This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/19sTK0fI7dg_7QLVYedQYEwgsfg.mft File: 19sTK0fI7dg_7QLVYedQYEwgsfg.mft (raw, json) Hash identifier: DShY5cFzX+AoIWqPmtnoh+gTsxuIFTrqj27MOJzNMIQ= Subject key identifier: F2:F5:34:31:6B:70:C7:CA:90:55:E4:75:97:99:87:B4:0C:49:69:03 Authority key identifier: D7:DB:13:2B:47:C8:ED:D8:3F:ED:02:D5:61:E7:50:60:4C:20:B1:F8 Certificate issuer: /CN=d7db132b47c8edd83fed02d561e750604c20b1f8 Certificate serial: 019B48B8E9E8AB4D657E901EB081E5B3AB31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/19sTK0fI7dg_7QLVYedQYEwgsfg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/19sTK0fI7dg_7QLVYedQYEwgsfg.mft Manifest number: 0AAB Signing time: Tue 23 Dec 2025 01:00:36 +0000 Manifest this update: Tue 23 Dec 2025 01:00:36 +0000 Manifest next update: Wed 24 Dec 2025 01:00:36 +0000 Files and hashes: 1: 19sTK0fI7dg_7QLVYedQYEwgsfg.crl (hash: BmSBqMBzwDXrc+beJ3HHaO6qSp/5/x9uwGbvaOjtcqc=) 2: n54-V6R69Zbq8jSQEWdfXQAauKs.roa (hash: 7adElCmMmz9gs9syq0xK+Ax2i+eejhFJcT8zpbTEy5A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/19sTK0fI7dg_7QLVYedQYEwgsfg.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/19sTK0fI7dg_7QLVYedQYEwgsfg.mft rsync://rpki.ripe.net/repository/DEFAULT/19sTK0fI7dg_7QLVYedQYEwgsfg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:b8:e9:e8:ab:4d:65:7e:90:1e:b0:81:e5:b3:ab:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7db132b47c8edd83fed02d561e750604c20b1f8 Validity Not Before: Dec 23 01:00:36 2025 GMT Not After : Dec 24 01:00:36 2025 GMT Subject: CN=f2f534316b70c7ca9055e475979987b40c496903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d3:4e:a2:6e:31:5b:72:08:8b:1a:c1:58:61: 86:67:9b:54:9a:fa:0d:8e:35:46:9a:e8:55:60:f6: f8:15:a2:82:c0:fa:a8:1b:f2:0b:60:c2:cf:9c:67: d7:6b:a4:c2:3a:24:39:9e:49:85:71:6e:92:49:ad: ae:df:9b:11:f7:fc:4e:24:9f:6e:0c:39:72:c1:7a: 24:8b:c1:da:9b:9d:15:94:d8:3f:5d:d6:63:f3:5a: 85:e8:3f:2a:60:e8:ea:27:c3:a1:94:2b:8c:d5:16: ea:a5:2c:26:48:3d:5c:51:16:d1:96:0d:b6:16:2d: ba:30:4c:2c:89:08:29:74:a4:8b:ee:d9:24:34:b4: ca:90:d5:ab:a7:e6:3f:d0:fa:7b:59:0b:e1:89:77: db:36:9a:5b:e7:c0:b5:56:2d:82:ad:ea:d9:40:0d: b3:11:a3:df:58:ce:54:1b:a4:cd:bb:20:93:a9:7d: 0a:99:54:16:28:56:85:de:59:24:f3:31:88:c5:ad: 23:90:95:85:fd:a5:d2:88:b1:5d:d0:ab:58:5b:8a: 15:6a:e6:5a:6b:84:25:a9:93:01:21:38:af:7c:c9: 86:15:69:59:61:fd:b0:c8:c4:17:c2:89:2b:da:76: 86:38:79:1d:63:05:92:d9:1e:ef:72:a3:95:ea:95: 32:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:F5:34:31:6B:70:C7:CA:90:55:E4:75:97:99:87:B4:0C:49:69:03 X509v3 Authority Key Identifier: