This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft File: D1IdJpUmx67jjk-yRUsvCH9p_rc.mft (raw, json) Hash identifier: Te+dpGHS3z7wj0NdNemS+E661Es8rAYkXr1Wcw3G0DE= Subject key identifier: B4:64:73:2F:18:DB:BF:A9:DD:E6:E2:F5:83:82:F7:45:B1:A5:1F:C8 Authority key identifier: 0F:52:1D:26:95:26:C7:AE:E3:8E:4F:B2:45:4B:2F:08:7F:69:FE:B7 Certificate issuer: /CN=0f521d269526c7aee38e4fb2454b2f087f69feb7 Certificate serial: 019B3EA387E7F1A9A4A0BB7008C92D1E78D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1IdJpUmx67jjk-yRUsvCH9p_rc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft Manifest number: 0773 Signing time: Sun 21 Dec 2025 02:01:03 +0000 Manifest this update: Sun 21 Dec 2025 02:01:03 +0000 Manifest next update: Mon 22 Dec 2025 02:01:03 +0000 Files and hashes: 1: D1IdJpUmx67jjk-yRUsvCH9p_rc.crl (hash: ZOjADu9GgRURuDGlhK0862OvTWQeqfrCS1veCsAp2tY=) 2: LlemLUDCd84kXEFGKBA1pEcpzVU.roa (hash: JfcpiQRrDVeOVEeINVti/ZaYZkfMnqCLAWmq46zuOoM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft rsync://rpki.ripe.net/repository/DEFAULT/D1IdJpUmx67jjk-yRUsvCH9p_rc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:87:e7:f1:a9:a4:a0:bb:70:08:c9:2d:1e:78:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f521d269526c7aee38e4fb2454b2f087f69feb7 Validity Not Before: Dec 21 02:01:03 2025 GMT Not After : Dec 22 02:01:03 2025 GMT Subject: CN=b464732f18dbbfa9dde6e2f58382f745b1a51fc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e3:37:a0:c9:30:a3:7d:53:44:27:c9:1e:9d: da:7c:aa:aa:c9:a6:e9:b1:06:60:6c:13:e1:44:f7: cd:b5:41:7f:57:3d:78:dc:67:04:86:cb:0c:da:e2: bc:58:e5:6d:a2:20:38:2b:8a:85:9b:0e:ed:26:f1: eb:b3:dd:04:07:38:88:6d:4f:54:88:c4:1a:3b:c6: 59:b8:2b:ca:59:e1:f1:a5:45:43:2f:b6:db:47:99: e3:ba:94:80:f2:38:a5:d4:9c:1c:f0:ff:90:c0:ef: 0b:be:63:2d:c4:c4:8a:42:41:fa:1d:de:e6:9b:05: 7e:69:db:b2:1b:92:ca:67:d0:33:ee:15:c9:4c:59: cb:60:d2:00:23:65:8f:48:5c:f6:09:b4:e0:35:f8: 57:d5:49:47:ac:ba:bd:e8:6c:96:c4:5c:68:21:8d: e7:f8:ee:e3:a0:27:db:18:97:96:84:88:6b:75:79: b5:df:50:69:fb:0b:6d:bd:84:c8:4c:8e:3e:b4:a5: 9d:c8:2c:dc:3e:51:ef:a6:55:b0:89:cb:bc:d7:3b: 57:85:9a:3b:55:20:96:81:25:e2:a2:6f:2b:bf:2a: 74:6e:aa:02:5e:9b:4f:62:25:62:75:ef:29:ad:ed: 2b:6d:15:c4:6b:12:74:99:1f:bd:17:cd:af:09:2d: 6f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:64:73:2F:18:DB:BF:A9:DD:E6:E2:F5:83:82:F7:45:B1:A5:1F:C8 X509v3 Authority Key Identifier: keyid:0F:52:1D:26:95:26:C7:AE:E3:8E:4F:B2:45:4B:2F:08:7F:69:FE:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1IdJpUmx67jjk-yRUsvCH9p_rc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:74:8a:14:8e:54:33:fd:22:f3:3f:e7:71:87:a5:bd:d0:62: 