This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft File: D1IdJpUmx67jjk-yRUsvCH9p_rc.mft (raw, json) Hash identifier: TNcp1yLdQz9VaP39/4QfSeNOj3SK1wGCzP7QQ5WPaUc= Subject key identifier: 6E:FE:41:4B:69:35:0B:4F:64:2D:CB:C5:FC:C3:72:AA:16:22:C0:B6 Authority key identifier: 0F:52:1D:26:95:26:C7:AE:E3:8E:4F:B2:45:4B:2F:08:7F:69:FE:B7 Certificate issuer: /CN=0f521d269526c7aee38e4fb2454b2f087f69feb7 Certificate serial: 019B50052D909619585DD907809FF6E87F56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1IdJpUmx67jjk-yRUsvCH9p_rc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft Manifest number: 077C Signing time: Wed 24 Dec 2025 11:01:15 +0000 Manifest this update: Wed 24 Dec 2025 11:01:15 +0000 Manifest next update: Thu 25 Dec 2025 11:01:15 +0000 Files and hashes: 1: D1IdJpUmx67jjk-yRUsvCH9p_rc.crl (hash: 4H9Vx3DqzN65X/XW+NDRFwkzyGSkelgfHVyCPFuSExY=) 2: LlemLUDCd84kXEFGKBA1pEcpzVU.roa (hash: JfcpiQRrDVeOVEeINVti/ZaYZkfMnqCLAWmq46zuOoM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft rsync://rpki.ripe.net/repository/DEFAULT/D1IdJpUmx67jjk-yRUsvCH9p_rc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:05:2d:90:96:19:58:5d:d9:07:80:9f:f6:e8:7f:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f521d269526c7aee38e4fb2454b2f087f69feb7 Validity Not Before: Dec 24 11:01:15 2025 GMT Not After : Dec 25 11:01:15 2025 GMT Subject: CN=6efe414b69350b4f642dcbc5fcc372aa1622c0b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:38:b0:6b:5c:1d:7b:21:c2:c7:64:3f:29:fe: af:ba:2d:f6:fc:4d:64:a0:da:26:03:78:98:0c:37: 5d:2c:4a:cf:2b:e9:be:99:97:4a:15:19:1c:32:90: f7:80:aa:b9:5e:54:13:fb:e9:b5:79:96:ca:64:89: 94:22:e3:c0:64:76:d0:b4:29:02:c2:20:20:db:38: c6:9a:31:f3:17:74:d0:a3:35:1b:b4:0e:cc:6a:fe: a5:e1:7c:59:35:e7:0c:89:b5:3d:fe:97:09:c9:78: 82:81:1e:a1:40:ad:18:82:b4:8a:f4:c7:d7:6b:3c: 87:ce:38:61:c8:fd:b0:73:9a:58:eb:e7:63:90:ef: 6d:47:93:53:67:a9:d2:8b:53:22:50:c9:6b:57:09: fc:ca:90:2a:70:e8:b7:c2:22:66:88:cd:e9:70:64: 3c:97:1a:e5:21:e9:31:22:c3:7f:05:fc:68:ba:e7: 61:cb:f2:7f:30:25:fe:82:dd:7c:65:31:94:81:9f: f5:1b:26:4c:b2:47:aa:de:c6:3b:fe:e1:1a:b3:cb: d1:14:fb:5c:be:1e:c4:4d:34:84:aa:fb:76:c4:48: a6:95:13:0e:68:f8:29:42:2b:ca:bb:6b:dc:43:02: c3:6d:d0:f7:d7:e2:98:c0:15:5b:3a:dd:74:86:4f: 67:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:FE:41:4B:69:35:0B:4F:64:2D:CB:C5:FC:C3:72:AA:16:22:C0:B6 X509v3 Authority Key Identifier: keyid:0F:52:1D:26:95:26:C7:AE:E3:8E:4F:B2:45:4B:2F:08:7F:69:FE:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1IdJpUmx67jjk-yRUsvCH9p_rc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:f2:12:af:85:a6:94:21:86:88:fd:da:bd:3d:0d:dc:df:89: 7e:38:5a:94:59:a7:3b:89:88:68:75:7f:b3:58:61:4b:17:94: 27:32:58:d6:d6:e3:b9:5c:b2:01:cb:9f:e9:d1:c5:dd:62:a4: d5:9c:78:04:34:cd:ae:a9:6a:80:2b:78:6e:74:a5:d1:84:47: 63:5e:55:49:3a:71:e8:ab:49:ae:5a:aa:e2:46:39:6e:e2:0a: c9:e5:d1:15:10:10:05:30:f9:e0:39:a3:ab:d4:4e:7f:45:bf: a8:29:72:77:a1:e8:79:80:e0:33:de:d9:06:74:8c:ed:81:51: 18:a4:e5:09:73:ba:b1:d0:99:b7:17:c5:ef:94:44:d6:9c:80: 1f:d1:7c:29:62:a4:44:f0:27:a9:5a:d5:ed:f3:06:cd:4b:d5: 0b:79:cc:bc:09:1a:04:71:79:80:dc:dd:50:3e:68:ef:29:4f: b6:2b:ed:dd:91:79:18:aa:6f:b2:da:76:0d:00:3c:c8:46:8b: 10:aa:a0:e0:ee:51:fc:16:78:cd:b0:7e:0b:d6:9a:e7:2f:e9: 1d:93:3e:ab:44:6e:bd:61:5e:1d:31:64:21:c0:7a:fd:82:b3: e4:fa:19:56:b3:7c:60:3f:cc:b7:07:b3:c3:e4:83:6b:15:d9: 56:51:ee:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQBS2QlhlYXdkHgJ/26H9WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNTIxZDI2OTUyNmM3YWVlMzhlNGZiMjQ1NGIyZjA4N2Y2 OWZlYjcwHhcNMjUxMjI0MTEwMTE1WhcNMjUxMjI1MTEwMTE1WjAzMTEwLwYDVQQD Eyg2ZWZlNDE0YjY5MzUwYjRmNjQyZGNiYzVmY2MzNzJhYTE2MjJjMGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDiwa1wdeyHCx2Q/Kf6vui32/E1k oNomA3iYDDddLErPK+m+mZdKFRkcMpD3gKq5XlQT++m1eZbKZImUIuPAZHbQtCkC wiAg2zjGmjHzF3TQozUbtA7Mav6l4XxZNecMibU9/pcJyXiCgR6hQK0YgrSK9MfX azyHzjhhyP2wc5pY6+djkO9tR5NTZ6nSi1MiUMlrVwn8ypAqcOi3wiJmiM3pcGQ8 lxrlIekxIsN/Bfxouudhy/J/MCX+gt18ZTGUgZ/1GyZMskeq3sY7/uEas8vRFPtc vh7ETTSEqvt2xEimlRMOaPgpQivKu2vcQwLDbdD31+KYwBVbOt10hk9n2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG7+QUtpNQtPZC3LxfzDcqoWIsC2MB8GA1UdIwQY MBaAFA9SHSaVJseu445PskVLLwh/af63MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDFJZEpwVW14NjdqamsteVJVc3ZDSDlwX3JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8zMDdiZmYtMWViMS00NzAxLWFjNmIt YzFlYjAxMTBiZDNhLzEvRDFJZEpwVW14NjdqamsteVJVc3ZDSDlwX3JjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8zMDdiZmYtMWViMS00NzAxLWFjNmItYzFlYjAxMTBiZDNh LzEvRDFJZEpwVW14NjdqamsteVJVc3ZDSDlwX3JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJfISr4Wm lCGGiP3avT0N3N+JfjhalFmnO4mIaHV/s1hhSxeUJzJY1tbjuVyyAcuf6dHF3WKk 1Zx4BDTNrqlqgCt4bnSl0YRHY15VSTpx6KtJrlqq4kY5buIKyeXRFRAQBTD54Dmj q9ROf0W/qClyd6HoeYDgM97ZBnSM7YFRGKTlCXO6sdCZtxfF75RE1pyAH9F8KWKk RPAnqVrV7fMGzUvVC3nMvAkaBHF5gNzdUD5o7ylPtivt3ZF5GKpvstp2DQA8yEaL EKqg4O5R/BZ4zbB+C9aa5y/pHZM+q0RuvWFeHTFkIcB6/YKz5PoZVrN8YD/Mtwez w+SDaxXZVlHuDA== -----END CERTIFICATE-----Generated at Wed Dec 24 18:30:16 2025 by rpki-client