This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.mft File: d9v7PWTrEMeCVio3hVsHMr0Y6z8.mft (raw, json) Hash identifier: vhTnjbNxkGaBeSAysUasLMn1zFR039vjF3vOeKoRTpo= Subject key identifier: 1C:B5:3F:0C:E1:A6:19:55:12:B5:58:14:7B:37:8D:EB:EF:AC:F2:1C Authority key identifier: 77:DB:FB:3D:64:EB:10:C7:82:56:2A:37:85:5B:07:32:BD:18:EB:3F Certificate issuer: /CN=77dbfb3d64eb10c782562a37855b0732bd18eb3f Certificate serial: 019B3268B143ADDD1D85579D9C2E3C33C99D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d9v7PWTrEMeCVio3hVsHMr0Y6z8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 17:01:20 +0000 Manifest this update: Thu 18 Dec 2025 17:01:20 +0000 Manifest next update: Fri 19 Dec 2025 17:01:20 +0000 Files and hashes: 1: d9v7PWTrEMeCVio3hVsHMr0Y6z8.crl (hash: Ojn6ixacJ0jFylOPsB5p1XiP1v79To7TJ2adcGhoY8c=) 2: xYbOIUhhi8f6Ezx2QKpd4kQNixI.roa (hash: sEUW5djd1NzJ3pooD+mv2egmXyQ8A1sExKT4CHNq2Vo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.mft rsync://rpki.ripe.net/repository/DEFAULT/d9v7PWTrEMeCVio3hVsHMr0Y6z8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:68:b1:43:ad:dd:1d:85:57:9d:9c:2e:3c:33:c9:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77dbfb3d64eb10c782562a37855b0732bd18eb3f Validity Not Before: Dec 18 17:01:20 2025 GMT Not After : Dec 19 17:01:20 2025 GMT Subject: CN=1cb53f0ce1a6195512b558147b378debefacf21c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a8:e3:ca:b8:65:2b:78:1a:b6:a0:19:79:19: 0e:32:d9:01:3e:63:cf:05:7b:43:2e:5a:6b:4b:ac: 8a:32:f0:8a:b7:25:65:e2:2d:73:f0:8d:8f:04:2d: 84:bf:0e:3f:d5:35:34:9c:e4:57:c9:b1:7c:2d:81: c1:ed:6c:02:26:49:36:bf:9b:86:21:7e:1e:ab:ec: 59:16:f2:dd:c5:d2:8e:b2:11:cf:c0:e7:c6:fd:4e: 04:97:d8:96:66:f0:85:79:29:37:23:bd:b1:ca:c8: 9a:a7:a4:82:3e:59:e1:b6:c4:aa:a1:d3:08:d1:2a: 81:17:55:9f:8a:f3:cc:ed:b7:6f:bf:e5:68:77:ae: 34:82:ff:fd:09:b3:e4:41:67:1c:79:94:73:df:1f: 40:bf:69:c6:82:93:96:8a:a9:ff:9d:fb:e9:28:cb: b7:40:74:b9:61:7d:e2:be:c9:f2:7f:23:93:36:f2: d6:7e:e3:c6:78:05:ae:3f:b0:ea:14:a6:6f:31:c9: 4d:c3:cb:5d:ad:c6:28:20:4b:fb:4f:80:04:04:d7: 38:23:90:3b:35:cc:cf:eb:77:b8:d1:20:85:df:12: bd:6e:3c:08:44:e7:0a:77:cf:c5:9d:93:50:08:df: 68:80:a4:9b:46:20:82:3a:17:96:dc:7c:73:52:ad: cc:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:B5:3F:0C:E1:A6:19:55:12:B5:58:14:7B:37:8D:EB:EF:AC:F2:1C X509v3 Authority Key Identifier: keyid:77:DB:FB:3D:64:EB:10:C7:82:56:2A:37:85:5B:07:32:BD:18:EB:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9v7PWTrEMeCVio3hVsHMr0Y6z8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:0a:35:5c:03:71:cd:87:54:cd:92:de:79:11:f0:3e:6c:2a: 