This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.mft File: a_D4R-GiFudUPHUqY1DGviPHxtU.mft (raw, json) Hash identifier: Z7nyaz5aXYs2061C/9WvsWKCYwpbO1HXoT5+few5bUo= Subject key identifier: 81:7E:AB:95:4A:93:3E:96:71:0D:1C:47:E3:74:CA:D6:BE:02:A8:F2 Authority key identifier: 6B:F0:F8:47:E1:A2:16:E7:54:3C:75:2A:63:50:C6:BE:23:C7:C6:D5 Certificate issuer: /CN=6bf0f847e1a216e7543c752a6350c6be23c7c6d5 Certificate serial: 019B34FB6AD5BBD3AE68AD2F1D19E0105BE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a_D4R-GiFudUPHUqY1DGviPHxtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.mft Manifest number: 1784 Signing time: Fri 19 Dec 2025 05:00:50 +0000 Manifest this update: Fri 19 Dec 2025 05:00:50 +0000 Manifest next update: Sat 20 Dec 2025 05:00:50 +0000 Files and hashes: 1: LG_wxHDNoS1Eb0OfbO3bSh_WSPg.roa (hash: ijCon2p1g8yWQ5glLczywg0vICoOxaxCrjmV9KKJaoI=) 2: a_D4R-GiFudUPHUqY1DGviPHxtU.crl (hash: IVgiePKIg11AKqgRJTzvpRGEERNPX+eoLrWUeKtmZaE=) 3: bIOP6zTckgfazEJud8vxPBhx8yU.roa (hash: MrtqoOHLEt4NYdTsarUu/kPlSqMrs79epMZuKq+/qAs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.mft rsync://rpki.ripe.net/repository/DEFAULT/a_D4R-GiFudUPHUqY1DGviPHxtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:6a:d5:bb:d3:ae:68:ad:2f:1d:19:e0:10:5b:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bf0f847e1a216e7543c752a6350c6be23c7c6d5 Validity Not Before: Dec 19 05:00:50 2025 GMT Not After : Dec 20 05:00:50 2025 GMT Subject: CN=817eab954a933e96710d1c47e374cad6be02a8f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:86:10:9a:50:de:f3:a6:aa:b2:d3:47:81:ce: 21:af:48:92:30:c9:cb:e2:69:6a:4e:a8:e0:2f:20: 83:54:29:c9:08:e9:06:22:52:33:ea:cd:25:dd:81: fd:85:71:35:0f:48:e6:63:25:1d:e3:1d:5c:d0:3d: 05:d5:80:2a:6b:46:f2:8c:cb:41:0a:33:b9:35:ea: 82:77:1f:cb:58:27:21:3c:b8:96:7d:8e:e6:ce:38: 2e:b7:19:8c:98:28:51:60:f2:fd:0b:2f:b4:a6:22: 49:68:3e:f5:ea:96:9b:5a:bb:cb:5b:e8:b2:41:0f: af:69:7c:da:1c:c3:74:4d:4a:66:38:95:c2:45:1f: 1a:0c:1d:13:ae:09:f2:dc:1c:14:d7:fe:c8:76:22: 9a:6c:a8:2f:48:35:62:3c:9d:7c:c5:46:82:4a:be: ff:33:03:16:00:18:cf:71:bb:00:29:49:34:d4:dc: ee:4e:b3:ec:91:b2:19:3a:ef:bc:e2:de:c0:2b:fd: 25:9e:db:6b:72:a2:fc:df:18:77:9c:10:54:5f:ec: 9f:42:73:ae:47:73:08:fa:21:66:aa:90:55:3b:a6: d7:5f:c3:3f:d0:6b:79:b3:ad:dc:13:4a:2f:80:90: da:7b:e6:ed:6b:d2:ba:34:68:33:57:b8:28:36:79: 02:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:7E:AB:95:4A:93:3E:96:71:0D:1C:47:E3:74:CA:D6:BE:02:A8:F2 X509v3 Authority Key Identifier: keyid:6B:F0:F8:47:E1:A2:16:E7:54:3C:75:2A:63:50:C6:BE:23:C7:C6:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_D4R-GiFudUPHUqY1DGviPHxtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:16:49:9a:03:4a:32:e1:cf:22:c8:f9:d3:c8:65:ff:4a:c7: ab:4c:b9:98:68:c6:f4:39:db:d6:e7:9d:8e:b9:69:16:3b:3d: 82:d5:04:6a:c0:07:87:a8:89:06:1a:eb:64:27:23:38:71:b4: 14:89:0e:d9:3d:d7:75:10:9a:17:d5:4b:8d:ab:92:f1:d6:03: dd:1e:58:00:34:19:8f:08:d9:2d:3d:c9:fa:fc:b4:65:c6:51: b5:bf:bf:9c:35:ac:aa:6f:ce:f9:25:95:cf:03:bc:53:91:26: a5:f0:d7:73:63:0c:b8:e3:31:fc:54:b6:c5:2f:bd:d8:c8:a4: 8d:9c:d4:3a:39:ca:3c:98:2f:4a:a6:27:3e:2d:63:04:b0:e6: 52:fd:70:38:a9:0d:7f:2e:1d:82:0a:17:8a:5f:ec:59:da:0e: 30:3a:dd:03:8e:60:6a:7f:ed:19:ba:1b:5a:f7:2e:91:98:d6: b6:86:f9:4f:8f:51:27:de:e7:27:dd:6c:b0:77:96:1b:e0:c4: cc:82:41:f3:97:d8:fa:97:12:3a:25:23:d5:05:ce:44:29:91: 22:a7:6b:0f:47:f8:fb:7f:6a:cd:7d:59:01:00:c0:b0:a3:21: b7:7d:af:29:0f:c7:3b:4a:65:e7:4b:7f:37:0a:ec:e9:e8:d0: f5:a0:21:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+2rVu9OuaK0vHRngEFvlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiZjBmODQ3ZTFhMjE2ZTc1NDNjNzUyYTYzNTBjNmJlMjNj N2M2ZDUwHhcNMjUxMjE5MDUwMDUwWhcNMjUxMjIwMDUwMDUwWjAzMTEwLwYDVQQD Eyg4MTdlYWI5NTRhOTMzZTk2NzEwZDFjNDdlMzc0Y2FkNmJlMDJhOGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YYQmlDe86aqstNHgc4hr0iSMMnL 4mlqTqjgLyCDVCnJCOkGIlIz6s0l3YH9hXE1D0jmYyUd4x1c0D0F1YAqa0byjMtB CjO5NeqCdx/LWCchPLiWfY7mzjgutxmMmChRYPL9Cy+0piJJaD716pabWrvLW+iy QQ+vaXzaHMN0TUpmOJXCRR8aDB0Trgny3BwU1/7IdiKabKgvSDViPJ18xUaCSr7/ MwMWABjPcbsAKUk01NzuTrPskbIZOu+84t7AK/0lnttrcqL83xh3nBBUX+yfQnOu R3MI+iFmqpBVO6bXX8M/0Gt5s63cE0ovgJDae+bta9K6NGgzV7goNnkC3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIF+q5VKkz6WcQ0cR+N0yta+AqjyMB8GA1UdIwQY MBaAFGvw+EfhohbnVDx1KmNQxr4jx8bVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYV9ENFItR2lGdWRVUEhVcVkxREd2aVBIeHRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9lMGNkNjktZGVmZi00YzIxLWE4MDkt Njk5OWE5OWRjZjFlLzEvYV9ENFItR2lGdWRVUEhVcVkxREd2aVBIeHRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9lMGNkNjktZGVmZi00YzIxLWE4MDktNjk5OWE5OWRjZjFl LzEvYV9ENFItR2lGdWRVUEhVcVkxREd2aVBIeHRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALhZJmgNK MuHPIsj508hl/0rHq0y5mGjG9Dnb1uedjrlpFjs9gtUEasAHh6iJBhrrZCcjOHG0 FIkO2T3XdRCaF9VLjauS8dYD3R5YADQZjwjZLT3J+vy0ZcZRtb+/nDWsqm/O+SWV zwO8U5EmpfDXc2MMuOMx/FS2xS+92MikjZzUOjnKPJgvSqYnPi1jBLDmUv1wOKkN fy4dggoXil/sWdoOMDrdA45gan/tGbobWvcukZjWtob5T49RJ97nJ91ssHeWG+DE zIJB85fY+pcSOiUj1QXORCmRIqdrD0f4+39qzX1ZAQDAsKMht32vKQ/HO0pl50t/ Nwrs6ejQ9aAhwQ== -----END CERTIFICATE-----Generated at Fri Dec 19 08:23:02 2025 by rpki-client