This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft File: d1szbD5Il6UrOcOtquzOxr9wzn0.mft (raw, json) Hash identifier: oEeIlKdqOO/gCmC9sLcdcGfiPdDrhXF9t58h+cAvLaE= Subject key identifier: 52:37:9D:AF:1D:7B:25:B3:91:82:4B:C6:7D:93:B1:55:03:94:CA:2C Authority key identifier: 77:5B:33:6C:3E:48:97:A5:2B:39:C3:AD:AA:EC:CE:C6:BF:70:CE:7D Certificate issuer: /CN=775b336c3e4897a52b39c3adaaeccec6bf70ce7d Certificate serial: 019AF3C072AF83CAEC76597BF87E5E5C9395 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d1szbD5Il6UrOcOtquzOxr9wzn0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft Manifest number: 1686 Signing time: Sat 06 Dec 2025 13:01:06 +0000 Manifest this update: Sat 06 Dec 2025 13:01:06 +0000 Manifest next update: Sun 07 Dec 2025 13:01:06 +0000 Files and hashes: 1: 1-jRnyFGmEx1CVoLDNNDO26bccvY.roa (hash: 23QvIcsUor9KhcMI2prwonWuUHDRgDZgiqunE4RPe6c=) 2: d1szbD5Il6UrOcOtquzOxr9wzn0.crl (hash: W5tOe6iFoC0jfoaXsqoynMHaeU/4mviua8q0nmypj+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.crl rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft rsync://rpki.ripe.net/repository/DEFAULT/d1szbD5Il6UrOcOtquzOxr9wzn0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:72:af:83:ca:ec:76:59:7b:f8:7e:5e:5c:93:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=775b336c3e4897a52b39c3adaaeccec6bf70ce7d Validity Not Before: Dec 6 13:01:06 2025 GMT Not After : Dec 7 13:01:06 2025 GMT Subject: CN=52379daf1d7b25b391824bc67d93b1550394ca2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:88:74:b1:84:10:cd:99:17:ac:6a:4e:3f:d8: dc:56:39:cd:dc:9c:51:b2:dc:bd:94:56:cf:7e:96: 06:1a:bf:f9:3b:38:ee:1d:bd:32:d3:5f:f5:7c:16: 34:1d:f9:01:c5:e3:76:e3:6d:db:14:b9:65:26:8f: 3e:31:d8:f9:f4:62:8b:0d:c8:de:8d:0c:65:f1:a4: 9c:19:70:97:94:a7:28:c1:33:d2:d2:49:3f:2a:e9: 2c:18:b1:92:47:5b:e2:f0:41:3b:9c:11:09:ae:5e: c6:d0:e3:c3:c1:a5:59:eb:b0:70:0f:e6:93:80:60: 93:da:eb:a1:4b:e0:b0:16:47:cc:3b:9d:82:b3:05: 02:a2:f9:d2:03:97:7c:42:95:4e:72:f1:95:24:f5: 66:c9:ff:07:95:0d:92:fd:14:83:eb:83:45:0f:10: 0b:ef:01:7f:f1:21:f6:0d:8a:b7:e9:11:29:c3:a3: a4:99:e9:19:de:a1:ea:ec:fc:ab:f6:05:12:a5:ab: ce:8f:8f:79:21:0d:6f:0e:05:b3:b3:9b:69:cc:4c: 3b:b2:02:e9:47:ca:0b:28:fc:8b:28:12:a1:a4:bd: 78:de:f7:8d:da:ee:b1:e9:c4:29:ad:0b:08:77:ef: be:74:f3:2e:95:53:59:eb:96:ba:5d:78:c2:d0:9b: 31:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:37:9D:AF:1D:7B:25:B3:91:82:4B:C6:7D:93:B1:55:03:94:CA:2C X509v3 Authority Key Identifier: