This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.mft File: d411kki9lFxs44QujWQtzScxM00.mft (raw, json) Hash identifier: ND8T2AtAgchpMizdajGq39eQ/Je2zdDGNoCv7xrD1V8= Subject key identifier: C8:F4:42:58:2A:57:4F:E2:BC:57:AF:2E:D7:BF:19:AD:3F:77:AB:61 Authority key identifier: 77:8D:75:92:48:BD:94:5C:6C:E3:84:2E:8D:64:2D:CD:27:31:33:4D Certificate issuer: /CN=778d759248bd945c6ce3842e8d642dcd2731334d Certificate serial: 019B4BBA2DD37C6D307D1042CC40E70FE0C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d411kki9lFxs44QujWQtzScxM00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.mft Manifest number: 1793 Signing time: Tue 23 Dec 2025 15:00:51 +0000 Manifest this update: Tue 23 Dec 2025 15:00:51 +0000 Manifest next update: Wed 24 Dec 2025 15:00:51 +0000 Files and hashes: 1: 3qTzEcW6UJi2N2jS10ksOP0jGPg.roa (hash: bi68C3NI8kVP+jK95/ZZuCFpomCw8AVgobu4v38Zwn4=) 2: d411kki9lFxs44QujWQtzScxM00.crl (hash: r3iR3WH1q2jfuYrP1VmJ+7E2llVj97xIeBziJOVp9Yo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.crl rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.mft rsync://rpki.ripe.net/repository/DEFAULT/d411kki9lFxs44QujWQtzScxM00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:ba:2d:d3:7c:6d:30:7d:10:42:cc:40:e7:0f:e0:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=778d759248bd945c6ce3842e8d642dcd2731334d Validity Not Before: Dec 23 15:00:51 2025 GMT Not After : Dec 24 15:00:51 2025 GMT Subject: CN=c8f442582a574fe2bc57af2ed7bf19ad3f77ab61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:51:e5:ef:62:2a:c7:fa:ef:62:d8:78:ad:00: 7d:6b:11:1b:2e:50:41:78:f9:1c:28:d7:bd:fc:89: 11:56:85:3d:b6:20:25:94:8d:f1:b3:a6:f6:7c:ea: 32:2a:83:a5:6f:48:77:a4:22:54:3c:56:22:0c:51: ef:30:35:c1:fe:70:04:d7:ac:0a:9a:ce:7c:ae:e0: 2d:c4:22:57:f3:ff:1b:45:ca:08:92:d5:60:3f:27: 3f:1c:99:30:cb:34:f6:46:54:28:e5:cb:b8:49:75: dc:67:01:6e:1a:cc:1d:38:7d:46:e2:23:91:bd:45: f5:ff:7e:38:f4:6e:61:d8:b8:ae:61:cc:a7:bc:10: c8:23:76:4f:76:9d:bf:7f:0a:77:49:c4:69:3d:20: 2b:18:76:3e:21:5e:02:64:5d:53:0e:d5:8e:09:e9: 78:82:8c:ba:fc:0c:97:71:31:c6:11:11:ab:68:33: c7:b7:aa:98:c4:29:7b:27:ac:c7:08:64:6c:37:59: 8e:8f:df:5e:5f:63:7d:95:80:70:d5:c6:15:e0:21: 69:5d:9f:db:58:b5:18:f1:98:1c:5f:15:14:96:ff: 0b:13:32:f2:5e:08:38:7a:c4:26:47:b2:65:e4:2a: 77:14:f6:91:86:d8:e7:87:d8:47:60:7c:41:a5:3b: 6e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:F4:42:58:2A:57:4F:E2:BC:57:AF:2E:D7:BF:19:AD:3F:77:AB:61 X509v3 Authority Key Identifier: keyid:77:8D:75:92:48:BD:94:5C:6C:E3:84:2E:8D:64:2D:CD:27:31:33:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d411kki9lFxs44QujWQtzScxM00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:28:b1:b9:1e:9f:2f:03:1b:52:95:e8:ed:d3:d8:20:6b:b1: fa:de:99:2a:11:73:e9:11:4d:8d:d2:ab:19:b2:89:54:cd:b2: 0a:65:4d:62:96:b2:87:01:62:46:5a:e8:b7:21:ba:85:f8:fd: 12:36:e5:2a:c3:a3:84:ae:e5:24:57:11:01:f4:9c:75:ed:dc: ae:f9:eb:b7:08:ee:3d:7f:0e:49:15:7e:06:7e:2b:2c:08:4b: a0:a6:1b:c9:e4:d3:67:39:fd:21:52:e0:2d:bc:76:d4:0e:31: 53:71:63:1b:a8:90:79:56:7b:d7:83:c6:cc:b2:fc:c7:8f:7f: ec:71:b9:53:b2:11:27:19:cb:bf:24:46:30:ff:a4:7b:e8:ed: ea:1d:30:cf:61:af:74:a4:46:ab:40:dc:b0:95:0e:f0:f8:f6: d5:6d:aa:4f:88:ae:8d:a7:31:cc:4b:95:f9:56:b8:e6:13:a6: ea:1c:98:9a:e4:f5:ef:35:d4:78:26:7b:ba:87:79:63:87:7a: ad:e1:7c:07:66:fe:ec:d9:1b:98:e5:11:3e:1b:4c:fc:99:e7: b3:07:65:ae:a9:c5:c6:75:5e:f6:77:5c:68:eb:62:71:00:43: 30:64:a9:8a:2b:91:a1:ce:84:31:c5:4e:2d:3d:bc:2c:9e:40: 49:9b:5d:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLui3TfG0wfRBCzEDnD+DIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3OGQ3NTkyNDhiZDk0NWM2Y2UzODQyZThkNjQyZGNkMjcz MTMzNGQwHhcNMjUxMjIzMTUwMDUxWhcNMjUxMjI0MTUwMDUxWjAzMTEwLwYDVQQD EyhjOGY0NDI1ODJhNTc0ZmUyYmM1N2FmMmVkN2JmMTlhZDNmNzdhYjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlHl72Iqx/rvYth4rQB9axEbLlBB ePkcKNe9/IkRVoU9tiAllI3xs6b2fOoyKoOlb0h3pCJUPFYiDFHvMDXB/nAE16wK ms58ruAtxCJX8/8bRcoIktVgPyc/HJkwyzT2RlQo5cu4SXXcZwFuGswdOH1G4iOR vUX1/3449G5h2LiuYcynvBDII3ZPdp2/fwp3ScRpPSArGHY+IV4CZF1TDtWOCel4 goy6/AyXcTHGERGraDPHt6qYxCl7J6zHCGRsN1mOj99eX2N9lYBw1cYV4CFpXZ/b WLUY8ZgcXxUUlv8LEzLyXgg4esQmR7Jl5Cp3FPaRhtjnh9hHYHxBpTtuMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMj0QlgqV0/ivFevLte/Ga0/d6thMB8GA1UdIwQY MBaAFHeNdZJIvZRcbOOELo1kLc0nMTNNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDQxMWtraTlsRnhzNDRRdWpXUXR6U2N4TTAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS81ODIyNDItMDA5OC00YjNmLTgwYjAt ZGZhMWM5YjNmZDFmLzEvZDQxMWtraTlsRnhzNDRRdWpXUXR6U2N4TTAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS81ODIyNDItMDA5OC00YjNmLTgwYjAtZGZhMWM5YjNmZDFm LzEvZDQxMWtraTlsRnhzNDRRdWpXUXR6U2N4TTAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlyixuR6f LwMbUpXo7dPYIGux+t6ZKhFz6RFNjdKrGbKJVM2yCmVNYpayhwFiRlrotyG6hfj9 EjblKsOjhK7lJFcRAfScde3crvnrtwjuPX8OSRV+Bn4rLAhLoKYbyeTTZzn9IVLg Lbx21A4xU3FjG6iQeVZ714PGzLL8x49/7HG5U7IRJxnLvyRGMP+ke+jt6h0wz2Gv dKRGq0DcsJUO8Pj21W2qT4iujacxzEuV+Va45hOm6hyYmuT17zXUeCZ7uod5Y4d6 reF8B2b+7NkbmOURPhtM/JnnswdlrqnFxnVe9ndcaOticQBDMGSpiiuRoc6EMcVO LT28LJ5ASZtdrQ== -----END CERTIFICATE-----Generated at Tue Dec 23 18:34:31 2025 by rpki-client