This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft File: D1T54Kep6u6svFsQMQI1t_0O7QM.mft (raw, json) Hash identifier: E+IjXQxsGSluDiJR+z16uhFedHocjXRFYtFIeYfaCcg= Subject key identifier: F3:93:A2:A9:75:45:57:BE:1E:B7:A3:0F:CB:BF:C9:F8:5A:4F:0D:00 Authority key identifier: 0F:54:F9:E0:A7:A9:EA:EE:AC:BC:5B:10:31:02:35:B7:FD:0E:ED:03 Certificate issuer: /CN=0f54f9e0a7a9eaeeacbc5b10310235b7fd0eed03 Certificate serial: 019B3456655B271EE3B7A8A5A022A53D853B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1T54Kep6u6svFsQMQI1t_0O7QM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft Manifest number: 1380 Signing time: Fri 19 Dec 2025 02:00:35 +0000 Manifest this update: Fri 19 Dec 2025 02:00:35 +0000 Manifest next update: Sat 20 Dec 2025 02:00:35 +0000 Files and hashes: 1: D1T54Kep6u6svFsQMQI1t_0O7QM.crl (hash: Y89umCWbVWmyCjhFW2qUgwkNQemN3JI1d8tsW5QTpG4=) 2: n_c4PLsmjJy0yCliC8En4sc8wCw.roa (hash: cMBCvEWECFAcwZYZaTXi+y0wWCPFximX6N1nRpp3vNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft rsync://rpki.ripe.net/repository/DEFAULT/D1T54Kep6u6svFsQMQI1t_0O7QM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:56:65:5b:27:1e:e3:b7:a8:a5:a0:22:a5:3d:85:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f54f9e0a7a9eaeeacbc5b10310235b7fd0eed03 Validity Not Before: Dec 19 02:00:35 2025 GMT Not After : Dec 20 02:00:35 2025 GMT Subject: CN=f393a2a9754557be1eb7a30fcbbfc9f85a4f0d00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:c8:73:9f:99:c2:94:c0:09:15:c2:54:81:14: 80:c4:0b:49:1c:75:86:89:58:28:82:a6:4e:16:d6: 8b:06:8c:6a:ab:a4:ec:81:fd:bf:57:54:ef:16:c5: 71:1f:9b:4f:bd:76:6c:f7:7c:8d:97:a3:b4:27:0a: b3:e5:40:38:ac:04:db:e0:36:7f:95:0c:80:38:b3: 06:d9:a6:d9:95:1b:68:a6:a5:5a:0f:2d:52:28:3a: 81:1d:66:b1:de:66:8b:27:99:c1:66:97:55:66:82: cb:55:6c:57:89:f3:ac:38:15:18:30:c7:7d:71:b2: 26:88:fb:fe:ed:cc:22:12:a7:20:52:77:66:b3:16: 3a:06:7a:0a:4b:ea:ea:4f:73:15:16:bc:7c:79:94: b0:b3:5a:96:0a:34:3d:09:09:72:b2:e8:e9:6c:ae: 24:c5:99:cb:0a:75:e0:94:ef:75:ff:80:03:a8:82: 84:f5:94:15:fb:44:80:06:15:ef:e3:8d:20:7e:89: 11:67:97:a8:df:7c:13:6c:4f:4c:27:00:ad:c9:56: 62:c9:d0:cf:64:68:96:e2:56:a3:1a:43:e3:87:c9: ad:65:cd:aa:47:85:12:67:e8:b1:7f:66:89:cc:5e: 73:a7:13:2c:12:1b:08:a3:f5:01:49:e5:57:c8:f8: bd:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:93:A2:A9:75:45:57:BE:1E:B7:A3:0F:CB:BF:C9:F8:5A:4F:0D:00 X509v3 Authority Key Identifier: keyid:0F:54:F9:E0:A7:A9:EA:EE:AC:BC:5B:10:31:02:35:B7:FD:0E:ED:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1T54Kep6u6svFsQMQI1t_0O7QM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:48:62:c8:e3:4d:4e:b7:89:1a:51:e6:b7:16:35:9c:62:af: d1:c2:bc:06:5d:4b:f4:25:0a:fd:90:65:19:8d:a6:bd:33:23: 9c:0c:ab:66:32:ae:7b:f5:c6:61:20:ca:02:d3:b1:78:61:94: 1a:a8:d3:19:86:24:c3:03:98:30:2f:0c:3f:ae:2d:2b:ec:a4: b4:76:41:e6:b6:fa:cc:8e:aa:53:06:c5:73:64:95:f8:e1:71: 46:40:6e:f9:4f:27:4f:66:ae:8a:19:d4:3e:33:fd:15:46:8c: e8:2a:07:28:41:e1:ae:54:d6:13:67:0c:12:70:7b:8d:7d:cd: b6:81:3e:8b:7c:86:35:08:4f:8d:7d:66:ab:4b:68:d5:ce:ed: 23:5c:29:ae:8e:e9:93:14:6d:4b:72:26:0a:f9:6f:05:10:3f: aa:46:79:40:68:ac:59:bf:b7:38:e1:1d:3b:23:0e:f0:83:e5: 9c:bb:30:13:16:78:cd:26:4e:67:6b:31:83:bb:31:b3:51:c8: 1d:64:e7:44:9f:06:38:68:9d:6b:d0:d4:1d:cd:15:3f:5e:14: 7d:ff:bd:26:c4:e9:e2:83:f1:85:fa:ab:bf:d3:f0:17:bf:13: a4:94:7c:69:72:30:f0:9e:91:43:fb:f5:ce:0d:88:a8:c0:23: 9c:9a:2d:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0VmVbJx7jt6iloCKlPYU7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNTRmOWUwYTdhOWVhZWVhY2JjNWIxMDMxMDIzNWI3ZmQw ZWVkMDMwHhcNMjUxMjE5MDIwMDM1WhcNMjUxMjIwMDIwMDM1WjAzMTEwLwYDVQQD EyhmMzkzYTJhOTc1NDU1N2JlMWViN2EzMGZjYmJmYzlmODVhNGYwZDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6shzn5nClMAJFcJUgRSAxAtJHHWG iVgogqZOFtaLBoxqq6Tsgf2/V1TvFsVxH5tPvXZs93yNl6O0Jwqz5UA4rATb4DZ/ lQyAOLMG2abZlRtopqVaDy1SKDqBHWax3maLJ5nBZpdVZoLLVWxXifOsOBUYMMd9 cbImiPv+7cwiEqcgUndmsxY6BnoKS+rqT3MVFrx8eZSws1qWCjQ9CQlysujpbK4k xZnLCnXglO91/4ADqIKE9ZQV+0SABhXv440gfokRZ5eo33wTbE9MJwCtyVZiydDP ZGiW4lajGkPjh8mtZc2qR4USZ+ixf2aJzF5zpxMsEhsIo/UBSeVXyPi9nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPOToql1RVe+HrejD8u/yfhaTw0AMB8GA1UdIwQY MBaAFA9U+eCnqerurLxbEDECNbf9Du0DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDFUNTRLZXA2dTZzdkZzUU1RSTF0XzBPN1FNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS85MDU5YzgtYmJkOC00ZjZlLWE2MGUt ZWYyNmMzNDRlZjAxLzEvRDFUNTRLZXA2dTZzdkZzUU1RSTF0XzBPN1FNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS85MDU5YzgtYmJkOC00ZjZlLWE2MGUtZWYyNmMzNDRlZjAx LzEvRDFUNTRLZXA2dTZzdkZzUU1RSTF0XzBPN1FNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPUhiyONN TreJGlHmtxY1nGKv0cK8Bl1L9CUK/ZBlGY2mvTMjnAyrZjKue/XGYSDKAtOxeGGU GqjTGYYkwwOYMC8MP64tK+yktHZB5rb6zI6qUwbFc2SV+OFxRkBu+U8nT2auihnU PjP9FUaM6CoHKEHhrlTWE2cMEnB7jX3NtoE+i3yGNQhPjX1mq0to1c7tI1wpro7p kxRtS3ImCvlvBRA/qkZ5QGisWb+3OOEdOyMO8IPlnLswExZ4zSZOZ2sxg7sxs1HI HWTnRJ8GOGida9DUHc0VP14Uff+9JsTp4oPxhfqrv9PwF78TpJR8aXIw8J6RQ/v1 zg2IqMAjnJotUg== -----END CERTIFICATE-----Generated at Fri Dec 19 05:32:01 2025 by rpki-client