keyid:77:5B:33:6C:3E:48:97:A5:2B:39:C3:AD:AA:EC:CE:C6:BF:70:CE:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1szbD5Il6UrOcOtquzOxr9wzn0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:ca:23:a0:b2:70:41:18:f2:91:9b:7b:7c:47:cd:23:25:b7: 35:f6:26:f8:ee:2d:25:90:b5:af:34:36:a7:ef:69:07:b9:79: af:12:9b:d8:b8:d9:79:0d:2c:aa:8d:e7:b1:c6:29:7f:7e:94: 24:3f:29:87:2a:1c:1b:df:7d:fd:78:3d:e8:71:46:42:e5:df: 19:46:4d:b0:2d:dd:5a:d7:b6:4a:a1:c3:48:31:0e:5a:57:80: 52:59:41:48:2e:cf:a9:ae:ac:dd:c8:9d:74:43:bf:d2:ea:0e: 74:09:32:35:c6:70:d9:6a:40:58:b4:89:53:f8:ba:5a:18:48: 9b:7e:14:b7:eb:e1:69:47:45:20:b6:93:4f:07:32:ee:39:0a: f5:53:f2:8d:d9:53:bc:a2:93:42:bd:51:74:cb:64:c5:88:4c: ec:43:b4:a7:bd:4d:f6:28:41:1a:bd:96:36:f6:d6:0d:f4:c7: 76:9d:c9:c1:b2:e0:28:b1:42:5e:1b:4c:65:d3:cc:20:57:ca: c8:37:80:45:b7:8c:0c:d4:af:15:bd:2a:7c:98:02:42:24:ee: 88:9a:1e:b5:0b:ad:db:ac:26:1e:7e:86:a2:32:6f:e6:32:99: 60:4a:d9:29:b5:1f:d8:93:b2:52:5f:08:7a:ce:48:95:a9:74: 2d:c0:70:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwHKvg8rsdll7+H5eXJOVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3NWIzMzZjM2U0ODk3YTUyYjM5YzNhZGFhZWNjZWM2YmY3 MGNlN2QwHhcNMjUxMjA2MTMwMTA2WhcNMjUxMjA3MTMwMTA2WjAzMTEwLwYDVQQD Eyg1MjM3OWRhZjFkN2IyNWIzOTE4MjRiYzY3ZDkzYjE1NTAzOTRjYTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA94h0sYQQzZkXrGpOP9jcVjnN3JxR sty9lFbPfpYGGr/5OzjuHb0y01/1fBY0HfkBxeN2423bFLllJo8+Mdj59GKLDcje jQxl8aScGXCXlKcowTPS0kk/KuksGLGSR1vi8EE7nBEJrl7G0OPDwaVZ67BwD+aT gGCT2uuhS+CwFkfMO52CswUCovnSA5d8QpVOcvGVJPVmyf8HlQ2S/RSD64NFDxAL 7wF/8SH2DYq36REpw6OkmekZ3qHq7Pyr9gUSpavOj495IQ1vDgWzs5tpzEw7sgLp R8oLKPyLKBKhpL143veN2u6x6cQprQsId+++dPMulVNZ65a6XXjC0JsxFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFI3na8deyWzkYJLxn2TsVUDlMosMB8GA1UdIwQY MBaAFHdbM2w+SJelKznDrarszsa/cM59MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDFzemJENUlsNlVyT2NPdHF1ek94cjl3em4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8wMDQ3NmEtOGFjNy00NTZjLWI5M2Qt M2RjMTQxNzBkNjJhLzEvZDFzemJENUlsNlVyT2NPdHF1ek94cjl3em4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8wMDQ3NmEtOGFjNy00NTZjLWI5M2QtM2RjMTQxNzBkNjJh LzEvZDFzemJENUlsNlVyT2NPdHF1ek94cjl3em4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqcojoLJw QRjykZt7fEfNIyW3NfYm+O4tJZC1rzQ2p+9pB7l5rxKb2LjZeQ0sqo3nscYpf36U JD8phyocG999/Xg96HFGQuXfGUZNsC3dWte2SqHDSDEOWleAUllBSC7Pqa6s3cid dEO/0uoOdAkyNcZw2WpAWLSJU/i6WhhIm34Ut+vhaUdFILaTTwcy7jkK9VPyjdlT vKKTQr1RdMtkxYhM7EO0p71N9ihBGr2WNvbWDfTHdp3JwbLgKLFCXhtMZdPMIFfK yDeARbeMDNSvFb0qfJgCQiTuiJoetQut26wmHn6GojJv5jKZYErZKbUf2JOyUl8I es5Ilal0LcBwFg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:55:09 2025 by rpki-client