keyid:D7:DB:13:2B:47:C8:ED:D8:3F:ED:02:D5:61:E7:50:60:4C:20:B1:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/19sTK0fI7dg_7QLVYedQYEwgsfg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/19sTK0fI7dg_7QLVYedQYEwgsfg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/19sTK0fI7dg_7QLVYedQYEwgsfg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:ec:fb:ec:f8:1e:87:8e:24:a9:8d:ff:3b:a7:48:89:e0:a8: 9a:e7:cd:09:c4:3f:02:fd:08:e4:dd:fa:02:b8:37:d3:d9:bc: ec:88:45:b3:d2:06:ac:d6:30:1b:04:e2:6f:a8:43:fe:e8:07: 42:a0:62:ec:d3:33:0b:68:37:61:dd:d3:1c:37:5b:9d:d3:5c: b7:64:27:56:a5:1a:c0:a0:e5:fd:3f:a5:ed:59:9e:e4:a2:34: a2:00:61:06:44:ce:e5:15:86:f0:0a:f7:ec:18:60:e1:34:f8: 56:b1:53:13:b0:f1:69:97:89:66:e4:0f:e3:92:a9:b7:4a:b9: 96:0b:22:64:c0:ed:5b:28:50:9d:1f:ce:b8:06:26:b5:db:b1: df:92:df:b7:11:51:0b:c3:b3:f1:3b:c0:2c:03:3d:8b:b9:c1: 8b:91:cb:c2:1b:81:1d:6e:d3:9e:04:17:cc:7d:b4:9e:f4:e9: 22:2e:5f:0f:1f:0b:94:f5:cd:11:f2:a2:f9:07:4f:41:5b:75: 1b:06:27:62:65:f6:73:94:dd:6f:3c:62:fa:1f:54:5c:21:d6: a2:d4:c5:c7:e5:2b:6a:6b:69:97:e7:1e:4f:75:3c:75:f1:ae: 3f:5b:9f:d7:90:64:bf:01:1c:bd:2e:8c:4d:1f:28:10:b0:bc: a1:02:f3:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIuOnoq01lfpAesIHls6sxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3ZGIxMzJiNDdjOGVkZDgzZmVkMDJkNTYxZTc1MDYwNGMy MGIxZjgwHhcNMjUxMjIzMDEwMDM2WhcNMjUxMjI0MDEwMDM2WjAzMTEwLwYDVQQD EyhmMmY1MzQzMTZiNzBjN2NhOTA1NWU0NzU5Nzk5ODdiNDBjNDk2OTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9NOom4xW3IIixrBWGGGZ5tUmvoN jjVGmuhVYPb4FaKCwPqoG/ILYMLPnGfXa6TCOiQ5nkmFcW6SSa2u35sR9/xOJJ9u DDlywXoki8Ham50VlNg/XdZj81qF6D8qYOjqJ8OhlCuM1RbqpSwmSD1cURbRlg22 Fi26MEwsiQgpdKSL7tkkNLTKkNWrp+Y/0Pp7WQvhiXfbNppb58C1Vi2CrerZQA2z EaPfWM5UG6TNuyCTqX0KmVQWKFaF3lkk8zGIxa0jkJWF/aXSiLFd0KtYW4oVauZa a4QlqZMBITivfMmGFWlZYf2wyMQXwokr2naGOHkdYwWS2R7vcqOV6pUyhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPL1NDFrcMfKkFXkdZeZh7QMSWkDMB8GA1UdIwQY MBaAFNfbEytHyO3YP+0C1WHnUGBMILH4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTlzVEswZkk3ZGdfN1FMVlllZFFZRXdnc2ZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8xODI2MzItNjNjNS00ZThlLWIyOTkt YTA0NjAzNzA5NTE5LzEvMTlzVEswZkk3ZGdfN1FMVlllZFFZRXdnc2ZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy8xODI2MzItNjNjNS00ZThlLWIyOTktYTA0NjAzNzA5NTE5 LzEvMTlzVEswZkk3ZGdfN1FMVlllZFFZRXdnc2ZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAduz77Pge h44kqY3/O6dIieComufNCcQ/Av0I5N36Arg309m87IhFs9IGrNYwGwTib6hD/ugH QqBi7NMzC2g3Yd3THDdbndNct2QnVqUawKDl/T+l7Vme5KI0ogBhBkTO5RWG8Ar3 7Bhg4TT4VrFTE7DxaZeJZuQP45Kpt0q5lgsiZMDtWyhQnR/OuAYmtdux35LftxFR C8Oz8TvALAM9i7nBi5HLwhuBHW7TngQXzH20nvTpIi5fDx8LlPXNEfKi+QdPQVt1 GwYnYmX2c5Tdbzxi+h9UXCHWotTFx+Uramtpl+ceT3U8dfGuP1uf15BkvwEcvS6M TR8oELC8oQLzYQ== -----END CERTIFICATE-----Generated at Tue Dec 23 08:40:35 2025 by rpki-client