This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft File: d1F6r0j2aaC-yOxqyGgrTBJObTA.mft (raw, json) Hash identifier: 6DGu+w8uW87CnWWtx6Qsvy5LRO6XDNKKN43wWN77usQ= Subject key identifier: 41:F4:AB:13:3E:A7:EA:B8:FF:98:78:1F:8B:9D:0C:31:0B:A2:E1:C9 Authority key identifier: 77:51:7A:AF:48:F6:69:A0:BE:C8:EC:6A:C8:68:2B:4C:12:4E:6D:30 Certificate issuer: /CN=77517aaf48f669a0bec8ec6ac8682b4c124e6d30 Certificate serial: 019AF577C422D2FE6CBBCF5F76E4EE7B0B74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d1F6r0j2aaC-yOxqyGgrTBJObTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft Manifest number: 04DC Signing time: Sat 06 Dec 2025 21:00:58 +0000 Manifest this update: Sat 06 Dec 2025 21:00:58 +0000 Manifest next update: Sun 07 Dec 2025 21:00:58 +0000 Files and hashes: 1: d1F6r0j2aaC-yOxqyGgrTBJObTA.crl (hash: Er5qAUGOjYcYi5xpVKDEYcvKSiC+20j2E4yihaiR8uY=) 2: lJ6hu6V7P05pf4Ct-PkwsRbTn-Y.roa (hash: yD7rptfWCX+Sfjy7H+I4AQ8wgaNpJdZq+9g0IP00GOc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft rsync://rpki.ripe.net/repository/DEFAULT/d1F6r0j2aaC-yOxqyGgrTBJObTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:c4:22:d2:fe:6c:bb:cf:5f:76:e4:ee:7b:0b:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77517aaf48f669a0bec8ec6ac8682b4c124e6d30 Validity Not Before: Dec 6 21:00:58 2025 GMT Not After : Dec 7 21:00:58 2025 GMT Subject: CN=41f4ab133ea7eab8ff98781f8b9d0c310ba2e1c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:67:8a:f4:cd:2e:af:ae:35:32:fc:9b:28:0e: 72:4c:4c:14:ed:8e:e3:a0:8e:0f:7c:64:0e:e8:41: 41:05:ff:96:d3:37:e2:7c:44:a2:0d:62:d4:11:86: 3f:30:11:0a:fb:39:37:c1:fb:7b:9a:50:db:b3:48: b6:57:4a:d6:82:f4:4a:36:0d:2d:ef:37:3a:3b:10: 30:10:96:7c:95:0a:48:e0:8b:e5:a9:73:6a:fe:36: 57:e2:cf:45:eb:b6:54:63:0d:80:6e:f0:c0:f9:36: 74:c2:ff:89:b8:f8:10:28:90:24:3d:2f:e4:45:28: 0a:af:e6:ad:23:2f:5e:15:dd:d0:fb:f2:44:08:01: 2b:47:dc:8b:9c:ab:03:e4:97:ab:1a:1e:40:aa:16: 51:48:44:56:61:44:93:8a:82:9b:f0:9e:db:1a:b7: 8c:a7:71:48:d6:fe:20:eb:ed:56:80:d2:ad:f8:df: f6:6f:ce:cd:e6:6d:e3:43:c5:61:0e:6b:88:78:81: 7d:37:d6:95:54:e4:8e:94:30:86:9b:90:c8:0c:a2: cb:1a:a4:ad:5b:c0:fc:b1:41:44:69:94:91:20:3d: d7:85:b8:d7:7f:ba:47:ab:23:f4:1c:04:9c:24:f6: e5:02:26:29:c9:c0:e7:7c:4e:04:f8:97:9b:56:00: a1:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:F4:AB:13:3E:A7:EA:B8:FF:98:78:1F:8B:9D:0C:31:0B:A2:E1:C9 X509v3 Authority Key Identifier: keyid:77:51:7A:AF:48:F6:69:A0:BE:C8:EC:6A:C8:68:2B:4C:12:4E:6D:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1F6r0j2aaC-yOxqyGgrTBJObTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:bf:a7:7a:fb:7a:e3:8b:c5:46:8c:d6:ac:d2:60:7b:45:19: 