This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft File: D1IdJpUmx67jjk-yRUsvCH9p_rc.mft (raw, json) Hash identifier: jQWBAKbscvNRZfzgdgAulSGx68xIRlSu6XFWPnZ9CRs= Subject key identifier: 8A:FF:CF:D2:69:AA:D3:05:66:CC:B1:3B:EE:52:A0:BC:A0:52:A0:36 Authority key identifier: 0F:52:1D:26:95:26:C7:AE:E3:8E:4F:B2:45:4B:2F:08:7F:69:FE:B7 Certificate issuer: /CN=0f521d269526c7aee38e4fb2454b2f087f69feb7 Certificate serial: 019AF164645B0FA82EAAFA2A531788C7841C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1IdJpUmx67jjk-yRUsvCH9p_rc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft Manifest number: 074B Signing time: Sat 06 Dec 2025 02:01:19 +0000 Manifest this update: Sat 06 Dec 2025 02:01:19 +0000 Manifest next update: Sun 07 Dec 2025 02:01:19 +0000 Files and hashes: 1: D1IdJpUmx67jjk-yRUsvCH9p_rc.crl (hash: 9kjlW3MQ65rdgv4dUS2ycDWrquhDunEHSLPcDCaMHSk=) 2: LlemLUDCd84kXEFGKBA1pEcpzVU.roa (hash: JfcpiQRrDVeOVEeINVti/ZaYZkfMnqCLAWmq46zuOoM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft rsync://rpki.ripe.net/repository/DEFAULT/D1IdJpUmx67jjk-yRUsvCH9p_rc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:64:5b:0f:a8:2e:aa:fa:2a:53:17:88:c7:84:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f521d269526c7aee38e4fb2454b2f087f69feb7 Validity Not Before: Dec 6 02:01:19 2025 GMT Not After : Dec 7 02:01:19 2025 GMT Subject: CN=8affcfd269aad30566ccb13bee52a0bca052a036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:29:fa:b7:f3:8b:fe:a4:4b:73:80:59:ff:0a: 96:3a:7d:ee:fe:f9:f9:06:4c:db:75:84:ed:c7:a6: a3:9e:4a:b3:40:b7:43:40:5f:24:ed:56:4c:f5:ab: 70:da:a0:a4:fd:3a:13:95:2f:bd:80:ce:86:2b:4b: 09:fc:7f:73:6c:cf:1b:5b:2b:db:27:88:bc:cb:a7: f5:9f:48:c1:d4:90:47:8a:cb:11:b5:9a:a8:ac:70: f7:ae:c7:42:6b:ed:66:6f:37:c6:40:96:5a:3b:f0: b8:64:13:ef:a9:92:ae:38:46:c3:ff:81:e7:30:a4: 11:17:f3:61:32:76:18:c0:e6:02:80:b8:d1:92:e7: f1:41:86:cc:56:fc:44:ac:45:13:f8:ee:61:33:ba: 43:5d:f1:25:ef:43:34:eb:d0:71:8e:18:75:34:96: 70:72:65:41:5a:61:a3:25:d2:d4:f4:73:88:dd:9b: 66:ea:1f:09:d3:cf:46:7d:69:76:99:78:ee:89:bc: fc:92:ed:0e:b4:56:4e:fd:6f:d3:2f:a0:2e:8f:1a: 80:c7:06:a3:a5:b6:87:5d:f2:f3:ed:92:d9:e9:0b: 3c:08:1e:52:d9:5f:b8:0a:81:85:47:3f:95:58:73: c6:24:b9:b6:0f:90:ec:66:d0:3d:95:2c:b9:d1:d1: 5b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:FF:CF:D2:69:AA:D3:05:66:CC:B1:3B:EE:52:A0:BC:A0:52:A0:36 X509v3 Authority Key Identifier: keyid:0F:52:1D:26:95:26:C7:AE:E3:8E:4F:B2:45:4B:2F:08:7F:69:FE:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1IdJpUmx67jjk-yRUsvCH9p_rc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:55:a8:4e:d4:db:e1:b6:a4:71:6b:fc:aa:ab:6a:56:d1:2d: 