This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.mft File: d1XNi-ceKectlpDHzUCHtfJhFvA.mft (raw, json) Hash identifier: myFj88+GI6pjPJXjuhkidUMJVh+ro6rRtBaSqD+ToNs= Subject key identifier: E0:26:CC:4C:1E:6E:A1:3F:8E:5B:10:C4:B9:F5:E8:E8:E3:2A:A0:51 Authority key identifier: 77:55:CD:8B:E7:1E:29:E7:2D:96:90:C7:CD:40:87:B5:F2:61:16:F0 Certificate issuer: /CN=7755cd8be71e29e72d9690c7cd4087b5f26116f0 Certificate serial: 019AF209ADB78B3748EF76CE56407763881C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d1XNi-ceKectlpDHzUCHtfJhFvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.mft Manifest number: 0788 Signing time: Sat 06 Dec 2025 05:01:51 +0000 Manifest this update: Sat 06 Dec 2025 05:01:51 +0000 Manifest next update: Sun 07 Dec 2025 05:01:51 +0000 Files and hashes: 1: B36LiC0OjqZ3wtH6qzPHL39SDVM.roa (hash: lC3icrS9H534ILHm12EWgHNj+HzhQRDu9zX1M9oOdqc=) 2: d1XNi-ceKectlpDHzUCHtfJhFvA.crl (hash: FUW2uXS285AQM39pap+uWHvChLUTKedF0RDVf7Aaspc=) 3: e38yhLWXEVmqzpexT39CAVvzz0Q.roa (hash: BPXva5k8oXj/MP9PbA9GSzPiSKc5f6Z2a5jmXbL4TDQ=) 4: orSDHxnHGA47DQXY7GCuv1ViUKY.roa (hash: LnjrGG6bbrDuTNmUNlD7ds05Ph4J1TnAuWMrinaUcFQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.crl rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.mft rsync://rpki.ripe.net/repository/DEFAULT/d1XNi-ceKectlpDHzUCHtfJhFvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:ad:b7:8b:37:48:ef:76:ce:56:40:77:63:88:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7755cd8be71e29e72d9690c7cd4087b5f26116f0 Validity Not Before: Dec 6 05:01:51 2025 GMT Not After : Dec 7 05:01:51 2025 GMT Subject: CN=e026cc4c1e6ea13f8e5b10c4b9f5e8e8e32aa051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4b:61:6a:49:3f:8f:8b:02:b3:45:fb:fb:ff: de:e8:26:57:de:d7:5e:1a:46:d3:98:0e:72:d1:7b: 6e:01:c6:f8:0c:91:45:0d:54:0a:8f:9d:f0:5f:5a: 30:87:3c:de:fc:f4:72:f9:39:c9:7d:3e:68:41:29: c1:88:d4:a1:09:30:82:c0:80:72:34:48:dd:c5:cf: eb:d5:ad:94:29:ae:32:65:8b:89:6d:d8:04:72:db: 9f:16:f9:5c:e7:5c:1d:ba:71:3b:4c:51:bd:9e:e7: 0c:19:ab:bc:31:7a:d8:13:6b:0b:65:4a:92:e9:cf: 35:c6:da:d0:61:6c:12:61:9c:98:b9:e4:96:e5:47: 78:12:4a:04:aa:62:60:3e:24:fd:03:29:c4:d5:f1: e2:8e:07:72:b9:4c:c5:50:27:c9:e2:e4:69:af:22: 07:88:76:80:13:3b:82:c9:5f:bc:6b:54:6d:b1:1c: d2:b8:9c:ad:02:36:75:9e:d5:cb:5e:1c:91:9b:60: 35:dd:d3:01:0d:a4:40:3e:f0:71:98:87:98:f8:96: b5:90:20:51:9a:99:80:72:75:2a:89:34:83:36:94: cf:0b:aa:ae:81:f3:0b:80:74:96:a1:5d:93:e5:24: e5:b1:d3:9f:2b:14:d9:30:a4:62:d7:ac:70:02:e7: c4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:26:CC:4C:1E:6E:A1:3F:8E:5B:10:C4:B9:F5:E8:E8:E3:2A:A0:51 X509v3 Authority Key Identifier: keyid:77:55:CD:8B:E7:1E:29:E7:2D:96:90:C7:CD:40:87:B5:F2:61:16:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1XNi-ceKectlpDHzUCHtfJhFvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:1c:cc:c4:4a:1d:70:61:c5:7c:a7:9b:4f:34:25:4f:f6:b6: b8:84:6d:4d:b9:48:cc:f2:3e:9e:a1:47:b9:68:07:ce:e8:e4: f3:fb:ef:db:f1:a5:8c:90:88:d9:31:dc:7c:a2:83:66:91:89: 14:85:18:87:fc:05:64:84:7c:57:f1:d2:48:5c:a5:72:9c:d2: 84:cb:b9:18:ce:28:bd:f8:20:b7:1d:90:37:58:45:fe:21:fa: 5f:db:ce:72:f7:2c:90:4f:a3:dd:56:93:1c:fc:37:11:4f:31: 99:fd:07:f9:eb:de:59:a3:3b:ec:ee:80:e5:57:77:9e:f1:84: fa:17:f4:28:f8:59:a2:45:be:95:11:7c:82:8e:8a:9c:9c:6a: af:68:2d:8c:39:1a:2c:d6:4f:2f:9d:61:ce:54:62:ea:5c:eb: 50:b1:c2:a8:bd:72:cd:0b:00:89:74:62:25:85:53:1f:44:97: 48:4a:6b:9c:44:03:bc:73:66:0b:0d:e4:df:a3:ad:7a:4b:20: ca:5c:83:83:71:04:ed:65:ac:ac:5d:3b:8e:2e:f3:19:fe:2e: a5:c3:ef:da:0d:5c:41:37:30:ef:87:53:70:f2:88:57:6d:4f: 43:73:ea:66:4b:77:6f:0c:0f:10:da:d9:21:37:d2:05:c0:7e: 47:e1:97:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCa23izdI73bOVkB3Y4gcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3NTVjZDhiZTcxZTI5ZTcyZDk2OTBjN2NkNDA4N2I1ZjI2 MTE2ZjAwHhcNMjUxMjA2MDUwMTUxWhcNMjUxMjA3MDUwMTUxWjAzMTEwLwYDVQQD EyhlMDI2Y2M0YzFlNmVhMTNmOGU1YjEwYzRiOWY1ZThlOGUzMmFhMDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Uthakk/j4sCs0X7+//e6CZX3tde GkbTmA5y0XtuAcb4DJFFDVQKj53wX1owhzze/PRy+TnJfT5oQSnBiNShCTCCwIBy NEjdxc/r1a2UKa4yZYuJbdgEctufFvlc51wdunE7TFG9nucMGau8MXrYE2sLZUqS 6c81xtrQYWwSYZyYueSW5Ud4EkoEqmJgPiT9AynE1fHijgdyuUzFUCfJ4uRpryIH iHaAEzuCyV+8a1RtsRzSuJytAjZ1ntXLXhyRm2A13dMBDaRAPvBxmIeY+Ja1kCBR mpmAcnUqiTSDNpTPC6qugfMLgHSWoV2T5STlsdOfKxTZMKRi16xwAufErQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOAmzEwebqE/jlsQxLn16OjjKqBRMB8GA1UdIwQY MBaAFHdVzYvnHinnLZaQx81Ah7XyYRbwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDFYTmktY2VLZWN0bHBESHpVQ0h0ZkpoRnZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My83YzBjNTctMTVhOC00MzA3LTg1MGQt ZTAyMWY4Y2U2YzUxLzEvZDFYTmktY2VLZWN0bHBESHpVQ0h0ZkpoRnZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My83YzBjNTctMTVhOC00MzA3LTg1MGQtZTAyMWY4Y2U2YzUx LzEvZDFYTmktY2VLZWN0bHBESHpVQ0h0ZkpoRnZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAexzMxEod cGHFfKebTzQlT/a2uIRtTblIzPI+nqFHuWgHzujk8/vv2/GljJCI2THcfKKDZpGJ FIUYh/wFZIR8V/HSSFylcpzShMu5GM4ovfggtx2QN1hF/iH6X9vOcvcskE+j3VaT HPw3EU8xmf0H+eveWaM77O6A5Vd3nvGE+hf0KPhZokW+lRF8go6KnJxqr2gtjDka LNZPL51hzlRi6lzrULHCqL1yzQsAiXRiJYVTH0SXSEprnEQDvHNmCw3k36Oteksg ylyDg3EE7WWsrF07ji7zGf4upcPv2g1cQTcw74dTcPKIV21PQ3PqZkt3bwwPENrZ ITfSBcB+R+GXKw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:48:12 2025 by rpki-client