This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft File: 1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft (raw, json) Hash identifier: KAQ2kmn5hrVXzwy9sR/VppAo7xTTwkVOG5g6TS4mzSo= Subject key identifier: 14:EA:9B:BA:28:D5:DA:59:5C:3A:DE:94:44:2B:D3:4C:F6:6E:98:8E Authority key identifier: D5:D0:BF:1A:D7:FC:36:9D:8F:BF:43:E6:2D:E9:7A:4F:AC:FE:F6:B5 Certificate issuer: /CN=d5d0bf1ad7fc369d8fbf43e62de97a4facfef6b5 Certificate serial: 019AF1D1A5E1340CFC751461B26FC59894B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft Manifest number: 0CA7 Signing time: Sat 06 Dec 2025 04:00:39 +0000 Manifest this update: Sat 06 Dec 2025 04:00:39 +0000 Manifest next update: Sun 07 Dec 2025 04:00:39 +0000 Files and hashes: 1: 1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl (hash: NvgrjjNy0ARFH/1STrxRfZxbGuBobnZ2ESxNR/DjP8s=) 2: mhdzxHyga_rpAnhJvnJWGrarNFw.roa (hash: l1WjIafW1o8IpUq72+h/DmsurJ/Xd4bFO/qecSh/CbU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:a5:e1:34:0c:fc:75:14:61:b2:6f:c5:98:94:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5d0bf1ad7fc369d8fbf43e62de97a4facfef6b5 Validity Not Before: Dec 6 04:00:39 2025 GMT Not After : Dec 7 04:00:39 2025 GMT Subject: CN=14ea9bba28d5da595c3ade94442bd34cf66e988e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d3:0f:cb:ae:a8:f4:e5:1a:48:c1:e6:f9:3f: fe:0e:ec:4a:64:34:41:85:6f:2e:de:0a:a4:72:69: 23:41:9b:f1:4f:4f:08:0e:d9:70:f2:e8:80:24:9c: 87:1a:28:3a:ec:58:e6:72:5b:fc:28:4a:65:23:01: 2c:d4:f8:57:e1:38:89:10:a7:f6:92:77:a4:d5:69: ef:c3:9f:80:4f:9d:bf:66:85:7e:08:6b:e8:18:89: 7d:2f:94:7d:33:32:e8:23:62:c2:55:85:7a:f8:e8: 47:67:63:d7:83:d6:dd:4a:57:f8:17:59:18:f2:87: e7:8a:f0:93:d7:be:57:dd:71:09:35:b2:ea:18:4a: a9:dc:cc:27:89:a3:31:93:e1:0a:aa:10:2c:1a:a9: 7c:67:5a:77:c5:0b:97:79:ad:ec:8a:5c:f3:4e:0f: 0f:95:19:71:33:fe:b2:17:05:07:a2:90:a3:db:ff: ff:67:e8:17:93:b0:6e:5f:f0:b8:43:5b:8b:03:a0: 3b:a6:1f:25:64:54:d1:42:4d:e3:a7:b6:3e:6e:e8: ca:b7:a4:b5:7c:83:5d:04:5a:67:49:ea:ae:5f:57: 81:be:01:72:9a:5e:f4:6f:95:7e:b1:ee:0d:b6:b6: e9:dd:1d:75:88:05:20:5b:0d:fa:e4:71:a8:a9:86: 5f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:EA:9B:BA:28:D5:DA:59:5C:3A:DE:94:44:2B:D3:4C:F6:6E:98:8E X509v3 Authority Key Identifier: keyid:D5:D0:BF:1A:D7:FC:36:9D:8F:BF:43:E6:2D:E9:7A:4F:AC:FE:F6:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:d2:6a:11:b2:6f:de:c9:4a:d4:46:ec:f9:c6:3f:1a:77:eb: 