This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft File: 11d1Kggad4_B0s7hsNaqRdUaLEk.mft (raw, json) Hash identifier: tox3FFaEd6Lovowqcow7Bs4TAJeoW3HP6if6M1BHdcc= Subject key identifier: 1A:ED:8D:9E:A7:6D:FA:C2:9D:42:D5:D5:B7:AB:4C:E2:26:65:FB:28 Authority key identifier: D7:57:75:2A:08:1A:77:8F:C1:D2:CE:E1:B0:D6:AA:45:D5:1A:2C:49 Certificate issuer: /CN=d757752a081a778fc1d2cee1b0d6aa45d51a2c49 Certificate serial: 019B454ACF6EF4516596D6DA65B54D6D3440 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft Manifest number: 178A Signing time: Mon 22 Dec 2025 09:01:29 +0000 Manifest this update: Mon 22 Dec 2025 09:01:29 +0000 Manifest next update: Tue 23 Dec 2025 09:01:29 +0000 Files and hashes: 1: 11d1Kggad4_B0s7hsNaqRdUaLEk.crl (hash: sm3cnXj03zUvOxNkTivkDpveUWDCVvlsxooGkg08rDI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.crl rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft rsync://rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 09:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:4a:cf:6e:f4:51:65:96:d6:da:65:b5:4d:6d:34:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d757752a081a778fc1d2cee1b0d6aa45d51a2c49 Validity Not Before: Dec 22 09:01:29 2025 GMT Not After : Dec 23 09:01:29 2025 GMT Subject: CN=1aed8d9ea76dfac29d42d5d5b7ab4ce22665fb28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f8:20:41:4e:6d:d2:c9:c7:c2:d1:02:54:a6: ee:37:2f:83:40:17:41:52:c1:38:c6:bf:a8:dd:de: 5d:a6:1f:11:d6:6b:b6:2b:41:b6:92:84:4c:b7:3d: 9f:e2:9a:71:05:ea:f3:f7:7b:c8:07:83:32:72:99: 6c:0d:15:9c:45:3f:89:4e:2c:27:83:5c:9e:d7:f9: 11:69:c7:35:e6:d2:5b:1a:96:d8:5a:03:d6:40:6e: a4:33:fa:db:1d:c9:7b:88:fc:da:a6:7e:59:03:6f: 25:05:39:3e:5e:a1:39:52:1c:68:2a:c0:d8:b2:ab: 09:35:ff:0f:bb:87:b0:36:45:87:07:ed:5e:cc:58: a1:e8:f5:64:f1:37:7e:77:dc:56:66:64:1b:d0:16: 48:d7:a3:83:45:c7:90:30:8c:2b:32:3d:79:26:07: 04:48:2c:1e:f1:da:80:02:83:c6:3b:ce:cf:05:9e: 02:e4:fe:e7:84:e9:e8:39:6d:7d:3f:20:d7:db:01: de:c3:0a:c0:ab:04:99:0f:4c:b3:c8:63:18:86:cc: 11:a7:5f:c0:51:1c:cd:69:e5:bb:54:f7:26:10:eb: 81:57:a1:a6:8b:19:a1:03:f6:86:97:a4:74:a6:8f: 2e:47:42:5d:73:c5:e7:ad:fd:c4:cc:af:16:88:74: cf:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:ED:8D:9E:A7:6D:FA:C2:9D:42:D5:D5:B7:AB:4C:E2:26:65:FB:28 X509v3 Authority Key Identifier: keyid:D7:57:75:2A:08:1A:77:8F:C1:D2:CE:E1:B0:D6:AA:45:D5:1A:2C:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:0f:71:00:2d:de:6d:8e:ff:aa:22:3d:93:7a:4a:13:be:7c: 