42:30:a1:37:80:49:b1:ff:a4:34:f3:8a:c0:d3:19:f7:54:1d: 95:3c:e3:ac:25:b2:f1:f4:2c:da:0f:d6:cd:98:14:f0:c1:a2: fd:73:84:75:98:de:67:7a:7f:76:4f:83:c1:b9:da:65:6e:49: 77:91:5e:f1:ee:9a:3e:ef:fa:5b:aa:1b:8f:38:7a:a6:72:8c: 25:e4:66:53:b2:9a:49:7f:24:7b:1c:65:f9:22:a9:43:d5:ad: 56:c9:6b:de:bf:d3:be:47:c0:17:69:15:97:6d:62:32:d5:92: 74:b3:04:b1:a4:95:4e:20:6d:45:c1:2a:c7:0c:7d:81:76:2f: ef:5e:2b:6e:57:19:eb:23:61:7f:50:fd:9f:49:c8:6f:cf:ca: 81:e9:9c:f0:e7:0b:48:53:92:70:a5:15:8a:03:41:3a:6f:e9: ff:b3:d3:f8:2b:14:c2:ed:d9:d5:6a:65:d4:b8:bd:1c:7b:c7: 58:93:18:fe:5d:f9:87:1b:ab:35:2f:c4:b6:40:e8:59:32:47: 8d:b9:83:4e:a8:2d:14:44:e7:82:a3:7a:37:96:a1:e3:10:f3: 52:60:6a:7f:26:81:9c:1e:6b:54:f7:f5:bc:86:a7:a1:6d:8d: fd:02:c3:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyaLFDrd0dhVednC48M8mdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3ZGJmYjNkNjRlYjEwYzc4MjU2MmEzNzg1NWIwNzMyYmQx OGViM2YwHhcNMjUxMjE4MTcwMTIwWhcNMjUxMjE5MTcwMTIwWjAzMTEwLwYDVQQD EygxY2I1M2YwY2UxYTYxOTU1MTJiNTU4MTQ3YjM3OGRlYmVmYWNmMjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyajjyrhlK3gatqAZeRkOMtkBPmPP BXtDLlprS6yKMvCKtyVl4i1z8I2PBC2Evw4/1TU0nORXybF8LYHB7WwCJkk2v5uG IX4eq+xZFvLdxdKOshHPwOfG/U4El9iWZvCFeSk3I72xysiap6SCPlnhtsSqodMI 0SqBF1WfivPM7bdvv+Vod640gv/9CbPkQWcceZRz3x9Av2nGgpOWiqn/nfvpKMu3 QHS5YX3ivsnyfyOTNvLWfuPGeAWuP7DqFKZvMclNw8tdrcYoIEv7T4AEBNc4I5A7 NczP63e40SCF3xK9bjwIROcKd8/FnZNQCN9ogKSbRiCCOheW3HxzUq3M0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBy1PwzhphlVErVYFHs3jevvrPIcMB8GA1UdIwQY MBaAFHfb+z1k6xDHglYqN4VbBzK9GOs/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDl2N1BXVHJFTWVDVmlvM2hWc0hNcjBZNno4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZTZjNDgtNGJkZC00ZTYwLTkxMGEt NTRiNDFlNGZjNjNiLzEvZDl2N1BXVHJFTWVDVmlvM2hWc0hNcjBZNno4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZTZjNDgtNGJkZC00ZTYwLTkxMGEtNTRiNDFlNGZjNjNi LzEvZDl2N1BXVHJFTWVDVmlvM2hWc0hNcjBZNno4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlQo1XANx zYdUzZLeeRHwPmwqQjChN4BJsf+kNPOKwNMZ91QdlTzjrCWy8fQs2g/WzZgU8MGi /XOEdZjeZ3p/dk+DwbnaZW5Jd5Fe8e6aPu/6W6objzh6pnKMJeRmU7KaSX8kexxl +SKpQ9WtVslr3r/TvkfAF2kVl21iMtWSdLMEsaSVTiBtRcEqxwx9gXYv714rblcZ 6yNhf1D9n0nIb8/Kgemc8OcLSFOScKUVigNBOm/p/7PT+CsUwu3Z1Wpl1Li9HHvH WJMY/l35hxurNS/EtkDoWTJHjbmDTqgtFETngqN6N5ah4xDzUmBqfyaBnB5rVPf1 vIanoW2N/QLDlg== -----END CERTIFICATE-----Generated at Thu Dec 18 20:34:22 2025 by rpki-client