This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft File: 11d1Kggad4_B0s7hsNaqRdUaLEk.mft (raw, json) Hash identifier: FEjUia/XLqvd15wYTvrdQfBCjbXN0NLR4YBb/QUOUPs= Subject key identifier: 1D:A3:C9:33:60:6B:8D:8F:E1:FD:F2:A5:83:99:CF:9A:AD:42:38:C3 Authority key identifier: D7:57:75:2A:08:1A:77:8F:C1:D2:CE:E1:B0:D6:AA:45:D5:1A:2C:49 Certificate issuer: /CN=d757752a081a778fc1d2cee1b0d6aa45d51a2c49 Certificate serial: 019B4738AF586603BA5B2847406C60AACFC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft Manifest number: 178B Signing time: Mon 22 Dec 2025 18:00:55 +0000 Manifest this update: Mon 22 Dec 2025 18:00:55 +0000 Manifest next update: Tue 23 Dec 2025 18:00:55 +0000 Files and hashes: 1: 11d1Kggad4_B0s7hsNaqRdUaLEk.crl (hash: vRXD+S5LpXY2stL09vpOKTmZBbcVwsrm1QT8w805b/U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.crl rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft rsync://rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 18:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:38:af:58:66:03:ba:5b:28:47:40:6c:60:aa:cf:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d757752a081a778fc1d2cee1b0d6aa45d51a2c49 Validity Not Before: Dec 22 18:00:55 2025 GMT Not After : Dec 23 18:00:55 2025 GMT Subject: CN=1da3c933606b8d8fe1fdf2a58399cf9aad4238c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:7f:ba:51:c3:99:7b:5f:32:f8:ab:c9:bf:5f: ba:d6:40:9c:1b:84:1c:4a:4d:87:fb:43:61:b7:f3: a3:77:af:48:bb:2d:38:5c:6b:bf:60:fc:e8:a5:3b: fc:77:47:cb:be:3b:a2:8c:64:ae:5b:63:ab:46:65: 77:08:b4:3a:cb:e2:8f:70:69:f0:70:38:86:6b:1a: 74:1e:7c:54:73:cf:6f:b1:6b:54:03:8b:77:47:0a: 6f:be:06:36:10:36:7a:4c:85:a4:6e:a7:d4:ce:a3: 1c:fc:10:53:08:09:f0:4a:f5:14:b4:20:9f:fd:16: e0:05:72:e2:7b:72:26:ab:45:ff:35:da:60:a0:59: 4b:7d:08:01:a8:09:7c:e9:b0:f1:62:97:49:5d:3f: f4:81:72:7f:8e:0f:4b:ee:eb:1f:3e:69:10:8d:ae: 12:f0:21:e6:76:ed:3f:ee:24:03:f6:f6:8c:b9:05: 5d:78:ce:e4:84:69:ad:da:e0:18:07:63:43:ef:e9: 6c:4b:30:c9:24:5d:04:e5:9f:5f:b6:61:46:90:33: d5:ef:fb:93:28:87:82:31:fb:33:63:05:09:45:57: 62:79:be:7c:d1:a5:c9:73:95:d7:f3:a3:6c:b6:b2: be:53:27:7d:13:ff:1c:7e:ac:5e:86:65:e2:ad:e3: 4a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:A3:C9:33:60:6B:8D:8F:E1:FD:F2:A5:83:99:CF:9A:AD:42:38:C3 X509v3 Authority Key Identifier: keyid:D7:57:75:2A:08:1A:77:8F:C1:D2:CE:E1:B0:D6:AA:45:D5:1A:2C:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:82:fc:82:f9:3b:cd:a9:fd:df:13:05:82:41:54:85:33:c7: 