This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft File: 1873Xgl6YxiGszyB9kql67wMMqA.mft (raw, json) Hash identifier: 0M10kzJY07MMMoZUCnyRf71JsiJSAoNmjzYKV/8frWQ= Subject key identifier: 75:B4:91:0C:A4:F7:25:F6:5B:B7:A9:70:21:2C:D4:67:21:8A:E9:C4 Authority key identifier: D7:CE:F7:5E:09:7A:63:18:86:B3:3C:81:F6:4A:A5:EB:BC:0C:32:A0 Certificate issuer: /CN=d7cef75e097a631886b33c81f64aa5ebbc0c32a0 Certificate serial: 019B4EF2299F34D897FF446F5E045C0E63EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1873Xgl6YxiGszyB9kql67wMMqA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft Manifest number: 05C2 Signing time: Wed 24 Dec 2025 06:00:51 +0000 Manifest this update: Wed 24 Dec 2025 06:00:51 +0000 Manifest next update: Thu 25 Dec 2025 06:00:51 +0000 Files and hashes: 1: 1873Xgl6YxiGszyB9kql67wMMqA.crl (hash: m6FFWUM7XC9E8vdLMbOy0Hnng/4OeIPmSxU87NdgHeE=) 2: tavXsXu7Wm_kIdKnzfVPzxktMGQ.roa (hash: PDEUyoKVmJLpE4EXJZCm2eA6jcMg8DukO+sjxPMBeZo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft rsync://rpki.ripe.net/repository/DEFAULT/1873Xgl6YxiGszyB9kql67wMMqA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 06:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:f2:29:9f:34:d8:97:ff:44:6f:5e:04:5c:0e:63:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7cef75e097a631886b33c81f64aa5ebbc0c32a0 Validity Not Before: Dec 24 06:00:51 2025 GMT Not After : Dec 25 06:00:51 2025 GMT Subject: CN=75b4910ca4f725f65bb7a970212cd467218ae9c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a8:60:54:92:69:43:f6:d4:1a:28:aa:a1:98: 76:56:c2:91:d7:cd:d5:34:bb:ca:c4:89:72:4e:e9: d0:7c:db:b5:1f:86:ff:e8:0e:ea:a8:9d:d1:1d:b2: 8e:e7:98:68:db:1f:2e:48:cd:7d:4a:6a:e9:21:86: c4:da:ed:8d:da:7d:16:af:ce:26:b5:99:d7:78:1b: 8c:1e:3c:a2:e9:94:2d:40:64:96:3c:c2:b9:38:e1: 45:f9:04:09:36:9d:f1:40:ff:9e:e3:04:ae:f6:cb: 7c:9e:fa:e6:00:3e:c1:03:5d:3a:e5:2d:a7:34:2d: ff:0e:ff:49:0e:84:1c:86:75:01:08:fc:52:b5:0c: c8:62:03:24:5c:ea:c3:cb:6c:25:7c:88:ee:de:0b: f7:7e:7a:75:91:c3:73:ba:12:9e:be:ee:f6:f9:c8: 78:24:eb:ae:13:20:6a:73:9a:52:b8:10:af:0c:06: 8f:e5:c3:ff:ef:ea:fd:d1:e5:b8:19:2e:56:14:d2: a7:33:8e:2e:7b:91:c1:24:b1:5f:bd:40:97:48:9c: 99:f2:22:76:09:86:a2:dc:b0:b0:88:1f:54:56:57: f3:42:d9:00:d0:d8:cc:5f:55:64:00:5d:28:88:25: 41:58:d1:17:e0:c7:ad:f5:6d:28:08:c0:3f:91:bd: b4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:B4:91:0C:A4:F7:25:F6:5B:B7:A9:70:21:2C:D4:67:21:8A:E9:C4 X509v3 Authority Key Identifier: keyid:D7:CE:F7:5E:09:7A:63:18:86:B3:3C:81:F6:4A:A5:EB:BC:0C:32:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1873Xgl6YxiGszyB9kql67wMMqA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:07:d0:d6:24:27:9e:71:31:e2:7f:fd:5b:6b:b9:0b:2f:cf: 25:dc:2c:38:55:d5:9a:63:94:d1:53:d5:f6:68:c3:3f:7d:bc: 4b:c3:85:52:6b:fa:88:f7:10:c9:0b:0d:b4:c9:c7:5a:50:a8: eb:e6:00:ca:ec:02:a1:50:f9:fb:a1:f1:f2:24:ef:f6:28:b9: 93:7a:1b:6a:61:3d:f0:59:c7:ea:3b:6e:33:92:10:ab:05:ec: 87:a8:93:6c:e5:7e:ed:60:15:0e:40:e3:a0:ee:a5:6a:72:5e: cd:6b:36:5d:a8:e6:32:ab:8b:06:7b:19:9f:2f:4d:92:bf:2b: ac:8b:24:13:af:5f:08:fb:3f:9d:03:4b:47:75:d0:82:04:3a: 13:94:c3:2e:fb:78:a4:50:0d:32:e1:b2:79:cd:65:a3:bf:64: 8b:cb:84:9a:c6:9f:b8:30:fb:ee:17:a4:6b:e3:be:7a:0e:4f: 76:1e:11:97:07:c1:12:06:16:29:f8:6b:90:70:e3:07:92:a8: c2:94:7d:28:4d:89:48:a4:a4:2f:a7:92:5e:11:16:bf:49:91: ed:5f:e5:00:d2:ae:0a:90:be:57:66:10:5f:78:9c:3d:16:ee: 33:12:f6:d5:26:4a:5a:86:dd:66:e9:84:14:2f:52:78:f6:4f: 83:0c:98:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtO8imfNNiX/0RvXgRcDmPuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3Y2VmNzVlMDk3YTYzMTg4NmIzM2M4MWY2NGFhNWViYmMw YzMyYTAwHhcNMjUxMjI0MDYwMDUxWhcNMjUxMjI1MDYwMDUxWjAzMTEwLwYDVQQD Eyg3NWI0OTEwY2E0ZjcyNWY2NWJiN2E5NzAyMTJjZDQ2NzIxOGFlOWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ahgVJJpQ/bUGiiqoZh2VsKR183V NLvKxIlyTunQfNu1H4b/6A7qqJ3RHbKO55ho2x8uSM19SmrpIYbE2u2N2n0Wr84m tZnXeBuMHjyi6ZQtQGSWPMK5OOFF+QQJNp3xQP+e4wSu9st8nvrmAD7BA1065S2n NC3/Dv9JDoQchnUBCPxStQzIYgMkXOrDy2wlfIju3gv3fnp1kcNzuhKevu72+ch4 JOuuEyBqc5pSuBCvDAaP5cP/7+r90eW4GS5WFNKnM44ue5HBJLFfvUCXSJyZ8iJ2 CYai3LCwiB9UVlfzQtkA0NjMX1VkAF0oiCVBWNEX4Met9W0oCMA/kb207QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHW0kQyk9yX2W7epcCEs1GchiunEMB8GA1UdIwQY MBaAFNfO914JemMYhrM8gfZKpeu8DDKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTg3M1hnbDZZeGlHc3p5QjlrcWw2N3dNTXFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9mNGYwZDUtN2U0My00NmJlLWIwOTIt NWJhNTAxZTBiMzcwLzEvMTg3M1hnbDZZeGlHc3p5QjlrcWw2N3dNTXFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9mNGYwZDUtN2U0My00NmJlLWIwOTItNWJhNTAxZTBiMzcw LzEvMTg3M1hnbDZZeGlHc3p5QjlrcWw2N3dNTXFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXAfQ1iQn nnEx4n/9W2u5Cy/PJdwsOFXVmmOU0VPV9mjDP328S8OFUmv6iPcQyQsNtMnHWlCo 6+YAyuwCoVD5+6Hx8iTv9ii5k3obamE98FnH6jtuM5IQqwXsh6iTbOV+7WAVDkDj oO6lanJezWs2XajmMquLBnsZny9Nkr8rrIskE69fCPs/nQNLR3XQggQ6E5TDLvt4 pFANMuGyec1lo79ki8uEmsafuDD77heka+O+eg5Pdh4RlwfBEgYWKfhrkHDjB5Ko wpR9KE2JSKSkL6eSXhEWv0mR7V/lANKuCpC+V2YQX3icPRbuMxL21SZKWobdZumE FC9SePZPgwyYtw== -----END CERTIFICATE-----Generated at Wed Dec 24 15:47:31 2025 by rpki-client