9c:02:53:04:40:1a:13:bd:97:01:91:75:f5:64:96:59:7a:12: 12:f1:33:07:aa:c1:0c:28:52:6c:6a:8b:bf:93:21:11:9c:46: 13:88:7f:d2:6b:99:a1:3b:46:a5:6f:8e:d3:ef:f3:f7:8e:04: 42:f4:6d:a8:f0:7b:3c:a3:1c:b9:d5:42:01:9d:0c:d8:7e:89: 83:f4:db:ff:00:f6:c8:17:68:ec:19:6f:74:63:97:9b:76:41: cd:5a:8a:63:06:8a:c1:72:09:75:28:30:b8:27:a5:b8:2c:f5: 81:7e:6d:20:e5:be:5a:32:c1:31:fa:63:a0:ca:8f:25:1c:6e: e8:22:a1:a0:f4:9a:f2:72:fb:a9:74:14:a8:22:03:81:5c:20: f0:88:27:48:a4:30:f7:29:ef:83:9b:9a:4d:98:7f:eb:bb:26: f9:83:0f:b7:da:fe:1a:c1:6f:fd:9f:a8:8c:cc:b1:5a:3e:0e: cb:bb:3e:b2:d7:6e:48:bb:a8:4a:82:6a:3c:cb:b8:5e:1b:f3: 1c:ae:d8:c2:37:ea:a4:91:76:68:bd:6f:0b:60:79:e6:c9:73: e3:9f:95:9e:11:bc:4f:e2:af:19:77:88:3a:9a:4b:a0:e3:86: f9:21:56:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o4fn8amkoLtwCMktHnjSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNTIxZDI2OTUyNmM3YWVlMzhlNGZiMjQ1NGIyZjA4N2Y2 OWZlYjcwHhcNMjUxMjIxMDIwMTAzWhcNMjUxMjIyMDIwMTAzWjAzMTEwLwYDVQQD EyhiNDY0NzMyZjE4ZGJiZmE5ZGRlNmUyZjU4MzgyZjc0NWIxYTUxZmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+M3oMkwo31TRCfJHp3afKqqyabp sQZgbBPhRPfNtUF/Vz143GcEhssM2uK8WOVtoiA4K4qFmw7tJvHrs90EBziIbU9U iMQaO8ZZuCvKWeHxpUVDL7bbR5njupSA8jil1Jwc8P+QwO8LvmMtxMSKQkH6Hd7m mwV+aduyG5LKZ9Az7hXJTFnLYNIAI2WPSFz2CbTgNfhX1UlHrLq96GyWxFxoIY3n +O7joCfbGJeWhIhrdXm131Bp+wttvYTITI4+tKWdyCzcPlHvplWwicu81ztXhZo7 VSCWgSXiom8rvyp0bqoCXptPYiVide8pre0rbRXEaxJ0mR+9F82vCS1vUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLRkcy8Y27+p3ebi9YOC90WxpR/IMB8GA1UdIwQY MBaAFA9SHSaVJseu445PskVLLwh/af63MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDFJZEpwVW14NjdqamsteVJVc3ZDSDlwX3JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8zMDdiZmYtMWViMS00NzAxLWFjNmIt YzFlYjAxMTBiZDNhLzEvRDFJZEpwVW14NjdqamsteVJVc3ZDSDlwX3JjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8zMDdiZmYtMWViMS00NzAxLWFjNmItYzFlYjAxMTBiZDNh LzEvRDFJZEpwVW14NjdqamsteVJVc3ZDSDlwX3JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAInSKFI5U M/0i8z/ncYelvdBinAJTBEAaE72XAZF19WSWWXoSEvEzB6rBDChSbGqLv5MhEZxG E4h/0muZoTtGpW+O0+/z944EQvRtqPB7PKMcudVCAZ0M2H6Jg/Tb/wD2yBdo7Blv dGOXm3ZBzVqKYwaKwXIJdSgwuCeluCz1gX5tIOW+WjLBMfpjoMqPJRxu6CKhoPSa 8nL7qXQUqCIDgVwg8IgnSKQw9ynvg5uaTZh/67sm+YMPt9r+GsFv/Z+ojMyxWj4O y7s+stduSLuoSoJqPMu4XhvzHK7YwjfqpJF2aL1vC2B55slz45+VnhG8T+KvGXeI OppLoOOG+SFWbw== -----END CERTIFICATE-----Generated at Sun Dec 21 07:40:38 2025 by rpki-client