82:4a:32:3f:6b:45:5e:a4:66:67:37:bc:b2:ef:49:c3:fc:ff: 7e:b0:71:68:32:ee:38:67:f0:9f:78:bf:07:99:b2:86:a0:9d: dd:ba:63:8c:e8:bf:a7:40:b9:6d:d2:97:ef:05:0a:ed:44:0b: ad:4d:c0:0b:fa:8e:93:a3:00:08:78:98:e2:14:d6:09:eb:d9: df:20:99:1b:50:26:7e:22:1e:bc:ed:6d:77:7b:49:79:c5:21: 15:08:28:3b:be:45:0c:2f:ef:93:5f:2a:ea:8f:c1:4a:b2:17: ad:16:21:b6:26:d5:cc:b1:ce:12:99:3e:bd:93:9c:60:bf:e1: 4a:78:e9:ee:d2:d0:78:3f:d6:ff:e4:90:10:99:ee:cd:5d:6c: 29:9e:b3:70:63:df:a0:15:27:0f:02:c4:0d:18:c4:47:5c:06: 70:77:06:96:24:e0:ee:df:fb:f6:3b:ae:a8:d9:96:6d:25:91: 1a:b5:a6:d8:eb:f6:3f:75:92:0b:c0:78:bb:09:5d:3c:4d:ff: b5:46:d8:41:81:1d:ee:82:c2:e2:dd:5f:ed:8f:3e:30:a4:5d: fb:90:c5:d8:8a:01:e5:f2:85:e3:96:bc:55:0b:aa:d5:a7:35: 24:74:6b:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHOK9YZgO6WyhHQGxgqs/DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NTc3NTJhMDgxYTc3OGZjMWQyY2VlMWIwZDZhYTQ1ZDUx YTJjNDkwHhcNMjUxMjIyMTgwMDU1WhcNMjUxMjIzMTgwMDU1WjAzMTEwLwYDVQQD EygxZGEzYzkzMzYwNmI4ZDhmZTFmZGYyYTU4Mzk5Y2Y5YWFkNDIzOGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9X+6UcOZe18y+KvJv1+61kCcG4Qc Sk2H+0Nht/Ojd69Iuy04XGu/YPzopTv8d0fLvjuijGSuW2OrRmV3CLQ6y+KPcGnw cDiGaxp0HnxUc89vsWtUA4t3RwpvvgY2EDZ6TIWkbqfUzqMc/BBTCAnwSvUUtCCf /RbgBXLie3Imq0X/NdpgoFlLfQgBqAl86bDxYpdJXT/0gXJ/jg9L7usfPmkQja4S 8CHmdu0/7iQD9vaMuQVdeM7khGmt2uAYB2ND7+lsSzDJJF0E5Z9ftmFGkDPV7/uT KIeCMfszYwUJRVdieb580aXJc5XX86NstrK+Uyd9E/8cfqxehmXireNKsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB2jyTNga42P4f3ypYOZz5qtQjjDMB8GA1UdIwQY MBaAFNdXdSoIGnePwdLO4bDWqkXVGixJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTFkMUtnZ2FkNF9CMHM3aHNOYXFSZFVhTEVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83YTgzYmQtMmJmZC00YzY4LWJlYTMt YjQxYWQxMDY5YTNjLzEvMTFkMUtnZ2FkNF9CMHM3aHNOYXFSZFVhTEVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC83YTgzYmQtMmJmZC00YzY4LWJlYTMtYjQxYWQxMDY5YTNj LzEvMTFkMUtnZ2FkNF9CMHM3aHNOYXFSZFVhTEVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc4L8gvk7 zan93xMFgkFUhTPHgkoyP2tFXqRmZze8su9Jw/z/frBxaDLuOGfwn3i/B5myhqCd 3bpjjOi/p0C5bdKX7wUK7UQLrU3AC/qOk6MACHiY4hTWCevZ3yCZG1AmfiIevO1t d3tJecUhFQgoO75FDC/vk18q6o/BSrIXrRYhtibVzLHOEpk+vZOcYL/hSnjp7tLQ eD/W/+SQEJnuzV1sKZ6zcGPfoBUnDwLEDRjER1wGcHcGliTg7t/79juuqNmWbSWR GrWm2Ov2P3WSC8B4uwldPE3/tUbYQYEd7oLC4t1f7Y8+MKRd+5DF2IoB5fKF45a8 VQuq1ac1JHRrXA== -----END CERTIFICATE-----Generated at Tue Dec 23 01:25:39 2025 by rpki-client