2:16:7b:36:0f:75:da:4f:25:cf:a8:f8: 3e:71:71:c3:95:32:c9:0b:8b:7b:5f:5a:35:ba:f6: 6d:27:7c:77:02:b1:63:85:22:24:31:85:a7:ae:b5: 36:e9:f7:3d:fa:b2:95:c1:f7:96:b6:51:16:a1:44: 7c:61:a3:64:3d:9b:b0:59:a7:cd:d8:73:75:0b:64: 94:48:46:e0:c8:e8:c5:6f:5b:5c:62:4f:b4:33:a4: 33:87:eb:11:5a:10:7e:29:b6:64:be:76:01:f6:28: 8c:8a:dc:82:43:d5:32:76:a5:db:82:86:a8:f3:65: c7:eb:7c:0d:2c:82:05:1d:fa:a3:1f:da:fb:db:eb: f3:5f:03:c5:13:8c:50:0a:8d:84:56:d7:b9:89:eb: e8:87:7f:d2:6b:26:6b:20:e6:d1:18:d0:38:6a:ce: 8f:42:7d:69:35:39:8e:3e:52:f7:ce:3f:79:54:66: 4e:40:cf:ab:09:a8:19:e7:8a:7f:6a:03:5a:56:75: 6f:60:37:b2:b7:fb:cf:c6:2f:89:a4:f7:bb:71:c3: 61:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:34:9A:89:6C:14:F3:43:A2:60:C6:05:07:4C:8F:E7:DA:0D:B0:06 X509v3 Authority Key Identifier: keyid:6A:5D:41:0F:42:5D:35:E7:4D:45:6F:7F:87:BA:E8:ED:92:B3:C8:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/al1BD0JdNedNRW9_h7ro7ZKzyCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:0d:35:7a:42:84:11:42:db:67:b3:12:4a:a5:4a:7b:cb:67: 79:a9:1c:26:f8:c9:02:dd:31:8a:86:b6:38:c6:b6:b0:b3:b3: e0:1a:e9:f2:40:97:b4:34:83:f3:7f:f7:2a:32:0e:0a:df:c3: 4a:86:5c:e6:01:b6:e7:17:a1:4f:a9:ba:6f:d4:28:39:fc:7f: 4e:51:02:6e:95:ed:29:2a:2c:5e:4a:55:62:00:13:96:4c:c7: ec:1f:38:01:d9:d6:36:36:88:59:f8:f7:bc:27:2e:40:91:b9: ee:3d:26:ae:f7:07:1e:03:91:d4:0e:30:28:74:5a:7e:59:62: 5c:fc:16:d5:a1:a7:19:77:f3:de:9d:1f:53:8b:e5:3e:29:ff: 6a:e1:72:81:0e:08:79:93:3b:29:f8:8c:2a:9c:e4:90:84:23: fd:2f:8a:b7:6a:5b:a8:de:f1:58:e7:eb:9c:7d:24:1f:e7:2b: 57:77:07:e7:fa:fd:58:92:d9:9a:2f:65:84:6d:a1:ed:40:ee: b7:3e:c3:db:32:62:19:d6:a2:d6:56:3b:eb:6f:22:a8:c9:9a: 38:60:1b:2b:6c:05:ba:09:a7:d2:06:ee:2f:88:7a:e8:56:d3: ef:1a:1f:9c:d4:57:8e:03:28:89:39:53:05:89:88:61:99:cb: 1e:2a:1f:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xsTi+jxiEXbjxNEkJrJ0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhNWQ0MTBmNDI1ZDM1ZTc0ZDQ1NmY3Zjg3YmFlOGVkOTJi M2M4MjkwHhcNMjUxMjIwMDgwMTAzWhcNMjUxMjIxMDgwMTAzWjAzMTEwLwYDVQQD EygyNTM0OWE4OTZjMTRmMzQzYTI2MGM2MDUwNzRjOGZlN2RhMGRiMDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+GebMql0OQkR/xG4PyQLHFwAvjC 6jlGROnGT1nOKlTXxVSdKFg56EyvfzOgWZCyFns2D3XaTyXPqPg+cXHDlTLJC4t7 X1o1uvZtJ3x3ArFjhSIkMYWnrrU26fc9+rKVwfeWtlEWoUR8YaNkPZuwWafN2HN1 C2SUSEbgyOjFb1tcYk+0M6Qzh+sRWhB+KbZkvnYB9iiMityCQ9UydqXbgoao82XH 63wNLIIFHfqjH9r72+vzXwPFE4xQCo2EVte5ievoh3/SayZrIObRGNA4as6PQn1p NTmOPlL3zj95VGZOQM+rCagZ54p/agNaVnVvYDeyt/vPxi+JpPe7ccNhaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCU0molsFPNDomDGBQdMj+faDbAGMB8GA1UdIwQY MBaAFGpdQQ9CXTXnTUVvf4e66O2Ss8gpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWwxQkQwSmROZWROUlc5X2g3cm83Wkt6eUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9kNWYxNGYtMjcwNS00MmVjLTkwMGYt NjkzNGNhZmI2YmNkLzEvYWwxQkQwSmROZWROUlc5X2g3cm83Wkt6eUNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9kNWYxNGYtMjcwNS00MmVjLTkwMGYtNjkzNGNhZmI2YmNk LzEvYWwxQkQwSmROZWROUlc5X2g3cm83Wkt6eUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASw01ekKE EULbZ7MSSqVKe8tneakcJvjJAt0xioa2OMa2sLOz4Brp8kCXtDSD83/3KjIOCt/D SoZc5gG25xehT6m6b9QoOfx/TlECbpXtKSosXkpVYgATlkzH7B84AdnWNjaIWfj3 vCcuQJG57j0mrvcHHgOR1A4wKHRaflliXPwW1aGnGXfz3p0fU4vlPin/auFygQ4I eZM7KfiMKpzkkIQj/S+Kt2pbqN7xWOfrnH0kH+crV3cH5/r9WJLZmi9lhG2h7UDu tz7D2zJiGdai1lY7628iqMmaOGAbK2wFugmn0gbuL4h66FbT7xofnNRXjgMoiTlT BYmIYZnLHiofGA== -----END CERTIFICATE-----Generated at Sat Dec 20 17:04:50 2025 by rpki-client