This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft File: d4DNTnTxhajxrUBSG2EbdNUWv3c.mft (raw, json) Hash identifier: 5DFqd1xgcUXBjwaG8IOKMmxuutGO7qg0tJbZE0eRz1s= Subject key identifier: 1F:97:73:A4:4A:4F:51:8C:84:55:36:F5:D2:BD:F5:DA:54:11:08:49 Authority key identifier: 77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77 Certificate issuer: /CN=7780cd4e74f185a8f1ad40521b611b74d516bf77 Certificate serial: 019B40FFF4A50EC9969E30CD3AE83844BE0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft Manifest number: 1788 Signing time: Sun 21 Dec 2025 13:01:14 +0000 Manifest this update: Sun 21 Dec 2025 13:01:14 +0000 Manifest next update: Mon 22 Dec 2025 13:01:14 +0000 Files and hashes: 1: WntKpaBL0rwf0OHtGIxbqp43a48.roa (hash: RD+6zKliyi529qWw5SlqL86NJOiZz+f7ljpnnMAUmvo=) 2: d4DNTnTxhajxrUBSG2EbdNUWv3c.crl (hash: nHHf5j/qC8aBTLXBsZ+vnajCgaIRNiMTGvLk/Haf0cY=) 3: wGTkAR_0sF92lgaxXY9nSUR4GIc.roa (hash: eDBRIXJLntwza/xwaubebQOnZv9qj50gWoqkIryMxT0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:ff:f4:a5:0e:c9:96:9e:30:cd:3a:e8:38:44:be:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7780cd4e74f185a8f1ad40521b611b74d516bf77 Validity Not Before: Dec 21 13:01:14 2025 GMT Not After : Dec 22 13:01:14 2025 GMT Subject: CN=1f9773a44a4f518c845536f5d2bdf5da54110849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2f:40:ae:8a:3e:7e:5b:53:63:d0:c2:53:5e: 27:95:5f:69:06:26:22:5f:7b:73:55:9e:1e:c9:2a: 24:91:74:7e:98:b7:62:9c:e1:3b:43:bf:b3:e4:e1: aa:e5:57:2a:70:ec:9c:0d:df:57:48:d0:f8:7a:03: 93:80:8e:0f:2e:a9:25:d3:dc:2c:b9:f8:9b:47:19: 84:c5:c1:52:1a:7c:98:a7:cb:29:b5:19:c6:49:8f: 07:ca:58:b6:d9:9b:eb:fe:e8:49:89:03:b1:82:73: 0f:0a:a6:7e:89:7f:00:50:22:ea:6b:18:f3:6d:28: ab:cd:f3:95:10:11:7a:04:af:ee:9d:a5:d7:8f:3f: 64:73:11:36:bc:aa:fc:02:25:8e:50:15:94:d6:09: 3e:20:bd:ce:bb:ed:ee:c4:6e:cf:57:d6:77:02:8b: a1:56:52:2d:49:cc:f4:e2:77:1b:7a:b4:69:64:43: 2a:56:08:c0:62:b4:a4:13:8b:51:65:7b:41:10:30: d9:42:38:6a:c9:e2:16:1b:25:1b:8b:a5:5c:e0:aa: 74:77:81:f2:17:19:70:57:f7:be:cc:de:e0:6f:a9: ff:b9:22:71:e5:7b:b4:f1:0b:0b:7f:85:9c:bc:c5: 52:5f:3b:fc:f4:2c:ae:53:df:8f:8c:25:32:f6:ca: 35:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:97:73:A4:4A:4F:51:8C:84:55:36:F5:D2:BD:F5:DA:54:11:08:49 X509v3 Authority Key Identifier: keyid:77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e1:85:2c:c1:d5:a7:7b:58:f0:d2:a0:be:9e:a6:9b:f4:c3:fc: