This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft File: d1F6r0j2aaC-yOxqyGgrTBJObTA.mft (raw, json) Hash identifier: CqWRxfZcSQAnNN8q1Zd009gT4dSkTkJ3e8lUv+1de1s= Subject key identifier: 8E:1B:2F:E4:27:2F:8E:11:05:95:97:3E:EE:D7:33:20:A1:21:65:6D Authority key identifier: 77:51:7A:AF:48:F6:69:A0:BE:C8:EC:6A:C8:68:2B:4C:12:4E:6D:30 Certificate issuer: /CN=77517aaf48f669a0bec8ec6ac8682b4c124e6d30 Certificate serial: 019B42B74087DC5BC19FAC7FE1AB1C2ED487 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d1F6r0j2aaC-yOxqyGgrTBJObTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft Manifest number: 0504 Signing time: Sun 21 Dec 2025 21:01:04 +0000 Manifest this update: Sun 21 Dec 2025 21:01:04 +0000 Manifest next update: Mon 22 Dec 2025 21:01:04 +0000 Files and hashes: 1: d1F6r0j2aaC-yOxqyGgrTBJObTA.crl (hash: RO7iwiz8aUQ9xlqSo6IDSEz2WM77l8dkyVK7Iot2uXY=) 2: lJ6hu6V7P05pf4Ct-PkwsRbTn-Y.roa (hash: yD7rptfWCX+Sfjy7H+I4AQ8wgaNpJdZq+9g0IP00GOc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft rsync://rpki.ripe.net/repository/DEFAULT/d1F6r0j2aaC-yOxqyGgrTBJObTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:40:87:dc:5b:c1:9f:ac:7f:e1:ab:1c:2e:d4:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77517aaf48f669a0bec8ec6ac8682b4c124e6d30 Validity Not Before: Dec 21 21:01:04 2025 GMT Not After : Dec 22 21:01:04 2025 GMT Subject: CN=8e1b2fe4272f8e110595973eeed73320a121656d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:55:6c:b6:8b:88:91:95:a9:a0:39:f6:38:b0: f4:78:e3:07:59:46:25:44:ca:42:50:1c:d0:2f:4c: a6:18:7e:a6:7c:da:9f:d8:83:c6:57:96:3d:45:f4: 4f:17:23:60:1d:34:14:30:15:82:e2:9c:5c:ab:4e: 95:31:99:4a:79:21:c9:65:af:db:e3:d2:e9:3f:b2: 44:0c:b8:30:36:52:fd:16:26:c9:8e:f6:e7:1d:93: 36:2d:ed:f0:51:63:d5:69:72:a4:5f:7f:cd:e6:a8: a0:52:61:87:5b:7b:5e:3d:15:47:c1:81:6d:89:48: 71:1b:90:df:5a:51:71:0e:99:1c:79:15:7a:1b:90: f0:7f:ac:8c:18:ed:ac:51:cf:bf:51:07:b3:99:6d: d4:14:4a:a1:c1:2b:06:46:62:29:e2:db:9b:46:83: 1f:a8:6b:ca:fd:2a:31:03:1f:b3:b4:4b:69:e7:e4: 6d:7d:1d:b6:ef:23:97:a5:b2:6c:a2:85:71:66:f8: df:6f:5f:06:e2:ef:31:80:95:bc:92:7f:17:86:28: 82:7e:2a:d8:c5:66:b9:ed:bb:8f:68:ea:58:e5:20: a6:20:9e:65:35:b9:c7:bc:a0:d4:5f:71:45:8c:78: 7a:c9:56:05:6f:fd:d0:41:8e:28:68:f7:33:c4:7a: f6:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:1B:2F:E4:27:2F:8E:11:05:95:97:3E:EE:D7:33:20:A1:21:65:6D X509v3 Authority Key Identifier: keyid:77:51:7A:AF:48:F6:69:A0:BE:C8:EC:6A:C8:68:2B:4C:12:4E:6D:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1F6r0j2aaC-yOxqyGgrTBJObTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:91:34:36:1b:34:15:31:9c:b3:80:cc:9e:cb:7e:a0:7e:63: 6f:86:db:9a:48:21:27:0f:c6:ab:52:9c:a4:cd:95:8b:ea:09: 96:d8:a9:fb:4b:65:75:65:77:cd:7e:b3:64:19:fb:fb:69:e8: 9e:db:eb:57:ca:49:9a:29:6b:cb:86:d4:36:6c:8f:4c:50:43: 7d:e7:af:09:32:de:62:ee:8d:14:0b:8c:fe:a3:33:cc:ef:c8: d8:ad:f7:97:93:b2:f7:fc:99:34:f0:df:0e:40:e8:95:86:56: aa:cd:77:c8:b0:df:a7:20:ff:3f:2e:9f:0c:19:5f:ee:38:87: e5:f5:7d:65:8f:1a:80:ae:0a:55:cf:0e:90:7f:eb:22:69:d8: ce:37:25:71:e5:e3:03:b5:3a:21:b0:9a:33:c8:ae:38:f2:cf: 98:79:3f:87:45:53:64:84:1d:bc:ca:4c:df:35:e3:ab:e8:58: 67:7d:42:de:59:99:a3:28:14:cd:f4:58:40:b1:d0:ab:40:91: e3:bd:28:23:a6:f7:21:96:4d:17:14:b2:bb:46:73:b1:ed:07: bd:b9:a3:88:47:67:fe:8e:96:20:a0:b5:0a:1b:af:f9:0c:86: 2d:22:d4:37:b5:03:9d:bc:fe:65:d8:58:93:db:b7:66:f3:5c: 4e:7d:45:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCt0CH3FvBn6x/4ascLtSHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3NTE3YWFmNDhmNjY5YTBiZWM4ZWM2YWM4NjgyYjRjMTI0 ZTZkMzAwHhcNMjUxMjIxMjEwMTA0WhcNMjUxMjIyMjEwMTA0WjAzMTEwLwYDVQQD Eyg4ZTFiMmZlNDI3MmY4ZTExMDU5NTk3M2VlZWQ3MzMyMGExMjE2NTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVVstouIkZWpoDn2OLD0eOMHWUYl RMpCUBzQL0ymGH6mfNqf2IPGV5Y9RfRPFyNgHTQUMBWC4pxcq06VMZlKeSHJZa/b 49LpP7JEDLgwNlL9FibJjvbnHZM2Le3wUWPVaXKkX3/N5qigUmGHW3tePRVHwYFt iUhxG5DfWlFxDpkceRV6G5Dwf6yMGO2sUc+/UQezmW3UFEqhwSsGRmIp4tubRoMf qGvK/SoxAx+ztEtp5+RtfR227yOXpbJsooVxZvjfb18G4u8xgJW8kn8XhiiCfirY xWa57buPaOpY5SCmIJ5lNbnHvKDUX3FFjHh6yVYFb/3QQY4oaPczxHr2bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI4bL+QnL44RBZWXPu7XMyChIWVtMB8GA1UdIwQY MBaAFHdReq9I9mmgvsjsashoK0wSTm0wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDFGNnIwajJhYUMteU94cXlHZ3JUQkpPYlRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9mNmE1NzktMjQ0Yy00NjEwLWJiZWEt MjRjNjI2ZTdmNTIwLzEvZDFGNnIwajJhYUMteU94cXlHZ3JUQkpPYlRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9mNmE1NzktMjQ0Yy00NjEwLWJiZWEtMjRjNjI2ZTdmNTIw LzEvZDFGNnIwajJhYUMteU94cXlHZ3JUQkpPYlRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM5E0Nhs0 FTGcs4DMnst+oH5jb4bbmkghJw/Gq1KcpM2Vi+oJltip+0tldWV3zX6zZBn7+2no ntvrV8pJmilry4bUNmyPTFBDfeevCTLeYu6NFAuM/qMzzO/I2K33l5Oy9/yZNPDf DkDolYZWqs13yLDfpyD/Py6fDBlf7jiH5fV9ZY8agK4KVc8OkH/rImnYzjclceXj A7U6IbCaM8iuOPLPmHk/h0VTZIQdvMpM3zXjq+hYZ31C3lmZoygUzfRYQLHQq0CR 470oI6b3IZZNFxSyu0Zzse0HvbmjiEdn/o6WIKC1Chuv+QyGLSLUN7UDnbz+ZdhY k9u3ZvNcTn1FRQ== -----END CERTIFICATE-----Generated at Mon Dec 22 02:51:15 2025 by rpki-client