16:15:07:5a:15:b2:be:8c:ce:e0:77:46:57:3e:0e:98:75:c3: 2f:4c:9e:89:73:b8:a9:0b:79:b0:7f:e8:73:eb:6d:88:5c:12: 60:a0:1e:a4:68:46:fc:c4:ea:db:6b:c1:6a:e9:3b:83:40:44: 89:27:15:ff:6c:c3:83:26:20:12:58:f3:38:6e:29:6e:ae:d9: 5e:c9:14:be:91:6d:b2:5b:02:f9:da:b0:2e:20:41:32:3c:0e: 62:b5:92:b7:11:8a:f4:20:b5:38:ac:15:88:2c:2f:b6:76:f0: 8b:d6:a2:41:c6:f0:75:8a:b0:88:47:95:6c:65:dc:d1:c0:35: fc:ee:a6:0f:73:08:3d:d0:a3:94:6f:b5:f3:d5:f5:41:5a:23: cb:d9:74:7a:d8:e3:9d:22:28:d1:6b:eb:83:08:19:d9:39:3d: c6:0d:cc:74:fd:24:fe:1b:f8:6c:74:75:2c:ac:05:b6:a2:fe: ee:e8:fe:62:c5:2e:36:6e:af:a9:f3:fc:63:12:4f:96:9b:e1: 49:fd:89:5f:a9:3c:8d:13:da:31:51:e3:58:36:d9:15:c0:8f: c1:5d:5d:c8:ae:f8:a5:55:e6:e0:be:0e:00:bb:3f:24:df:39: 2c:53:6e:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFSs9u9FFlltbaZbVNbTRAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NTc3NTJhMDgxYTc3OGZjMWQyY2VlMWIwZDZhYTQ1ZDUx YTJjNDkwHhcNMjUxMjIyMDkwMTI5WhcNMjUxMjIzMDkwMTI5WjAzMTEwLwYDVQQD EygxYWVkOGQ5ZWE3NmRmYWMyOWQ0MmQ1ZDViN2FiNGNlMjI2NjVmYjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/ggQU5t0snHwtECVKbuNy+DQBdB UsE4xr+o3d5dph8R1mu2K0G2koRMtz2f4ppxBerz93vIB4MycplsDRWcRT+JTiwn g1ye1/kRacc15tJbGpbYWgPWQG6kM/rbHcl7iPzapn5ZA28lBTk+XqE5UhxoKsDY sqsJNf8Pu4ewNkWHB+1ezFih6PVk8Td+d9xWZmQb0BZI16ODRceQMIwrMj15JgcE SCwe8dqAAoPGO87PBZ4C5P7nhOnoOW19PyDX2wHewwrAqwSZD0yzyGMYhswRp1/A URzNaeW7VPcmEOuBV6GmixmhA/aGl6R0po8uR0Jdc8Xnrf3EzK8WiHTPHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBrtjZ6nbfrCnULV1berTOImZfsoMB8GA1UdIwQY MBaAFNdXdSoIGnePwdLO4bDWqkXVGixJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTFkMUtnZ2FkNF9CMHM3aHNOYXFSZFVhTEVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83YTgzYmQtMmJmZC00YzY4LWJlYTMt YjQxYWQxMDY5YTNjLzEvMTFkMUtnZ2FkNF9CMHM3aHNOYXFSZFVhTEVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC83YTgzYmQtMmJmZC00YzY4LWJlYTMtYjQxYWQxMDY5YTNj LzEvMTFkMUtnZ2FkNF9CMHM3aHNOYXFSZFVhTEVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgw9xAC3e bY7/qiI9k3pKE758FhUHWhWyvozO4HdGVz4OmHXDL0yeiXO4qQt5sH/oc+ttiFwS YKAepGhG/MTq22vBauk7g0BEiScV/2zDgyYgEljzOG4pbq7ZXskUvpFtslsC+dqw LiBBMjwOYrWStxGK9CC1OKwViCwvtnbwi9aiQcbwdYqwiEeVbGXc0cA1/O6mD3MI PdCjlG+189X1QVojy9l0etjjnSIo0WvrgwgZ2Tk9xg3MdP0k/hv4bHR1LKwFtqL+ 7uj+YsUuNm6vqfP8YxJPlpvhSf2JX6k8jRPaMVHjWDbZFcCPwV1dyK74pVXm4L4O ALs/JN85LFNuJw== -----END CERTIFICATE-----Generated at Mon Dec 22 15:40:15 2025 by rpki-client