88:a4:02:ae:18:1f:5a:1b:cd:5b:1a:4f:30:08:d3:e7:e5:7d: a5:be:a3:a9:f8:a7:03:a0:b2:92:cd:f3:2d:98:0b:85:39:0f: 40:9a:bb:93:28:ad:fe:5c:84:c3:23:a6:9d:61:04:c9:a7:1f: c1:88:e9:e2:c2:de:55:18:e3:05:71:62:c1:62:29:88:14:8c: 13:e3:76:70:63:f9:5e:66:1f:f3:fa:8c:22:a7:c4:64:19:a3: 79:87:12:2e:19:68:9f:89:96:30:9e:ec:eb:e8:6b:6e:18:19: 29:bf:a0:ac:0e:5c:a4:90:13:74:9c:fc:20:c3:9c:ca:8d:d8: 47:75:95:9f:e9:a3:5a:10:dd:61:92:67:1c:0f:7f:db:bf:53: 64:4d:92:c8:12:31:a4:f1:09:a4:a7:0e:dc:59:f9:29:fa:71: b8:21:9a:89:e4:f0:2b:2a:95:22:e6:e1:c0:2a:71:89:97:72: a6:b3:ba:88:27:88:c3:56:30:9d:48:ad:7f:aa:b0:6d:09:44: 42:7a:c3:17:42:e6:5a:65:93:90:6d:a8:a8:b4:a4:a5:bd:87: d7:10:a8:16:3f:8f:f8:d7:49:2e:72:ab:f2:1c:e9:98:aa:9c: ce:dd:22:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZGRbD6guqvoqUxeIx4QcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNTIxZDI2OTUyNmM3YWVlMzhlNGZiMjQ1NGIyZjA4N2Y2 OWZlYjcwHhcNMjUxMjA2MDIwMTE5WhcNMjUxMjA3MDIwMTE5WjAzMTEwLwYDVQQD Eyg4YWZmY2ZkMjY5YWFkMzA1NjZjY2IxM2JlZTUyYTBiY2EwNTJhMDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCn6t/OL/qRLc4BZ/wqWOn3u/vn5 BkzbdYTtx6ajnkqzQLdDQF8k7VZM9atw2qCk/ToTlS+9gM6GK0sJ/H9zbM8bWyvb J4i8y6f1n0jB1JBHissRtZqorHD3rsdCa+1mbzfGQJZaO/C4ZBPvqZKuOEbD/4Hn MKQRF/NhMnYYwOYCgLjRkufxQYbMVvxErEUT+O5hM7pDXfEl70M069Bxjhh1NJZw cmVBWmGjJdLU9HOI3Ztm6h8J089GfWl2mXjuibz8ku0OtFZO/W/TL6AujxqAxwaj pbaHXfLz7ZLZ6Qs8CB5S2V+4CoGFRz+VWHPGJLm2D5DsZtA9lSy50dFb0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIr/z9JpqtMFZsyxO+5SoLygUqA2MB8GA1UdIwQY MBaAFA9SHSaVJseu445PskVLLwh/af63MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDFJZEpwVW14NjdqamsteVJVc3ZDSDlwX3JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8zMDdiZmYtMWViMS00NzAxLWFjNmIt YzFlYjAxMTBiZDNhLzEvRDFJZEpwVW14NjdqamsteVJVc3ZDSDlwX3JjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8zMDdiZmYtMWViMS00NzAxLWFjNmItYzFlYjAxMTBiZDNh LzEvRDFJZEpwVW14NjdqamsteVJVc3ZDSDlwX3JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaFWoTtTb 4bakcWv8qqtqVtEtiKQCrhgfWhvNWxpPMAjT5+V9pb6jqfinA6Cyks3zLZgLhTkP QJq7kyit/lyEwyOmnWEEyacfwYjp4sLeVRjjBXFiwWIpiBSME+N2cGP5XmYf8/qM IqfEZBmjeYcSLhlon4mWMJ7s6+hrbhgZKb+grA5cpJATdJz8IMOcyo3YR3WVn+mj WhDdYZJnHA9/279TZE2SyBIxpPEJpKcO3Fn5KfpxuCGaieTwKyqVIubhwCpxiZdy prO6iCeIw1YwnUitf6qwbQlEQnrDF0LmWmWTkG2oqLSkpb2H1xCoFj+P+NdJLnKr 8hzpmKqczt0iIw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:03:39 2025 by rpki-client