This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.mft File: d1xabqkPXz0AfBDkROO5Y7bTDMU.mft (raw, json) Hash identifier: QDL9ZMB3AnWT05WNxJQcuU7U3Cr0dz2dxKm/EUlSk1w= Subject key identifier: 15:BB:21:A7:25:A2:F5:52:42:6F:26:41:43:8B:60:01:93:49:D7:7A Authority key identifier: 77:5C:5A:6E:A9:0F:5F:3D:00:7C:10:E4:44:E3:B9:63:B6:D3:0C:C5 Certificate issuer: /CN=775c5a6ea90f5f3d007c10e444e3b963b6d30cc5 Certificate serial: 019B33B1EFAF311D5A9E9C226141CBFB3B70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d1xabqkPXz0AfBDkROO5Y7bTDMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.mft Manifest number: 055D Signing time: Thu 18 Dec 2025 23:00:57 +0000 Manifest this update: Thu 18 Dec 2025 23:00:57 +0000 Manifest next update: Fri 19 Dec 2025 23:00:57 +0000 Files and hashes: 1: d1xabqkPXz0AfBDkROO5Y7bTDMU.crl (hash: LjSwtJlsGk2gSbBW4BlDbmgOIG6GIPJ7Fsok+qivJZE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.crl rsync://rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.mft rsync://rpki.ripe.net/repository/DEFAULT/d1xabqkPXz0AfBDkROO5Y7bTDMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b1:ef:af:31:1d:5a:9e:9c:22:61:41:cb:fb:3b:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=775c5a6ea90f5f3d007c10e444e3b963b6d30cc5 Validity Not Before: Dec 18 23:00:57 2025 GMT Not After : Dec 19 23:00:57 2025 GMT Subject: CN=15bb21a725a2f552426f2641438b60019349d77a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2f:57:a4:07:b3:99:ed:21:76:70:1a:62:92: 71:98:78:eb:d4:c6:05:36:c1:b1:69:78:31:9d:d0: c3:66:74:b3:1d:f4:9e:94:45:c5:9a:e3:84:9e:05: 65:c2:9e:14:d1:e8:e4:03:95:7a:4d:b0:3f:2c:e5: 79:a7:ac:4e:a2:78:fd:74:7d:da:72:41:a1:d0:01: a3:0c:cf:f7:f2:28:f0:4e:6e:07:82:37:79:17:67: 14:d9:fa:14:6f:b2:23:09:b3:09:fd:93:24:d9:fa: 33:bf:1a:75:38:ad:f7:bb:9e:30:cb:b7:2d:8f:e5: 53:e8:35:95:e2:21:f6:45:1a:d2:d7:12:a2:8c:71: 34:78:c6:c1:bf:e7:fd:6e:3a:1f:bd:27:d3:73:4d: cb:b0:76:a1:ae:5f:29:d6:40:52:52:b3:91:22:38: c3:fa:72:51:0a:b1:25:46:45:b7:76:f6:fb:1e:ed: d7:48:cd:c8:0b:53:30:a5:02:53:ab:0a:c0:db:9c: f7:45:d8:8d:bf:ea:bf:41:66:e0:13:c2:af:b7:a6: f0:c4:f6:8d:91:91:ae:0e:e6:8d:40:2b:44:d3:28: 26:a1:9f:14:9c:f3:14:f9:15:a5:ac:ec:7d:f3:ab: 5c:61:4c:62:d4:b7:14:88:c2:26:bc:90:ff:fc:35: 8f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:BB:21:A7:25:A2:F5:52:42:6F:26:41:43:8B:60:01:93:49:D7:7A X509v3 Authority Key Identifier: keyid:77:5C:5A:6E:A9:0F:5F:3D:00:7C:10:E4:44:E3:B9:63:B6:D3:0C:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1xabqkPXz0AfBDkROO5Y7bTDMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:c5:f0:2a:29:ef:7f:4d:29:db:60:21:24:96:76:a1:8b:7b: 