37:6a:71:61:ac:21:4b:48:d4:7e:e8:76:c6:0f:43:3b:57:7a: e8:e2:ad:8f:99:84:ba:d7:84:37:8b:22:d0:9a:f1:5a:37:ea: b8:1e:40:9d:73:eb:4f:e2:ee:cb:82:ea:d1:8c:68:25:55:00: 62:36:3c:11:f2:a9:2a:ec:4e:fd:f0:04:74:ab:56:7c:03:ea: 3c:dd:80:54:89:1a:61:f9:0d:39:a1:bd:9f:c4:c4:4d:6f:1a: 65:29:b8:81:be:b8:c5:30:65:30:74:75:dc:99:6a:bc:e6:85: 99:8f:bc:fd:04:90:07:03:35:63:ec:fa:33:9e:c6:7d:89:1b: a2:1a:68:a9:8c:92:c2:7a:9a:c5:c5:e9:4a:3d:69:f4:24:4b: c5:bf:f7:d3:aa:df:97:c9:7f:d4:5d:37:75:7a:d9:38:d5:4b: 56:2e:63:8a:ef:14:83:27:9a:62:76:7d:8d:b1:a7:66:24:d0: 78:86:c1:35:b4:e7:26:39:a0:b8:47:1c:9c:65:0d:e0:fd:c1: 75:0d:84:1f:cb:fd:a6:15:5d:fa:b8:ac:29:1d:e4:6a:a1:bd: fd:de:d7:d0:38:86:68:3a:ac:6e:16:73:68:c2:34:87:37:96: a2:78:67:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0aXhNAz8dRRhsm/FmJS3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZDBiZjFhZDdmYzM2OWQ4ZmJmNDNlNjJkZTk3YTRmYWNm ZWY2YjUwHhcNMjUxMjA2MDQwMDM5WhcNMjUxMjA3MDQwMDM5WjAzMTEwLwYDVQQD EygxNGVhOWJiYTI4ZDVkYTU5NWMzYWRlOTQ0NDJiZDM0Y2Y2NmU5ODhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNMPy66o9OUaSMHm+T/+DuxKZDRB hW8u3gqkcmkjQZvxT08IDtlw8uiAJJyHGig67Fjmclv8KEplIwEs1PhX4TiJEKf2 knek1Wnvw5+AT52/ZoV+CGvoGIl9L5R9MzLoI2LCVYV6+OhHZ2PXg9bdSlf4F1kY 8ofnivCT175X3XEJNbLqGEqp3MwniaMxk+EKqhAsGql8Z1p3xQuXea3silzzTg8P lRlxM/6yFwUHopCj2///Z+gXk7BuX/C4Q1uLA6A7ph8lZFTRQk3jp7Y+bujKt6S1 fINdBFpnSequX1eBvgFyml70b5V+se4Ntrbp3R11iAUgWw365HGoqYZfhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBTqm7oo1dpZXDrelEQr00z2bpiOMB8GA1UdIwQY MBaAFNXQvxrX/Dadj79D5i3pek+s/va1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWRDX0d0ZjhOcDJQdjBQbUxlbDZUNnotOXJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi81NTM5ZTQtZDEwZC00OWM1LWJkY2Ut ZWI3ZTljMGQzNzQ3LzEvMWRDX0d0ZjhOcDJQdjBQbUxlbDZUNnotOXJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi81NTM5ZTQtZDEwZC00OWM1LWJkY2UtZWI3ZTljMGQzNzQ3 LzEvMWRDX0d0ZjhOcDJQdjBQbUxlbDZUNnotOXJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWtJqEbJv 3slK1Ebs+cY/GnfrN2pxYawhS0jUfuh2xg9DO1d66OKtj5mEuteEN4si0JrxWjfq uB5AnXPrT+Luy4Lq0YxoJVUAYjY8EfKpKuxO/fAEdKtWfAPqPN2AVIkaYfkNOaG9 n8TETW8aZSm4gb64xTBlMHR13JlqvOaFmY+8/QSQBwM1Y+z6M57GfYkbohpoqYyS wnqaxcXpSj1p9CRLxb/306rfl8l/1F03dXrZONVLVi5jiu8UgyeaYnZ9jbGnZiTQ eIbBNbTnJjmguEccnGUN4P3BdQ2EH8v9phVd+risKR3kaqG9/d7X0DiGaDqsbhZz aMI0hzeWonhn0g== -----END CERTIFICATE-----Generated at Sat Dec 6 13:45:52 2025 by rpki-client