This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.mft File: d1xabqkPXz0AfBDkROO5Y7bTDMU.mft (raw, json) Hash identifier: V74XyuWxATmPPYM/Y9281U59n1yd/wqmPvh90LCOfDs= Subject key identifier: 17:DA:7D:C6:BF:6F:FB:EC:36:1A:90:2E:F9:4D:C2:97:43:38:D3:2B Authority key identifier: 77:5C:5A:6E:A9:0F:5F:3D:00:7C:10:E4:44:E3:B9:63:B6:D3:0C:C5 Certificate issuer: /CN=775c5a6ea90f5f3d007c10e444e3b963b6d30cc5 Certificate serial: 019AF3F71650D86FE1F6240263ED434AF5E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d1xabqkPXz0AfBDkROO5Y7bTDMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.mft Manifest number: 053C Signing time: Sat 06 Dec 2025 14:00:47 +0000 Manifest this update: Sat 06 Dec 2025 14:00:47 +0000 Manifest next update: Sun 07 Dec 2025 14:00:47 +0000 Files and hashes: 1: d1xabqkPXz0AfBDkROO5Y7bTDMU.crl (hash: LCtvONv6WHQoiZQI829POcKOUlFCDPikDNnncSWm6lM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.crl rsync://rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.mft rsync://rpki.ripe.net/repository/DEFAULT/d1xabqkPXz0AfBDkROO5Y7bTDMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:16:50:d8:6f:e1:f6:24:02:63:ed:43:4a:f5:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=775c5a6ea90f5f3d007c10e444e3b963b6d30cc5 Validity Not Before: Dec 6 14:00:47 2025 GMT Not After : Dec 7 14:00:47 2025 GMT Subject: CN=17da7dc6bf6ffbec361a902ef94dc2974338d32b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ad:25:d5:d0:0b:b3:2f:f2:75:44:48:ea:94: 39:cc:81:ff:54:d2:bd:ff:26:81:49:a7:73:59:cf: f6:1c:68:4a:47:4a:9e:98:c4:dc:4a:61:e5:25:10: 68:f2:34:59:ac:2a:b8:23:b5:76:16:aa:b1:12:74: ec:34:80:bc:3e:f4:80:20:8a:24:e8:b4:de:6b:17: 38:9f:83:a0:cd:41:90:2b:a5:84:19:d4:83:31:59: fc:0a:59:f5:96:fa:aa:15:04:5d:1e:ef:ec:97:4f: 0e:80:67:97:27:75:4b:f0:b2:71:16:f9:5b:6c:49: dc:c0:66:41:95:83:75:58:f2:ef:7a:76:0d:c0:3d: 78:91:34:83:9d:79:ca:a4:7b:da:3f:51:6a:40:74: fc:35:d6:27:05:53:25:a1:bb:f5:b4:f2:e0:9c:a1: 0a:8d:a5:4c:9a:c6:2d:ae:3c:a8:6d:a2:78:1a:98: a1:dc:83:c0:13:55:e4:21:44:e3:49:e7:ff:93:fd: ae:30:7f:31:3c:8d:45:12:81:68:d7:dc:e4:75:c2: af:8c:7b:4d:bf:2f:aa:cf:c3:7a:fa:fc:8b:2d:a9: c5:d4:76:29:02:87:15:21:eb:fb:6e:75:9f:ab:53: f4:69:75:5c:8b:fb:13:82:56:d9:4d:09:4e:5f:3c: 63:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:DA:7D:C6:BF:6F:FB:EC:36:1A:90:2E:F9:4D:C2:97:43:38:D3:2B X509v3 Authority Key Identifier: keyid:77:5C:5A:6E:A9:0F:5F:3D:00:7C:10:E4:44:E3:B9:63:B6:D3:0C:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1xabqkPXz0AfBDkROO5Y7bTDMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/968732-6d76-464d-97c4-e40a334691c9/1/d1xabqkPXz0AfBDkROO5Y7bTDMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:b6:51:07:7f:4c:81:c0:19:44:fa:08:cf:0d:2e:3e:65:2a: 