64:9e:82:18:9f:4a:0f:2c:5b:73:c5:28:32:2a:40:8f:e4:87: d0:a0:7c:2a:5f:53:3f:25:0e:75:fb:cc:aa:9d:4a:39:dd:58: 6e:73:ef:9c:f2:12:81:de:1e:f7:9d:f9:19:38:60:15:95:0c: 7c:52:da:6e:36:1b:d5:20:c0:0f:09:e0:11:33:1c:a8:4e:f5: 67:52:7f:91:2c:04:31:5f:52:e7:14:b5:0b:1f:7e:cc:c1:10: 1c:b8:a0:96:30:8c:87:e2:ab:e1:63:12:c1:6b:b4:f0:96:38: 83:1a:ae:fb:9f:b0:38:2a:52:02:a8:d2:6a:5b:9a:86:ee:6a: c5:2b:e1:1f:36:93:37:eb:29:9b:3e:77:9a:d9:37:b4:db:49: 46:b3:f3:dc:e5:08:f6:ee:48:37:b3:71:e0:7f:cf:64:6b:3d: 42:d3:35:51:bf:cf:04:0d:dc:a8:a2:89:04:2c:59:05:20:47: 72:32:66:52:0c:c2:dd:51:29:c2:15:2c:fa:f5:25:1f:51:bf: 23:78:5b:e3:b6:f8:c4:0c:b6:98:1f:9d:3f:03:3b:67:4e:6f: 2c:08:27:0e:ee:5f:b9:2d:f8:5e:90:8a:46:2d:1c:3b:67:16: 86:35:d8:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszse+vMR1anpwiYUHL+ztwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3NWM1YTZlYTkwZjVmM2QwMDdjMTBlNDQ0ZTNiOTYzYjZk MzBjYzUwHhcNMjUxMjE4MjMwMDU3WhcNMjUxMjE5MjMwMDU3WjAzMTEwLwYDVQQD EygxNWJiMjFhNzI1YTJmNTUyNDI2ZjI2NDE0MzhiNjAwMTkzNDlkNzdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApy9XpAezme0hdnAaYpJxmHjr1MYF NsGxaXgxndDDZnSzHfSelEXFmuOEngVlwp4U0ejkA5V6TbA/LOV5p6xOonj9dH3a ckGh0AGjDM/38ijwTm4Hgjd5F2cU2foUb7IjCbMJ/ZMk2fozvxp1OK33u54wy7ct j+VT6DWV4iH2RRrS1xKijHE0eMbBv+f9bjofvSfTc03LsHahrl8p1kBSUrORIjjD +nJRCrElRkW3dvb7Hu3XSM3IC1MwpQJTqwrA25z3RdiNv+q/QWbgE8Kvt6bwxPaN kZGuDuaNQCtE0ygmoZ8UnPMU+RWlrOx986tcYUxi1LcUiMImvJD//DWPAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBW7IaclovVSQm8mQUOLYAGTSdd6MB8GA1UdIwQY MBaAFHdcWm6pD189AHwQ5ETjuWO20wzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDF4YWJxa1BYejBBZkJEa1JPTzVZN2JURE1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My85Njg3MzItNmQ3Ni00NjRkLTk3YzQt ZTQwYTMzNDY5MWM5LzEvZDF4YWJxa1BYejBBZkJEa1JPTzVZN2JURE1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My85Njg3MzItNmQ3Ni00NjRkLTk3YzQtZTQwYTMzNDY5MWM5 LzEvZDF4YWJxa1BYejBBZkJEa1JPTzVZN2JURE1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJcXwKinv f00p22AhJJZ2oYt7ZJ6CGJ9KDyxbc8UoMipAj+SH0KB8Kl9TPyUOdfvMqp1KOd1Y bnPvnPISgd4e9535GThgFZUMfFLabjYb1SDADwngETMcqE71Z1J/kSwEMV9S5xS1 Cx9+zMEQHLigljCMh+Kr4WMSwWu08JY4gxqu+5+wOCpSAqjSaluahu5qxSvhHzaT N+spmz53mtk3tNtJRrPz3OUI9u5IN7Nx4H/PZGs9QtM1Ub/PBA3cqKKJBCxZBSBH cjJmUgzC3VEpwhUs+vUlH1G/I3hb47b4xAy2mB+dPwM7Z05vLAgnDu5fuS34XpCK Ri0cO2cWhjXYDQ== -----END CERTIFICATE-----Generated at Fri Dec 19 02:23:23 2025 by rpki-client