This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft File: 1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft (raw, json) Hash identifier: 7tx9sospV1ggQb63fjb1bAkWM2iwnJngAJCBuhWJNd4= Subject key identifier: CE:B6:83:0D:6E:17:16:36:82:15:92:C2:4D:45:6B:07:1A:97:1B:CC Authority key identifier: D5:DE:43:CD:1F:8A:F4:5C:68:98:67:D9:F5:A8:81:A2:AE:C3:4B:31 Certificate issuer: /CN=d5de43cd1f8af45c689867d9f5a881a2aec34b31 Certificate serial: 019B2BC2411623C1CF8D1166F39A46F9A037 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1d5DzR-K9FxomGfZ9aiBoq7DSzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft Manifest number: 03D3 Signing time: Wed 17 Dec 2025 10:01:49 +0000 Manifest this update: Wed 17 Dec 2025 10:01:49 +0000 Manifest next update: Thu 18 Dec 2025 10:01:49 +0000 Files and hashes: 1: 1d5DzR-K9FxomGfZ9aiBoq7DSzE.crl (hash: 6M63tvv7XN0KFeAg3K4WvoEIKfoJV2ArTqLKr8jWWSg=) 2: 7MLQXQoB7nGQ9BAPNdo9KSMuY8Q.roa (hash: qybqPEfeMgg3CNavO5wY4/V9s/QfeIPfINjmuYmoUy0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.crl rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft rsync://rpki.ripe.net/repository/DEFAULT/1d5DzR-K9FxomGfZ9aiBoq7DSzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:c2:41:16:23:c1:cf:8d:11:66:f3:9a:46:f9:a0:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5de43cd1f8af45c689867d9f5a881a2aec34b31 Validity Not Before: Dec 17 10:01:49 2025 GMT Not After : Dec 18 10:01:49 2025 GMT Subject: CN=ceb6830d6e171636821592c24d456b071a971bcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2e:b5:bc:85:d3:4a:ee:83:4c:d6:10:ad:02: c3:6a:7f:72:83:40:5c:44:f8:d6:0d:07:79:ed:95: a4:64:af:54:54:a3:1e:b2:94:96:8e:58:77:21:80: c7:73:70:65:bb:6f:c7:14:76:d0:c5:89:d5:58:b9: 7d:2a:57:fd:4a:0e:39:07:11:9d:a0:a0:de:35:b1: 8b:00:85:c5:93:18:6f:04:0f:ef:f5:40:cd:a9:54: 25:4c:28:9d:30:57:5d:e5:be:72:36:63:4d:7c:98: b5:0a:ca:2b:24:7b:7b:9e:44:a6:0c:23:f7:29:a0: 0f:43:7f:f8:3e:58:d6:0e:03:32:1e:d0:9b:5b:33: 1d:5d:2d:84:41:16:e0:cb:f4:18:52:a7:02:29:ac: 53:02:53:16:43:8f:c6:e8:e0:ce:eb:f1:5e:29:fe: d1:74:3d:43:33:d1:35:05:8e:14:f4:43:ae:bb:b3: 9c:5f:6f:1f:79:36:c5:c2:31:44:29:07:1d:a9:f4: 94:06:92:f9:90:25:c5:1c:13:39:4f:6a:68:52:b9: 46:e4:88:48:5d:77:1a:1f:31:1a:55:5e:c7:06:fe: 54:85:f6:0d:52:83:dd:be:4a:48:e2:a3:44:0b:45: 36:65:62:db:7a:68:f4:2c:d3:4a:0f:26:5a:fa:3b: cb:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:B6:83:0D:6E:17:16:36:82:15:92:C2:4D:45:6B:07:1A:97:1B:CC X509v3 Authority Key Identifier: keyid:D5:DE:43:CD:1F:8A:F4:5C:68:98:67:D9:F5:A8:81:A2:AE:C3:4B:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d5DzR-K9FxomGfZ9aiBoq7DSzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:04:04:c2:18:8b:c0:aa:cb:ae:04:70:cc:ab:c2:a3:11:3f: 69:84:82:0c:79:a6:ea:6a:90:d5:58:dc:37:b2:81:22:cb:79: c4:1a:84:c0:95:fb:93:4b:8a:4a:f5:0b:9d:84:d7:c5:02:a6: c1:b1:b5:35:e3:4e:ff:fc:92:6f:80:76:2e:98:b6:2f:ac:3c: a0:8f:d6:21:4f:a5:0f:ab:85:3f:06:15:bb:a1:29:5c:f5:63: 47:a5:0d:6e:fc:7b:31:05:bb:b2:30:0b:83:b9:cf:b0:3d:c5: d3:70:1d:e0:eb:82:35:5d:68:11:6b:3a:3b:f9:c1:c9:89:b5: 07:9f:44:10:4e:00:9b:4a:a8:d9:08:50:bc:4e:2e:61:dc:73: 91:c2:c0:e4:49:9c:61:5c:4c:dc:37:34:dc:61:ba:5d:4d:02: 2b:ee:65:f4:c6:b7:9f:8c:2e:e8:06:b0:24:77:03:4c:72:d4: 72:eb:96:ff:c0:ca:f2:5f:7b:b3:91:49:4a:c7:08:04:57:e5: c1:09:98:d0:32:62:b9:15:3b:7b:7d:7b:cc:4d:80:85:e6:0f: 42:3c:ab:dd:bf:cc:85:44:da:d3:81:c6:2e:c5:2b:56:fd:1b: 89:6d:b0:22:5b:78:a9:1f:33:d6:60:f6:ac:85:69:87:18:08: 63:34:12:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrwkEWI8HPjRFm85pG+aA3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZGU0M2NkMWY4YWY0NWM2ODk4NjdkOWY1YTg4MWEyYWVj MzRiMzEwHhcNMjUxMjE3MTAwMTQ5WhcNMjUxMjE4MTAwMTQ5WjAzMTEwLwYDVQQD EyhjZWI2ODMwZDZlMTcxNjM2ODIxNTkyYzI0ZDQ1NmIwNzFhOTcxYmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAny61vIXTSu6DTNYQrQLDan9yg0Bc RPjWDQd57ZWkZK9UVKMespSWjlh3IYDHc3Blu2/HFHbQxYnVWLl9Klf9Sg45BxGd oKDeNbGLAIXFkxhvBA/v9UDNqVQlTCidMFdd5b5yNmNNfJi1CsorJHt7nkSmDCP3 KaAPQ3/4PljWDgMyHtCbWzMdXS2EQRbgy/QYUqcCKaxTAlMWQ4/G6ODO6/FeKf7R dD1DM9E1BY4U9EOuu7OcX28feTbFwjFEKQcdqfSUBpL5kCXFHBM5T2poUrlG5IhI XXcaHzEaVV7HBv5UhfYNUoPdvkpI4qNEC0U2ZWLbemj0LNNKDyZa+jvL6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM62gw1uFxY2ghWSwk1FawcalxvMMB8GA1UdIwQY MBaAFNXeQ80fivRcaJhn2fWogaKuw0sxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWQ1RHpSLUs5RnhvbUdmWjlhaUJvcTdEU3pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xNjA4YjAtZTdjYS00YjNiLTkwMmYt NGQwYTdlYzA3Nzg2LzEvMWQ1RHpSLUs5RnhvbUdmWjlhaUJvcTdEU3pFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS8xNjA4YjAtZTdjYS00YjNiLTkwMmYtNGQwYTdlYzA3Nzg2 LzEvMWQ1RHpSLUs5RnhvbUdmWjlhaUJvcTdEU3pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApgQEwhiL wKrLrgRwzKvCoxE/aYSCDHmm6mqQ1VjcN7KBIst5xBqEwJX7k0uKSvULnYTXxQKm wbG1NeNO//ySb4B2Lpi2L6w8oI/WIU+lD6uFPwYVu6EpXPVjR6UNbvx7MQW7sjAL g7nPsD3F03Ad4OuCNV1oEWs6O/nByYm1B59EEE4Am0qo2QhQvE4uYdxzkcLA5Emc YVxM3Dc03GG6XU0CK+5l9Ma3n4wu6AawJHcDTHLUcuuW/8DK8l97s5FJSscIBFfl wQmY0DJiuRU7e317zE2AheYPQjyr3b/MhUTa04HGLsUrVv0biW2wIlt4qR8z1mD2 rIVphxgIYzQSTQ== -----END CERTIFICATE-----Generated at Wed Dec 17 13:44:37 2025 by rpki-client