This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft File: d1F6r0j2aaC-yOxqyGgrTBJObTA.mft (raw, json) Hash identifier: edf9OPK+5LYYuL+cl1+lztopDTyOmLmbk/V2y7lAasw= Subject key identifier: 88:C3:68:B2:82:B0:97:C3:CA:37:87:C0:87:3E:5A:87:0C:B2:FD:F8 Authority key identifier: 77:51:7A:AF:48:F6:69:A0:BE:C8:EC:6A:C8:68:2B:4C:12:4E:6D:30 Certificate issuer: /CN=77517aaf48f669a0bec8ec6ac8682b4c124e6d30 Certificate serial: 019B2F676D2503BB19835DA6D20AAC9CC1CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d1F6r0j2aaC-yOxqyGgrTBJObTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft Manifest number: 04FA Signing time: Thu 18 Dec 2025 03:01:05 +0000 Manifest this update: Thu 18 Dec 2025 03:01:05 +0000 Manifest next update: Fri 19 Dec 2025 03:01:05 +0000 Files and hashes: 1: d1F6r0j2aaC-yOxqyGgrTBJObTA.crl (hash: KDWnNCaLkka2RHcRAfM0m3lbkia8DEUaK00B+GhKeMc=) 2: lJ6hu6V7P05pf4Ct-PkwsRbTn-Y.roa (hash: yD7rptfWCX+Sfjy7H+I4AQ8wgaNpJdZq+9g0IP00GOc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft rsync://rpki.ripe.net/repository/DEFAULT/d1F6r0j2aaC-yOxqyGgrTBJObTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:6d:25:03:bb:19:83:5d:a6:d2:0a:ac:9c:c1:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77517aaf48f669a0bec8ec6ac8682b4c124e6d30 Validity Not Before: Dec 18 03:01:05 2025 GMT Not After : Dec 19 03:01:05 2025 GMT Subject: CN=88c368b282b097c3ca3787c0873e5a870cb2fdf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:00:c4:bd:97:dd:03:9f:1b:a5:b3:d9:cc:d9: f4:ba:f8:09:18:bb:f4:ef:4f:ac:cb:b0:2d:04:c6: da:12:0d:7e:d0:b3:e3:63:18:c0:45:5f:da:d6:70: d9:9a:35:52:99:a3:a6:4b:cb:84:98:07:e2:4d:bf: ac:a6:6d:e3:b5:a7:fe:8b:7b:26:c7:4f:9d:31:29: 7e:32:fe:fc:3c:69:3f:0d:2f:79:1a:ed:1e:fc:37: 41:8d:51:da:de:89:83:92:15:8f:dc:6b:f3:59:1c: 39:b8:b1:67:97:1f:f4:f0:47:4e:b8:73:19:ef:2b: d3:00:90:fe:2e:ad:4b:7d:cc:83:02:0a:cc:68:89: d7:ef:c3:89:73:f6:af:a8:c2:5e:61:01:f9:cf:ee: 4d:d9:fd:0d:6c:20:0c:ef:33:f3:f5:e7:54:5f:f1: a2:60:c0:ef:b0:78:ea:4d:50:7d:b1:69:71:8c:80: 92:f2:18:31:39:2b:f7:46:b1:d2:37:e5:34:81:e1: 3f:36:ce:58:64:6f:cd:2e:3a:11:fa:28:b5:93:73: 3f:6d:e6:f2:f1:49:e1:f7:79:73:32:dc:0e:a4:ee: 17:72:5d:0b:25:a3:5b:4e:30:17:79:27:e5:f7:80: 69:ab:62:c0:3a:f2:2a:9d:a9:41:0f:ee:bd:80:a4: fa:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:C3:68:B2:82:B0:97:C3:CA:37:87:C0:87:3E:5A:87:0C:B2:FD:F8 X509v3 Authority Key Identifier: keyid:77:51:7A:AF:48:F6:69:A0:BE:C8:EC:6A:C8:68:2B:4C:12:4E:6D:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1F6r0j2aaC-yOxqyGgrTBJObTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:d8:d1:78:86:66:25:80:fb:a6:9d:d9:ef:94:93:fe:d5:e3: 99:b0:ab:de:0d:fa:64:fe:b7:81:5a:71:0f:5e:78:38:cf:b0: 44:47:ef:09:83:f6:ca:a5:b1:a3:6f:77:a6:25:6c:10:52:87: ad:53:6c:eb:94:5d:d2:f1:47:9b:cb:f4:57:bd:ef:42:78:ba: 79:9e:3e:2c:14:71:57:8d:f8:0c:4d:e1:79:d7:ee:2e:d3:91: 92:31:97:bd:0d:22:f9:43:03:a5:3c:cf:01:45:49:23:3b:15: 96:d1:b3:27:93:fa:7a:68:20:ad:c5:83:8f:90:99:f5:47:e0: 68:cb:d5:94:71:fc:01:4c:71:5b:6b:d9:3b:d7:54:a9:b7:ea: 4b:72:79:b3:90:86:b8:b8:0e:ea:6b:f3:cd:ba:a4:19:11:8d: 6e:b2:11:54:6f:56:93:52:6f:3b:e5:81:3d:57:8c:11:25:cd: d8:d3:91:7c:e7:8d:eb:dd:7d:0e:ea:db:a7:f5:2e:18:96:6d: 30:f3:7e:19:7c:8f:00:00:52:fc:db:7b:0d:79:ff:8a:84:15: 43:b1:d1:58:1b:f6:bb:ba:9c:a1:8f:db:53:47:31:3f:a3:a8: 69:5b:ac:97:46:49:dd:ea:d2:7e:f4:b1:16:c7:87:e2:3a:f0: e9:5c:b0:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ20lA7sZg12m0gqsnMHLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3NTE3YWFmNDhmNjY5YTBiZWM4ZWM2YWM4NjgyYjRjMTI0 ZTZkMzAwHhcNMjUxMjE4MDMwMTA1WhcNMjUxMjE5MDMwMTA1WjAzMTEwLwYDVQQD Eyg4OGMzNjhiMjgyYjA5N2MzY2EzNzg3YzA4NzNlNWE4NzBjYjJmZGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gDEvZfdA58bpbPZzNn0uvgJGLv0 70+sy7AtBMbaEg1+0LPjYxjARV/a1nDZmjVSmaOmS8uEmAfiTb+spm3jtaf+i3sm x0+dMSl+Mv78PGk/DS95Gu0e/DdBjVHa3omDkhWP3GvzWRw5uLFnlx/08EdOuHMZ 7yvTAJD+Lq1LfcyDAgrMaInX78OJc/avqMJeYQH5z+5N2f0NbCAM7zPz9edUX/Gi YMDvsHjqTVB9sWlxjICS8hgxOSv3RrHSN+U0geE/Ns5YZG/NLjoR+ii1k3M/beby 8Unh93lzMtwOpO4Xcl0LJaNbTjAXeSfl94Bpq2LAOvIqnalBD+69gKT6ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIjDaLKCsJfDyjeHwIc+WocMsv34MB8GA1UdIwQY MBaAFHdReq9I9mmgvsjsashoK0wSTm0wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDFGNnIwajJhYUMteU94cXlHZ3JUQkpPYlRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9mNmE1NzktMjQ0Yy00NjEwLWJiZWEt MjRjNjI2ZTdmNTIwLzEvZDFGNnIwajJhYUMteU94cXlHZ3JUQkpPYlRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9mNmE1NzktMjQ0Yy00NjEwLWJiZWEtMjRjNjI2ZTdmNTIw LzEvZDFGNnIwajJhYUMteU94cXlHZ3JUQkpPYlRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQdjReIZm JYD7pp3Z75ST/tXjmbCr3g36ZP63gVpxD154OM+wREfvCYP2yqWxo293piVsEFKH rVNs65Rd0vFHm8v0V73vQni6eZ4+LBRxV434DE3hedfuLtORkjGXvQ0i+UMDpTzP AUVJIzsVltGzJ5P6emggrcWDj5CZ9UfgaMvVlHH8AUxxW2vZO9dUqbfqS3J5s5CG uLgO6mvzzbqkGRGNbrIRVG9Wk1JvO+WBPVeMESXN2NORfOeN6919Durbp/UuGJZt MPN+GXyPAABS/Nt7DXn/ioQVQ7HRWBv2u7qcoY/bU0cxP6OoaVusl0ZJ3erSfvSx FseH4jrw6VywDg== -----END CERTIFICATE-----Generated at Thu Dec 18 11:16:04 2025 by rpki-client