81:55:cf:0e:75:bc:15:8e:55:27:a8:ae:ec:8b:29:0a:19:5a: 01:d4:cd:79:2e:0d:b4:15:17:36:87:20:f8:c4:e9:46:b2:db: 7f:38:75:e4:b1:ac:d1:8f:93:5d:e4:d8:cf:66:b4:03:29:a2: 3c:0a:03:df:5d:67:86:ca:2e:79:47:e6:ca:6c:38:77:17:d1: 84:26:72:cc:47:c7:c6:a5:7f:9f:df:e0:5a:f8:75:13:de:d7: d9:56:22:25:9f:42:5b:a0:64:2a:e1:a3:87:12:ba:bf:8b:93: 77:8d:39:c0:6c:92:cf:44:38:4a:1b:75:39:64:1f:e1:7f:8c: 39:3d:22:d9:d3:7c:50:68:b7:2d:34:68:7c:44:1d:12:be:a1: 57:31:cb:23:ae:46:48:88:f8:21:11:f3:60:b6:ad:3c:f0:93: 09:8d:fb:57:7c:0e:3a:3e:ff:0f:78:c7:ca:7d:04:d2:70:74: 39:ac:88:92:87:e6:88:e4:e5:85:4c:1c:7f:16:25:25:16:e4: be:a2:3a:79:2b:c6:6c:d6:6b:1c:42:f1:48:19:08:94:fb:fc: 4c:89:1b:17:c7:61:f3:14:bc:b6:0b:77:83:fe:3b:32:de:17: 6e:b9:57:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d8Qi0v5su89fduTuewt0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3NTE3YWFmNDhmNjY5YTBiZWM4ZWM2YWM4NjgyYjRjMTI0 ZTZkMzAwHhcNMjUxMjA2MjEwMDU4WhcNMjUxMjA3MjEwMDU4WjAzMTEwLwYDVQQD Eyg0MWY0YWIxMzNlYTdlYWI4ZmY5ODc4MWY4YjlkMGMzMTBiYTJlMWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2eK9M0ur641MvybKA5yTEwU7Y7j oI4PfGQO6EFBBf+W0zfifESiDWLUEYY/MBEK+zk3wft7mlDbs0i2V0rWgvRKNg0t 7zc6OxAwEJZ8lQpI4IvlqXNq/jZX4s9F67ZUYw2AbvDA+TZ0wv+JuPgQKJAkPS/k RSgKr+atIy9eFd3Q+/JECAErR9yLnKsD5JerGh5AqhZRSERWYUSTioKb8J7bGreM p3FI1v4g6+1WgNKt+N/2b87N5m3jQ8VhDmuIeIF9N9aVVOSOlDCGm5DIDKLLGqSt W8D8sUFEaZSRID3XhbjXf7pHqyP0HAScJPblAiYpycDnfE4E+JebVgChCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEH0qxM+p+q4/5h4H4udDDELouHJMB8GA1UdIwQY MBaAFHdReq9I9mmgvsjsashoK0wSTm0wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDFGNnIwajJhYUMteU94cXlHZ3JUQkpPYlRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9mNmE1NzktMjQ0Yy00NjEwLWJiZWEt MjRjNjI2ZTdmNTIwLzEvZDFGNnIwajJhYUMteU94cXlHZ3JUQkpPYlRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9mNmE1NzktMjQ0Yy00NjEwLWJiZWEtMjRjNjI2ZTdmNTIw LzEvZDFGNnIwajJhYUMteU94cXlHZ3JUQkpPYlRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ7+nevt6 44vFRozWrNJge0UZgVXPDnW8FY5VJ6iu7IspChlaAdTNeS4NtBUXNocg+MTpRrLb fzh15LGs0Y+TXeTYz2a0AymiPAoD311nhsoueUfmymw4dxfRhCZyzEfHxqV/n9/g Wvh1E97X2VYiJZ9CW6BkKuGjhxK6v4uTd405wGySz0Q4Sht1OWQf4X+MOT0i2dN8 UGi3LTRofEQdEr6hVzHLI65GSIj4IRHzYLatPPCTCY37V3wOOj7/D3jHyn0E0nB0 OayIkofmiOTlhUwcfxYlJRbkvqI6eSvGbNZrHELxSBkIlPv8TIkbF8dh8xS8tgt3 g/47Mt4XbrlXzA== -----END CERTIFICATE-----Generated at Sun Dec 7 01:44:53 2025 by rpki-client