93:54:c7:8c:bd:9f:3d:16:17:5f:98:f9:a5:0e:69:07:16:80: 0b:78:6e:bd:d7:25:0e:f8:2d:a1:33:f5:f1:9a:03:7d:b1:61: 3f:2c:e4:76:ea:36:16:9c:57:02:2d:d9:f9:17:72:2a:3c:4d: 6d:91:78:c6:80:85:3e:bb:a5:a4:da:e0:11:b4:66:83:d0:aa: 65:26:14:68:74:2a:47:a1:4d:c1:85:fc:00:76:d7:36:0a:10: 3a:5a:75:bd:27:99:50:3e:1f:02:58:b4:d3:84:30:1c:1f:1a: 49:6f:d5:fc:0a:c8:de:75:2c:d1:6a:d8:e1:53:6a:f7:25:36: 24:2b:d9:fa:52:3b:80:fa:ba:73:38:ab:7c:9d:ad:14:83:72: 73:a1:e7:69:75:2e:17:52:69:63:09:73:7d:7c:21:68:cf:82: 4a:51:fb:66:da:f1:8c:74:c3:f8:ee:b6:25:43:e8:2e:2c:1e: 64:02:e7:c0:c4:cf:48:68:0d:45:9f:07:5e:76:23:b8:86:08: 11:05:e3:36:0d:8b:1e:47:3d:6b:af:47:ea:d4:9c:f9:1e:f8: 1b:2f:45:55:bb:8c:ee:f9:02:af:03:61:87:60:fb:34:0a:47: 72:1a:b1:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9xZQ2G/h9iQCY+1DSvXiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3NWM1YTZlYTkwZjVmM2QwMDdjMTBlNDQ0ZTNiOTYzYjZk MzBjYzUwHhcNMjUxMjA2MTQwMDQ3WhcNMjUxMjA3MTQwMDQ3WjAzMTEwLwYDVQQD EygxN2RhN2RjNmJmNmZmYmVjMzYxYTkwMmVmOTRkYzI5NzQzMzhkMzJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq60l1dALsy/ydURI6pQ5zIH/VNK9 /yaBSadzWc/2HGhKR0qemMTcSmHlJRBo8jRZrCq4I7V2FqqxEnTsNIC8PvSAIIok 6LTeaxc4n4OgzUGQK6WEGdSDMVn8Cln1lvqqFQRdHu/sl08OgGeXJ3VL8LJxFvlb bEncwGZBlYN1WPLvenYNwD14kTSDnXnKpHvaP1FqQHT8NdYnBVMlobv1tPLgnKEK jaVMmsYtrjyobaJ4Gpih3IPAE1XkIUTjSef/k/2uMH8xPI1FEoFo19zkdcKvjHtN vy+qz8N6+vyLLanF1HYpAocVIev7bnWfq1P0aXVci/sTglbZTQlOXzxjMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBfafca/b/vsNhqQLvlNwpdDONMrMB8GA1UdIwQY MBaAFHdcWm6pD189AHwQ5ETjuWO20wzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDF4YWJxa1BYejBBZkJEa1JPTzVZN2JURE1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My85Njg3MzItNmQ3Ni00NjRkLTk3YzQt ZTQwYTMzNDY5MWM5LzEvZDF4YWJxa1BYejBBZkJEa1JPTzVZN2JURE1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My85Njg3MzItNmQ3Ni00NjRkLTk3YzQtZTQwYTMzNDY5MWM5 LzEvZDF4YWJxa1BYejBBZkJEa1JPTzVZN2JURE1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHrZRB39M gcAZRPoIzw0uPmUqk1THjL2fPRYXX5j5pQ5pBxaAC3huvdclDvgtoTP18ZoDfbFh Pyzkduo2FpxXAi3Z+RdyKjxNbZF4xoCFPrulpNrgEbRmg9CqZSYUaHQqR6FNwYX8 AHbXNgoQOlp1vSeZUD4fAli004QwHB8aSW/V/ArI3nUs0WrY4VNq9yU2JCvZ+lI7 gPq6czirfJ2tFINyc6HnaXUuF1JpYwlzfXwhaM+CSlH7ZtrxjHTD+O62JUPoLiwe ZALnwMTPSGgNRZ8HXnYjuIYIEQXjNg2LHkc9a69H6tSc+R74Gy9FVbuM7vkCrwNh h2D7NApHchqxnw== -----END CERTIFICATE-----Generated at Sat Dec 6 16:44:51 2025 by rpki-client