fd:fa:2c:47:46:06:08:ca:01:ab:19:20:6a:aa:ca:3f:cc:19: 62:c1:a7:bf:3a:a3:06:1b:19:8e:10:42:d2:2d:67:bb:cc:33: 1b:39:83:32:19:c2:27:c8:7b:3d:6d:ef:a3:90:84:5b:a4:8e: dd:49:33:f0:52:5a:7b:18:8a:34:30:e2:2d:11:29:f8:23:61: e8:b1:6d:2e:b3:2f:2c:ee:7f:b4:a3:13:56:0f:1c:1e:db:53: 11:54:9c:1f:84:64:3d:b1:58:3d:ae:25:c0:8b:cc:31:e8:cb: 87:81:4a:b5:b6:58:6d:fe:35:96:6f:8a:f6:8e:6d:67:96:1d: c2:fe:80:2e:5c:fa:33:de:7d:2a:d1:81:59:10:85:48:20:b6: f6:f1:ab:68:c5:74:fd:5a:42:5d:2a:9f:ff:8f:d9:f6:8d:b6: 16:e3:ce:31:3d:d7:04:48:ac:30:18:55:21:b4:57:19:a0:0b: 35:ca:71:6f:a4:d7:e3:2a:09:f4:36:f9:55:6a:0c:53:89:39: ac:84:71:eb:a2:cf:c6:19:d3:b7:98:aa:ce:42:9b:29:8a:5a: 25:6f:be:e6:30:10:a1:8c:65:fe:08:c1:9c:07:4f:57:f8:42: 0e:32:2e:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtA//SlDsmWnjDNOug4RL4NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3ODBjZDRlNzRmMTg1YThmMWFkNDA1MjFiNjExYjc0ZDUx NmJmNzcwHhcNMjUxMjIxMTMwMTE0WhcNMjUxMjIyMTMwMTE0WjAzMTEwLwYDVQQD EygxZjk3NzNhNDRhNGY1MThjODQ1NTM2ZjVkMmJkZjVkYTU0MTEwODQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmi9Aroo+fltTY9DCU14nlV9pBiYi X3tzVZ4eySokkXR+mLdinOE7Q7+z5OGq5VcqcOycDd9XSND4egOTgI4PLqkl09ws ufibRxmExcFSGnyYp8sptRnGSY8Hyli22Zvr/uhJiQOxgnMPCqZ+iX8AUCLqaxjz bSirzfOVEBF6BK/unaXXjz9kcxE2vKr8AiWOUBWU1gk+IL3Ou+3uxG7PV9Z3Aouh VlItScz04ncberRpZEMqVgjAYrSkE4tRZXtBEDDZQjhqyeIWGyUbi6Vc4Kp0d4Hy FxlwV/e+zN7gb6n/uSJx5Xu08QsLf4WcvMVSXzv89CyuU9+PjCUy9so1mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB+Xc6RKT1GMhFU29dK99dpUEQhJMB8GA1UdIwQY MBaAFHeAzU508YWo8a1AUhthG3TVFr93MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDRETlRuVHhoYWp4clVCU0cyRWJkTlVXdjNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9mZjU5ZjctYmZjMy00OTg5LThiOGQt ZTk4ZDA1MmNlYTdmLzEvZDRETlRuVHhoYWp4clVCU0cyRWJkTlVXdjNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9mZjU5ZjctYmZjMy00OTg5LThiOGQtZTk4ZDA1MmNlYTdm LzEvZDRETlRuVHhoYWp4clVCU0cyRWJkTlVXdjNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4YUswdWn e1jw0qC+nqab9MP8/fosR0YGCMoBqxkgaqrKP8wZYsGnvzqjBhsZjhBC0i1nu8wz GzmDMhnCJ8h7PW3vo5CEW6SO3Ukz8FJaexiKNDDiLREp+CNh6LFtLrMvLO5/tKMT Vg8cHttTEVScH4RkPbFYPa4lwIvMMejLh4FKtbZYbf41lm+K9o5tZ5Ydwv6ALlz6 M959KtGBWRCFSCC29vGraMV0/VpCXSqf/4/Z9o22FuPOMT3XBEisMBhVIbRXGaAL Ncpxb6TX4yoJ9Db5VWoMU4k5rIRx66LPxhnTt5iqzkKbKYpaJW++5jAQoYxl/gjB nAdPV/hCDjIuaQ== -----END CERTIFICATE-----Generated at Sun Dec 21 15:17:40 2025 by rpki-client